last executing test programs:

1.379697883s ago: executing program 1 (id=4372):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000100)) (async)
readv(r2, &(0x7f0000000200), 0x1) (async)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async, rerun: 64)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) (rerun: 64)

1.288706494s ago: executing program 0 (id=4374):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

812.226151ms ago: executing program 2 (id=4376):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5) (async)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

759.79818ms ago: executing program 2 (id=4377):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000014000780080011400000000005001500130000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
getsockopt(r0, 0x110, 0x6, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000180), 0x2ae, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x14, &(0x7f0000002700)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESOCT=r2, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000002f00)=0x2)
ioctl$PPPIOCSMAXCID(r10, 0x4004743c, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)
splice(r10, &(0x7f0000000100)=0x8, r6, &(0x7f0000000140), 0x7fff, 0x1)
sendto$inet6(r4, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0)
splice(r3, 0x0, r3, 0x0, 0x1, 0xa)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000340)={{r4}, "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"})
write$tun(r3, &(0x7f0000001340)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, "b25e74", 0x1371, 0x2f, 0x0, @empty, @mcast2, {[@dstopts={0x6c, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x4, [0xe, 0x10, 0x5, 0x8]}}]}, @srh={0x2, 0x8, 0x4, 0x4, 0x3, 0x40, 0x2, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x40}]}, @dstopts={0x2f, 0x23, '\x00', [@generic={0x6, 0x69, "bbf9bc75e41717f07e9d308c33e51a9a3eec8de45624bdf4e3edd4adf1072dfe9b49969a36952b2c0a3e7d971fbc05971f973beb5569a2d8e75bd4d5d449966624a78e874920d5ce8e7a70eba7e0f71736ab7a9c6b19e8d399145a8ff6ca4ee43f01d066838abd3a3f"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x80, [0x4, 0x477c, 0x10001, 0x0]}}, @jumbo={0xc2, 0x4, 0x401}, @calipso={0x7, 0x20, {0x3, 0x6, 0x6, 0x8000, [0x1985, 0x40, 0x76]}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x9b, [0x6, 0x9, 0xbd4, 0xffffffffffff8003, 0x1]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x86, 0x7, [0x0, 0x3, 0xff]}}]}, @dstopts={0x0, 0x0, '\x00', [@pad1]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6a, 0x2, [], "72e80f263b2690c6118d8187d268030f7bf40817823cf099c144cb86c3b0f160d03e696b920ca9cd3d5d322fc6f72dbb336cc55c7f1f188542994b63b421da55a81623f1d760b4ba25fe3c14f10c355003a2071e0d5f0cadfd1935cfee3c7881fadb3516ebf96bb53e4f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5, 0x0, 0x8], "4a84da5413f8a05a53b8d29ac050ebe21dae3adf84f9604de1262c23df367a791ffb438dbc59caab1b258ddd61d07599e7e9fbd7e6acfc182420ba1148f5d01528fa573fc1"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "ff9fb668dc260176fe28ddc8d75e5b55aae8435e88688040d10e4ff7fa62c98c8b7b6bbd8a44fe71aed1244a6aff46d1b5c3fbe0f9611a9c2df8fad9cad8471952a374247e7f0a4e7d6191c20ecef37331e2fa41eb7b02c197e2c2793fd75368c9619e873bca60c9c6bd50c5d988f14556cf04473d2bb1fc61e5c22473b40e64c741175ecb3d9d9b22b67a546e7423167d42adf4051d0358ff35ef844e339e4a034f90bdbb372dbe08c0e37ef36f8167fefb6e0e529fcad7058651c8e10f"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x1, 0x1, 0x7, 0x4}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x80, 0x1, 0x0, 0x2, 0x6, 0x3e}, 0x2, {0x0, 0xed, 0x0, 0x1e, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}, 0x1399)

640.288543ms ago: executing program 2 (id=4378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES8=r1, @ANYBLOB="64c9a0c68709a2501e8667ba95eb545ab5cb1df98ebd12f9a1938e24197d2191b9d37e53e10173321f196d06fb2944fec4f8227a9d07973904aa4a691712f6d4ca92363ba382a50148a9bfc31c4bcc19c74b3f9ef2a4e1372f82baab09ccc0a0e889deefc840a31472e7bb57d45812e6a72b8871b7e6168c7113aee2a57f6bbf0d2bfe1c319afd2229d8acae70a785c7aa107eed4c5405f3d7efa053a3eebb5bd5e313784f70612190093ab7a2b1aaa10176e2e57911297c23b70f165bcc2f6e70d95de761a1bd2dd07811616df16d4872b66272548fd93888b57f25"], 0x48) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000940), &(0x7f0000000b40)='%pK    \x00'}, 0x20) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x17, 0x0, 0x0, 0x0, 0x6a, 0x4004884}, 0x2000408c) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r7, @ANYRES16=r3, @ANYRESDEC, @ANYRES32, @ANYRES8=r2, @ANYBLOB="295e00cd0415516fe9d388479de3c619e9d8a2ae36975ba706015bc40b273f0afa0f27e6fbbbe5166072e1fd9de9fa22b1ff9900dfa00f6367dff899306fdb6a32fcbb6336c152d2aca2cb2b3eedf9915f79", @ANYRESDEC=r7], 0x48) (async)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.dequeue\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r10) (async)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r11, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x10000})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="18eeff000000007e5827b56f3c0c000000000000", @ANYRES32=r0, @ANYBLOB="e563c5dabb465f5b6025ae2a97648a9eb41a3bee1d50df7c326971e91c6c2a3a16f42e4a653b0fb0a680ebbe936c3e4b17b6d68c03f07859a4faafa5a5ea348c3147c69d7c7112ab646c010e630eb2b1ca529e7271fa77ced40273710fe0616b"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', <r12=>0x0, 0x8, 0x700, 0x8001, 0x5, {{0x2e, 0x4, 0x0, 0x3a, 0xb8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x34, 0x8b, 0x1, 0xc, [{@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@loopback, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}})
r13 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r13, 0x20, &(0x7f0000000100)={0x0, 0x0, <r14=>0x0, 0x0}}, 0x10)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r14, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000007c0)={<r16=>r5, 0x7f, 0xffffffff00000000, 0x2})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x4000010, r16, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000040000000002c6af2463c1f42083e41f7f49fcfdb2c24638aabd651515a8658e7600e5efcc81498f9747fbbcf0726560c1f6b27202b74c74d80ccc5efcba462cc017e09ce49dc994fdd45dd66118a1b1c016690d6bdb49a75a1943c198318859238e1", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r12, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r14, r8, 0x0, &(0x7f0000000780)=[r7, r9, r9, r9, r9, r9], 0x0, 0x10, 0x48}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1f, &(0x7f0000000100)=ANY=[@ANYRES32=r11, @ANYRES8=r15, @ANYBLOB="0000000000004000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1a2e32f029f40e370400000000000007010000f8ffffffb702000008000000b703000079060000850000000600000001166b090100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000faffffff4062f0ff00000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x68, &(0x7f0000000240)=""/104, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r14, r3, 0x4, 0x0, &(0x7f0000000300)=[{0x5, 0x4, 0x1, 0x4}, {0x0, 0x6, 0xc, 0x4}, {0x7, 0x2, 0x0, 0x1}, {0xfffffffd, 0x2, 0x7, 0xb}], 0x10, 0x1}, 0x94) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r17 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r18, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r18, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r17], 0x38}}, 0x10)

639.634286ms ago: executing program 2 (id=4379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='snd_soc_jack_report\x00', r0}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f0000000380)="ee16b686abe67e424b2a9090e3d9d08884560113ab924e79d349f07cc2d2c6c87b42caab077a9fd2068868b896e6f08b53706bbf6276b3a30b2695056336a5e2f0c452de18198f349ffabb6f75bcb95043a5c6ce9387d9955010e3b09f4c88786e1df992d81f817c4ad3ac6c0ff3c510f1201e84fefed9138d919321627ea4a2544df27fc647f01feb3e7c589ae073f7c56ead33c8acafdf1558be0cb065d8735a79d872b29097e284594de58eb31dffe3c0597b0093d98264e6", &(0x7f0000000440)=""/3, 0x4}, 0x20)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0x7}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xae}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})
close(r5)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8884)

520.30567ms ago: executing program 1 (id=4380):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x2}, 0x8)
socket$inet_sctp(0x2, 0x5, 0x84)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200006, 0x1b)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x11, 0x0, 0x8)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r10, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x8010000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/218, 0xda}], 0x7}, 0x80000002}], 0x4, 0x10122, 0x0)
write(r10, &(0x7f00000001c0)="348759f5046a7a52fa2f367e023b2c0962c09de8b7e7d2db39842b43eed48bc72a15436fe87d221ee6b154a43f58ce9cab1bb16a7a22c942c059633f6ffdb4b17a34420002a91a20c3ccd505eebe73aef986", 0x52)
splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0)

520.023398ms ago: executing program 1 (id=4381):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0))
r3 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x800)
splice(r2, 0x0, r3, 0x0, 0x1, 0x9)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000940)={0x84, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x4000805)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x6c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x1e, 0x24, [{0x60}, {0x6c, 0x1}, {0x2, 0x1}, {0x9}, {0x5c, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0xb, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x24}, {0x4b}, {0x0, 0x1}, {0x48}, {0x60}, {0x66}, {0x5}, {0x5, 0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6c, 0x1}, {}, {0x60}, {0x5, 0x1}]}, @NL80211_ATTR_KEYS={0x18, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "be600acf66d921b5f296c9"}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_PRIVACY={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

462.628737ms ago: executing program 1 (id=4382):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x48b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_simple={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3d45, 0x0, 0x20000000, 0x7fff, 0xe}}, @TCA_DEF_DATA={0x12, 0x3, '[)-%(@-\'\\-#\xca*\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x13, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = epoll_create1(0x0)
writev(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000240)=0x4)
sendto$packet(r1, &(0x7f0000000100)="de0aef40bbfb6adfd6294f0fcde766dd0e8b6a9e0f790cb2127c78eaf5ded27ce8e13564c864d9413bb696b05a0287310c76c9a7b783154c21ec6523b6f947bb1dc7c68132aa94681b57121284a92ce4f4337b967cfcee00264d7ff7da3ccad2b1cf18", 0x63, 0x891, &(0x7f0000000400)={0x11, 0x3, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, &(0x7f0000000080))
splice(r3, 0x0, r1, 0x0, 0x30fea7, 0xa)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8)

461.974613ms ago: executing program 0 (id=4383):
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x0, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8008001}, 0x4000)
recvmmsg(r3, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000001ac0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x8a}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000700)=""/14, 0xe}, {&(0x7f0000000c40)=""/82, 0x52}, {&(0x7f0000001d80)=""/195, 0xc3}, {&(0x7f0000001e80)=""/210, 0xd2}], 0xe}, 0x4db}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f00000002c0)=""/13, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000007080)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/185, 0xb9}], 0x9, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/80, 0x50}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/175, 0xaf}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0xfffffffffffffe8b, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/240, 0xf0}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0xea8, 0xa)
openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0)

456.183649ms ago: executing program 1 (id=4384):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x2d5fae37}, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40041}, 0x24000881)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007", @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

379.91869ms ago: executing program 0 (id=4385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r1=>0x0, 0xc7, 0x20, 0x9}, &(0x7f0000000040)=0x18)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={<r2=>r1, 0x3}, &(0x7f00000000c0)=0x8)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="382c8e4ebbd2bfb2b9df6915", 0xc}, {&(0x7f0000000140)="139cfcad4f109d34261c73c2de5d86f420a26be60eb70c1cf3adb3abd1bd7e9ce9bd85afebce", 0x26}, {&(0x7f0000000180)="ee8ed3", 0x3}, {&(0x7f00000001c0)="06a0", 0x2}, {&(0x7f0000000200)="6208895d85be4c6533a6f6efcced051768b0e6847dbbf8a6a993245be469bca89146b064e662232f64ad900c77c12357f21b3d9a2117c20b1546629d32cf8fd681a7d731b151fcb8fde4fa64b7d316285ce43d646e352e0ec798586f0ad43617790d2aa5bb5763b3f2521325a736db05d47ed296cf090a30d704aec2bc889311f6ceb515acd88924accb85f54878577f38b6ca9181c0", 0x96}], 0x5)
r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e, 0x80c00)
recvfrom$unix(r3, &(0x7f0000000400)=""/4096, 0x1000, 0x2001, &(0x7f0000001400)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r4 = accept4$inet6(r0, 0x0, &(0x7f0000001480), 0x0)
connect$inet6(r4, &(0x7f00000014c0)={0xa, 0x4e22, 0x9e8959d3, @mcast1, 0x43}, 0x1c)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001500)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000001540)='memory.swap.events\x00', 0x0, 0x0)
sendmsg$tipc(r6, &(0x7f0000001b00)={&(0x7f0000001580)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10, &(0x7f0000001980)=[{&(0x7f00000015c0)="8e089df9ff3493ec5480cb", 0xb}, {&(0x7f0000001600)="61364b9e91", 0x5}, {&(0x7f0000001640)="fc34e663da0efda5b732fd8dd5242dbd6e062344c81e8183dc058a2669efc0eed805", 0x22}, {&(0x7f0000001680)="f3f3949559ae3b32fe1b2ef8e3f5cb1d843200ab218579571d4defc6b0c530d6630e13da8c91c66a0aecbd3808dc0cb3ff4be89380206f2b83dc6b0bcd52d78ad7fdedaf55d9f0e22fb04034c48c27dd7043b707d64d01e273fa5d3031114694a5746cf6390492d0d6050ef738579b0b4a24d7b33bdf62e589c5e859f50a8a16974ba19d7293388eb665a1810c1b39d3d4a71cb8a8da758e7b3008b26c2c9ad0c1eddc710e3926d72b951fa81ebb5f9f3a99435777c89a3fec1711ffe537", 0xbe}, {&(0x7f0000001740)="559ce6921d9662d2495ff9c80ceffd06971279a717abfb4bacaa06506af06a887290f1300cf2a18063114ed837ed039b6f9408c0bc5b13937093f114fc1211b62399ec8deb0ea324e766976b2a426228b09b26db0a122294224b92a5730242dfa88af3c65e209b6fe058040c136362a5f3e5948163c378bc07a5ba1d0240c48715744578be85de60b1ea32a425c2e15f0e1567bd7f7eab3992643286d7b1ce144b488b85a9e3d1eb7d", 0xa9}, {&(0x7f0000001800)="e0d3031c398663c5ee1a3fa86029bac2be4de484a2a30f690571e4a56e8ab0634ead0b1b29d09f2884c446f360aab2012b944a97", 0x34}, {&(0x7f0000001840)="b4d53ad2873bbf983cc4dccacac6745a2ad84363a90e899b1dba7c311747e2c6270a0ad8182c8d4d65ef93ae17bc21055be690762ecd976cbdacafb21ada7ba4b37a6d8dcaa0f432", 0x48}, {&(0x7f00000018c0)="62d833f9c13312100993c61c239a6b395ab8a32b8ae24def93bb7de6af821e096b004da5194ec8a2e4404052ed92478e6e8e93a0a6b5e3a80b21c9b537e7263ef023e509c03e64f0f5d991dc8dea70ed71604bab18910f39e7a57a75abde61cb5f460bf279cf9e27749e4e89f01922e4b6d4f3a36f15f9b17dc7678b472852f5360115f76910ff00001eda44dbfa64b63712301312f48b59252b66983297cf714c306d352430d930f4c0117958033ad9850809d82578", 0xb6}], 0x8, &(0x7f0000001a00)="33956e3e2809048e4e749695b6b7adcce56bf1a98358823f37bdae5ebda81a68b706c2f3b8c5c755eefb1da68aef949e01858257ef062bf9b95a9498947446dcd04fa387f780835a3693237e2808e8bdd252605e97647850b5a408fb59e93c9eb26e3bdefa0b74f3fbfaa3527c8ddbaacd7dcce6393ab2c09c333837e42b752ea03a1bf981459506a00c47be60dff4b7cccf05a2d790c762b4d63acd31067058ebe0b4c4d77388e0f5536bd4ec22cd58396b8aa7f0738282dff77f65de424b5c05e6f51a5b850d6670197f79281b469f12fa31ba2a95d5de8b09bec8309a70e077de51ee5dc75c2bf7c49476b803152cd120b535d894", 0xf6, 0x4000}, 0x0)
r7 = socket(0x1, 0x2, 0xf0)
socketpair(0x2a, 0x4, 0x1000, &(0x7f0000001b40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001b80)=<r10=>0x0)
sendmsg$nfc_llcp(r9, &(0x7f0000002f80)={&(0x7f0000001bc0)={0x27, r10, 0x0, 0x2, 0x39, 0x2, "47f9b9fa90237d6a8e253b612f3fc40fcfe03ebd924a284e8bf65b2b22bcd6c222ad5d55a607381ae2bb7ae7526fe2a28f1ec85a5942c50cf8c8a9345f7081", 0x3b}, 0x60, &(0x7f0000001ec0)=[{&(0x7f0000001c40)="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", 0xfa}, {&(0x7f0000001d40)="2c8e9503a5c3e8ca13ab7ce70d5c63ffd08a1e9f6471633619da4ca5b1ec742b72262726afd1b3479e2babc80acf27e3641d100360312a737cf223c6caecfa823fd0b3ad4dd52f42", 0x48}, {&(0x7f0000001dc0)="df5aecb9e8c07d6d9122", 0xa}, {&(0x7f0000001e00)="297e5fe272c9a13565b01cfb42e442c77df7e2fc2d24ef8a83babafbd383618f55875cc626b5b7c570", 0x29}, {&(0x7f0000001e40)="b706afab9d139f02425cb8041004843c06081c94b05a1c5cc0c172cce3e09069644f47110ccaf9d7c8f9e22ceaee72694c00e4f6e5b3dbea9bff7b40e41f219cc394c86120d6", 0x46}], 0x5, &(0x7f0000001f40)={0x1010, 0x104, 0x2, "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"}, 0x1010, 0x240408c0}, 0x51)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), r7)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003000), r8)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000003040)={<r11=>0x0, @rand_addr, @dev}, &(0x7f0000003080)=0xc)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003100), r6)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x24, r12, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x14, r12, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x4000)
ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f0000003300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), r6)
sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000003540)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003500)={&(0x7f0000003400)={0xcc, r13, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40000)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000003580)={r2, 0x1, 0x20}, &(0x7f00000035c0)=0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)=@newtfilter={0x80, 0x2c, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x5, 0xc}, {0xf}, {0x2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e20}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x8}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0x2f, 0xb0}}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x40801}, 0x4000400)
sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000003800)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000039c0)={&(0x7f0000003840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0xb, [@datasec={0x9, 0x8, 0x0, 0xf, 0x1, [{0x4, 0x101, 0x8}, {0x3, 0x380, 0x3}, {0x2, 0xa01, 0xf}, {0x5, 0x7, 0x2}, {0x3, 0x4, 0x7}, {0x5, 0xebfd, 0xc9}, {0x2, 0x101, 0x8}, {0x1, 0x9, 0x7f}], 'y'}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @fwd={0xc}, @volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x1}, {0x2, 0x3}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x48, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x1}, @fwd={0x1}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x0, 0x61, 0x2e, 0x5f, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000003980)=""/52, 0x117, 0x34, 0x1, 0x200}, 0x28)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000003a00)={'ip6gre0\x00', 0x4000})
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000003a40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000003a80)=0x20)

