last executing test programs:

1.747697103s ago: executing program 1 (id=6836):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
r5 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @bcast, @remote, @default, @bcast, @bcast, @null, @rose]}, &(0x7f0000000340)=0x48, 0x800)
bind$ax25(r5, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x22}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000}, 0x24008080)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xc1, 0x600}]}}}}}}, 0x46)

1.350172124s ago: executing program 1 (id=6841):
syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6}, 0x10)
close(0x3)
sendmsg$inet(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946", 0x28d}], 0x1}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe09, 0x0, 0x0, 0x0, 0x7fff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @generic={0x7, 0x6, 0x2, 0xb8e, 0xea}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x2a}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x41, &(0x7f0000000540)=""/65, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x4, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x2, 0x0, 0xc}, {0xfffffffe, 0x2, 0x9, 0x3}, {0x2, 0x2, 0x0, 0x2}, {0x2, 0x1, 0x0, 0x8}, {0x0, 0x3, 0xd, 0x9}, {0x4, 0x4, 0x4, 0x7}, {0x1, 0x2, 0x3}], 0x10, 0x3}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000007c0)=r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="44000000000000001400030073697430000000000100000000000000300012800b00010067"], 0x64}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r10 = socket(0x10, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x1406, 0x2, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

1.349917691s ago: executing program 2 (id=6842):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

1.290201996s ago: executing program 2 (id=6844):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000180)="bb6e17ad2edb0dc0c503426664f6db3b457c28dc536efc000496fe944d156bd7697d9815b625c902037c39b0bd90bb59f8109968681a75ff8493313fd31fb7d15e6fd8f228b9828690ccfeefe9be7dd54ce7b1d03911ff58f62e36eb74d3a7d7438227ff509aa0e041515e84129f9a2d8a0bf99fabcf590475daf96613f303429932a2", 0x83}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x5)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0xfdef}], 0x1, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000001ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'lo\x00'})
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8)

1.227920197s ago: executing program 2 (id=6846):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500a7aaca490000050007"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

1.168049063s ago: executing program 2 (id=6847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000100000000003d0000004500003f00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="850000009078c7cd69cce83400f18327df7df7a5e2883800000084ee99bcb4758d84986ec9e4af61ea55c9c75f3e247d16714e3184e63df7e0d439860d7fbc4c0bc3dae0f4ad66fffe5f4b8cbd54ee235f40271d903b62b4f4814a6b44d854ac0c0574cd5cda22bcdec5408221adce877f6057f83a391409000000000000000000000000000000000000000000007a3f05dcb2e38383d4f172dfb2f1c085a38a2ca0e187add36919c676a8901349d35dec3c31c2"], 0x4d)

1.01978873s ago: executing program 2 (id=6850):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r2], 0xa)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x5, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@empty, 0x4e23, 0x8, 0x4e21, 0x0, 0x8, 0x20, 0x20, 0x3b}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r8, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0)
sendto$inet(r8, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008"], 0x6c}}, 0x20048084)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x1e, &(0x7f0000000280)={@local, @broadcast, @void, {@can={0xc, {{0x4}, 0x8, 0x0, 0x0, 0x0, "daed820b316efb07"}}}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)

1.014012193s ago: executing program 1 (id=6851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x13}, 0x4004000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x38)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x4508, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0xb, 0x4)
setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000180)=0x40000000, 0x4)
recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af96e4b28bd, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x20000080)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e0101"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c21000800", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e21, 0x41200003, @loopback, 0xb}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=@gettaction={0x54, 0x32, 0x301, 0x70bd2e, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x480a0}, 0x80)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

915.666431ms ago: executing program 1 (id=6853):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000000100))
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x101, 0x58, &(0x7f0000000040)="42b1145fd66fe7531cbbccb3c9065571a30c953b1e88a5c579055fe085b72c206286afffe596a75ed5eeb1a8ba139bb49cfc5f3e0a8cde90740af0923e95eb4c03435ce2afde0e2c1c0732095b07b3be40f467fa5b665f03", 0x0, 0x1}]})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0008000100000000003d00000045000040000026704179b3783fffffffe000000100000000838161d7d1e5b6f5affe145e5b3fc645b71bd0e0ba90ec9cb71a299358b73867a7e68ada794bda4cbb7426debe2651274e5670c9075d128546d56afef3e73f782f7b2c9f987dabf44c08dedb6ea3a373281098b866a34bb807e6720ec9fdeaaaccd3748d3f1ca15564bfcd10acd439b67f55a485e193fe7ab5c5862e3f0508e41d548ccd6b2fb065965a7bd3e5494293b947fd6c5baeb448a87690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b400feff9078001c0e0300050a00000000000000000008d58838068b91000000"], 0x4e)

906.775418ms ago: executing program 2 (id=6855):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
shutdown(r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946", 0x28d}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