378.713786ms ago: executing program 1 (id=4386):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

378.201506ms ago: executing program 2 (id=4387):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) (async)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) (async)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0) (async)
unshare(0x20000400) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xb189, 0x4}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x20)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002a80)={0x8ac, r8, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4dc15e07, 0x41}}}}, [@NL80211_ATTR_CSA_IES={0x84c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0xe7, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x1, 0x1}}, @measure_req={0x26, 0x61, {0x7, 0x3, 0xd3, "2377e5b7958da3c74f81d48b951e95d9ee27b0745e275283ab57291e02d81452d4d94e3f1221fda78829c2104f4b94b23763f9b70c86071f972a195907549876b5ac3abdb8de9bd119e49eccdf9b6c52e95c272af44243c378c60ea3ff9d"}}, @ht={0x2d, 0x1a, {0x82, 0x1, 0x6, 0x0, {0x6, 0xae, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x8, 0x9}}, @ibss={0x6, 0x2, 0xebbb}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x81, 0x21}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x70}}, @preq={0x82, 0x41, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0xd6, 0x1, 0x2, @broadcast, 0x9, @value=@broadcast, 0x3, 0x7fffffff, 0x3, [{{}, @device_b, 0xc54}, {{0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0x5}]}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x149, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="1c60c0a86a87", {0x7, 0xb}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, 0xfffffffffffffff6, @default, 0xa100, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x8, 0x9, 0x7, 0xced}}, @val={0x6, 0x2, 0x1dd}, @val={0x5, 0x3, {0x80, 0x6c, 0x3}}, @val={0x25, 0x3, {0x1, 0x82, 0x8}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0xb2, 0x1}}, @val={0x76, 0x6, {0x4, 0x6, 0xe, 0x1}}, [{0xdd, 0xe1, "1a041245dbf80b8a4065ac282b7ed81840ef31d6b949f1746fd9d8cafbde6ba3c615ffb1e5e09704ad4b04fa77afe41e6d1f517bb26215d0ae3c8ce73af1404161ea32432bda11297a0db372d7c21dbc778bc398fca15408c08cb4caf2f72004a40401ca3cad610631043f5376744c9b7f1ae14d9fa43b46f96d205b267215f1a9263a4ccc74ac20b0d810865e2807d4b1c3e9b23c631c790818c49383dd94e40f09ba873a67dedc9360d75410dd4c664a9812003fa1a04ba93e78c5ec282dddd27ffd673de3cb96208499dd57475ed3d048e2c920256ac29d264e2897815ecd33"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1e0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1b1b}, @device_a, @device_b, @from_mac=@device_b, {0x8, 0xaf}}, 0x197a, @random, 0x128, @void, @val={0x1, 0x8, [{0x16}, {0x12}, {0x16, 0x1}, {0x6}, {0x1b}, {0x4, 0x1}, {0x36, 0x1}, {0x6c}]}, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0x2}, @void, @val={0x25, 0x3, {0x1, 0x84, 0x3b}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x2000, 0x1, 0x4, 0x0, {0x8, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x900, 0x7d}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x29, 0x3d, 0x1}}, [{0xdd, 0x22, "5d8344f7649d154473e7cab95a47f80fccb50a1a520a970f4c8f6eb9da0110030841"}, {0xdd, 0x9, "9e07a7e66147af708c"}, {0xdd, 0xdd, "024d72a4f15a178f993d836f47b68bf08219f2014627428c940638a44cd8852725fc5bbed506ca973508a40d7b89c4c4f610a0237a924c2cf782ec1fb0bc49e243db7b068ddd230513d7367ea317a583e19c8a1ac03a49090cbb6d35a69acd7f9bd3113d634e4ea3576fe50f2ec0b6245fc889781b8623e1c4cd5997fe07b3f6fbe0e39468293073fc1c6081aa3be05573d60b8715b79f6e69da5c8263a97f8e223c1eaff5250d6ffecad47aeea6d1468cb64f7273c11d0b859cf6c5e91f88fd6591a7e2e61b689055ac2e8118a960a2e9b79b67590e9c8fcc80ff565d"}, {0xdd, 0x63, "636b555a3a18558df197d56affe1a5474b703d8a45a9ca32f026c0c396af1ba18ce9e7b132038859c5516a311728c826d5d43e769ad73c755b3a72c0f61c995a8d266ed5f001a3c8601e3efdccf179884212811487973e5adced35355c0d88aa948585"}]}}, @NL80211_ATTR_IE={0x136, 0x2a, [@dsss={0x3, 0x1, 0xa9}, @perr={0x84, 0x56, {0x7, 0x6, [{{}, @device_b, 0x4d2, @void, 0x1b}, {{}, @device_a, 0x4296, @void, 0x15}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x15}, {{}, @broadcast, 0x2, @void, 0x7}, {{}, @device_a, 0x800, @void, 0xd}, {{}, @device_a, 0x1ff, @void, 0x32}]}}, @random={0x5, 0x43, "d081db8fdb19592532709cb183c3e904bbfef239f47181990b003ee05ba64d2fb89bccdef76ac1b9da2b5917f39fe77ab3fc5bd28ae55dcbd17b32c2ba923bd98b9fae"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x7e, {0x2, 0x2, "6ace6c85cc7b98461bc29a091e86f906", "0f9134499b2d6b5cce009835a4d55d420caf4acf005ef2c7ac97818ecbca893d", "14d9edf482bf75a80818457e36e217aa5fcc55df584a1cc32a6cb17dbc962445", [{0x1}, {0x1, 0x28, "151de9dbfe9c2fb1f424b9348c10f34c69d4c6216e69d60a9d03bff4a578ee41efdd9f119090af84"}]}}, @ibss={0x6, 0x2, 0x6}, @erp={0x2a, 0x1, {0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @random="ce69925d5dfe", {0xe, 0x3}, @value=@ver_80211n={0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0xffffffff, @random=0x101, 0x20, @void, @void, @void, @val={0x4, 0x6, {0xd, 0x3, 0x5, 0xffff}}, @val={0x6, 0x2, 0xff80}, @void, @val={0x25, 0x3, {0x1, 0xe}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0xa3, 0x8}}, @val={0x76, 0x6, {0x0, 0x1, 0x30, 0xfff1}}}}, @NL80211_ATTR_IE={0x10, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x9d, 0x6}}, @supported_rates={0x1, 0x1, [{0x18, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_FTM_RESPONDER={0x1e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4d, 0x3, "d4e746311483973c2a03a1d9a37ce7951e9dff73adda1e1c788a55f8c4d424995bf5a7c46da081d8bcfad737c5d05d22435fb841fad4c35641dcf09bb0eec69ecf7a9baaf89a93c002"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb3, 0x3, "aab95a78ce23295f1a9dc8991d27b54864600b92c73e875ccf0aa28e78aee30d05809c5e953ba687cf148b1278073fb5e282b0879fb6af60700fe89340c7f0e8a181f51c7dacfeb4662bd4787faa13bac5c46a5f0a964c587f3c8bc755e6bc4d789a04de6765af6a223d8ba4dc147c167f60af935bc8f609ca89892db51371357a9c24b7a536741c24a5cdaccdcd43db4bd463ad80db62b5e1cdc0f13920442da353a8fce41713606d1d9714831e79"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "e4ac2c7fab27e886a250e44341ef1a64590900d3d2528cf076f4403c6c40919e42c975184e45ef8b8e6a3c5a820d02e4578a1828228c07de84d781b85d2dd880bc94b12ea86ab95b73bc63a499bf072f60efe935bbc6d53553a57400bc994605c31f0bcc27cd97bff0977375c71d961a9d5b7ecf477b171b1db5768a0f1b2aa04d3361ffb05af9e2c7cb72aa88e6caf0086d7dba339985764ca80e090658cbf382f3ef5a28bdf5ef843e58c0a36f27a1c9aabc7a476cf64525a33f7a78a4f713a98964c551e7cf69"}]}, @NL80211_ATTR_IE={0x98, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x33}, 0x40, 0x1e, @broadcast, 0x9a2f, 0xe0a, 0xa6d3}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x2, 0x0, {0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3, 0x1}, 0xa0e, 0x6}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9, 0x20}}, @supported_rates={0x1, 0x2, [{0x12}, {0x36, 0x1}]}, @fast_bss_trans={0x37, 0x52, {0x7, 0x0, "ac8f3554e0b01b49430d8f70ea6fb07c", "e9c3a34a7324c308d4ffb5db23e04894093249807ec460eb449ac6f0cffd4a70", "2ecdb0b6881ee944cab25d60161932c806b03c0f65829151e097ebb8be572dd9"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x0, 0x3, 0x4, 0x4, 0x51, 0xd, 0x9, 0x200]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2e}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x8ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r11, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$int_in(r12, 0x5452, &(0x7f0000000140)=0x3)
ppoll(&(0x7f0000003840)=[{r12, 0x40}], 0x1, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

377.688503ms ago: executing program 0 (id=4388):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0xfffffffc}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000f00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c081}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, &(0x7f0000000440)=""/38, 0x26}, 0xc}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000800)=""/221, 0xdd}], 0x2, &(0x7f0000000580)=""/75, 0x4b}, 0x200}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/149, 0x95}, {0xfffffffffffffffd}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000b80)=""/78, 0x4e}], 0x5, &(0x7f0000000c80)=""/192, 0xc0}, 0x2}], 0x3, 0x40000121, 0x0)
write$cgroup_devices(r7, &(0x7f0000000080)={'a', ' *:* ', 'rwm\x00'}, 0xa)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
sendto$netrom(r3, 0x0, 0x0, 0x40, &(0x7f0000000e00)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38)
close(0x3)
connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

320.50333ms ago: executing program 2 (id=4389):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

77.627957ms ago: executing program 0 (id=4390):
pipe(&(0x7f0000000040))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400004016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)

0s ago: executing program 0 (id=4391):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x9, &(0x7f0000001640)=""/29, 0x1d}, 0x10001}], 0x1, 0x10002, &(0x7f00000016c0)={0x77359400})
sendto(r1, &(0x7f0000001700)="94bd35f61f2a8de6b61cb232b14333963782a035fb54b58da59e4a8d45f42f9ff63d98ab736d16757cdd411f7c758595969b06769ab146b0f16544d5aa1d93c3eed440b517593f6df3ca8096093c3fad3c5ff3b195fa711c4a2c817106f53bd3d1ad1eb99d5be66c06aa748ee8938a214c38a6216890cae073ae", 0x7a, 0x8000, &(0x7f0000001780)=@pppoe={0x18, 0x0, {0x3, @local, 'batadv_slave_0\x00'}}, 0x80)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x3)
connect$caif(r2, &(0x7f0000001800), 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001840), 0x604e00, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000001880)={0x3, {{0xa, 0x4e24, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {{0xa, 0x4e24, 0x40, @empty, 0x40000}}}, 0x108)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f00000019c0)="302fcf01aee9f93bc94f27330000fd3fd4a66ad34a24e1d8ea663f0af17a8f584ff402c88ae223671d5f22b8c939f99f2827c3ec0437bdf7a7b10642a402cf720b0cf4886ba069e11b68b12a54bdc0d59b9b", &(0x7f0000001a40)=""/235}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001b80)={0x0, r3}, 0x8)
socketpair(0x8, 0x3, 0x12a, &(0x7f0000001bc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$bt_hci(r5, &(0x7f0000001c00)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x4, 0x6, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x20004840)
pipe(&(0x7f0000001d80)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002e00)={r9, &(0x7f0000001dc0)="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", &(0x7f0000002dc0)=@tcp6=r4, 0x2}, 0x20)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002e40)={'rose0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000002e80)={0x0, 0xb}, 0x8)
sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004005}, 0x400c041)
sendto(r9, &(0x7f0000002fc0)="6786ee0a642948e4c940ca71f207bc8c0cf2d4d9994fc872a720ca134acffc27f0edfe81dd1c5778918a1d079fdee0661d3f05b41c5ba2316992d060dfa4aecf630b709488c4c226cb883635d99e09073fb3fc2cf503481055410ed52a70a35df67028", 0x63, 0x4000000, &(0x7f0000003040)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}, 0x80)
socket$unix(0x1, 0x5, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000003100)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x30004080}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r10, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x54, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x35}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xaa}]}, 0x54}}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000003380), 0x4)
r13 = socket(0xf, 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r13, 0x116, 0x7f, &(0x7f00000033c0)=0x7, 0x4)

kernel console output (not intermixed with test programs):

rsing attributes in process `syz.2.1338'.
[  192.667372][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'.
[  193.038139][T10534] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1342'.
[  193.041142][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1342'.
[  193.047362][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'.
[  193.058463][T10534] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1342'.
[  193.209794][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'.
[  193.512863][T10563] IPVS: Unknown mcast interface: pimreg0
[  193.696952][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.701012][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.704752][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.707803][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.737118][T10573] xfrm1: entered promiscuous mode
[  193.738778][T10573] xfrm1: entered allmulticast mode
[  193.762454][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'.
[  193.866005][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.890382][T10586] netlink: 'syz.2.1356': attribute type 13 has an invalid length.
[  193.895452][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'.
[  193.936580][T10590] netlink: 'syz.1.1357': attribute type 1 has an invalid length.
[  194.017352][T10597] pimreg: entered allmulticast mode
[  194.020032][T10597] pimreg: left allmulticast mode
[  194.847079][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1368'.
[  195.102885][T10638] syzkaller1: entered promiscuous mode
[  195.105697][T10638] syzkaller1: entered allmulticast mode
[  195.937528][   T33] audit: type=1800 audit(1753358851.241:3): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1374" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2465 res=0 errno=0
[  196.095247][T10659] syzkaller1: entered promiscuous mode
[  196.097212][T10659] syzkaller1: entered allmulticast mode
[  196.182127][T10662] macvlan0: entered allmulticast mode
[  196.184115][T10662] netlink: 'syz.0.1380': attribute type 1 has an invalid length.
[  196.186692][T10662] netlink: 'syz.0.1380': attribute type 2 has an invalid length.
[  197.321468][T10687] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  197.349494][T10691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.352643][T10691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.855008][T10694] __nla_validate_parse: 7 callbacks suppressed
[  197.855019][T10694] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1391'.
[  197.860128][T10694] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1391'.
[  198.193907][T10715] netlink: 'syz.2.1398': attribute type 13 has an invalid length.
[  198.196536][T10715] netlink: 'syz.2.1398': attribute type 17 has an invalid length.
[  198.203335][T10715] 0{X: left allmulticast mode
[  198.241998][T10715] 8021q: adding VLAN 0 to HW filter on device team0
[  198.251853][T10715] net_ratelimit: 94 callbacks suppressed
[  198.251858][T10715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.275483][T10715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.330039][T10715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.506952][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1404'.
[  198.510829][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1404'.
[  199.427120][T10772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1414'.
[  199.430553][T10772] batadv_slave_0: entered promiscuous mode
[  199.498130][T10771] batadv_slave_0: left promiscuous mode
[  199.739161][T10785] netlink: 'syz.2.1417': attribute type 1 has an invalid length.
[  199.741679][T10785] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1417'.
[  199.745033][T10785] NCSI netlink: No device for ifindex 0
[  199.819332][T10788] netlink: 'syz.2.1418': attribute type 2 has an invalid length.
[  200.097236][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  200.174759][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1426'.
[  200.177808][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1426'.
[  200.185825][T10814] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1427'.
[  200.360191][T10826] netlink: 'syz.1.1431': attribute type 7 has an invalid length.
[  201.822106][T10873] tipc: Failed to remove unknown binding: 66,1,1/1231615175:155658540/155658542
[  201.829234][T10873] tipc: Failed to remove unknown binding: 66,1,1/1231615175:155658540/155658542
[  201.832422][T10873] tipc: Failed to remove unknown binding: 66,1,1/1231615175:155658540/155658542
[  202.167494][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.281824][T10887] netlink: 'syz.2.1450': attribute type 2 has an invalid length.
[  202.286052][T10887] netlink: 'syz.2.1450': attribute type 1 has an invalid length.
[  202.311543][T10887] syzkaller1: entered promiscuous mode
[  202.313943][T10887] syzkaller1: entered allmulticast mode
[  202.461791][T10901] x_tables: duplicate underflow at hook 1
[  203.375725][T10916] netlink: 'syz.0.1457': attribute type 64 has an invalid length.
[  203.384637][T10917] netlink: 'syz.0.1457': attribute type 64 has an invalid length.
[  203.393427][T10916] __nla_validate_parse: 6 callbacks suppressed
[  203.393434][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'.
[  203.521978][T10917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1457'.
[  204.416767][T10963] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1470'.
[  205.001944][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'.
[  205.129504][T10984] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  205.135586][T10984] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  205.140477][T10984] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  205.228070][T10988] netlink: 'syz.2.1478': attribute type 21 has an invalid length.
[  205.269515][T10990] ip_vti0: entered allmulticast mode
[  205.272103][T10989] ip_vti0: left allmulticast mode
[  205.535986][T11006] IPVS: set_ctl: invalid protocol: 135 172.20.20.37:20001
[  205.541127][T11006] netlink: 'syz.2.1484': attribute type 10 has an invalid length.
[  205.545515][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1484'.
[  205.549611][T11006] batman_adv: batadv0: Adding interface: virt_wifi0
[  205.551932][T11006] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.560749][T11006] batman_adv: batadv0: Interface activated: virt_wifi0
[  207.517857][T11056] netlink: 'syz.0.1498': attribute type 9 has an invalid length.
[  207.814478][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1502'.
[  207.842390][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'.
[  207.897240][T11074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.900542][T11073] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.906530][T11074] syzkaller0: entered promiscuous mode
[  207.908640][T11074] syzkaller0: entered allmulticast mode
[  207.980187][T11076] tipc: Resetting bearer <eth:syzkaller0>
[  207.989457][T11076] tipc: Disabling bearer <eth:syzkaller0>
[  208.097246][T11082] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  208.099997][T11082] batman_adv: batadv0: Removing interface: virt_wifi0
[  208.105165][T11082] team0: Port device bond3 removed
[  208.121222][T11082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  208.792314][T11102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.860401][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'.
[  209.304800][T11114] netlink: 'syz.2.1516': attribute type 49 has an invalid length.
[  209.308516][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'.
[  209.425013][T11122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1518'.
[  209.427824][T11122] openvswitch: netlink: Flow key attr not present in new flow.
[  210.367972][T11148] geneve2: entered promiscuous mode
[  210.370428][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  210.374306][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  210.377369][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  210.380363][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  210.651489][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  210.826031][T11195] netlink: 'syz.0.1537': attribute type 21 has an invalid length.
[  210.828794][T11195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1537'.
[  210.926610][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'.
[  212.016938][T11255] IPv6: NLM_F_REPLACE set, but no existing node found!
[  212.082168][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'.
[  212.746930][T11273] veth0: entered promiscuous mode
[  213.112811][T11279] xt_cgroup: xt_cgroup: no path or classid specified
[  213.403575][T11269] veth0: left promiscuous mode
[  213.431441][T11282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.460981][T11285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.526571][T11289] IPv6: NLM_F_REPLACE set, but no existing node found!
[  213.550035][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'.
[  213.783443][T11311] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  214.061387][T11334] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1566'.
[  214.167272][T11343] netlink: 'syz.2.1573': attribute type 1 has an invalid length.
[  214.184719][T11343] bond14: entered promiscuous mode
[  214.186531][T11343] bond14: entered allmulticast mode
[  214.188529][T11343] 8021q: adding VLAN 0 to HW filter on device bond14
[  214.192160][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'.
[  214.218937][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'.
[  215.214078][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'.
[  215.254602][T11381] delete_channel: no stack
[  215.325951][T11386] pim6reg1: entered promiscuous mode
[  215.327885][T11386] pim6reg1: entered allmulticast mode
[  215.530793][T11403] vlan0: entered promiscuous mode
[  215.533385][T11403] macvlan2: entered promiscuous mode
[  215.536133][T11403] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1589'.
[  215.580132][T11408] netlink: 'syz.0.1588': attribute type 6 has an invalid length.
[  215.597975][T11410] netlink: 'syz.1.1590': attribute type 21 has an invalid length.
[  215.661375][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'.
[  215.665985][T11415] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  215.669832][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'.
[  215.672759][T11416] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  215.679492][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1592'.
[  215.774473][T11419] vlan0: left promiscuous mode
[  215.902922][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'.
[  215.930339][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'.
[  217.169133][T11477] macsec0: entered allmulticast mode
[  217.171275][T11477] veth1_macvtap: entered allmulticast mode
[  217.174712][T11477] macsec0: left allmulticast mode
[  217.176796][T11477] veth1_macvtap: left allmulticast mode
[  218.473853][T11535] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  218.621617][T11554] macvlan3: entered promiscuous mode
[  218.624866][T11554] macvlan3: entered allmulticast mode
[  218.627167][T11554] bond16: (slave macvlan3): Opening slave failed
[  218.647151][T11556] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  219.469039][T11575] __nla_validate_parse: 10 callbacks suppressed
[  219.469047][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'.
[  219.579810][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'.
[  219.697452][T11597] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.1643'.
[  219.758006][T11598] netlink: 'syz.2.1643': attribute type 13 has an invalid length.
[  219.761044][T11598] netlink: 'syz.2.1643': attribute type 17 has an invalid length.
[  219.769515][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.920564][T11608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.996439][T11607] tipc: Disabling bearer <eth:syzkaller0>
[  220.669702][T11636] netlink: 'syz.0.1656': attribute type 1 has an invalid length.
[  220.672367][T11636] netlink: 'syz.0.1656': attribute type 2 has an invalid length.
[  220.676487][T11636] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1656'.
[  220.706645][T11638] pim6reg1: entered promiscuous mode
[  220.708351][T11638] pim6reg1: entered allmulticast mode
[  221.818745][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'.
[  221.905370][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'.
[  221.979360][T11700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.982818][T11700] syzkaller0: entered promiscuous mode
[  221.985454][T11700] syzkaller0: entered allmulticast mode
[  221.992244][T11700] tipc: Resetting bearer <eth:syzkaller0>
[  221.997352][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  222.006085][T11698] tipc: Disabling bearer <eth:syzkaller0>
[  222.093404][T11701] wireguard0: entered promiscuous mode
[  222.095223][T11701] wireguard0: entered allmulticast mode
[  222.350568][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.471719][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'.
[  222.542766][T11742] netlink: 'syz.1.1690': attribute type 2 has an invalid length.
[  222.551822][T11742] : entered promiscuous mode
[  223.721051][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'.
[  223.730514][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  223.990214][T11757] tap0: tun_chr_ioctl cmd 1074025677
[  223.992093][T11757] tap0: linktype set to 769
[  224.837073][T11771] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1700'.
[  224.898530][T11775] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  224.901961][T11775] netlink: 'syz.0.1701': attribute type 2 has an invalid length.
[  224.908289][T11775] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  224.951977][T11777] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1702'.
[  224.955744][T11777] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1702'.
[  225.956382][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'.
[  225.975812][T11817] macvlan0: entered promiscuous mode
[  225.977729][T11817] macvlan0: entered allmulticast mode
[  225.980105][T11817] bond19: (slave macvlan0): Opening slave failed
[  226.146324][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'.
[  226.149449][T11828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'.
[  226.426191][T11838] bridge0: port 1(macvlan0) entered blocking state
[  226.428507][T11838] bridge0: port 1(macvlan0) entered disabled state
[  226.430634][T11838] macvlan0: entered allmulticast mode
[  226.432405][T11838] bridge0: entered allmulticast mode
[  226.437701][T11838] macvlan0: left allmulticast mode
[  226.439663][T11838] bridge0: left allmulticast mode
[  226.551277][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'.
[  226.578660][T11849] macvlan2: entered promiscuous mode
[  226.580749][T11849] macvlan2: entered allmulticast mode
[  226.583688][T11849] bond18: (slave macvlan2): Opening slave failed
[  226.810741][T11864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1722'.
[  226.904849][T11876] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.1726'.
[  227.262471][T11893] syzkaller0: entered promiscuous mode
[  227.266114][T11893] syzkaller0: entered allmulticast mode
[  227.827966][T11939] vxcan1: entered allmulticast mode
[  227.853825][T11942] IPv6: NLM_F_REPLACE set, but no existing node found!
[  227.897591][T11944] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1745'.
[  228.930988][T11964] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  228.955398][T11964] bond17 (unregistering): Released all slaves
[  229.146917][T11982] dvmrp8: entered allmulticast mode
[  229.184311][T11981] dvmrp8: left allmulticast mode
[  229.261775][T11985] netlink: 'syz.0.1755': attribute type 1 has an invalid length.
[  229.280430][T11985] 8021q: adding VLAN 0 to HW filter on device bond20
[  229.291238][T11985] bond20: (slave ip6gretap2): making interface the new active one
[  229.296748][T11985] bond20: (slave ip6gretap2): Enslaving as an active interface with an up link
[  229.312669][T11985] veth5: entered promiscuous mode
[  229.316789][T11985] bond20: (slave veth5): Enslaving as an active interface with a down link
[  229.372020][T11988] xt_hashlimit: size too large, truncated to 1048576
[  229.778808][T12007] IPv6: NLM_F_REPLACE set, but no existing node found!
[  229.858675][T12015] __nla_validate_parse: 7 callbacks suppressed
[  229.858688][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1765'.
[  230.802889][T12030] IPv6: NLM_F_REPLACE set, but no existing node found!
[  231.730892][T12038] netlink: 'syz.1.1773': attribute type 5 has an invalid length.
[  231.733773][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  231.737599][T12038] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1773'.
[  231.740655][T12038] 1{X: renamed from 30{X
[  231.745890][T12038] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  231.863887][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'.
[  231.867490][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'.
[  231.979364][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'.
[  233.213474][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'.
[  233.546670][T12105] sctp: [Deprecated]: syz.2.1794 (pid 12105) Use of int in maxseg socket option.
[  233.546670][T12105] Use struct sctp_assoc_value instead
[  234.184740][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[  234.199308][T12126] batman_adv: batadv0: Removing interface: virt_wifi0
[  234.290339][T12128] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  234.586997][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  234.590028][T12149] openvswitch: netlink: Missing key (keys=40, expected=100)
[  234.647894][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  236.330359][T12209] __nla_validate_parse: 1 callbacks suppressed
[  236.330370][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'.
[  236.385944][T12216] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1824'.
[  237.095104][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1825'.
[  237.098208][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1825'.
[  237.104954][T12220] syzkaller0: entered allmulticast mode
[  237.371813][T12244] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  237.376223][T12244] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  238.035636][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'.
[  238.057936][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'.
[  238.083748][T12289] macvlan2: entered promiscuous mode
[  238.085641][T12289] macvlan2: entered allmulticast mode
[  238.087939][T12289] bond19: (slave macvlan2): Opening slave failed
[  238.485676][T12300] tipc: Enabled bearer <eth:gre0>, priority 10
[  238.739801][T12318] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1853'.
[  238.821832][T12330] netlink: 'syz.0.1855': attribute type 10 has an invalid length.
[  238.830618][T12330] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  238.837587][T12330] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  238.843156][T12330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1855'.
[  238.851976][T12330] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1855'.
[  238.855739][T12330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.861097][T12330] netlink: 'syz.0.1855': attribute type 12 has an invalid length.
[  238.864956][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1855'.
[  239.067732][T12336] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  239.071186][T12336] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  239.280713][T12348] unsupported nlmsg_type 40
[  239.423789][T12364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.454744][T12365] hsr_slave_1 (unregistering): left promiscuous mode
[  239.459241][T12364] syzkaller0: entered promiscuous mode
[  239.461059][T12364] syzkaller0: entered allmulticast mode
[  239.470538][T12364] tipc: Resetting bearer <eth:syzkaller0>
[  239.477190][T12360] tipc: Resetting bearer <eth:syzkaller0>
[  239.483945][T12360] tipc: Disabling bearer <eth:syzkaller0>
[  239.603545][   T10] tipc: Node number set to 170718
[  240.388143][T12403] netlink: 'syz.1.1879': attribute type 12 has an invalid length.
[  240.452038][T12408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.456198][T12408] syzkaller0: entered promiscuous mode
[  240.458108][T12408] syzkaller0: entered allmulticast mode
[  240.470398][T12408] tipc: Resetting bearer <eth:syzkaller0>
[  240.526829][ T5219] Bluetooth: hci2: link tx timeout
[  240.529973][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  240.859100][T12443] x_tables: ip_tables: osf match: only valid for protocol 6
[  241.120099][T12461] macvlan0: entered promiscuous mode
[  241.121878][T12461] macvlan0: entered allmulticast mode
[  241.124667][T12461] bond21: (slave macvlan0): Opening slave failed
[  241.277591][T12407] tipc: Resetting bearer <eth:syzkaller0>
[  241.286831][T12407] tipc: Disabling bearer <eth:syzkaller0>