819.917457ms ago: executing program 1 (id=6857):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
unshare(0x50800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x4e0, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x47c4, 0x1, 0x3, 0x6, 0x0, 0xfffe, 0x8, 0x7, 0x9, 0x7]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x48c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@device_b, {0x6, 0x84c}, @value=@ver_80211n={0x0, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x8020, 0x5c, @default, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x7, 0x0, {0xa6, 0x9, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x800, 0x8, 0x81}}, [{0xdd, 0x30, "f55acd85a50281b75b4be4c969ef4df279e1753509e1bf7d3dedf0f1fd0a94e80efdfd30cff121e50d680f1b6a16d446"}, {0xdd, 0x6b, "279a9d4b2a21b4536289565432b2b973c8d654dbbec6d1fe8815a9311925b56fab1fb9b9a883222faafd7c1335ddc9d015ca847bfb7df4af098be93548af64e5fdf21f7f1541bf59025af53bc738e596fc32f549187fee45f89ceab25723dc02cd52e1fd67d62dd583497c"}, {0xdd, 0x80, "3fc8ce967a9078ade523cbd262fc4645c4b76d4ff5646e82982f401b7a83217b1be732180e3b5b8839cdfcb665f3e4677dff2dd1278f8df47e79a20c0974ba7abedc0dae7dee763fc4075eb3e92558dc4e5cc8947ae79c88590d064afba15fe936ff75a2cbea957d14da4fe0147a828b15bc2abeafa3aada31d71bb8196e4529"}, {0xdd, 0x1b, "5c7b5934c81fc0ee903e5b3931691ce2647113552832cb66cb0ad2"}, {0xdd, 0xb9, "2ed02572ec5863725d1b6b908eb0aea57b5405160576cb35bc5e2688488eb6f14b4b9434bfb0442dd975ac629cfa96d46f40b4d8afe8cedd1c479f42a6c17a0a7140cbb6a0616cee61ee84dee0cc061e3032bae3666dfa014f76424c7a6a857f6448fd738c2ee41be31ecfd3d890b79c61ef69693a641b5326b835689e8f6754ed72a0e1e98c05414d3e087a3f222327bb8a6c62f17b40c4e5b4c34852c3509d59a05d1156a1cec9622cd619a8bc8719991d4db500754b965c"}, {0xdd, 0x30, "285f3fd2a328d33f68473f17764cdbc7db050264bb977099be4734f7baaa271336fbfe98581c7a8d94da9b18f8b4a4b1"}, {0xdd, 0xba, "020bebc18d477ae9f7922416614cbc5dcd16f081353b97d56e29c280a24af436d14fb8cf5057b73c00b025df1d62830a7b2b205787ce60c2afff254e747ac2702b27552c54b2fc9d341fd77f404baaf893053e32d6bdbc50ddf8865e7489bf6358310cdd16e0c216bf51ea45d91093867ae7078696a12c3ef989651f74659f20f52a8401b61b105014c5e19be209b65987b12b74e564b859cb5db1a16bb04ef44c52df911ff72b4c5e44a83344427707ba23ed80b57a706a86bc"}, {0xdd, 0x84, "9f76a0536bab825a782ccea44caca9a00f69fb4fe83097de2ead5a6e622e2ba04e6d23f73ff31d38aeeae06f5892c65ee85620ea96d3a5acf4468101f4700f1af79d78fec62a44091b885914bb05be186c2016120fba68b003863ef156460d3cba290bba96aa6b69d2c4f0e37473be2202342b3547f184b9e6d5cc1750913959a0ed99c7"}, {0xdd, 0x8a, "fa32a89299cbb73fbcb9a41bbf8883d086887a1c5d23af15db7a7c1414766ab0452ce6ee1c44c390300d99619228567fca6f443473dabd7ad48abf3901cfec1d8c0c6d62fa57afed68021b916b40bfb8c0665f3d2989724437dd9f8ac8c8660423ce33957612fcf4482d2b58658d1d953281631aad4dc8861411489637edded0e7227571b9fcfece18e0"}, {0xdd, 0x4f, "9b681e0e895d47b2c21c7f8130c7065c3f5299d143490080279796ca2fb5c11069dfd407c4b32b2ead610c05800c7edb7402369727350b67b5b8b962de483bd19f233b9aaaea51bb41921e67d4f339"}]}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x79a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x4e0}}, 0x40010)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd8, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x4, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000840)={<r5=>0x0}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000008c0)={0x4, 0x7, 0x20c, 0x1, 0x10001, 0x5, 0x3, 0xfffffff0, r5}, &(0x7f0000000900)=0x20)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000001f00)={&(0x7f0000000940)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="1bbaffbf4c859a1a80f6f0b975de25fc3b5021bdefb18116b7c3a72a4fff5162fff93f587754dfc57fde10ea762824b60b784367ba3e514dd35fb3cd", 0x3c}, {&(0x7f00000019c0)="67cd50cf5d1dfc40b98a40ea2890cd1576db161f2214bc25b641eb041cecb22743a5cd3a9d84f6f50a3fb0ef93da618d8808a8affdb99dbbfdddf3014eee5ea0fadb867fdc1265561c9040543b344320c22630caa4432d1141a91648faac02325225789c08c8dc0b39b2d459b9413ccb0e905be6beca13d62349a948f031bc8b05f64b55398d403d432ae07e28b8059b47d7db52798b3f9ae7db7dc48342e12f23c4c710113a8c837532027fb56f11c783b4a84e0decb61eba667eba3a1feac7cd293d", 0xc3}, {&(0x7f0000001ac0)="ee52c8b66f8c6ef559aaa0fe5f2ade66bc8fc1011d0677864b36ee023c07a3", 0x1f}, {&(0x7f0000001b00)="4b1541a6f6ea82f0a7c6fa651875e1e04c84c6aa9c946f7323f88687333f8821dd7c1fb56039882ad25d85122298c40d84e86048713aec538f2c3621ad0ca247de2bfb2ec56629a6af3f0e58e7dd979af5d765627572abe14925f1ff6a8863269279128959cca052935561c39f3338a8e59fbeae916d2105237f838bc2bddb9aafb449f56b1311569708834ea79a1100e61040f3c15aae685e66c07e7b7e83eaa05c479b1ee0e99b59fe33b1a1e500c9ab05af63c0d4962e1c1ce4e5d7dba881df307cce", 0xc4}, {&(0x7f0000001c00)="a83c6596f606ae905cf0d16353faa79e8a162a3141a63b1b1c4bb673a5f5bcf57b7965c9903e2c0989243485b0cd7f83f972a37d3a1b65d7215d976754695b8dfccf6fd648e9c0100dab2e5e4754551824a720e7386b4167c2869158eabe3301cee8a0f20112c9abd13741f41f898e84c4458d5c455fa832de8e7bd819bd505fe88fe04ef4105e8db9fea2d3267ec4b88ca6a97f66d03cbd5c1ad3e750d99d9762edc26858b9a8d9b0faf12cdfb9e790071fe325bfe19b73f232268ae63e5f8297e13a9ea6a07fe392dc9bb865e11e3a54fb654221d39e901c409600d4ce22e836710616bd37183a80c7935e96897c", 0xef}, {&(0x7f0000001d00)="df7e10c3063c1c59eb5aeb9704f459554ce6882904ecea2bf678767a274541cdb5029ebfe3b9c90fc42b1c953773ad1b7111f00cb9123e65f4fe64d7b147fa71c5ba031e7e6a4cb305b3ae69d31acad04df6f6c65affbefcdb5cea964a8ab1c19680e7827544863fadad14b6651c9bd9506ef425225f21", 0x77}, {&(0x7f0000001d80)="930aa8fbcef82669db20011c7388a7ce6314e33924c2a4b83aac1b37f4e0ab814f9f09874debcce8f2eb2023d8ce4048c91000b45f53a00e97dcb11c09e1e07d83e44910ba5a734a9c9742ca", 0x4c}, {&(0x7f0000001e00)="a78d1941116265a5f64857a5a9f7da936efc202ab312c4185b", 0x19}], 0x9}, 0x4000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
accept4$bt_l2cap(r3, &(0x7f0000002040)={0x1f, 0x0, @none}, &(0x7f0000002080)=0xe, 0x80400)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r8, 0x100, 0x664bf07c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080050)
unshare(0x40000100)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002240), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2801800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r10, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x5c, r10, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x5c}}, 0x80000c0)
openat$cgroup_devices(r6, &(0x7f0000002480)='devices.allow\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000025c0)={<r11=>r6})
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000002600)=@req3={0x4b7, 0x2, 0x5, 0x7, 0x9a09, 0x10000, 0x8}, 0x1c)
socket$kcm(0x29, 0x7, 0x0)
unshare(0x20000400)

540.312639ms ago: executing program 1 (id=6858):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000380)={0x7, &(0x7f00000005c0)=[{0x101, 0x30, &(0x7f0000000040)="180a85e7e1de283d7a1d510e4097d14d2531360ec46caf2776506a2f341e6974ce58de159690c7ff40c029bda6f9de8d", 0x1}, {0x3, 0xb7, &(0x7f0000000240)="6f3e2e2f373a87045fb7ef24050490a33abe060640a1d41914b971ae7d9dae68ad6afef288b6c4a122ede9ac2731b39fa9860ce7a8f5d352473e4d5f17cd8b4534d09289f3fa74dd0151f398f01a967138e78461457d3277e6dad1673578f8ddad57deb8967b11c94f41fb4de2082559a2c9a5880714f49a37e56a385b4586678121d0190c39d0d54c2fbb335769dcf5f25c965bbfd58b937c0e6721eb4ffb90773ee192fb70398359c07645bd4a839ed2d7a85bedb1b7"}, {0x6, 0x34, &(0x7f0000000300)="1993c8b708f36d23eff6e723614321f5bec7e86e83cc16d062bf7bd0405acada4e40e08999ba208606d27b44aad2e41aa972a60a"}, {0x1, 0xc6, &(0x7f0000000400)="cd83f32b80ca12ed8e465e2d6d9e841207240312f7bbb97f9dc843823ea8323714dd5c79e2ff956745e5a7a668a43f5400d29d9d61d1240710fd74baf65cd3aac141355677d7024404bee4f19074e3b44161a6b3980ab3414fd2aba98b1b518b46ecb8123b25782ba9e4580d24902ab2a894da02bc388b8fb9e6793bb29b718a24165aaa6793f2f08eee6f16c77e96d12ae9e1140b36cb3b3b73a72d32f59d14e7f578afb57ba7f558f8540bda995149c9da71866ff06fb7dafb6587b368d2323d8c610df96b", 0x0, 0x1}, {0xa54, 0x1000, &(0x7f0000001b40)="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", 0x1, 0x1}, {0x3bb0da8a, 0x82, &(0x7f0000000500)="3de7266f813fd91509999e7704a3588c43b5b61ad1a98b2c1a01fe3b9107a12fb7073fe3035ba6013ff37deb6d0fc44f23165d7b63c0b98c0e935566525aca5244d5fae7d493ddefe2d5b3a4312a398860e25412231b02776e1607cb378c5339a1f321356598f62ea80397de97cb1fd8c686f77c5efe780c3efbf350c4773a67cb65", 0x0, 0x1}, {0x6, 0xd, &(0x7f0000000340)="f1bb7ec9abcf57893d21d6b9c1", 0xa812600d3e94e2a}]})
r2 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
connect$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40) (async)
connect$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd4"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x87) (async)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x3, 0xb, 0x4053e5, 0x20}, 0xa, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x1, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x9, 0xf0e}, {0x3, 0xb, 0x4053e5, 0x20}, 0xa, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x1, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)