[  241.368565][T12480] __nla_validate_parse: 15 callbacks suppressed
[  241.368574][T12480] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1900'.
[  241.630751][T12508] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.1907'.
[  241.771521][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'.
[  241.832217][ T5883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.837651][ T5883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.840404][ T5883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.843758][ T5883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.244920][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'.
[  242.455275][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'.
[  242.593419][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  242.727138][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'.
[  242.787021][T12583] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003
[  243.062004][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'.
[  243.354717][T12633] netlink: 'syz.0.1942': attribute type 1 has an invalid length.
[  243.362814][T12633] netlink: 'syz.0.1942': attribute type 11 has an invalid length.
[  243.365791][T12633] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1942'.
[  243.380205][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'.
[  243.389355][T12633] vlan0: entered promiscuous mode
[  243.391023][T12633] team0: entered promiscuous mode
[  243.392637][T12633] team_slave_0: entered promiscuous mode
[  243.393340][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1943'.
[  243.394966][T12633] team_slave_1: entered promiscuous mode
[  243.399630][T12633] geneve0: entered promiscuous mode
[  243.844824][T12665] team0: Port device geneve0 removed
[  243.847379][T12665] bond1: (slave gretap2): Releasing active interface
[  243.856806][T12665] 1{X: left allmulticast mode
[  243.875395][T12665] 8021q: adding VLAN 0 to HW filter on device team0
[  243.881026][T12665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.244257][T12679] macvlan0: entered promiscuous mode
[  244.246239][T12679] macvlan0: entered allmulticast mode
[  244.248511][T12679] bond22: (slave macvlan0): Opening slave failed
[  244.819007][T12712] netlink: 'syz.2.1965': attribute type 1 has an invalid length.
[  245.769592][T12754] netlink: 'syz.2.1976': attribute type 1 has an invalid length.
[  245.788973][T12754] 8021q: adding VLAN 0 to HW filter on device bond20
[  246.066709][T12770] macvlan0: entered allmulticast mode
[  246.182160][   T10] hid-generic 0005:16C0:0401.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  246.577350][T12781] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  246.825834][T12795] __nla_validate_parse: 12 callbacks suppressed
[  246.825843][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'.
[  247.248475][T12816] syzkaller0: entered promiscuous mode
[  247.250392][T12816] syzkaller0: entered allmulticast mode
[  247.260169][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  248.710455][T12848] netlink: 'syz.2.2000': attribute type 4 has an invalid length.
[  248.721114][T12848] netlink: 'syz.2.2000': attribute type 4 has an invalid length.
[  249.024712][T12861] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  250.421720][T12895] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2014'.
[  250.432192][T12895] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  250.485181][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'.
[  250.828176][T12905] netlink: 'syz.0.2018': attribute type 10 has an invalid length.
[  250.835573][T12905] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  250.838746][T12905] team0: Port device netdevsim0 added
[  251.063312][ T5219] Bluetooth: hci0: command tx timeout
[  251.712031][T12944] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  251.728685][T12944] bond23: entered promiscuous mode
[  251.730416][T12944] bond23: entered allmulticast mode
[  251.732423][T12944] 8021q: adding VLAN 0 to HW filter on device bond23
[  251.766941][T12944] bridge1: entered promiscuous mode
[  251.769499][T12944] bridge1: entered allmulticast mode
[  251.772199][T12944] bond23: (slave bridge1): Enslaving as a backup interface with an up link
[  251.776866][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  251.780521][T12948] veth1_macvtap: default FDB implementation only supports local addresses
[  251.787894][T12948] x_tables: unsorted underflow at hook 2
[  251.835712][   T13] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  251.953179][ T5854] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  252.070870][T12964] netlink: 'syz.2.2036': attribute type 21 has an invalid length.
[  252.074031][T12964] netlink: 'syz.2.2036': attribute type 6 has an invalid length.
[  252.077678][T12964] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2036'.
[  252.160628][T12970] ip6t_REJECT: ECHOREPLY is not supported
[  252.190365][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'.
[  252.448349][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2040'.
[  252.726160][T12981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.736873][T12981] tipc: Disabling bearer <eth:syzkaller0>
[  253.816919][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2052'.
[  254.127498][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2054'.
[  254.307602][T13052] IPv6: NLM_F_REPLACE set, but no existing node found!
[  254.667178][T13073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2063'.
[  254.698189][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'.
[  254.719461][T13078] macvlan0: entered promiscuous mode
[  254.721214][T13078] macvlan0: entered allmulticast mode
[  254.726155][T13078] bond24: (slave macvlan0): Opening slave failed
[  254.870332][T13085] netlink: 'syz.1.2066': attribute type 21 has an invalid length.
[  254.872833][T13085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2066'.
[  254.879508][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'.
[  255.131731][T13109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2074'.
[  255.346641][T13112] netlink: 'syz.2.2075': attribute type 1 has an invalid length.
[  255.349311][T13112] netlink: 'syz.2.2075': attribute type 1 has an invalid length.
[  255.880103][T13124] macvlan0: entered promiscuous mode
[  255.881967][T13124] macvlan0: entered allmulticast mode
[  255.885949][T13124] bond25: (slave macvlan0): Opening slave failed
[  256.270183][T13155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  257.002804][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.092747][T13178] __nla_validate_parse: 5 callbacks suppressed
[  257.092759][T13178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2097'.
[  257.191658][T13181] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.197025][T13181] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.242330][T13182] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2098'.
[  257.711190][T13195] netlink: 'syz.1.2101': attribute type 14 has an invalid length.
[  257.726057][T13195] netlink: 'syz.1.2101': attribute type 14 has an invalid length.
[  257.741897][T13195] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2101'.
[  258.060629][T13209] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  258.112745][T13213] netlink: 'syz.0.2105': attribute type 1 has an invalid length.
[  258.138336][T13215] syzkaller1: entered promiscuous mode
[  258.140173][T13215] syzkaller1: entered allmulticast mode
[  258.227964][T13215] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  258.379431][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2109'.
[  258.401590][T13223] macvlan3: entered promiscuous mode
[  258.403608][T13223] macvlan3: entered allmulticast mode
[  258.406119][T13223] bond17: (slave macvlan3): Opening slave failed
[  258.469836][T13226] pim6reg1: entered promiscuous mode
[  258.471621][T13226] pim6reg1: entered allmulticast mode
[  258.637979][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'.
[  258.640986][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2111'.
[  259.244873][T13265] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  259.267368][T13269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'.
[  259.270412][T13269] veth1_macvtap: default FDB implementation only supports local addresses
[  259.636440][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'.
[  259.640104][T13290] veth1_macvtap: default FDB implementation only supports local addresses
[  259.664432][T13292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2127'.
[  260.042708][T13321] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  260.058142][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'.
[  260.061009][T13328] veth1_macvtap: default FDB implementation only supports local addresses
[  260.322231][T13340] bond0: option mode: unable to set because the bond device has slaves
[  260.476258][T13349] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  260.516994][T13356] macvlan0: left allmulticast mode
[  260.518820][T13356] netlink: 'syz.2.2148': attribute type 2 has an invalid length.
[  260.578745][T13364] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  260.707545][T13378] netlink: 'syz.0.2155': attribute type 18 has an invalid length.
[  260.710602][T13378] netlink: 'syz.0.2155': attribute type 10 has an invalid length.
[  260.760908][T13381] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  260.839796][T13387] macvlan2: entered promiscuous mode
[  260.841583][T13387] macvlan2: entered allmulticast mode
[  260.844219][T13387] bond21: (slave macvlan2): Opening slave failed
[  261.702501][T13411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.741681][T13411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.798890][T13411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.836894][ T5854] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  261.839575][ T5854] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  261.842200][ T5854] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  261.849053][ T5854] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  261.852833][T13411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.910831][ T5854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.919293][T13427] netlink: 'syz.2.2171': attribute type 8 has an invalid length.
[  261.923150][ T5854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.940256][ T5854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.942893][ T5854] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.066388][T13433] netlink: 'syz.1.2174': attribute type 1 has an invalid length.
[  262.095691][T13436] __nla_validate_parse: 19 callbacks suppressed
[  262.095711][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'.
[  262.141954][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.145065][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.153693][T13438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.583172][ T5219] Bluetooth: hci0: command tx timeout
[  262.638645][T13441] IPv6: NLM_F_REPLACE set, but no existing node found!
[  262.817817][T13451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'.
[  262.820770][T13451] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2180'.
[  262.824453][T13451] tipc: Invalid UDP bearer configuration
[  262.824478][T13451] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  262.899449][T13459] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2182'.
[  262.902312][T13459] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2182'.
[  262.907137][T13459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2182'.
[  263.091771][T13475] lo: entered allmulticast mode
[  263.094131][T13475] lo: left allmulticast mode
[  263.707378][T13482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.710705][T13482] syzkaller0: entered promiscuous mode
[  263.712745][T13482] syzkaller0: entered allmulticast mode
[  263.723864][T13482] tipc: Resetting bearer <eth:syzkaller0>
[  263.728884][T13481] tipc: Resetting bearer <eth:syzkaller0>
[  263.739465][T13481] tipc: Disabling bearer <eth:syzkaller0>
[  263.796430][T13486] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2190'.
[  263.987054][T13488] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  264.136888][T13498] ip6tnl1: entered promiscuous mode
[  264.138760][T13498] ip6tnl1: entered allmulticast mode
[  264.307369][T13510] netlink: 'syz.1.2196': attribute type 1 has an invalid length.
[  264.310006][T13510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2196'.
[  264.802452][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'.
[  264.959498][T13535] netlink: 'syz.0.2203': attribute type 1 has an invalid length.
[  264.993742][T13535] 8021q: adding VLAN 0 to HW filter on device bond26
[  265.010996][T13535] 8021q: adding VLAN 0 to HW filter on device bond26
[  265.014733][T13535] bond26: (slave vxcan5): The slave device specified does not support setting the MAC address
[  265.018963][T13535] bond26: (slave vxcan5): Error -95 calling set_mac_address
[  265.052925][T13546] batadv_slave_1: entered promiscuous mode
[  265.061696][T13546] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.071737][T13546] bond26: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  265.083505][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2203'.
[  265.087084][T13535] 8021q: adding VLAN 0 to HW filter on device bond26
[  265.138196][T13551] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  265.382570][T13583] tipc: Resetting bearer <eth:gre0>
[  265.436158][ T5839] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.438835][ T5839] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.441575][ T5839] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.445476][ T5839] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.479892][T13593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.482435][T13593] syzkaller0: entered promiscuous mode
[  265.485511][T13593] syzkaller0: entered allmulticast mode
[  265.499004][T13593] tipc: Resetting bearer <eth:syzkaller0>
[  265.517074][T13592] tipc: Resetting bearer <eth:syzkaller0>
[  265.533675][T13592] tipc: Disabling bearer <eth:syzkaller0>
[  265.539621][T13597] veth1_macvtap: default FDB implementation only supports local addresses
[  265.670095][T13601] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.777330][T13622] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  265.797916][T13618] macvlan3: entered promiscuous mode
[  265.799693][T13618] macvlan3: entered allmulticast mode
[  265.803667][T13618] bond18: (slave macvlan3): Opening slave failed
[  265.891794][T13634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.897736][T13634] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  265.900128][T13634] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  265.917113][T13634] tipc: Resetting bearer <eth:syzkaller0>
[  265.924045][T13634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.961716][T13644] veth1_macvtap: default FDB implementation only supports local addresses
[  266.314442][T13664] netlink: 'syz.2.2241': attribute type 2 has an invalid length.
[  266.317078][T13664] netlink: 'syz.2.2241': attribute type 1 has an invalid length.
[  270.565075][T13676] IPv6: NLM_F_REPLACE set, but no existing node found!
[  270.632740][T13689] __nla_validate_parse: 9 callbacks suppressed
[  270.632753][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'.
[  270.749322][T13698] IPv6: NLM_F_REPLACE set, but no existing node found!
[  270.804500][T13702] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2255'.
[  270.858767][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.862416][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.867784][T13709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.870767][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.875176][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.878558][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.881472][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.886810][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  270.889775][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'.
[  271.008871][T13729] IPv6: NLM_F_REPLACE set, but no existing node found!
[  271.296455][T13763] IPv6: NLM_F_REPLACE set, but no existing node found!
[  272.076170][T13783] netlink: 'syz.2.2272': attribute type 1 has an invalid length.
[  272.837220][T13794] veth1_macvtap: default FDB implementation only supports local addresses
[  272.996863][T13802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.999893][T13802] syzkaller0: entered promiscuous mode
[  273.001728][T13802] syzkaller0: entered allmulticast mode
[  273.007625][T13802] tipc: Resetting bearer <eth:syzkaller0>
[  273.719792][T13795] tipc: Resetting bearer <eth:syzkaller0>
[  273.730388][T13795] tipc: Disabling bearer <eth:syzkaller0>
[  273.905925][T13817] IPv6: NLM_F_CREATE should be specified when creating new route
[  273.908608][T13817] IPv6: NLM_F_REPLACE set, but no existing node found!
[  273.966622][T13824] netlink: 'syz.2.2285': attribute type 3 has an invalid length.
[  274.864346][T13859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  275.154298][T13872] openvswitch: netlink: Message has 4 unknown bytes.
[  275.918406][T13899] netlink: 'syz.1.2309': attribute type 10 has an invalid length.
[  275.925269][T13899] team0: Port device dummy0 added
[  276.329632][T13929] 8021q: adding VLAN 0 to HW filter on device bond22
[  276.526440][T13950] netlink: 'syz.2.2328': attribute type 3 has an invalid length.
[  276.529684][T13950] netlink: 'syz.2.2328': attribute type 3 has an invalid length.
[  276.576616][T13955] batadv_slave_0: entered promiscuous mode
[  276.578595][T13955] __nla_validate_parse: 133 callbacks suppressed
[  276.578602][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'.
[  276.591290][T13955] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2329'.
[  276.594813][T13955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2329'.
[  276.702874][T13964] ip6gre2: entered allmulticast mode
[  276.782737][   T33] audit: type=1800 audit(1753358932.081:4): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2334" name="memory.events" dev="tmpfs" ino=4253 res=0 errno=0
[  276.897537][T13972] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  276.900391][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2334'.
[  276.903590][T13972] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  277.105805][T13985] openvswitch: netlink: Key type 49 is out of range max 32
[  277.976813][T14004] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2343'.
[  278.029866][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2344'.
[  278.052121][T14006] macvlan2: entered promiscuous mode
[  278.056572][T14006] macvlan2: entered allmulticast mode
[  278.058757][T14006] bond23: (slave macvlan2): Opening slave failed
[  278.089673][T14004] tap0: tun_chr_ioctl cmd 1074025678
[  278.091409][T14004] tap0: group set to 0
[  278.182238][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2346'.
[  278.218202][T14020] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  278.392711][T14033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.921600][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'.
[  279.218600][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'.
[  279.228813][T14051] gretap0: entered promiscuous mode
[  279.900829][T14071] IPVS: Unknown mcast interface: pimreg0
[  280.089078][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2363'.
[  280.147221][T14087] xt_ipcomp: unknown flags F7
[  280.187883][T14093] xt_cluster: node mask cannot exceed total number of nodes
[  280.237587][T14099] netlink: 'syz.0.2370': attribute type 10 has an invalid length.
[  280.240483][T14100] netlink: 'syz.0.2370': attribute type 10 has an invalid length.
[  280.245635][T14099] 8021q: adding VLAN 0 to HW filter on device team0
[  280.249774][T14099] bond0: (slave team0): Enslaving as an active interface with an up link
[  280.273767][ T5219] Bluetooth: hci0: command tx timeout
[  280.872541][T14124] netlink: 'syz.1.2377': attribute type 32 has an invalid length.
[  280.878018][T14124] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  280.960419][T14129] x_tables: duplicate underflow at hook 1
[  281.125304][T14141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  281.136513][T14141] team0: Port device dummy0 removed
[  281.523651][T14164] netlink: 'syz.2.2389': attribute type 1 has an invalid length.
[  281.526381][T14164] nbd: error processing sock list
[  281.529599][T14164] block nbd0: shutting down sockets
[  281.557658][T14174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.685546][T14189] __nla_validate_parse: 10 callbacks suppressed
[  281.685557][T14189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2396'.
[  281.716856][T14189] macvlan2: entered promiscuous mode
[  281.718871][T14189] macvlan2: entered allmulticast mode
[  281.721274][T14189] bond25: (slave macvlan2): Opening slave failed