488.978318ms ago: executing program 0 (id=6860):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, <r1=>0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000007c0)={r2, 0xb, 0x1, [0x6, 0x101, 0x8000000000000000, 0x3, 0x3ff], [0x2137, 0x7, 0x2, 0xf5, 0x0, 0x7, 0x9, 0x2, 0x7, 0x2fd4, 0x1000000200, 0x8, 0xffffffffffffbbcc, 0x5fc, 0x8000000000000001, 0x0, 0x4, 0x1, 0x1ff, 0x7, 0x10001, 0xffffffffffff61de, 0x7, 0x8, 0xd62, 0x8000, 0x662, 0x2, 0xd449, 0x5, 0x7, 0xd6, 0x6, 0x3, 0x164f5b7c, 0x20, 0x200000002fdd, 0xe, 0x8000, 0x8, 0x1002, 0x6, 0xd, 0x10, 0x7fff, 0x7, 0x9, 0x3, 0xffffffffffff8000, 0xf07, 0x49, 0xf7, 0x6, 0x101, 0x32a8, 0x1, 0x520505e9, 0x7, 0x1, 0x9, 0x2, 0x2, 0x7fffffffffffffff, 0x101, 0xc0bf, 0x100, 0x2, 0x100000000, 0x8, 0x68b0, 0x20000001, 0x9, 0x7, 0x30, 0xfede, 0x8, 0x401, 0x2, 0x3, 0xfad, 0x80000001, 0x967, 0xffffffffffffffff, 0xb8, 0x7, 0x990, 0x7, 0x3, 0xfff, 0x2458, 0x70dd7919, 0x3e2a1e94, 0x10000, 0x3, 0xfffffffffffffffe, 0xfff, 0x7, 0x1312, 0x9, 0x8, 0x3, 0x2, 0x2000000000000003, 0x8000000000000000, 0x0, 0x8, 0x5, 0x8, 0x8000000000000000, 0x800000000000008, 0x14, 0xffffffffffffffff, 0x7, 0x3, 0x1c, 0x4, 0x7, 0xac, 0x4, 0x200, 0xf]})
socket$kcm(0x2, 0xa, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYRESOCT=r1, @ANYRES16=r6, @ANYBLOB="01000000000000000001410000005c001700000000000000008774683a73797a6b614c6c6572304e0b5223dc3e205d47ddeb30b01f1cd775d078b0fe7bc26c0082144a6e"], 0x38}}, 0x4000141)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'})
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x200, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c043}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x33, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0xfffffffffffffd22, 0x2e, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x7, 0xffe0}, {0x0, 0x10}, {0xc, 0x5}}, [{0x0, 0xb, 0xf18b}, {0x0, 0xb, 0x10001}, {0x0, 0xb, 0xf7}, {}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc061}, 0x2000845)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r14)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r14, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010025bd7000ffdbdf25de07000300206e0f6e72981ab593c2381c653730599101000000000000002694b7ea017ba5a45e000000", @ANYRES32=r16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000)

280.171005ms ago: executing program 0 (id=6861):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x1}, {0x10, 0x84, 0x1}], 0x20}, 0x20000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)
r8 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={<r9=>r8})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={<r11=>r9})
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r10})
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x8040)

180.403325ms ago: executing program 0 (id=6862):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

104.887886ms ago: executing program 0 (id=6863):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x80}, &(0x7f0000000500)=0x90)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000406010200000000000000000000000105000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, 0x8)
sendto$inet(r0, &(0x7f0000000140)="ab", 0x1, 0x40448c4, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

104.475171ms ago: executing program 0 (id=6864):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0500a7aaca490000050007"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

0s ago: executing program 0 (id=6865):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_int(r2, 0x1, 0x24, 0xfffffffffffffffe, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000001c0)=0x68)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000940), 0x4)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000640)={<r4=>0x0, 0xe6, "67e220c5458cd9d06fcc57aba0409abd5482b10171b4c7751c4410ce250718aa4aa3c13367e74fde86355f25bf389ef50861df8df7dade5e64918133c2c4d3ea69a6a9de45460416e87e495b6f7707551021c9ada3bb0b9b195f642a6f9f812c695bc2711f5e3eac78098c5db6c725fb3dba405fdd6ddc3a53d53421df57bf56b67b18080aeff8d5fea7b979b1c69a7ea7c9abe1101aaefd6ca179aabccfd88eb1a39c80a36e36712595fb2fc01429d73f9724febacaeb262ca25617a3603e814c38a06b2db45e53f96e20becad96d6b7f244d65dc1657f0606aeab3f627fca2dc10119378f5"}, &(0x7f0000000100)=0xee)
connect$can_j1939(r2, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r5=>r4, 0x0, &(0x7f0000002ac0)}, &(0x7f0000000080)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000a46f80000085000000610020009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="eff4a0a396f514b8ac7a7757aedf5b5b7e5218e11b34b59fe85e691567246f39e717e3b658d46ff66b506daebd84b5869231bf8d826c4c5964af2b689de6a48e293038695f36ec224679ecf283cf1be4dacee953e2058312be365e30a50201d97797d70e61a6d9e941f74ecae13d3523133ef99e471310d1fd9bb360d58388cae992fc14ae92c11e07551fdff15b6cd7743d2116402dead6424b26dd567a13a7561782677fe14339bb4e7f54016a5b74e3b429ab99c6ed3050a603faa69466ce1fb73261910f7a63130b63d3", 0xcc}, {&(0x7f0000000840)="7a3ed4fdedb7a1057b1d3da898408ac5760bb546db2105c6a78dfe331b0e0a45ad32264b2ad1fb8c3bcb5d7925580d0d865636c23704d6a0adb2e639bde8c63a894d1b5efb66081472f659f380e30c9523817a8fd2227a11227c23b23e4a8803c6f93dcd5ece60df5eee414f146836367c2110d98838647c6708621bcde147a27367b8e2dc06dfd95b59b89f81edb3902f0eb20e8178e0c04efee5620187bca66118f8e30faeccd48d4794f1bceb9f070e917fbd1decacef2629eefc1d4a8979b0c68b6f0c26420bb76a96cd784d6ae3da0cc53e8b275fd6b82fd8cb504868638b", 0xe1}, {&(0x7f0000000180)="ee632b5adeda26761bcbb5263041a4da2ec510a3f19d9196086d0fff14d59dadf61dd4aa8c04b5c5214673fd55c5936f20120b59a641eabd", 0x38}, {&(0x7f0000000540)="71c4986b8f74a485b35c53138c0c90b951136ffb9f4cd2757162d0f9ad62ece69208653515d040b42236f4412706795bed643c9812cc99fad672945a39588620785561fabc07a1ef2ab1f206af8ac233e740a97c65eaa6c42726ef", 0x5b}], 0x4}}], 0x2, 0x4010)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c00), 0x2, 0x24040800)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r11, 0xf}, 0x8)
ioctl$TUNGETDEVNETNS(r8, 0xc0189436, 0x20000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x9, @loopback}}, 0x1, 0x5}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10)
socket$unix(0x1, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)=ANY=[@ANYBLOB="880000000206010200000000009940000000000000000500040000000000100003006269746d61703a706f727400100007800c00018008000140e0000002050001000700b64c3c000780050003000000000018000280140002400000000000000000000000000000000108000640000001ff08000940000002000800134000000001050005000a00"], 0x88}, 0x1, 0x0, 0x0, 0x4024055}, 0x0)

kernel console output (not intermixed with test programs):

] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  417.045861][T19794] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  417.340944][T19809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.344632][T19809] syzkaller0: entered promiscuous mode
[  417.347260][T19809] syzkaller0: entered allmulticast mode
[  417.380934][T19809] tipc: Resetting bearer <eth:syzkaller0>
[  417.392969][T19808] tipc: Resetting bearer <eth:syzkaller0>
[  417.407664][T19808] tipc: Disabling bearer <eth:syzkaller0>
[  418.104759][T19851] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002
[  418.716968][T19894] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  418.739572][T19894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.396854][T19925] batadv_slave_0: entered promiscuous mode
[  419.406109][T19918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  419.465515][T19918] batadv_slave_0: left promiscuous mode
[  420.694700][T20018] __nla_validate_parse: 14 callbacks suppressed
[  420.694719][T20018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4014'.
[  420.908904][T20030] lo: left allmulticast mode
[  420.942413][T20033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4019'.
[  420.974576][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4020'.
[  421.131570][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'.
[  421.195748][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4025'.
[  421.236456][T20047] nbd: socks must be embedded in a SOCK_ITEM attr
[  421.248590][T20047] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4025'.
[  421.376095][T20057] validate_nla: 17 callbacks suppressed
[  421.376118][T20057] netlink: 'syz.2.4026': attribute type 29 has an invalid length.
[  421.480307][T20057] netlink: 'syz.2.4026': attribute type 29 has an invalid length.
[  421.484969][T20057] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4026'.
[  421.593323][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'.
[  421.975230][T20095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4037'.
[  421.990049][T20095] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4037'.
[  421.993204][T20095] netlink: 'syz.1.4037': attribute type 5 has an invalid length.
[  422.112905][T20111] netlink: 'syz.0.4041': attribute type 13 has an invalid length.
[  422.116430][T20111] netlink: 'syz.0.4041': attribute type 17 has an invalid length.
[  422.156907][T20111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  422.361545][T20111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.424592][T20112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.839816][T20137] netlink: 'syz.1.4048': attribute type 1 has an invalid length.
[  422.882569][T20137] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  422.892104][ T5857] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  422.892661][T20137] 8021q: adding VLAN 0 to HW filter on device bond1
[  423.065335][T20137] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  423.072809][T20137] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  423.083552][T20137] bond1 (unregistering): Released all slaves
[  423.164956][T20148] netlink: 'syz.2.4052': attribute type 83 has an invalid length.
[  423.433729][T20162] netlink: 'syz.2.4057': attribute type 1 has an invalid length.
[  423.483370][T20164] netlink: 'syz.0.4058': attribute type 29 has an invalid length.
[  423.487719][T20164] netlink: 'syz.0.4058': attribute type 29 has an invalid length.
[  424.393013][T20216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.701369][T20234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.709543][T20234] syzkaller0: entered promiscuous mode
[  424.711570][T20234] syzkaller0: entered allmulticast mode
[  424.778510][T20241] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  424.781360][T20241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.832174][T20228] tipc: Resetting bearer <eth:syzkaller0>
[  424.912247][T20250] openvswitch: netlink: IP tunnel dst address not specified
[  425.353060][T20227] tipc: Resetting bearer <eth:syzkaller0>
[  425.376113][T20227] tipc: Disabling bearer <eth:syzkaller0>
[  425.402589][T20269] syzkaller0: entered promiscuous mode
[  425.405271][T20269] syzkaller0: entered allmulticast mode
[  425.936996][T20285] __nla_validate_parse: 10 callbacks suppressed
[  425.937012][T20285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4096'.
[  426.013726][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'.
[  426.115090][T20308] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4100'.
[  426.395697][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4104'.
[  426.401524][T20317] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  426.404065][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.565788][T20330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  426.678657][T20340] batadv_slave_1: entered promiscuous mode
[  426.685975][T20339] batadv_slave_1: left promiscuous mode
[  426.792936][T20344] syzkaller1: entered promiscuous mode
[  426.796196][T20344] syzkaller1: entered allmulticast mode
[  426.922104][T20350] syzkaller0: entered promiscuous mode
[  426.924363][T20350] syzkaller0: entered allmulticast mode
[  428.013463][ T5837] Bluetooth: hci2: command 0x040f tx timeout
[  429.017336][T20374] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4121'.
[  429.121830][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.134008][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.142502][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.148855][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.161124][T20378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'.
[  429.246900][T20388] validate_nla: 4 callbacks suppressed
[  429.246919][T20388] netlink: 'syz.0.4128': attribute type 83 has an invalid length.
[  429.518009][T20404] netlink: 'syz.0.4132': attribute type 1 has an invalid length.
[  429.521926][T20404] netlink: 'syz.0.4132': attribute type 2 has an invalid length.
[  429.634707][T20415] netlink: 'syz.2.4136': attribute type 83 has an invalid length.
[  429.746142][T20422] TCP: TCP_TX_DELAY enabled
[  430.702742][T20461] sctp: [Deprecated]: syz.1.4148 (pid 20461) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.702742][T20461] Use struct sctp_sack_info instead
[  431.008656][T20480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  431.033350][T20479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.036535][T20479] syzkaller0: entered promiscuous mode
[  431.038339][T20479] syzkaller0: entered allmulticast mode
[  431.055697][T20479] tipc: Resetting bearer <eth:syzkaller0>
[  431.354139][T20496] netlink: 'syz.0.4155': attribute type 83 has an invalid length.
[  431.423151][T20477] tipc: Resetting bearer <eth:syzkaller0>
[  431.446735][T20477] tipc: Disabling bearer <eth:syzkaller0>
[  431.804607][T20508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.977713][T20512] netlink: 'syz.2.4160': attribute type 1 has an invalid length.
[  432.014544][T20512] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  432.023895][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  432.024515][T20512] 8021q: adding VLAN 0 to HW filter on device bond4
[  432.139942][ T5892] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  432.177750][T20518] __nla_validate_parse: 3 callbacks suppressed
[  432.177763][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4162'.
[  432.202460][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4162'.
[  432.557979][T20539] netlink: 'syz.2.4167': attribute type 1 has an invalid length.
[  432.665017][T20546] netlink: 'syz.2.4169': attribute type 1 has an invalid length.
[  432.897070][T20556] netlink: 'syz.1.4174': attribute type 42 has an invalid length.
[  433.057689][T20563] netlink: 'syz.0.4176': attribute type 1 has an invalid length.
[  433.098573][T20563] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  433.148661][T20570] batadv_slave_0: entered promiscuous mode
[  433.170685][T20570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4178'.
[  433.187178][T20575] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4179'.
[  433.371280][T20569] batadv_slave_0: left promiscuous mode
[  433.666806][T20608] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4186'.
[  434.398139][T20656] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4198'.
[  434.402590][T20655] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4198'.
[  434.455118][T20655] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4198'.
[  434.486060][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4200'.
[  434.702245][   T54] Bluetooth: hci2: link tx timeout
[  434.704674][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  434.710968][   T54] Bluetooth: hci2: link tx timeout
[  434.713203][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  434.855524][   T54] Bluetooth: hci2: link tx timeout
[  434.857394][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  434.880483][   T54] Bluetooth: hci2: link tx timeout
[  434.882577][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  434.900388][T20686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.903500][T20686] syzkaller0: entered promiscuous mode
[  434.905289][T20686] syzkaller0: entered allmulticast mode
[  434.937483][T20686] tipc: Resetting bearer <eth:syzkaller0>
[  434.969812][T20686] tipc: Disabling bearer <eth:syzkaller0>
[  434.980007][T20692] validate_nla: 4 callbacks suppressed
[  434.980023][T20692] netlink: 'syz.0.4206': attribute type 1 has an invalid length.
[  434.990215][   T54] Bluetooth: hci2: link tx timeout
[  434.992448][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  435.072769][T20705] batadv_slave_0: entered promiscuous mode