[  281.918504][T14207] netlink: 'syz.2.2402': attribute type 12 has an invalid length.
[  282.046013][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2405'.
[  282.086559][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  282.875346][T14247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2417'.
[  283.148639][T14268] netlink: 'syz.2.2424': attribute type 9 has an invalid length.
[  283.151245][T14268] netlink: 'syz.2.2424': attribute type 9 has an invalid length.
[  284.005742][T14279] netlink: 'syz.2.2427': attribute type 1 has an invalid length.
[  284.008544][T14278] netlink: 'syz.2.2427': attribute type 1 has an invalid length.
[  284.671472][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'.
[  284.901902][T14307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2436'.
[  284.947801][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'.
[  285.397018][T14348] netlink: 'syz.0.2447': attribute type 1 has an invalid length.
[  286.153904][T14363] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  286.158459][T14363] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  286.320917][T14381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2458'.
[  287.154904][T14420] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2470'.
[  287.158711][T14420] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2470'.
[  287.169073][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'.
[  287.221544][T14421] netlink: 'syz.2.2470': attribute type 7 has an invalid length.
[  287.225527][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2470'.
[  287.268438][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'.
[  287.271348][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'.
[  287.300201][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'.
[  287.320389][T14425] macvlan2: entered promiscuous mode
[  287.322248][T14425] macvlan2: entered allmulticast mode
[  287.326412][T14425] bond26: (slave macvlan2): Opening slave failed
[  287.434454][T14437] netlink: 'syz.2.2477': attribute type 13 has an invalid length.
[  287.680948][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  287.684025][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2485'.
[  288.435325][T14480] netlink: 'syz.0.2487': attribute type 4 has an invalid length.
[  288.438374][T14480] netlink: 'syz.0.2487': attribute type 4 has an invalid length.
[  288.485095][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'.
[  288.626311][T14501] openvswitch: netlink: IPv6 tunnel dst address is zero
[  289.443491][T14519] ip6erspan0: entered allmulticast mode
[  289.469776][T14522] macvlan2: entered promiscuous mode
[  289.471582][T14522] macvlan2: entered allmulticast mode
[  289.474954][T14522] bond27: (slave macvlan2): Opening slave failed
[  289.627812][T14536] netlink: 'syz.2.2502': attribute type 13 has an invalid length.
[  289.674115][T14542] vti0: entered promiscuous mode
[  289.776898][T14551] netlink: 'syz.1.2507': attribute type 3 has an invalid length.
[  289.857021][T14556] macvlan3: entered promiscuous mode
[  289.858922][T14556] macvlan3: entered allmulticast mode
[  289.861286][T14556] bond22: (slave macvlan3): Opening slave failed
[  290.333672][T14584] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  290.390043][T14586] macvlan2: entered promiscuous mode
[  290.391920][T14586] macvlan2: entered allmulticast mode
[  290.394415][T14586] bond28: (slave macvlan2): Opening slave failed
[  290.699034][T14606] netlink: 'syz.1.2524': attribute type 11 has an invalid length.
[  291.844251][T14632] netlink: 'syz.2.2531': attribute type 2 has an invalid length.
[  292.742182][T14663] __nla_validate_parse: 13 callbacks suppressed
[  292.742200][T14663] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2538'.
[  293.900701][T14687] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  294.641341][T14713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'.
[  294.659301][T14713] macvlan2: entered promiscuous mode
[  294.660994][T14713] macvlan2: entered allmulticast mode
[  294.663590][T14713] bond28: (slave macvlan2): Opening slave failed
[  294.740122][T14716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.743627][T14716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.211157][T14726] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2555'.
[  295.214402][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'.
[  295.220214][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2555'.
[  295.245673][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'.
[  295.248721][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'.
[  295.252901][T14728] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2556'.
[  295.360497][T14734] smc: removing net device bond0 with user defined pnetid SYZ2
[  295.364662][T14734] bond0 (unregistering): Released all slaves
[  295.967341][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2563'.
[  295.970324][T14758] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2563'.
[  297.320907][T14797] netlink: 'syz.2.2575': attribute type 13 has an invalid length.
[  297.326376][T14797] batadv_slave_1: entered promiscuous mode
[  297.365323][T14795] batadv_slave_1: left promiscuous mode
[  297.666978][T14835] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  298.535213][T14859] __nla_validate_parse: 4 callbacks suppressed
[  298.535222][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'.
[  298.546474][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'.
[  298.584160][T14861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2592'.
[  298.586997][T14861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2592'.
[  298.642415][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  298.646413][T14863] veth1: entered promiscuous mode
[  298.648172][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  298.650973][T14863] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  298.725909][T14873] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2596'.
[  298.776961][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'.
[  298.779978][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'.
[  298.782918][T14876] netlink: 'syz.1.2597': attribute type 14 has an invalid length.
[  298.785997][T14876] netlink: 'syz.1.2597': attribute type 13 has an invalid length.
[  298.968684][T14902] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  299.001112][T14907] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2606'.
[  300.026486][ T5883] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.029304][ T5883] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.033573][ T5883] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.036671][ T5883] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.135605][T14948] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  300.154993][T14948] workqueue: Failed to create a rescuer kthread for wq "bond29": -EINTR
[  300.305834][T14972] netlink: 'syz.0.2624': attribute type 1 has an invalid length.
[  300.311071][T14972] netlink: 'syz.0.2624': attribute type 2 has an invalid length.
[  300.526799][T14986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.588985][T14989] netlink: 'syz.0.2630': attribute type 2 has an invalid length.
[  300.598399][T14989] : entered promiscuous mode
[  300.630546][T14985] tipc: Disabling bearer <eth:syzkaller0>
[  301.918976][   T47] IPVS: starting estimator thread 0...
[  301.930529][T15100] netlink: 'syz.2.2668': attribute type 1 has an invalid length.
[  301.966289][T15102] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  302.003330][T15099] IPVS: using max 79 ests per chain, 189600 per kthread
[  302.240527][T15129] Cannot find del_set index 4 as target
[  303.047766][T15146] IPv6: NLM_F_REPLACE set, but no existing node found!
[  303.093262][T15150] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  304.307101][T15175] __nla_validate_parse: 12 callbacks suppressed
[  304.307112][T15175] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2695'.
[  305.438403][T15224] nbd: must specify a size in bytes for the device
[  305.475597][T15234] netlink: 410 bytes leftover after parsing attributes in process `syz.1.2713'.
[  305.478917][T15234] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2713'.
[  305.500616][T15243] raw_sendmsg: syz.2.2715 forgot to set AF_INET. Fix it!
[  305.506001][T15243] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2715'.
[  305.515004][T15246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  305.516592][T15243] vlan2: entered allmulticast mode
[  305.522835][T15243] 0{X: entered allmulticast mode
[  305.733276][T15271] IPv6: NLM_F_REPLACE set, but no existing node found!
[  305.918525][T15289] IPVS: Unknown mcast interface: pimreg0
[  305.969266][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'.
[  305.972305][T15294] netlink: 'syz.1.2734': attribute type 2 has an invalid length.
[  306.310182][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'.
[  306.322540][T15308] smc: adding net device bond0 with user defined pnetid SYZ2
[  306.829741][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'.
[  306.856940][T15344] macvlan2: entered promiscuous mode
[  306.858786][T15344] macvlan2: entered allmulticast mode
[  306.861221][T15344] bond29: (slave macvlan2): Opening slave failed
[  306.919531][T15341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2746'.
[  307.846580][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2755'.
[  307.927557][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'.
[  308.168243][T15406] bond0: (slave team0): Releasing backup interface
[  308.171564][T15406] team_slave_0: left promiscuous mode
[  308.174403][T15406] team0 (unregistering): Port device team_slave_0 removed
[  308.176883][T15406] team_slave_1: left promiscuous mode
[  308.179394][T15406] team0 (unregistering): Port device team_slave_1 removed
[  308.181899][T15406] geneve0: left promiscuous mode
[  308.185425][T15406] team0 (unregistering): Port device geneve0 removed
[  308.187848][T15406] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  308.194274][T15406] team0 (unregistering): Port device netdevsim0 removed
[  308.267687][T15421] IPv6: NLM_F_REPLACE set, but no existing node found!
[  308.349571][T15427] macvlan3: entered promiscuous mode
[  308.351373][T15427] macvlan3: entered allmulticast mode
[  308.353681][T15427] bond23: (slave macvlan3): Opening slave failed
[  308.931092][T15444] netlink: 'syz.2.2777': attribute type 12 has an invalid length.
[  309.039009][T15445] wg1 speed is unknown, defaulting to 1000
[  309.041169][T15445] wg1 speed is unknown, defaulting to 1000
[  309.044812][T15445] wg1 speed is unknown, defaulting to 1000
[  309.054639][T15445] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  309.067521][T15445] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  309.089591][T15445] wg1 speed is unknown, defaulting to 1000
[  309.096318][T15445] wg1 speed is unknown, defaulting to 1000
[  309.098964][T15445] wg1 speed is unknown, defaulting to 1000
[  309.349922][T15455] macvlan2: entered promiscuous mode
[  309.354448][T15455] macvlan2: entered allmulticast mode
[  309.356710][T15455] bond31: (slave macvlan2): Opening slave failed
[  309.649839][T15495] netlink: 'syz.0.2791': attribute type 7 has an invalid length.
[  310.282484][T15535] ip6tnl4: entered promiscuous mode
[  310.284586][T15535] ip6tnl4: entered allmulticast mode
[  310.350869][T15544] TCP: TCP_TX_DELAY enabled
[  311.121016][T15565] __nla_validate_parse: 8 callbacks suppressed
[  311.121026][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'.
[  311.142039][T15565] macvlan3: entered promiscuous mode
[  311.144287][T15565] macvlan3: entered allmulticast mode
[  311.146582][T15565] bond24: (slave macvlan3): Opening slave failed
[  311.328843][T15581] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  311.367074][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'.
[  311.386693][T15590] macvlan2: entered promiscuous mode
[  311.388461][T15590] macvlan2: entered allmulticast mode
[  311.390712][T15590] bond29: (slave macvlan2): Opening slave failed
[  312.233308][T15631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2831'.
[  312.411319][T15637] tipc: Trying to set illegal importance in message
[  312.414648][T15637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2833'.
[  312.457403][T15647] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2837'.
[  312.461403][T15647] netlink: 'syz.2.2837': attribute type 15 has an invalid length.
[  312.464166][T15647] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2837'.
[  312.493445][T15647] netlink: 'syz.2.2837': attribute type 1 has an invalid length.
[  312.495987][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'.
[  312.498799][T15647] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2837'.
[  312.554594][T15661] netlink: 'syz.1.2835': attribute type 20 has an invalid length.
[  313.510702][   T33] audit: type=1800 audit(1753358968.811:5): pid=15680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2847" name=38FFFF dev="tmpfs" ino=5189 res=0 errno=0
[  313.604497][T15693] IPv6: NLM_F_REPLACE set, but no existing node found!
[  313.648944][T15698] geneve3: entered promiscuous mode
[  313.750324][T15715] IPv6: NLM_F_REPLACE set, but no existing node found!
[  313.819923][T15724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2863'.
[  313.830681][T15724] netlink: 'syz.1.2863': attribute type 22 has an invalid length.
[  313.835508][T15724] tun0: tun_chr_ioctl cmd 1074025675
[  313.837445][T15724] tun0: persist enabled
[  313.839150][T15724] tun0: tun_chr_ioctl cmd 1074025675
[  313.840864][T15724] tun0: persist enabled
[  313.869586][T15731] netlink: 'syz.2.2865': attribute type 1 has an invalid length.
[  313.900014][T15724] netlink: 'syz.1.2863': attribute type 2 has an invalid length.
[  313.923765][T15731] 8021q: adding VLAN 0 to HW filter on device bond31
[  313.929422][T15731] bond30: (slave bond31): making interface the new active one
[  313.932874][T15731] bond30: (slave bond31): Enslaving as an active interface with an up link
[  313.940819][T15741] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  313.948474][T15731] bond30: (slave gretap0): Enslaving as a backup interface with an up link
[  313.955145][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'.
[  313.958892][T15746] IPv6: NLM_F_REPLACE set, but no existing node found!
[  313.968258][T15731] 8021q: adding VLAN 0 to HW filter on device bond30
[  314.176018][T15773] IPv6: NLM_F_REPLACE set, but no existing node found!
[  314.269844][T15788] bond30: (slave bond31): Releasing backup interface
[  314.272112][T15788] bond30: (slave bond31): the permanent HWaddr of slave - 46:40:61:b9:0d:3e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  314.278249][T15788] bond30: (slave gretap0): making interface the new active one
[  314.287529][T15788] bond30: (slave gretap0): Releasing backup interface
[  315.037716][T15800] netlink: 'syz.2.2883': attribute type 15 has an invalid length.
[  315.249217][T15820] macvlan2: entered promiscuous mode
[  315.251093][T15820] macvlan2: entered allmulticast mode
[  315.254423][T15825] netlink: 'syz.1.2891': attribute type 11 has an invalid length.
[  315.258731][T15820] bond32: (slave macvlan2): Opening slave failed
[  315.312229][T15825] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  315.381239][T15837] IPv6: NLM_F_REPLACE set, but no existing node found!
[  315.408004][T15841] xt_l2tp: v2 doesn't support IP mode
[  315.466335][T15843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.468986][T15843] syzkaller0: entered promiscuous mode
[  315.470720][T15843] syzkaller0: entered allmulticast mode
[  315.476321][T15843] syzkaller0: left promiscuous mode
[  315.478039][T15843] syzkaller0: left allmulticast mode
[  315.481994][T15843] tipc: Resetting bearer <eth:syzkaller0>
[  316.189656][T15832] tipc: Resetting bearer <eth:syzkaller0>
[  316.197736][T15832] tipc: Disabling bearer <eth:syzkaller0>
[  316.254583][T15848] __nla_validate_parse: 8 callbacks suppressed
[  316.254592][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2898'.
[  316.263914][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'.
[  316.266180][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.269901][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.290746][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'.
[  316.308334][T15853] macvlan3: entered promiscuous mode
[  316.310200][T15853] macvlan3: entered allmulticast mode
[  316.312387][T15853] bond25: (slave macvlan3): Opening slave failed
[  316.544828][T15874] netlink: 'syz.1.2907': attribute type 2 has an invalid length.
[  316.576560][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'.
[  316.605249][T15880] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  316.608509][T15880] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  317.284980][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'.
[  317.302758][T15912] macvlan2: entered promiscuous mode
[  317.304837][T15912] macvlan2: entered allmulticast mode
[  317.307158][T15912] bond33: (slave macvlan2): Opening slave failed
[  317.453317][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'.
[  317.531801][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'.
[  317.768242][T15958] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071877174886)
[  317.771748][T15958] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  317.817863][T15962] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.049063][T15979] wg1 speed is unknown, defaulting to 1000
[  318.165998][T15979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'.
[  318.169851][T15979] netlink: 'syz.1.2940': attribute type 13 has an invalid length.
[  318.172414][T15979] netlink: 'syz.1.2940': attribute type 17 has an invalid length.
[  318.179401][T15979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  318.188780][T15987] netlink: 'syz.2.2942': attribute type 11 has an invalid length.
[  318.254361][T15990] IPv6: NLM_F_REPLACE set, but no existing node found!
[  318.390272][T15996] batadv_slave_0: entered promiscuous mode
[  318.465231][T16003] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2947'.
[  318.480646][T16005] delete_channel: no stack
[  318.608201][T16016] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  318.611886][T16016] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  318.632228][T16020] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2952'.
[  319.365461][T16063] netlink: 'syz.0.2963': attribute type 7 has an invalid length.
[  319.368028][T16063] netlink: 'syz.0.2963': attribute type 8 has an invalid length.
[  319.435570][T16066] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  319.600869][T16085] IPv6: NLM_F_REPLACE set, but no existing node found!
[  319.603346][T16087] IPv6: NLM_F_REPLACE set, but no existing node found!
[  319.605800][T16085] netlink: 'syz.1.2969': attribute type 1 has an invalid length.
[  319.646903][T16085] 8021q: adding VLAN 0 to HW filter on device bond27
[  319.650026][T16085] bond26: (slave bond27): making interface the new active one
[  319.652680][T16085] bond26: (slave bond27): Enslaving as an active interface with an up link
[  319.660714][T16085] bond26: (slave gretap4): Enslaving as a backup interface with an up link
[  319.665941][T16085] 8021q: adding VLAN 0 to HW filter on device bond26
[  320.017543][T16123] wg1 speed is unknown, defaulting to 1000
[  320.974030][T16152] blkio.reset_stats is deprecated
[  321.124414][T16157] netlink: 'syz.1.2989': attribute type 1 has an invalid length.
[  321.128158][T16157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  322.484032][T16185] __nla_validate_parse: 54 callbacks suppressed
[  322.484047][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2996'.
[  322.484388][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'.
[  322.622568][T16194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2998'.
[  322.627568][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'.
[  322.652819][T16197] netlink: 'syz.2.2999': attribute type 1 has an invalid length.
[  322.857628][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3004'.
[  322.895879][T16218] netlink: 'syz.2.3005': attribute type 9 has an invalid length.
[  322.899246][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'.
[  322.905851][T16218] hsr0: entered promiscuous mode
[  322.908270][T16218] macvlan2: entered promiscuous mode
[  322.910043][T16218] macvlan2: entered allmulticast mode
[  322.911790][T16218] hsr0: entered allmulticast mode
[  322.916676][T16218] hsr_slave_0: entered allmulticast mode
[  322.918678][T16218] hsr_slave_1: entered allmulticast mode
[  323.303162][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[  323.392607][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'.
[  324.306763][T16259] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3016'.
[  324.358296][T16266] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3018'.
[  324.374177][T16266] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  324.435334][T16271] syzkaller1: entered promiscuous mode
[  324.438466][T16271] syzkaller1: entered allmulticast mode
[  324.452638][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3021'.
[  325.584245][T16304] xt_CT: You must specify a L4 protocol and not use inversions on it
[  325.741857][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.753363][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.846003][T16325] batadv_slave_1: entered promiscuous mode
[  326.699290][T16350] netlink: 'syz.0.3043': attribute type 12 has an invalid length.
[  326.781279][T16359] IPv6: NLM_F_REPLACE set, but no existing node found!
[  327.018547][T16386] IPv6: NLM_F_REPLACE set, but no existing node found!
[  327.043420][T16385] syzkaller1: entered promiscuous mode
[  327.045681][T16385] syzkaller1: entered allmulticast mode
[  327.157111][T16407] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  327.160022][T16407] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  327.354891][T16434] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.033827][T16503] __nla_validate_parse: 9 callbacks suppressed
[  328.033839][T16503] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3085'.
[  328.038994][T16503] 1{X: entered promiscuous mode
[  328.041139][T16503] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3085'.
[  328.049589][T16503] 0{X: renamed from 31{X
[  328.052831][T16503] 0{X: left promiscuous mode
[  328.054629][T16503] 0{X: entered allmulticast mode
[  328.057558][T16503] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  328.423610][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  328.426501][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3086'.
[  328.456373][T16510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.459042][T16510] syzkaller0: entered promiscuous mode
[  328.460765][T16510] syzkaller0: entered allmulticast mode
[  328.472097][T16511] tipc: Resetting bearer <eth:syzkaller0>
[  328.476183][T16509] tipc: Resetting bearer <eth:syzkaller0>
[  328.482716][T16509] tipc: Disabling bearer <eth:syzkaller0>
[  328.934583][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3097'.
[  329.125279][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'.
[  329.154923][T16567] netlink: 'syz.2.3106': attribute type 3 has an invalid length.
[  329.227694][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'.
[  329.244820][T16581] macvlan2: entered promiscuous mode
[  329.246568][T16581] macvlan2: entered allmulticast mode
[  329.248835][T16581] bond34: (slave macvlan2): Opening slave failed
[  329.309280][T16589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.434760][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'.
[  329.490266][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3120'.
[  329.508604][T16609] macvlan3: entered promiscuous mode
[  329.510334][T16609] macvlan3: entered allmulticast mode
[  329.512471][T16609] bond30: (slave macvlan3): Opening slave failed
[  329.629235][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'.
[  329.741295][T16634] netlink: 'syz.1.3128': attribute type 2 has an invalid length.
[  329.767685][T16636] macvlan2: entered promiscuous mode
[  329.769463][T16636] macvlan2: entered allmulticast mode
[  329.771613][T16636] bond35: (slave macvlan2): Opening slave failed
[  329.844667][T16643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.999310][T16669] macvlan3: entered promiscuous mode
[  330.001201][T16669] macvlan3: entered allmulticast mode
[  330.005051][T16669] bond31: (slave macvlan3): Opening slave failed
[  330.151766][T16696] netlink: 'syz.1.3147': attribute type 1 has an invalid length.
[  330.157713][T16696] netlink: 'syz.1.3147': attribute type 1 has an invalid length.
[  330.195501][T16702] netlink: 'syz.1.3149': attribute type 2 has an invalid length.
[  330.199237][T16702] netlink: 'syz.1.3149': attribute type 2 has an invalid length.
[  330.431824][T16735] veth1_to_team: entered allmulticast mode
[  330.434310][T16735] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  330.634271][T16752] netlink: 'syz.0.3163': attribute type 83 has an invalid length.
[  330.689566][T16752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.784387][ T5883] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.787266][ T5883] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.790071][ T5883] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.792827][ T5883] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.989901][T16766] netlink: 'syz.0.3167': attribute type 21 has an invalid length.
[  331.059473][T16768] macvlan3: entered promiscuous mode
[  331.061401][T16768] macvlan3: entered allmulticast mode
[  331.064078][T16768] bond36: (slave macvlan3): Opening slave failed
[  331.140911][T16778] xt_hashlimit: size too large, truncated to 1048576
[  331.240713][T16783] 0{X: left allmulticast mode
[  331.247431][T16783] veth1: left promiscuous mode
[  331.250088][T16783] batadv_slave_0: left promiscuous mode
[  331.251994][T16783] batadv_slave_1: left promiscuous mode
[  331.262667][T16783] gretap1: left promiscuous mode
[  331.265680][T16783] macsec1: left promiscuous mode
[  331.267998][T16783] macsec1: left allmulticast mode
[  331.275982][T16783] macvlan2: left promiscuous mode
[  331.278546][T16783] ip6tnl1: left promiscuous mode
[  331.280166][T16783] ip6tnl1: left allmulticast mode
[  331.282058][T16783] tipc: Resetting bearer <eth:syzkaller0>
[  331.284636][T16783] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  331.289183][T16783] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  331.296436][T16783] ip6erspan0: left allmulticast mode
[  332.021257][T16810] macvlan2: entered promiscuous mode
[  332.024448][T16810] macvlan2: entered allmulticast mode
[  332.026860][T16810] bond36: (slave macvlan2): Opening slave failed
[  332.091327][T16813] veth1_to_team: left allmulticast mode
[  332.093663][T16813] batadv_slave_1: left promiscuous mode
[  332.098261][T16813] hsr1: left promiscuous mode
[  332.100387][T16813] bond14: left promiscuous mode
[  332.102060][T16813] bond14: left allmulticast mode
[  332.106029][T16813] xfrm1: left promiscuous mode
[  332.108172][T16813] xfrm1: left allmulticast mode
[  332.110606][T16813] veth5: left promiscuous mode
[  332.114165][T16813] bond23: left promiscuous mode
[  332.116638][T16813] bridge1: left promiscuous mode
[  332.118958][T16813] bond23: left allmulticast mode
[  332.121158][T16813] bridge1: left allmulticast mode
[  332.125368][T16813] ip6tnl4: left promiscuous mode
[  332.127573][T16813] ip6tnl4: left allmulticast mode
[  332.274866][T16822] IPv6: NLM_F_REPLACE set, but no existing node found!
[  332.291391][T16824] bridge0: entered allmulticast mode
[  332.343284][ T5219] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  332.345454][ T5828] Bluetooth: hci2: command 0x0405 tx timeout
[  332.497477][T16853] netlink: 'syz.2.3192': attribute type 21 has an invalid length.
[  332.880697][T16873] wg1 speed is unknown, defaulting to 1000
[  332.936106][T16873] netlink: 'syz.2.3198': attribute type 21 has an invalid length.
[  332.938701][T16873] netlink: 'syz.2.3198': attribute type 6 has an invalid length.
[  333.009881][T16880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.128372][T16885] __nla_validate_parse: 165 callbacks suppressed
[  333.128382][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'.
[  333.151086][T16885] macvlan3: entered promiscuous mode
[  333.152882][T16885] macvlan3: entered allmulticast mode
[  333.156870][T16885] bond32: (slave macvlan3): Opening slave failed
[  333.332043][T16891] bond0: (slave wlan1): Releasing backup interface
[  333.335410][T16891] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode
[  333.377957][T16892] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  333.380971][T16892] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  333.976867][T16896] bridge8: entered allmulticast mode
[  334.055702][T16898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'.
[  334.062593][T16898] macsec1: entered promiscuous mode
[  334.073317][T16898] team0: entered promiscuous mode
[  334.075304][T16898] macsec1: entered allmulticast mode
[  334.077174][T16898] team0: entered allmulticast mode
[  334.079403][T16898] team0: Device macsec1 is already an upper device of the team interface
[  334.084752][T16898] team0: left allmulticast mode
[  334.086427][T16898] team0: left promiscuous mode
[  334.147176][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'.
[  334.169633][T16903] macvlan3: entered promiscuous mode
[  334.171508][T16903] macvlan3: entered allmulticast mode
[  334.173975][T16903] bond37: (slave macvlan3): Opening slave failed
[  334.388991][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'.
[  334.391953][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[  334.557240][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3217'.
[  334.576092][T16931] macvlan3: entered promiscuous mode
[  334.577898][T16931] macvlan3: entered allmulticast mode
[  334.580160][T16931] bond38: (slave macvlan3): Opening slave failed
[  334.781932][T16942] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  335.097910][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'.
[  335.120870][T16951] macvlan2: entered promiscuous mode
[  335.123590][T16951] macvlan2: entered allmulticast mode
[  335.126301][T16951] bond37: (slave macvlan2): Opening slave failed
[  335.193215][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'.
[  335.301332][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'.
[  335.333849][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'.
[  336.020295][T16978] macvlan3: entered promiscuous mode
[  336.022233][T16978] macvlan3: entered allmulticast mode
[  336.025344][T16978] bond33: (slave macvlan3): Opening slave failed
[  336.105917][T16981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.252349][T16988] validate_nla: 2 callbacks suppressed
[  336.252361][T16988] netlink: 'syz.1.3237': attribute type 1 has an invalid length.
[  336.289911][T16987] xt_CT: No such helper "snmp"
[  336.339336][T16993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  336.351495][T16993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  336.374557][T16995] macvlan2: entered promiscuous mode
[  336.376596][T16995] macvlan2: entered allmulticast mode
[  336.379701][T16995] bond38: (slave macvlan2): Opening slave failed
[  336.535676][T17005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.391686][T17039] macvlan3: entered promiscuous mode
[  337.394510][T17039] macvlan3: entered allmulticast mode
[  337.396765][T17039] bond40: (slave macvlan3): Opening slave failed
[  337.477858][T17042] dvmrp0: entered allmulticast mode
[  337.678857][T17067] wg1 speed is unknown, defaulting to 1000
[  337.768824][T17067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.772465][T17066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.134632][T17095] __nla_validate_parse: 7 callbacks suppressed
[  338.134642][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3266'.
[  338.371610][T17117] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3273'.
[  338.375524][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'.
[  338.446454][T17121] delete_channel: no stack
[  339.011515][T17137] netlink: 'syz.0.3281': attribute type 10 has an invalid length.
[  339.015699][T17137] netlink: 'syz.0.3281': attribute type 10 has an invalid length.
[  339.018640][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'.
[  339.021534][T17137] netlink: 'syz.0.3281': attribute type 1 has an invalid length.
[  339.081471][T17141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  339.088377][T17141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'.
[  339.243694][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3287'.
[  339.418950][T17178] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3297'.
[  339.421908][T17178] netlink: zone id is out of range
[  339.427278][T17178] netlink: zone id is out of range
[  339.428976][T17178] netlink: zone id is out of range
[  339.430622][T17178] netlink: zone id is out of range
[  339.432938][T17178] netlink: zone id is out of range
[  339.435486][T17178] netlink: zone id is out of range
[  339.437129][T17178] netlink: zone id is out of range
[  339.438750][T17178] netlink: zone id is out of range
[  339.440406][T17178] netlink: zone id is out of range
[  339.445433][T17178] netlink: 'syz.1.3297': attribute type 4 has an invalid length.
[  339.487864][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'.
[  339.712038][T17210] No such timeout policy "syz0"
[  339.741478][T17215] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3309'.
[  339.968358][T17229] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  339.971326][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'.
[  340.029365][T17238] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  341.223450][T17286] netlink: 'syz.1.3327': attribute type 1 has an invalid length.
[  341.236593][T17286] 8021q: adding VLAN 0 to HW filter on device bond34
[  341.778341][T17329] netlink: 'syz.2.3337': attribute type 6 has an invalid length.
[  341.780982][T17329] netlink: 'syz.2.3337': attribute type 5 has an invalid length.
[  342.471006][T17353] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.475495][T17353] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  342.477992][T17353] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  342.574770][T17360] netlink: 'syz.1.3346': attribute type 4 has an invalid length.
[  342.581108][T17360] netlink: 'syz.1.3346': attribute type 4 has an invalid length.
[  342.590739][T17360] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20001
[  342.657265][T17367] netlink: 'syz.2.3349': attribute type 10 has an invalid length.
[  342.941899][T17371] syzkaller1: entered promiscuous mode
[  342.943935][T17371] syzkaller1: entered allmulticast mode
[  343.511136][T17374] netlink: 'syz.2.3351': attribute type 13 has an invalid length.
[  343.910074][T17401] __nla_validate_parse: 6 callbacks suppressed
[  343.910085][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'.
[  344.532022][T17440] syzkaller1: entered promiscuous mode
[  344.535047][T17440] syzkaller1: entered allmulticast mode
[  345.217059][T17463] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3377'.
[  345.317113][T17474] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3381'.
[  345.323305][T17474] net_ratelimit: 6 callbacks suppressed
[  345.323312][T17474] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  345.327767][T17474] openvswitch: netlink: Duplicate key (type 0).
[  345.337968][T17478] netlink: 'syz.0.3382': attribute type 18 has an invalid length.
[  345.355707][T17480] netlink: 'syz.2.3383': attribute type 1 has an invalid length.
[  345.370311][T17480] 8021q: adding VLAN 0 to HW filter on device bond41
[  345.645814][T17503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'.
[  345.682259][T17521] IPv6: NLM_F_REPLACE set, but no existing node found!
[  345.742592][T17528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3394'.
[  345.746343][T17529] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  345.749643][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'.
[  345.759943][T17532] ipt_REJECT: TCP_RESET invalid for non-tcp
[  345.786205][T17532] syzkaller0: entered allmulticast mode
[  346.286235][T17543] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3398'.
[  346.749164][T17566] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  346.797015][T17572] IPv6: NLM_F_REPLACE set, but no existing node found!
[  347.023678][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.027298][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.744513][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'.
[  347.936213][T17655] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003
[  347.991741][T17657] batadv_slave_0: entered promiscuous mode
[  348.529604][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'.
[  348.534585][T17659] netlink: 'syz.2.3415': attribute type 12 has an invalid length.
[  348.537802][T17659] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:19999
[  348.767468][T17654] batadv_slave_0: left promiscuous mode
[  348.940163][T17684] wg1 speed is unknown, defaulting to 1000
[  349.258172][T17715] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  349.575132][T17723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3436'.
[  349.981024][T17740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3441'.
[  350.136394][T17769] netlink: 'syz.1.3450': attribute type 83 has an invalid length.
[  350.232131][T17779] IPv6: NLM_F_REPLACE set, but no existing node found!
[  350.382930][T17792] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3458'.
[  350.709542][T17806] netlink: 'syz.0.3465': attribute type 1 has an invalid length.
[  350.712109][T17806] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3465'.
[  350.739540][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  350.757626][T17810] macvlan3: entered promiscuous mode
[  350.759364][T17810] macvlan3: entered allmulticast mode
[  350.761481][T17810] bond39: (slave macvlan3): Opening slave failed
[  350.929546][T17815] netlink: 'syz.0.3467': attribute type 142 has an invalid length.
[  351.118287][T17832] netlink: zone id is out of range
[  351.120014][T17832] netlink: zone id is out of range
[  351.121739][T17832] netlink: zone id is out of range
[  351.351780][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'.
[  351.465805][T17855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3479'.
[  351.520181][T17855] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3479'.
[  351.685541][T17868] wg1 speed is unknown, defaulting to 1000
[  351.756528][T17873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.763574][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3484'.
[  352.088760][T17880] veth1_to_team: entered allmulticast mode
[  352.090762][T17880] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  352.117883][T17882] netlink: 'syz.2.3487': attribute type 2 has an invalid length.
[  352.120818][T17882] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3487'.
[  352.257640][T17889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.513317][T17903] bpq0: entered promiscuous mode
[  352.588448][T17907] macvlan3: entered promiscuous mode
[  352.590221][T17907] macvlan3: entered allmulticast mode
[  352.592514][T17907] bond42: (slave macvlan3): Opening slave failed
[  352.868695][T17929] macvlan3: entered promiscuous mode
[  352.870409][T17929] macvlan3: entered allmulticast mode
[  352.872629][T17929] bond35: (slave macvlan3): Opening slave failed
[  353.138772][T17945] gtp0: entered promiscuous mode
[  353.140495][T17945] gtp0: entered allmulticast mode
[  353.210218][T17952] netlink: 'syz.1.3510': attribute type 20 has an invalid length.
[  353.212636][T17952] netlink: 'syz.1.3510': attribute type 21 has an invalid length.
[  354.142716][T17976] macvlan3: entered promiscuous mode
[  354.146472][T17976] macvlan3: entered allmulticast mode
[  354.149252][T17976] bond36: (slave macvlan3): Opening slave failed
[  354.307832][T17987] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  354.817312][T18004] IPv6: NLM_F_REPLACE set, but no existing node found!
[  355.345393][T18028] IPv6: NLM_F_REPLACE set, but no existing node found!
[  355.407475][T18033] veth0_to_bridge: entered promiscuous mode
[  355.422556][T18037] veth0_to_bridge: left promiscuous mode
[  355.489610][T18042] __nla_validate_parse: 13 callbacks suppressed
[  355.489621][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3535'.
[  355.557977][T18049] netlink: 'syz.2.3537': attribute type 1 has an invalid length.
[  355.572307][T18049] 8021q: adding VLAN 0 to HW filter on device bond44
[  355.798503][T18063] x_tables: duplicate underflow at hook 1
[  355.826177][T18067] sctp: [Deprecated]: syz.2.3542 (pid 18067) Use of int in maxseg socket option.
[  355.826177][T18067] Use struct sctp_assoc_value instead
[  355.856860][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'.
[  355.916463][T18072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.919196][T18072] syzkaller0: entered promiscuous mode
[  355.921027][T18072] syzkaller0: entered allmulticast mode
[  355.932174][T18072] tipc: Resetting bearer <eth:syzkaller0>
[  355.944758][T18072] tipc: Resetting bearer <eth:syzkaller0>
[  355.951617][T18072] tipc: Disabling bearer <eth:syzkaller0>
[  356.043073][T18075] wg1 speed is unknown, defaulting to 1000
[  356.295967][T18085] 0{X: entered promiscuous mode
[  356.297747][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'.
[  356.301003][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'.
[  356.305948][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'.
[  356.619916][T18116] netlink: 'syz.0.3558': attribute type 1 has an invalid length.