[  435.098350][T20696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4207'.
[  435.151373][T20710] netlink: 'syz.0.4209': attribute type 83 has an invalid length.
[  435.265667][T20712] nbd: must specify a device to reconfigure
[  435.321141][T20694] batadv_slave_0: left promiscuous mode
[  435.758237][T20735] netlink: 'syz.0.4215': attribute type 1 has an invalid length.
[  435.853180][   T54] Bluetooth: hci2: link tx timeout
[  435.855246][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.133936][   T54] Bluetooth: hci2: link tx timeout
[  436.135621][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.196101][T20770] netlink: 'syz.1.4223': attribute type 83 has an invalid length.
[  436.750078][T20800] netlink: 'syz.0.4232': attribute type 1 has an invalid length.
[  436.750319][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  437.007623][T20816] netlink: 'syz.0.4234': attribute type 83 has an invalid length.
[  437.231819][T20835] netlink: 'syz.1.4239': attribute type 29 has an invalid length.
[  437.257732][T20835] netlink: 'syz.1.4239': attribute type 29 has an invalid length.
[  437.264097][T20835] __nla_validate_parse: 4 callbacks suppressed
[  437.264116][T20835] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4239'.
[  437.421669][T20844] netlink: 'syz.1.4240': attribute type 1 has an invalid length.
[  437.429003][T20844] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4240'.
[  437.434930][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'.
[  437.487398][T20849] bond8: entered promiscuous mode
[  437.489491][T20849] 8021q: adding VLAN 0 to HW filter on device bond8
[  437.584983][T20855] netlink: 'syz.2.4243': attribute type 1 has an invalid length.
[  438.214064][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4252'.
[  438.217821][T20896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4252'.
[  438.241083][T20899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4253'.
[  438.638670][T20928] netlink: zone id is out of range
[  438.650781][T20928] netlink: zone id is out of range
[  438.653655][T20928] netlink: zone id is out of range
[  438.656473][T20928] netlink: zone id is out of range
[  438.661420][T20928] netlink: zone id is out of range
[  438.663323][T20928] netlink: zone id is out of range
[  438.665222][T20928] netlink: zone id is out of range
[  438.667040][T20928] netlink: zone id is out of range
[  438.669433][T20928] netlink: zone id is out of range
[  438.671400][T20928] netlink: zone id is out of range
[  439.025221][T20941] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4265'.
[  439.086632][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4266'.
[  439.090056][T20943] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  439.247598][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'.
[  439.528802][T20968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.804574][T21014] validate_nla: 5 callbacks suppressed
[  440.804594][T21014] netlink: 'syz.1.4284': attribute type 2 has an invalid length.
[  441.122877][T21046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'.
[  441.517194][T21061] netlink: 'syz.0.4296': attribute type 1 has an invalid length.
[  442.181075][T21078] Unsupported ieee802154 address type: 0
[  442.777528][T21089] netlink: 'syz.1.4304': attribute type 29 has an invalid length.
[  442.810460][T21089] netlink: 'syz.1.4304': attribute type 29 has an invalid length.
[  442.813656][T21089] __nla_validate_parse: 4 callbacks suppressed
[  442.813667][T21089] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4304'.
[  443.216620][T21110] netlink: 'syz.1.4311': attribute type 29 has an invalid length.
[  443.220354][T21110] netlink: 'syz.1.4311': attribute type 29 has an invalid length.
[  443.223984][T21110] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4311'.
[  443.598364][T21127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4315'.
[  443.683904][T21128] netlink: 'syz.0.4315': attribute type 13 has an invalid length.
[  443.687287][T21128] netlink: 'syz.0.4315': attribute type 17 has an invalid length.
[  443.703137][T21128] net_ratelimit: 772 callbacks suppressed
[  443.703147][T21128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  443.803322][T21128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4315'.
[  444.012524][T21139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4317'.
[  444.017189][T21141] netlink: 'syz.0.4318': attribute type 29 has an invalid length.
[  444.023766][T21141] netlink: 'syz.0.4318': attribute type 29 has an invalid length.
[  444.027703][T21141] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4318'.
[  444.303451][T21160] syz_tun: left allmulticast mode
[  444.457690][T21169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4325'.
[  444.472591][T21170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4325'.
[  444.682482][T21182] 8021q: adding VLAN 0 to HW filter on device bond4
[  444.685732][T21182] team0: Port device bond4 added
[  444.705219][T21186] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4330'.
[  445.248841][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'.
[  445.848558][T21252] validate_nla: 8 callbacks suppressed
[  445.848651][T21252] netlink: 'syz.1.4348': attribute type 83 has an invalid length.
[  446.072268][T21259] veth5: entered promiscuous mode
[  446.535458][T21272] netlink: 'syz.0.4355': attribute type 83 has an invalid length.
[  446.647031][T21281] netlink: 'syz.2.4358': attribute type 29 has an invalid length.
[  446.651421][T21281] netlink: 'syz.2.4358': attribute type 29 has an invalid length.
[  446.842390][T21285] netlink: 'syz.2.4359': attribute type 16 has an invalid length.
[  446.845820][T21285] netlink: 'syz.2.4359': attribute type 17 has an invalid length.
[  447.119966][T21285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  447.132320][T21285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.300387][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.307184][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.313030][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.320640][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.396751][T21295] sctp: [Deprecated]: syz.1.4362 (pid 21295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  447.396751][T21295] Use struct sctp_sack_info instead
[  447.887651][T21321] xt_policy: neither incoming nor outgoing policy selected
[  448.045202][T21327] batadv_slave_0: entered promiscuous mode
[  448.061482][T21323] __nla_validate_parse: 4 callbacks suppressed
[  448.061492][T21323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4370'.
[  448.213946][T21322] batadv_slave_0: left promiscuous mode
[  448.512604][T21340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.916836][T21365] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4381'.
[  449.031335][T21370] netlink: 'syz.0.4382': attribute type 29 has an invalid length.
[  449.036859][T21370] netlink: 'syz.0.4382': attribute type 29 has an invalid length.
[  449.042602][T21370] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4382'.
[  449.372315][T21400] netlink: 'syz.0.4392': attribute type 29 has an invalid length.
[  449.376152][T21400] netlink: 'syz.0.4392': attribute type 29 has an invalid length.
[  449.379296][T21400] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4392'.
[  449.898987][T21429] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4400'.
[  449.944102][T21431] batadv_slave_0: entered promiscuous mode
[  449.944802][T21424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  449.969496][T21424] batadv_slave_0: left promiscuous mode
[  450.250066][T21445] batadv_slave_0: entered promiscuous mode
[  450.310881][T21438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4403'.
[  450.453035][T21451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.525263][T21437] batadv_slave_0: left promiscuous mode
[  451.147891][T21499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4418'.
[  451.283148][T21503] 8021q: VLANs not supported on syzkaller1
[  452.145671][T21548] validate_nla: 2 callbacks suppressed
[  452.145685][T21548] netlink: 'syz.1.4435': attribute type 2 has an invalid length.
[  452.152339][T21548] netlink: 'syz.1.4435': attribute type 1 has an invalid length.
[  452.155428][T21548] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4435'.
[  452.566434][T21553] netlink: 'syz.2.4436': attribute type 29 has an invalid length.
[  452.572780][T21553] netlink: 'syz.2.4436': attribute type 29 has an invalid length.
[  452.577826][T21553] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4436'.
[  453.115721][T21576] netlink: 'syz.1.4443': attribute type 29 has an invalid length.
[  453.120716][T21576] netlink: 'syz.1.4443': attribute type 29 has an invalid length.
[  453.125229][T21576] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4443'.
[  453.248198][T21591] sctp: [Deprecated]: syz.1.4446 (pid 21591) Use of struct sctp_assoc_value in delayed_ack socket option.
[  453.248198][T21591] Use struct sctp_sack_info instead
[  453.806673][T21621] netlink: 'syz.1.4455': attribute type 2 has an invalid length.
[  454.224650][T21643] netlink: 'syz.1.4462': attribute type 29 has an invalid length.
[  454.230413][T21643] netlink: 'syz.1.4462': attribute type 29 has an invalid length.
[  454.234310][T21643] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4462'.
[  454.253012][T21646] netlink: 'syz.0.4463': attribute type 1 has an invalid length.
[  454.599587][T21671] macvlan0: entered allmulticast mode
[  454.634013][T21676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4470'.
[  455.079529][T21698] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4478'.