[  356.659547][T18116] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  356.666513][T18116] bond41: (slave vxcan7): Error -95 calling set_mac_address
[  356.690727][T18117] can: request_module (can-proto-3) failed.
[  356.701715][T18122] gretap3: entered promiscuous mode
[  356.708735][T18122] bond41: (slave gretap3): making interface the new active one
[  356.712158][T18122] bond41: (slave gretap3): Enslaving as an active interface with an up link
[  357.291218][T18150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3567'.
[  357.295578][T18150] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3567'.
[  357.308553][T18150] netlink: 'syz.1.3567': attribute type 21 has an invalid length.
[  357.311262][T18150] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3567'.
[  358.229935][T18168] IPVS: set_ctl: invalid protocol: 12 172.20.20.62:20002
[  358.233387][T18168] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004
[  358.236762][T18169] IPVS: set_ctl: invalid protocol: 106 127.0.0.1:20003
[  358.239981][T18168] IPVS: set_ctl: invalid protocol: 106 127.0.0.1:20003
[  358.270491][T18171] xt_hashlimit: size too large, truncated to 1048576
[  358.276809][T18172] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present!
[  358.325844][T18179] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  358.391445][T18182] vlan0: entered promiscuous mode
[  358.396470][T18182] tipc: Enabled bearer <eth:team0>, priority 0
[  358.479789][T18184] netlink: 'syz.2.3576': attribute type 39 has an invalid length.
[  358.595742][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'.
[  358.600922][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3577'.
[  359.393603][ T2208] tipc: Node number set to 1644999957
[  359.419485][T18227] wg1 speed is unknown, defaulting to 1000
[  360.426439][T18255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.438328][T18255] tipc: Disabling bearer <eth:syzkaller0>
[  361.358234][T18273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.361399][T18273] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  361.372071][T18273] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  361.466461][T18282] __nla_validate_parse: 7 callbacks suppressed
[  361.466469][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'.
[  361.476699][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'.
[  361.520553][T18288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3608'.
[  361.550401][T18288] wg1 speed is unknown, defaulting to 1000
[  361.668546][T18294] xt_hashlimit: overflow, try lower: 2/0
[  361.835057][T18308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  361.890848][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3614'.
[  362.022603][T18317] x_tables: duplicate underflow at hook 3
[  363.229336][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'.
[  363.294570][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'.
[  363.352711][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'.
[  363.365157][T18362] wg1 speed is unknown, defaulting to 1000
[  363.430769][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'.
[  363.447054][T18375] pim6reg1: entered promiscuous mode
[  363.449005][T18375] pim6reg1: entered allmulticast mode
[  363.569432][T18397] netlink: 'syz.2.3639': attribute type 1 has an invalid length.
[  364.380340][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3641'.
[  364.384083][T18420] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3641'.
[  364.485878][T18426] wg1 speed is unknown, defaulting to 1000
[  364.724137][T18450] netlink: 'syz.2.3649': attribute type 4 has an invalid length.
[  364.728651][T18450] netlink: 'syz.2.3649': attribute type 4 has an invalid length.
[  365.688152][T18483] wg1 speed is unknown, defaulting to 1000
[  365.859822][T18503] delete_channel: no stack
[  366.616878][T18545] __nla_validate_parse: 1 callbacks suppressed
[  366.616889][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3663'.
[  366.626693][T18546] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  366.957983][T18562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3668'.
[  366.987859][T18562] wg1 speed is unknown, defaulting to 1000
[  367.316012][T18580] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3674'.
[  367.570639][T18607] IPv6: NLM_F_REPLACE set, but no existing node found!
[  369.036443][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'.
[  369.041400][T18657] IPVS: Error joining to the multicast group
[  370.214102][T18690] wg1 speed is unknown, defaulting to 1000
[  370.342035][T18690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.346104][T18689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.908481][T18702] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  371.017364][T18715] netlink: 'syz.1.3712': attribute type 3 has an invalid length.
[  371.020150][T18715] netlink: 'syz.1.3712': attribute type 3 has an invalid length.
[  371.050086][T18719] netlink: 'syz.1.3714': attribute type 10 has an invalid length.
[  371.059628][T18719] netlink: 'syz.1.3714': attribute type 2 has an invalid length.
[  371.088284][T18721] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.112112][T18727] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  371.115850][T18727] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  371.306954][T18744] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3722'.
[  371.471567][T18768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3727'.
[  371.541483][T18783] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  371.752035][T18801] openvswitch: netlink: Flow key attribute not present in set flow.
[  371.784679][T18805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3740'.
[  371.828815][T18805] wg1 speed is unknown, defaulting to 1000
[  371.907629][T18814] IPv6: NLM_F_REPLACE set, but no existing node found!
[  372.000232][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'.
[  372.130690][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'.
[  372.133790][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3750'.
[  372.136529][T18830] netlink: 'syz.0.3750': attribute type 12 has an invalid length.
[  372.139113][T18830] netlink: 'syz.0.3750': attribute type 11 has an invalid length.
[  372.218246][T18833] netlink: 'syz.0.3751': attribute type 20 has an invalid length.
[  372.248194][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3752'.
[  372.281379][T18835] wg1 speed is unknown, defaulting to 1000
[  372.375966][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'.
[  372.389710][T18841] vxcan1 (unregistering): left allmulticast mode
[  372.843339][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3765'.
[  372.849656][T18876] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  372.853347][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'.
[  372.887992][T18879] SET target dimension over the limit!
[  372.916711][T18883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3769'.
[  372.937171][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'.
[  372.948633][T18883] wg1 speed is unknown, defaulting to 1000
[  373.155753][T18914] netlink: 'syz.1.3780': attribute type 1 has an invalid length.
[  373.229916][T18919] netlink: 'syz.1.3782': attribute type 1 has an invalid length.
[  373.368999][T18926] tipc: Resetting bearer <eth:syzkaller0>
[  373.370949][T18926] tipc: Resetting bearer <eth:syzkaller0>
[  373.387964][T18927] tipc: Resetting bearer <eth:syzkaller0>
[  374.551346][T18968] bridge0: port 1(ipvlan0) entered blocking state
[  374.553871][T18968] bridge0: port 1(ipvlan0) entered disabled state
[  374.556135][T18968] ipvlan0: entered allmulticast mode
[  374.557983][T18968] bridge0: entered allmulticast mode
[  374.560991][T18968] ipvlan0: left allmulticast mode
[  374.562801][T18968] bridge0: left allmulticast mode
[  374.861025][T18983] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  374.949828][T18992] pim6reg1: entered promiscuous mode
[  374.951724][T18992] pim6reg1: entered allmulticast mode
[  375.048475][T18995] pim6reg: entered allmulticast mode
[  375.050932][T18995] pim6reg: left allmulticast mode
[  375.263905][T19003] netlink: 'syz.0.3806': attribute type 13 has an invalid length.
[  375.294876][T13671] bond0: (slave bond_slave_0): interface is now down
[  375.295416][T19003] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.297165][T13671] bond0: (slave bond_slave_1): interface is now down
[  375.302574][T19003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.315391][ T5854] bond0: (slave bond_slave_0): interface is now down
[  375.317487][ T5854] bond0: (slave bond_slave_1): interface is now down
[  375.328711][ T5854] bond0: now running without any active interface!
[  375.334562][T19003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.347454][T19010] wg1 speed is unknown, defaulting to 1000
[  375.382136][T19009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.385738][T19009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.940309][T19020] IPVS: length: 163 != 320
[  376.262377][T19041] validate_nla: 1 callbacks suppressed
[  376.262387][T19041] netlink: 'syz.0.3818': attribute type 10 has an invalid length.
[  376.328194][T19051] IPv6: NLM_F_REPLACE set, but no existing node found!
[  376.878135][T19073] xt_CT: You must specify a L4 protocol and not use inversions on it
[  376.881916][T19073] __nla_validate_parse: 3 callbacks suppressed
[  376.881923][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'.
[  377.319957][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3831'.
[  377.336134][T19092] wg1 speed is unknown, defaulting to 1000
[  377.451203][T19095] IPv6: NLM_F_REPLACE set, but no existing node found!
[  377.564035][T19104] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  377.586597][T19104] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  377.610974][T19104] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  377.786200][T19123] IPv6: NLM_F_REPLACE set, but no existing node found!
[  377.891790][T19134] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  377.915754][T19137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3847'.
[  378.108102][T19147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3849'.
[  378.132548][T19147] wg1 speed is unknown, defaulting to 1000
[  378.817900][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3855'.
[  378.826397][T19167] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  379.218377][T19195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3864'.
[  379.232844][T19195] wg1 speed is unknown, defaulting to 1000
[  379.395982][T19201] netlink: 'syz.2.3865': attribute type 2 has an invalid length.
[  379.768725][T19218] ipt_REJECT: TCP_RESET invalid for non-tcp
[  379.822321][T19225] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  379.853760][T19228] netlink: 'syz.1.3873': attribute type 29 has an invalid length.
[  379.856937][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3873'.
[  379.893580][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3874'.
[  380.889755][T19252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  380.893636][T19252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  380.941230][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'.
[  380.957544][T19252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  380.961575][T19252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  381.027391][T19252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  381.030744][T19252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  381.038900][T19258] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3881'.
[  381.099493][T19252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  381.102730][T19252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  381.214198][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.218106][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  381.230679][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.234453][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  381.252728][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.255666][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  381.281779][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.286056][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  381.327152][T19272] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  381.339718][T19272] pim6reg1: entered promiscuous mode
[  381.341455][T19272] pim6reg1: entered allmulticast mode
[  381.429982][T19282] IPv6: sit2: Disabled Multicast RS
[  381.432168][T19282] sit2: entered allmulticast mode
[  381.488599][T19284] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  381.760312][T19316] wg1 speed is unknown, defaulting to 1000
[  381.925054][T19325] __nla_validate_parse: 2 callbacks suppressed
[  381.925063][T19325] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.3898'.
[  382.499831][T19372] wg1 speed is unknown, defaulting to 1000
[  382.554348][T19379] syzkaller0: entered promiscuous mode
[  382.556231][T19379] syzkaller0: entered allmulticast mode
[  383.191568][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3917'.
[  383.515129][T19398] netlink: 'syz.0.3921': attribute type 1 has an invalid length.
[  384.035587][T19398] 8021q: adding VLAN 0 to HW filter on device bond46
[  384.059693][T19399] bond46: (slave veth11): Enslaving as an active interface with a down link
[  384.070578][T19400] 8021q: adding VLAN 0 to HW filter on device batadv1
[  384.096511][T19400] bond46: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  384.708620][T19432] IPv6: NLM_F_REPLACE set, but no existing node found!
[  384.754161][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3932'.
[  385.065784][T19448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'.
[  385.255894][T19461] netlink: 'syz.2.3942': attribute type 9 has an invalid length.
[  385.258310][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'.
[  385.274600][T19461] macvlan3: entered promiscuous mode
[  385.276462][T19461] macvlan3: entered allmulticast mode
[  385.487234][T19471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3944'.
[  385.501853][T19471] bond38: entered promiscuous mode
[  385.503885][T19471] 8021q: adding VLAN 0 to HW filter on device bond38
[  385.567254][T19471] bond38 (unregistering): Released all slaves
[  386.137148][T19512] netlink: 'syz.1.3954': attribute type 15 has an invalid length.
[  386.139827][T19512] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3954'.
[  386.207884][T19520] netlink: 'syz.0.3952': attribute type 1 has an invalid length.
[  386.239412][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'.
[  386.270396][T19525] syzkaller1: entered promiscuous mode
[  386.272202][T19525] syzkaller1: entered allmulticast mode
[  386.615554][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'.
[  386.618462][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3963'.
[  387.378482][T19577] netlink: 'syz.0.3971': attribute type 1 has an invalid length.
[  387.381402][T19577] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3971'.
[  387.472223][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3976'.
[  387.477200][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3976'.
[  387.677029][T19615] netlink: 'syz.1.3983': attribute type 4 has an invalid length.
[  387.717566][T19615] "syz.1.3983" (19615) uses obsolete ecb(arc4) skcipher
[  387.774094][T19620] netlink: 'syz.1.3983': attribute type 4 has an invalid length.
[  387.879690][T19626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  387.883149][T19626] tipc: Resetting bearer <eth:syzkaller0>
[  388.529003][T19637] sock: sock_timestamping_bind_phc: sock not bind to device
[  388.586965][T19638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3988'.
[  388.698251][T19649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3992'.
[  388.705484][T19651] netlink: 'syz.2.3993': attribute type 1 has an invalid length.
[  388.724410][T19651] 8021q: adding VLAN 0 to HW filter on device bond47
[  388.741621][T19651] bond47: (slave veth3): Enslaving as an active interface with a down link
[  388.755247][T19651] 8021q: adding VLAN 0 to HW filter on device batadv3
[  388.757594][T19651] bond47: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  388.792278][T19654] veth15: entered allmulticast mode
[  388.824742][T19659] wg1 speed is unknown, defaulting to 1000
[  389.180064][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4000'.
[  389.185566][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4000'.
[  389.189216][T19677] netlink: 'syz.1.4000': attribute type 6 has an invalid length.
[  390.599818][T19737] netlink: 'syz.0.4018': attribute type 3 has an invalid length.
[  390.616327][T19737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4018'.
[  391.718006][T19755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4024'.
[  392.429681][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'.
[  392.432635][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4028'.
[  392.580184][T19781] bpq0: left promiscuous mode
[  393.625918][T19821] netlink: 'syz.1.4041': attribute type 1 has an invalid length.
[  393.690579][T19830] wg1 speed is unknown, defaulting to 1000
[  393.718133][T19831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.722622][T19831] syzkaller0: entered promiscuous mode
[  393.725042][T19831] syzkaller0: entered allmulticast mode
[  394.471914][T19824] tipc: Resetting bearer <eth:syzkaller0>
[  394.482476][T19824] tipc: Disabling bearer <eth:syzkaller0>
[  395.587166][T19866] wg1 speed is unknown, defaulting to 1000
[  395.645826][T19871] netlink: 'syz.1.4054': attribute type 1 has an invalid length.
[  395.699700][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'.
[  395.709155][T19875] delete_channel: no stack
[  395.894823][T19887] wg1 speed is unknown, defaulting to 1000
[  396.186238][T19901] netlink: 'syz.0.4062': attribute type 4 has an invalid length.
[  396.196088][T19901] netlink: 'syz.0.4062': attribute type 4 has an invalid length.
[  396.694458][T19920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4069'.
[  396.711093][T19920] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4069'.
[  396.917479][T19931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.955333][T19937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'.
[  396.958334][T19937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'.
[  396.961390][T19938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'.
[  396.970189][T19938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'.
[  397.124687][T19944] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4074'.
[  397.203868][T19947] netlink: 'syz.2.4075': attribute type 1 has an invalid length.
[  397.226181][T19946] bond48: (slave gretap1): making interface the new active one
[  397.230220][T19946] bond48: (slave gretap1): Enslaving as an active interface with an up link
[  397.235140][T19946] xt_limit: Overflow, try lower: 0/0
[  397.269127][T19950] wg1 speed is unknown, defaulting to 1000
[  397.743578][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4084'.
[  397.806291][T19985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.808839][T19985] syzkaller0: entered promiscuous mode
[  397.810650][T19985] syzkaller0: entered allmulticast mode
[  397.821080][T19985] tipc: Resetting bearer <eth:syzkaller0>
[  397.824762][T19983] tipc: Resetting bearer <eth:syzkaller0>
[  397.839264][T19983] tipc: Disabling bearer <eth:syzkaller0>
[  398.030809][T20021] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4097'.
[  398.098204][T20026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4099'.
[  398.108129][T20026] netlink: 'syz.1.4099': attribute type 1 has an invalid length.
[  398.132328][T20026] 8021q: adding VLAN 0 to HW filter on device bond38
[  398.307609][T20046] wg1: entered promiscuous mode
[  398.309913][T20046] wg1: entered allmulticast mode
[  398.314505][   T10] wg1 speed is unknown, defaulting to 1000
[  398.316952][   T10] syz0: Port: 1 Link ACTIVE
[  399.823942][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'.
[  399.877143][T20080] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  400.318883][T20122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4122'.
[  400.321984][T20122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4122'.
[  400.396180][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4124'.
[  401.208563][T20192] IPv6: NLM_F_REPLACE set, but no existing node found!
[  401.586295][T20211] wg1 speed is unknown, defaulting to 1000
[  401.628522][T20214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4150'.
[  401.882754][T20220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  402.024855][T20228] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20002
[  402.110478][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4157'.
[  403.074483][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'.
[  403.196974][T20257] netlink: 'syz.2.4166': attribute type 3 has an invalid length.