[  455.594706][T21731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4487'.
[  455.885543][T21755] syzkaller1: entered promiscuous mode
[  455.887938][T21755] syzkaller1: entered allmulticast mode
[  457.097912][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'.
[  457.154196][T21801] validate_nla: 2 callbacks suppressed
[  457.154215][T21801] netlink: 'syz.0.4506': attribute type 29 has an invalid length.
[  457.161592][T21801] netlink: 'syz.0.4506': attribute type 29 has an invalid length.
[  457.165612][T21801] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4506'.
[  457.377472][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'.
[  457.384171][T21808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4509'.
[  457.421679][T21808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4509'.
[  457.426080][T21810] netlink: 'syz.2.4515': attribute type 29 has an invalid length.
[  457.433713][T21810] netlink: 'syz.2.4515': attribute type 29 has an invalid length.
[  457.522426][T21817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  457.851646][T21842] netlink: 'syz.1.4519': attribute type 29 has an invalid length.
[  457.861474][T21842] netlink: 'syz.1.4519': attribute type 29 has an invalid length.
[  458.444384][T21858] __nla_validate_parse: 2 callbacks suppressed
[  458.444402][T21858] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4525'.
[  458.710409][T21871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4527'.
[  458.939431][T21886] netlink: 'syz.1.4532': attribute type 1 has an invalid length.
[  458.970787][T21886] 8021q: adding VLAN 0 to HW filter on device bond6
[  458.985102][T21885] bond6: (slave gretap2): making interface the new active one
[  458.992636][T21885] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  459.056150][T21894] sit4: entered promiscuous mode
[  459.067583][T21889] nbd: must specify a size in bytes for the device
[  459.547329][T21906] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4539'.
[  459.714445][T21908] netlink: 'syz.0.4540': attribute type 2 has an invalid length.
[  459.717893][T21908] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4540'.
[  459.837082][T21913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4540'.
[  459.841623][T21911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4540'.
[  459.845792][T21913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4540'.
[  459.991905][T21918] netlink: 'syz.1.4543': attribute type 29 has an invalid length.
[  459.996403][T21918] netlink: 'syz.1.4543': attribute type 29 has an invalid length.
[  460.001024][T21918] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4543'.
[  460.556149][T21934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4548'.
[  460.640581][T21940] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4550'.
[  461.032645][T21984] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  461.257997][T22006] sctp: [Deprecated]: syz.1.4566 (pid 22006) Use of struct sctp_assoc_value in delayed_ack socket option.
[  461.257997][T22006] Use struct sctp_sack_info instead
[  462.668746][T22055] : entered promiscuous mode
[  463.064860][T22075] validate_nla: 3 callbacks suppressed
[  463.064879][T22075] netlink: 'syz.1.4589': attribute type 83 has an invalid length.
[  463.392488][T22089] netlink: 'syz.1.4596': attribute type 29 has an invalid length.
[  463.396353][T22089] netlink: 'syz.1.4596': attribute type 29 has an invalid length.
[  463.446003][T22093] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  463.548031][T22099] sctp: [Deprecated]: syz.2.4599 (pid 22099) Use of struct sctp_assoc_value in delayed_ack socket option.
[  463.548031][T22099] Use struct sctp_sack_info instead
[  463.555700][T22100] __nla_validate_parse: 11 callbacks suppressed
[  463.555713][T22100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  463.663229][T22103] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4601'.
[  463.706384][T22105] netlink: 'syz.1.4602': attribute type 1 has an invalid length.
[  463.711894][T22105] netlink: 'syz.1.4602': attribute type 2 has an invalid length.
[  463.715713][T22107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4603'.
[  463.755776][T22109] netlink: 'syz.2.4604': attribute type 29 has an invalid length.
[  463.764176][T22109] netlink: 'syz.2.4604': attribute type 29 has an invalid length.
[  463.768114][T22109] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4604'.
[  463.832700][T22114] netlink: 'syz.1.4606': attribute type 83 has an invalid length.
[  463.990913][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'.
[  463.994945][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'.
[  464.148479][T22135] syzkaller1: entered promiscuous mode
[  464.151151][T22135] syzkaller1: entered allmulticast mode
[  464.621025][T22165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.638501][T22150] syz.2.4615: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  464.645411][T22150] CPU: 1 UID: 0 PID: 22150 Comm: syz.2.4615 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  464.645428][T22150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.645435][T22150] Call Trace:
[  464.645440][T22150]  <TASK>
[  464.645445][T22150]  dump_stack_lvl+0x189/0x250
[  464.645463][T22150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  464.645472][T22150]  ? __pfx__printk+0x10/0x10
[  464.645483][T22150]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  464.645493][T22150]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  464.645504][T22150]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  464.645515][T22150]  warn_alloc+0x214/0x310
[  464.645527][T22150]  ? __pfx_warn_alloc+0x10/0x10
[  464.645541][T22150]  ? __get_vm_area_node+0x28f/0x300
[  464.645554][T22150]  ? xp_create_and_assign_umem+0x184/0xce0
[  464.645570][T22150]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  464.645626][T22150]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  464.645645][T22150]  ? rcu_is_watching+0x15/0xb0
[  464.645659][T22150]  ? xp_create_and_assign_umem+0x184/0xce0
[  464.645671][T22150]  ? xp_create_and_assign_umem+0x184/0xce0
[  464.645682][T22150]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  464.645695][T22150]  ? xp_create_and_assign_umem+0x184/0xce0
[  464.645707][T22150]  ? xp_create_and_assign_umem+0xa4/0xce0
[  464.645722][T22150]  xp_create_and_assign_umem+0x184/0xce0
[  464.645738][T22150]  ? __pfx_xsk_lookup_xsk_from_fd+0x10/0x10
[  464.645749][T22150]  ? dev_get_by_index+0x22/0x2e0
[  464.645761][T22150]  ? dev_get_by_index+0x22/0x2e0
[  464.645774][T22150]  xsk_bind+0x95a/0xf90
[  464.645789][T22150]  __sys_bind+0x2c6/0x3e0
[  464.645803][T22150]  ? __pfx___sys_bind+0x10/0x10
[  464.645822][T22150]  ? rcu_is_watching+0x15/0xb0
[  464.645838][T22150]  __x64_sys_bind+0x7a/0x90
[  464.645850][T22150]  do_syscall_64+0xfa/0x3b0
[  464.645864][T22150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.645872][T22150]  ? asm_sysvec_call_function_single+0x1a/0x20
[  464.645883][T22150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.645892][T22150] RIP: 0033:0x7ffbb338ebe9
[  464.645902][T22150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.645910][T22150] RSP: 002b:00007ffbb41df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  464.645922][T22150] RAX: ffffffffffffffda RBX: 00007ffbb35b5fa0 RCX: 00007ffbb338ebe9
[  464.645929][T22150] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000009
[  464.645934][T22150] RBP: 00007ffbb3411e19 R08: 0000000000000000 R09: 0000000000000000
[  464.645939][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.645944][T22150] R13: 00007ffbb35b6038 R14: 00007ffbb35b5fa0 R15: 00007ffeebcfb0b8
[  464.645960][T22150]  </TASK>
[  464.645964][T22150] Mem-Info:
[  464.742041][T22150] active_anon:9310 inactive_anon:0 isolated_anon:0
[  464.742041][T22150]  active_file:1349 inactive_file:38358 isolated_file:0
[  464.742041][T22150]  unevictable:1768 dirty:62 writeback:0
[  464.742041][T22150]  slab_reclaimable:9816 slab_unreclaimable:68794
[  464.742041][T22150]  mapped:21325 shmem:5288 pagetables:992
[  464.742041][T22150]  sec_pagetables:0 bounce:0
[  464.742041][T22150]  kernel_misc_reclaimable:0
[  464.742041][T22150]  free:272282 free_pcp:17413 free_cma:0
[  464.756742][T22150] Node 0 active_anon:24964kB inactive_anon:0kB active_file:3868kB inactive_file:140972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34572kB dirty:164kB writeback:0kB shmem:13304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7308kB pagetables:1856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  464.768266][T22150] Node 1 active_anon:12276kB inactive_anon:0kB active_file:1528kB inactive_file:12460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50728kB dirty:84kB writeback:0kB shmem:7848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6004kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  464.778807][T22150] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  464.787621][T22150] lowmem_reserve[]: 0 814 814 814 814
[  464.789490][T22150] Node 0 DMA32 free:212376kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24964kB inactive_anon:0kB active_file:3868kB inactive_file:140972kB unevictable:3536kB writepending:164kB present:1556484kB managed:834024kB mlocked:0kB bounce:0kB free_pcp:39980kB local_pcp:14312kB free_cma:0kB
[  464.799859][T22150] lowmem_reserve[]: 0 0 0 0 0
[  464.801532][T22150] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  464.813449][T22150] lowmem_reserve[]: 0 0 854 854 854
[  464.815859][T22150] Node 1 Normal free:402900kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12276kB inactive_anon:0kB active_file:1528kB inactive_file:12460kB unevictable:3536kB writepending:84kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:29552kB local_pcp:6748kB free_cma:0kB
[  464.831081][T22150] lowmem_reserve[]: 0 0 0 0 0
[  464.833180][T22150] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  464.838287][T22150] Node 0 DMA32: 448*4kB (UME) 425*8kB (UME) 199*16kB (UME) 406*32kB (UM) 338*64kB (UME) 189*128kB (UM) 75*256kB (UME) 54*512kB (UME) 16*1024kB (UM) 4*2048kB (UM) 18*4096kB (M) = 212344kB
[  464.848427][T22150] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  464.857723][T22150] Node 1 Normal: 59*4kB (UM) 496*8kB (UME) 220*16kB (UME) 14*32kB (UME) 22*64kB (UME) 73*128kB (UME) 34*256kB (UME) 33*512kB (UME) 28*1024kB (UM) 7*2048kB (UME) 77*4096kB (UM) = 402924kB
[  464.866075][T22150] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  464.872271][T22150] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  464.876272][T22150] 44987 total pagecache pages
[  464.878343][T22150] 0 pages in swap cache
[  464.880517][T22150] Free swap  = 124996kB
[  464.882485][T22150] Total swap = 124996kB
[  464.884421][T22150] 786301 pages RAM
[  464.886557][T22150] 0 pages HighMem/MovableOnly
[  464.888554][T22150] 240547 pages reserved
[  464.891645][T22150] 0 pages cma reserved
[  465.653186][T22203] netlink: 'syz.1.4625': attribute type 83 has an invalid length.
[  465.853311][T22211] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4627'.
[  466.393806][T22224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  466.436967][T22228] netlink: 'syz.2.4633': attribute type 29 has an invalid length.
[  466.440996][T22228] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4633'.
[  466.485891][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4634'.
[  466.929959][T22241] IPVS: Unknown mcast interface: veth1_to_bridge
[  466.937983][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'.
[  467.067853][T22244] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  467.693200][T22272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.702193][T22272] syzkaller0: entered promiscuous mode
[  467.704657][T22272] syzkaller0: entered allmulticast mode
[  468.124079][T22282] validate_nla: 6 callbacks suppressed
[  468.124103][T22282] netlink: 'syz.1.4650': attribute type 83 has an invalid length.
[  468.452050][T22269] tipc: Resetting bearer <eth:syzkaller0>
[  468.495272][T22269] tipc: Disabling bearer <eth:syzkaller0>
[  468.623979][T22294] __nla_validate_parse: 5 callbacks suppressed
[  468.623997][T22294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4655'.
[  468.687798][T22296] netlink: 'syz.1.4657': attribute type 83 has an invalid length.
[  469.106683][T22322] netlink: 'syz.1.4666': attribute type 29 has an invalid length.
[  469.110565][T22322] netlink: 'syz.1.4666': attribute type 29 has an invalid length.
[  469.113828][T22322] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4666'.
[  469.241458][T22327] veth0_to_hsr: entered promiscuous mode
[  469.244180][T22327] veth0_to_hsr: entered allmulticast mode
[  469.608684][T22331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4670'.
[  469.894335][T22348] netlink: 'syz.0.4674': attribute type 29 has an invalid length.
[  469.898525][T22348] netlink: 'syz.0.4674': attribute type 29 has an invalid length.
[  469.903920][T22348] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4674'.
[  469.955008][T22350] netlink: 'syz.0.4675': attribute type 83 has an invalid length.
[  470.018903][T22352] netlink: 'syz.2.4676': attribute type 1 has an invalid length.
[  470.024398][T22352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.234158][T22370] batadv_slave_0: entered promiscuous mode
[  470.292918][T22364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4680'.
[  470.365977][T22376] netlink: 'syz.0.4682': attribute type 29 has an invalid length.
[  470.370766][T22376] netlink: 'syz.0.4682': attribute type 29 has an invalid length.
[  470.374780][T22376] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4682'.
[  470.453497][T22363] batadv_slave_0: left promiscuous mode
[  470.638118][T22396] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4689'.
[  470.878678][T22413] syzkaller0: entered promiscuous mode
[  470.885491][T22413] syzkaller0: entered allmulticast mode
[  470.955931][T22421] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4697'.
[  471.250252][T22452] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4707'.
[  471.278950][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4708'.
[  471.418857][T22467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  471.532514][T22473] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  471.598002][T22471] batadv_slave_0: entered promiscuous mode
[  471.845751][T22470] batadv_slave_0: left promiscuous mode
[  473.932978][T22579] __nla_validate_parse: 4 callbacks suppressed
[  473.933001][T22579] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4745'.
[  474.205378][T22586] validate_nla: 11 callbacks suppressed
[  474.205402][T22586] netlink: 'syz.0.4747': attribute type 29 has an invalid length.
[  474.214483][T22586] netlink: 'syz.0.4747': attribute type 29 has an invalid length.
[  474.219245][T22586] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4747'.
[  474.308490][T22588] netlink: zone id is out of range
[  474.310625][T22588] netlink: zone id is out of range
[  474.312800][T22588] netlink: zone id is out of range
[  474.315764][T22588] netlink: zone id is out of range
[  474.318494][T22588] netlink: zone id is out of range
[  474.325820][T22588] netlink: zone id is out of range
[  474.327812][T22588] netlink: zone id is out of range
[  474.334103][T22588] netlink: zone id is out of range
[  474.336365][T22588] netlink: zone id is out of range
[  474.442249][T22594] netlink: 'syz.1.4750': attribute type 1 has an invalid length.
[  474.512131][T22568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.776088][T22610] netlink: 'syz.1.4754': attribute type 29 has an invalid length.
[  474.780512][T22610] netlink: 'syz.1.4754': attribute type 29 has an invalid length.
[  474.791397][T22610] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4754'.
[  474.845049][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'.
[  475.246241][T22638] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  475.997806][T22672] netlink: 'syz.1.4769': attribute type 29 has an invalid length.
[  476.007566][T22672] netlink: 'syz.1.4769': attribute type 29 has an invalid length.
[  476.013610][T22672] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4769'.
[  476.323672][T22682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4773'.
[  476.395793][T22690] veth1_vlan: entered allmulticast mode
[  476.398188][T22690] macvlan0: entered promiscuous mode
[  476.403298][T22690] veth1_vlan: entered promiscuous mode
[  476.562424][T22696] netlink: 'syz.2.4776': attribute type 29 has an invalid length.
[  476.566401][T22696] netlink: 'syz.2.4776': attribute type 29 has an invalid length.
[  476.571638][T22696] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4776'.
[  476.627046][T22699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4778'.
[  476.632880][T22700] net_ratelimit: 9 callbacks suppressed
[  476.632897][T22700] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  476.640456][T22699] netlink: 'syz.2.4778': attribute type 1 has an invalid length.
[  476.882819][T22713] syzkaller1: entered promiscuous mode
[  476.885631][T22713] syzkaller1: entered allmulticast mode
[  477.093966][T22727] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.4783'.
[  477.743337][T22780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4790'.
[  478.150442][T22821] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  478.173336][T22824] syzkaller1: entered promiscuous mode
[  478.175911][T22824] syzkaller1: entered allmulticast mode
[  479.134554][T22885] batadv_slave_0: entered promiscuous mode
[  479.174828][T22880] __nla_validate_parse: 3 callbacks suppressed
[  479.174846][T22880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4815'.
[  479.371346][T22879] batadv_slave_0: left promiscuous mode
[  479.797047][T22912] validate_nla: 4 callbacks suppressed
[  479.797064][T22912] netlink: 'syz.0.4821': attribute type 1 has an invalid length.
[  480.995121][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'.
[  481.443797][T22991] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4841'.
[  483.033615][T23063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4860'.
[  483.281424][T23083] netlink: 'syz.2.4865': attribute type 29 has an invalid length.
[  483.284683][T23083] netlink: 'syz.2.4865': attribute type 29 has an invalid length.
[  483.291279][T23083] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4865'.
[  483.333988][T23087] syz_tun: entered allmulticast mode
[  483.338239][T23085] syz_tun: left allmulticast mode
[  483.387145][T23092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4868'.
[  483.435893][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4870'.
[  483.604698][T23108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4872'.
[  483.659804][T23113] netlink: 'syz.1.4875': attribute type 29 has an invalid length.
[  483.663721][T23113] netlink: 'syz.1.4875': attribute type 29 has an invalid length.
[  483.667227][T23113] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4875'.
[  483.785913][T23122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.802784][T23122] syzkaller0: entered promiscuous mode
[  483.805585][T23122] syzkaller0: entered allmulticast mode
[  483.849650][T23122] tipc: Resetting bearer <eth:syzkaller0>
[  483.859372][T23121] tipc: Resetting bearer <eth:syzkaller0>