[  403.279207][T20262] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  403.283587][T20262] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  403.287371][T20262] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  404.322242][T20286] wg1 speed is unknown, defaulting to 1000
[  404.379220][T20289] wg1 speed is unknown, defaulting to 1000
[  404.652035][T20302] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4177'.
[  404.659434][T20302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4177'.
[  404.663717][T20302] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4177'.
[  404.667907][T20302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4177'.
[  404.820693][T20320] bridge_slave_1: entered promiscuous mode
[  404.824192][T20320] bridge_slave_1: left promiscuous mode
[  404.872373][T20323] wg1 speed is unknown, defaulting to 1000
[  404.976732][T20328] wg1 speed is unknown, defaulting to 1000
[  405.252660][T20342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4188'.
[  405.503986][T20364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'.
[  406.357267][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'.
[  406.448672][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4204'.
[  406.451897][T20402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.737019][T20429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4211'.
[  406.760313][T20431] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  406.966168][T20441] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  406.968588][T20441] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  406.971138][T20441] tipc: Resetting bearer <eth:syzkaller0>
[  407.291103][T20465] mac80211_hwsim hwsim11 ": renamed from wlan0
[  407.418626][T20482] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  408.295606][T20529] __nla_validate_parse: 6 callbacks suppressed
[  408.295616][T20529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'.
[  408.392766][T20537] wg1 speed is unknown, defaulting to 1000
[  408.532618][T20547] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4246'.
[  408.597867][T20551] pim6reg1: entered promiscuous mode
[  408.600012][T20551] pim6reg1: entered allmulticast mode
[  408.699180][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4248'.
[  408.716408][T20552] 8021q: adding VLAN 0 to HW filter on device bond49
[  408.719528][T20552] team0: Port device bond49 added
[  409.224773][T20557] syz.1.4250 uses old SIOCAX25GETINFO
[  409.375413][T20575] gre0: entered allmulticast mode
[  409.443969][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4259'.
[  409.466381][T20581] wg1 speed is unknown, defaulting to 1000
[  409.527382][T20588] netlink: 'syz.2.4262': attribute type 21 has an invalid length.
[  409.530876][T20588] netlink: 'syz.2.4262': attribute type 22 has an invalid length.
[  409.533903][T20588] netlink: 'syz.2.4262': attribute type 23 has an invalid length.
[  409.536584][T20588] netlink: 'syz.2.4262': attribute type 25 has an invalid length.
[  409.539217][T20588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4262'.
[  409.656523][T20607] netlink: 'syz.2.4267': attribute type 16 has an invalid length.
[  409.818708][T20619] wg1 speed is unknown, defaulting to 1000
[  410.338812][T20646] wg1 speed is unknown, defaulting to 1000
[  410.376156][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4281'.
[  410.379282][T20654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4281'.
[  410.382235][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4281'.
[  410.443233][T20656] netlink: 'syz.1.4282': attribute type 5 has an invalid length.
[  410.644817][T20667] nbd0: detected capacity change from 0 to 128
[  411.296837][   T56] block nbd0: Receive control failed (result -32)
[  411.329008][T20672] IPv6: sit1: Disabled Multicast RS
[  411.331234][T20672] sit1: entered allmulticast mode
[  411.396194][T20676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4288'.
[  411.462579][T20680] wg1 speed is unknown, defaulting to 1000
[  411.466750][T20682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4290'.
[  412.507670][T20726] netlink: 'syz.1.4301': attribute type 10 has an invalid length.
[  412.540678][T20726] netlink: 'syz.1.4301': attribute type 7 has an invalid length.
[  412.544572][T20726] netlink: 'syz.1.4301': attribute type 8 has an invalid length.
[  413.328303][T20742] __nla_validate_parse: 4 callbacks suppressed
[  413.328315][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'.
[  413.352731][T20742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4306'.
[  413.364380][T20742] netlink: 'syz.1.4306': attribute type 4 has an invalid length.
[  413.454521][T20757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4310'.
[  413.719314][T20774] bpq0: entered promiscuous mode
[  414.211229][T20783] wg1 speed is unknown, defaulting to 1000
[  414.506543][T20796] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4317'.
[  414.509577][T20796] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  414.630625][T20804] wg1 speed is unknown, defaulting to 1000
[  414.727587][T20812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.990971][T20832] bpq0: left promiscuous mode
[  415.315872][T20838] wg1 speed is unknown, defaulting to 1000
[  415.350898][T20838] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  415.572212][T20846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.576766][T20846] syzkaller0: entered promiscuous mode
[  415.582503][T20846] syzkaller0: entered allmulticast mode
[  415.587994][T20846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4331'.
[  415.591116][T20846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4331'.
[  415.612097][T20849] netlink: 'syz.1.4332': attribute type 7 has an invalid length.
[  415.612128][T20850] netlink: 'syz.1.4332': attribute type 7 has an invalid length.
[  415.617843][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'.
[  415.621093][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'.
[  415.640891][T20845] tipc: Resetting bearer <eth:syzkaller0>
[  415.653357][T20845] tipc: Disabling bearer <eth:syzkaller0>
[  415.786640][T20863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4337'.
[  415.800172][T20863] bond50: entered promiscuous mode
[  415.801980][T20863] bond50: entered allmulticast mode
[  415.804203][T20863] 8021q: adding VLAN 0 to HW filter on device bond50
[  416.090928][T20889] No such timeout policy "syz1"
[  416.201392][T20893] wg1 speed is unknown, defaulting to 1000
[  416.448175][T20903] batadv_slave_0: entered promiscuous mode
[  416.464240][T20903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4350'.
[  416.468927][T20902] batadv_slave_0: left promiscuous mode
[  416.712388][T20911] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  416.872300][T20926] xt_CT: No such helper "snmp"
[  416.902919][T20929] ipt_REJECT: TCP_RESET invalid for non-tcp
[  417.077439][T20933] netlink: 'syz.1.4362': attribute type 1 has an invalid length.
[  417.079983][T20933] NCSI netlink: No device for ifindex 0
[  417.088571][T20942] netlink: 'syz.2.4364': attribute type 21 has an invalid length.
[  418.089364][T20997] syz.2.4377 (20997) used obsolete PPPIOCDETACH ioctl
[  418.467840][T21027] __nla_validate_parse: 8 callbacks suppressed
[  418.467852][T21027] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4387'.
[  418.473271][T21027] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4387'.
[  418.476687][T21027] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4387'.
[  418.537186][T21033] bpq0: entered promiscuous mode
[  419.285886][T21024] ==================================================================
[  419.288606][T21024] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  419.291342][T21024] Read of size 1 at addr ffff888125d35832 by task syz.1.4386/21024
[  419.294949][T21024] 
[  419.295740][T21024] CPU: 0 UID: 0 PID: 21024 Comm: syz.1.4386 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  419.295752][T21024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.295757][T21024] Call Trace:
[  419.295762][T21024]  <TASK>
[  419.295766][T21024]  dump_stack_lvl+0x189/0x250
[  419.295779][T21024]  ? __virt_addr_valid+0x1c8/0x5c0
[  419.295790][T21024]  ? rcu_is_watching+0x15/0xb0
[  419.295799][T21024]  ? __kasan_check_byte+0x12/0x40
[  419.295810][T21024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.295817][T21024]  ? rcu_is_watching+0x15/0xb0
[  419.295825][T21024]  ? lock_release+0x4b/0x3e0
[  419.295834][T21024]  ? __virt_addr_valid+0x1c8/0x5c0
[  419.295842][T21024]  ? __virt_addr_valid+0x4a5/0x5c0
[  419.295851][T21024]  print_report+0xca/0x230
[  419.295859][T21024]  ? rose_transmit_link+0x5c3/0x740
[  419.295876][T21024]  kasan_report+0x118/0x150
[  419.295885][T21024]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  419.295896][T21024]  ? rose_transmit_link+0x5c3/0x740
[  419.295910][T21024]  rose_transmit_link+0x5c3/0x740
[  419.295922][T21024]  ? skb_put+0x11b/0x210
[  419.295934][T21024]  rose_write_internal+0x11dc/0x1ac0
[  419.295954][T21024]  ? __pfx_rose_write_internal+0x10/0x10
[  419.295971][T21024]  ? __timer_delete+0x5d/0x390
[  419.295988][T21024]  rose_release+0x24e/0x520
[  419.296003][T21024]  sock_close+0xc3/0x240
[  419.296017][T21024]  ? __pfx_sock_close+0x10/0x10
[  419.296032][T21024]  __fput+0x44c/0xa70
[  419.296047][T21024]  task_work_run+0x1d4/0x260
[  419.296060][T21024]  ? __pfx_task_work_run+0x10/0x10
[  419.296069][T21024]  ? task_work_add+0x377/0x420
[  419.296078][T21024]  ? __pfx_task_work_add+0x10/0x10
[  419.296088][T21024]  get_signal+0x11ed/0x1340
[  419.296098][T21024]  arch_do_signal_or_restart+0x9a/0x750
[  419.296112][T21024]  ? __pfx___sys_connect+0x10/0x10
[  419.296119][T21024]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  419.296133][T21024]  ? exit_to_user_mode_loop+0x40/0x110
[  419.296141][T21024]  exit_to_user_mode_loop+0x75/0x110
[  419.296148][T21024]  do_syscall_64+0x2bd/0x3b0
[  419.296155][T21024]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.296162][T21024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.296169][T21024]  ? exc_page_fault+0x9f/0xf0
[  419.296175][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.296182][T21024] RIP: 0033:0x7f7e5458e9a9
[  419.296189][T21024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.296196][T21024] RSP: 002b:00007f7e554d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  419.296228][T21024] RAX: fffffffffffffe00 RBX: 00007f7e547b5fa0 RCX: 00007f7e5458e9a9
[  419.296234][T21024] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  419.296239][T21024] RBP: 00007f7e54610d69 R08: 0000000000000000 R09: 0000000000000000
[  419.296244][T21024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.296248][T21024] R13: 0000000000000000 R14: 00007f7e547b5fa0 R15: 00007ffd7e641198
[  419.296257][T21024]  </TASK>
[  419.296260][T21024] 
[  419.394140][T21024] Allocated by task 20832:
[  419.395603][T21024]  kasan_save_track+0x3e/0x80
[  419.397120][T21024]  __kasan_kmalloc+0x93/0xb0
[  419.398627][T21024]  __kmalloc_cache_noprof+0x230/0x3d0
[  419.400340][T21024]  rose_add_node+0x23a/0xde0
[  419.401815][T21024]  rose_rt_ioctl+0xa48/0xfb0
[  419.403282][T21024]  rose_ioctl+0x3ce/0x8b0
[  419.404663][T21024]  sock_do_ioctl+0xdc/0x300
[  419.406092][T21024]  sock_ioctl+0x576/0x790
[  419.407450][T21024]  __se_sys_ioctl+0xfc/0x170
[  419.408895][T21024]  do_syscall_64+0xfa/0x3b0
[  419.410334][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.412160][T21024] 
[  419.412940][T21024] Freed by task 21033:
[  419.414223][T21024]  kasan_save_track+0x3e/0x80
[  419.415679][T21024]  kasan_save_free_info+0x46/0x50
[  419.417250][T21024]  __kasan_slab_free+0x62/0x70
[  419.418745][T21024]  kfree+0x18e/0x440
[  419.419992][T21024]  rose_rt_device_down+0x473/0x4c0
[  419.421599][T21024]  rose_device_event+0x603/0x6a0
[  419.423384][T21024]  notifier_call_chain+0x1b6/0x3e0
[  419.425125][T21024]  __dev_notify_flags+0x18d/0x2e0
[  419.426790][T21024]  netif_change_flags+0xe8/0x1a0
[  419.428424][T21024]  dev_change_flags+0x130/0x260
[  419.430026][T21024]  dev_ioctl+0x7b4/0x1150
[  419.431470][T21024]  sock_do_ioctl+0x22c/0x300
[  419.433005][T21024]  sock_ioctl+0x576/0x790
[  419.434446][T21024]  __se_sys_ioctl+0xfc/0x170
[  419.436124][T21024]  do_syscall_64+0xfa/0x3b0
[  419.437659][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.439516][T21024] 
[  419.440293][T21024] The buggy address belongs to the object at ffff888125d35800
[  419.440293][T21024]  which belongs to the cache kmalloc-512 of size 512
[  419.444771][T21024] The buggy address is located 50 bytes inside of
[  419.444771][T21024]  freed 512-byte region [ffff888125d35800, ffff888125d35a00)
[  419.449002][T21024] 
[  419.449796][T21024] The buggy address belongs to the physical page:
[  419.451850][T21024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125d34
[  419.454744][T21024] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  419.457482][T21024] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  419.459966][T21024] page_type: f5(slab)
[  419.461292][T21024] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  419.464065][T21024] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  419.466870][T21024] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  419.469799][T21024] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  419.472628][T21024] head: 057ff00000000002 ffffea0004974d01 00000000ffffffff 00000000ffffffff
[  419.475444][T21024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  419.478266][T21024] page dumped because: kasan: bad access detected
[  419.480366][T21024] page_owner tracks the page as allocated
[  419.482231][T21024] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15846, tgid 15845 (syz.0.2897), ts 316223494610, free_ts 297767649946
[  419.489133][T21024]  post_alloc_hook+0x240/0x2a0
[  419.490740][T21024]  get_page_from_freelist+0x21e4/0x22c0
[  419.492572][T21024]  __alloc_frozen_pages_noprof+0x181/0x370
[  419.494488][T21024]  alloc_pages_mpol+0x232/0x4a0
[  419.496101][T21024]  allocate_slab+0x8a/0x3b0
[  419.497618][T21024]  ___slab_alloc+0xbfc/0x1480
[  419.499160][T21024]  __kmalloc_cache_noprof+0x296/0x3d0
[  419.500927][T21024]  __genradix_ptr_alloc+0x352/0x4a0
[  419.502653][T21024]  __genradix_prealloc+0x44/0x90
[  419.504295][T21024]  sctp_stream_init+0x14b/0x440
[  419.505848][T21024]  sctp_association_new+0x10dd/0x25f0
[  419.507619][T21024]  sctp_connect_new_asoc+0x2c5/0x690
[  419.509328][T21024]  sctp_sendmsg+0x155c/0x2810
[  419.510820][T21024]  __sock_sendmsg+0x19c/0x270
[  419.512333][T21024]  __sys_sendto+0x3bd/0x520
[  419.513820][T21024]  __x64_sys_sendto+0xde/0x100
[  419.515436][T21024] page last free pid 14840 tgid 14840 stack trace:
[  419.517716][T21024]  __free_frozen_pages+0xc71/0xe70
[  419.519425][T21024]  __put_partials+0x161/0x1c0
[  419.521003][T21024]  put_cpu_partial+0x17c/0x250
[  419.522599][T21024]  __slab_free+0x2f7/0x400
[  419.524141][T21024]  qlist_free_all+0x97/0x140
[  419.525724][T21024]  kasan_quarantine_reduce+0x148/0x160
[  419.527519][T21024]  __kasan_slab_alloc+0x22/0x80
[  419.529154][T21024]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  419.531033][T21024]  getname_flags+0xb8/0x540
[  419.532553][T21024]  __x64_sys_symlinkat+0x7a/0xb0
[  419.534226][T21024]  do_syscall_64+0xfa/0x3b0
[  419.535745][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.537689][T21024] 
[  419.538490][T21024] Memory state around the buggy address:
[  419.540316][T21024]  ffff888125d35700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.542914][T21024]  ffff888125d35780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.545523][T21024] >ffff888125d35800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.548095][T21024]                                      ^
[  419.549926][T21024]  ffff888125d35880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.552520][T21024]  ffff888125d35900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.555121][T21024] ==================================================================
[  419.567629][T21024] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  419.569899][T21024] CPU: 0 UID: 0 PID: 21024 Comm: syz.1.4386 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  419.573906][T21024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.577223][T21024] Call Trace:
[  419.578334][T21024]  <TASK>
[  419.579318][T21024]  dump_stack_lvl+0x99/0x250
[  419.580837][T21024]  ? __asan_memcpy+0x40/0x70
[  419.582304][T21024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.583977][T21024]  ? __pfx__printk+0x10/0x10
[  419.585558][T21024]  panic+0x2db/0x790
[  419.586811][T21024]  ? __pfx_preempt_schedule+0x10/0x10
[  419.588569][T21024]  ? __pfx_panic+0x10/0x10
[  419.590039][T21024]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  419.591968][T21024]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  419.594017][T21024]  ? rose_transmit_link+0x5c3/0x740
[  419.595644][T21024]  check_panic_on_warn+0x89/0xb0
[  419.597263][T21024]  ? rose_transmit_link+0x5c3/0x740
[  419.598934][T21024]  end_report+0x78/0x160
[  419.600332][T21024]  kasan_report+0x129/0x150
[  419.601810][T21024]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  419.603782][T21024]  ? rose_transmit_link+0x5c3/0x740
[  419.605473][T21024]  rose_transmit_link+0x5c3/0x740
[  419.607117][T21024]  ? skb_put+0x11b/0x210
[  419.608523][T21024]  rose_write_internal+0x11dc/0x1ac0
[  419.610260][T21024]  ? __pfx_rose_write_internal+0x10/0x10
[  419.612088][T21024]  ? __timer_delete+0x5d/0x390
[  419.613645][T21024]  rose_release+0x24e/0x520
[  419.615152][T21024]  sock_close+0xc3/0x240
[  419.616546][T21024]  ? __pfx_sock_close+0x10/0x10
[  419.618136][T21024]  __fput+0x44c/0xa70
[  419.619455][T21024]  task_work_run+0x1d4/0x260
[  419.620961][T21024]  ? __pfx_task_work_run+0x10/0x10
[  419.622632][T21024]  ? task_work_add+0x377/0x420
[  419.624218][T21024]  ? __pfx_task_work_add+0x10/0x10
[  419.625890][T21024]  get_signal+0x11ed/0x1340
[  419.627382][T21024]  arch_do_signal_or_restart+0x9a/0x750
[  419.629189][T21024]  ? __pfx___sys_connect+0x10/0x10
[  419.630871][T21024]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  419.632868][T21024]  ? exit_to_user_mode_loop+0x40/0x110
[  419.634641][T21024]  exit_to_user_mode_loop+0x75/0x110
[  419.636352][T21024]  do_syscall_64+0x2bd/0x3b0
[  419.637863][T21024]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.639566][T21024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.641529][T21024]  ? exc_page_fault+0x9f/0xf0
[  419.643027][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.644891][T21024] RIP: 0033:0x7f7e5458e9a9
[  419.646316][T21024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.652413][T21024] RSP: 002b:00007f7e554d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  419.655101][T21024] RAX: fffffffffffffe00 RBX: 00007f7e547b5fa0 RCX: 00007f7e5458e9a9
[  419.657645][T21024] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000004
[  419.660219][T21024] RBP: 00007f7e54610d69 R08: 0000000000000000 R09: 0000000000000000
[  419.662801][T21024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.665362][T21024] R13: 0000000000000000 R14: 00007f7e547b5fa0 R15: 00007ffd7e641198
[  419.667892][T21024]  </TASK>
[  419.669540][T21024] Kernel Offset: disabled
[  419.670925][T21024] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:11:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001229 RDI=000000000000122a RBP=00000000000003f8 RSP=ffffc90006b5f210
R8 =ffff888020798237 R9 =1ffff110040f3046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8c4 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7e554d96c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb12388efb8 CR3=000000010ef44000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=27fccf4a13ca20a7 72c84f99d9d4f20c
XMM02=66e0de9f071d8a91 78571cdd81feedf0 XMM03=cfaea4df60d09269 31a25b1cb4053f1d
XMM04=2870f65da3702ad5 0e4155104803f52c XMM05=fcb33f07099ed935 3688cb26c2c48894
XMM06=700b63cfaea4df60 d0926931a25b1cb4 XMM07=053f1d66e0de9f07 1d8a9178571cdd81
XMM08=49a291b653b389c7 2da7fd983c80a607 XMM09=0000000000000000 00007fb122a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=793b7f67eeac3500 RBX=ffffffff81976a48 RCX=793b7f67eeac3500 RDX=0000000000000001
RSI=ffffffff8d99f40a RDI=ffffffff8be28c40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa22cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b7024f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056009bfb77e8 CR3=00000000443a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f28d3386478 00007f28d3386450 XMM03=00007f28d3386488 00007f28d3386480
XMM04=00007f28d3eed100 00007f28d3386440 XMM05=00007f28d3386458 00007f28d33864a0
XMM06=00007f28d3386498 00007f28d3386490 XMM07=00007f28d3386488 00007f28d3386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f28d3211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