[  483.879584][T23121] tipc: Disabling bearer <eth:syzkaller0>
[  484.265997][T23155] batadv_slave_0: entered promiscuous mode
[  484.295270][T23151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4886'.
[  484.471081][T23150] batadv_slave_0: left promiscuous mode
[  484.513512][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4887'.
[  484.517484][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4887'.
[  484.537275][ T5840] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  484.547630][ T5840] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  484.552092][ T5840] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  484.555670][ T5840] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  484.808046][T23187] netlink: 'syz.1.4894': attribute type 2 has an invalid length.
[  485.227733][T23221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4903'.
[  485.472566][T23226] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4906'.
[  485.694953][T23233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4907'.
[  486.096189][T23240] netlink: 'syz.2.4909': attribute type 29 has an invalid length.
[  486.101486][T23240] netlink: 'syz.2.4909': attribute type 29 has an invalid length.
[  486.104484][T23240] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4909'.
[  486.342361][T23252] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4913'.
[  487.067304][T23306] netlink: 'syz.0.4923': attribute type 29 has an invalid length.
[  487.075675][T23306] netlink: 'syz.0.4923': attribute type 29 has an invalid length.
[  487.081560][T23306] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4923'.
[  487.347279][T23331] batadv_slave_0: entered promiscuous mode
[  487.391617][T23325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4927'.
[  487.541844][T23324] batadv_slave_0: left promiscuous mode
[  487.706583][T23344] netlink: 'syz.0.4931': attribute type 29 has an invalid length.
[  487.710335][T23344] netlink: 'syz.0.4931': attribute type 29 has an invalid length.
[  487.935382][T23353] netlink: 'syz.0.4933': attribute type 21 has an invalid length.
[  488.138753][T23372] netlink: 'syz.0.4938': attribute type 29 has an invalid length.
[  488.142483][T23372] netlink: 'syz.0.4938': attribute type 29 has an invalid length.
[  488.692151][T23427] batadv_slave_1: entered promiscuous mode
[  488.786596][T23418] batadv_slave_1: left promiscuous mode
[  489.274879][T23451] syzkaller1: entered promiscuous mode
[  489.277347][T23451] syzkaller1: entered allmulticast mode
[  489.283939][T23451] syzkaller1: left promiscuous mode
[  489.286296][T23451] syzkaller1: left allmulticast mode
[  489.308495][T23453] atomic_op ffff888119878998 conn xmit_atomic 0000000000000000
[  490.198107][T23477] __nla_validate_parse: 10 callbacks suppressed
[  490.198138][T23477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4968'.
[  490.363537][T23482] syzkaller1: entered promiscuous mode
[  490.365973][T23482] syzkaller1: entered allmulticast mode
[  490.640532][T23491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.645443][T23491] syzkaller0: entered promiscuous mode
[  490.647763][T23491] syzkaller0: entered allmulticast mode
[  490.672161][T23490] tipc: Resetting bearer <eth:syzkaller0>
[  490.697868][T23490] tipc: Disabling bearer <eth:syzkaller0>
[  491.095943][T23514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4981'.
[  491.099051][T23514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4981'.
[  491.331783][T23529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.338312][T23533] syzkaller0: entered promiscuous mode
[  491.344398][T23533] syzkaller0: entered allmulticast mode
[  491.352328][T23532] sctp: [Deprecated]: syz.1.4986 (pid 23532) Use of int in max_burst socket option.
[  491.352328][T23532] Use struct sctp_assoc_value instead
[  491.373096][T23527] tipc: Resetting bearer <eth:syzkaller0>
[  491.398091][T23527] tipc: Disabling bearer <eth:syzkaller0>
[  491.819498][T23556] validate_nla: 6 callbacks suppressed
[  491.819511][T23556] netlink: 'syz.1.4993': attribute type 29 has an invalid length.
[  491.832851][T23556] netlink: 'syz.1.4993': attribute type 29 has an invalid length.
[  491.842774][T23556] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4993'.
[  491.907535][T23565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4995'.
[  491.924712][T23565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4995'.
[  492.177681][T23587] netlink: 'syz.0.5001': attribute type 29 has an invalid length.
[  492.186166][T23587] netlink: 'syz.0.5001': attribute type 29 has an invalid length.
[  492.190844][T23587] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5001'.
[  492.300589][T23600] team0: Unable to change to the same mode the team is in
[  492.546562][T23606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5004'.
[  492.675050][T23615] netlink: 'syz.1.5005': attribute type 15 has an invalid length.
[  493.547931][T23658] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  493.764569][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'.
[  494.106289][T23678] netlink: 'syz.2.5026': attribute type 13 has an invalid length.
[  494.146884][T23678] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.150581][T23678] 8021q: adding VLAN 0 to HW filter on device team0
[  494.155975][T23678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.560435][T23682] netlink: 'syz.0.5027': attribute type 29 has an invalid length.
[  494.563761][T23682] netlink: 'syz.0.5027': attribute type 29 has an invalid length.
[  494.566849][T23682] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5027'.
[  494.930489][T23698] netlink: 'syz.2.5032': attribute type 58 has an invalid length.
[  495.187176][T23705] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  495.990714][T23725] netlink: set zone limit has 4 unknown bytes
[  496.038686][T23728] netlink: 'syz.2.5039': attribute type 29 has an invalid length.
[  496.044174][T23728] __nla_validate_parse: 1 callbacks suppressed
[  496.044188][T23728] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5039'.
[  496.087797][T23731] syzkaller1: entered promiscuous mode
[  496.091094][T23731] syzkaller1: entered allmulticast mode
[  496.532024][T23747] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5046'.
[  496.692378][T23754] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  498.364693][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'.
[  498.416470][T23802] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5062'.
[  498.663432][T23816] validate_nla: 1 callbacks suppressed
[  498.663444][T23816] netlink: 'syz.2.5066': attribute type 2 has an invalid length.
[  498.671000][T23817] netlink: 'syz.2.5066': attribute type 2 has an invalid length.
[  498.712891][T23819] lo: entered allmulticast mode
[  498.714956][T23819] lo: left allmulticast mode
[  498.892345][T23835] sctp: [Deprecated]: syz.1.5070 (pid 23835) Use of int in maxseg socket option.
[  498.892345][T23835] Use struct sctp_assoc_value instead
[  498.934652][T23838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5071'.
[  500.012999][T23902] batadv_slave_0: entered promiscuous mode
[  500.145347][T23907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5083'.
[  500.473713][T23921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5090'.
[  500.480320][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5090'.
[  500.484064][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5090'.
[  500.556541][T23925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5092'.
[  500.758269][T23940] netlink: 'syz.2.5096': attribute type 29 has an invalid length.
[  500.766796][T23940] netlink: 'syz.2.5096': attribute type 29 has an invalid length.
[  500.841202][T23892] batadv_slave_0: left promiscuous mode
[  500.922699][T23953] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  501.058198][T23963] __nla_validate_parse: 1 callbacks suppressed
[  501.058212][T23963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5104'.
[  501.066756][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'.
[  501.073451][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5104'.
[  501.514494][T23996] syzkaller1: entered allmulticast mode
[  501.517415][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5110'.
[  501.976236][T24030] netlink: 'syz.0.5119': attribute type 29 has an invalid length.
[  501.980552][T24030] netlink: 'syz.0.5119': attribute type 29 has an invalid length.
[  501.984665][T24030] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5119'.
[  502.812069][T24051] netlink: 'syz.2.5126': attribute type 29 has an invalid length.
[  502.816323][T24051] netlink: 'syz.2.5126': attribute type 29 has an invalid length.
[  502.822907][T24051] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5126'.
[  502.850836][T24049] 8021q: VLANs not supported on vcan0
[  503.113415][T24083] sctp: [Deprecated]: syz.1.5133 (pid 24083) Use of struct sctp_assoc_value in delayed_ack socket option.
[  503.113415][T24083] Use struct sctp_sack_info instead
[  503.897738][T24118] netlink: 'syz.2.5143': attribute type 1 has an invalid length.
[  503.933436][T24118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5143'.
[  504.124168][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5146'.
[  504.193598][T24136] netlink: 'syz.0.5147': attribute type 29 has an invalid length.
[  504.206273][T24136] netlink: 'syz.0.5147': attribute type 29 has an invalid length.
[  504.213335][T24136] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5147'.
[  504.309856][T24153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5150'.
[  504.348930][T24155] netlink: 'syz.0.5153': attribute type 13 has an invalid length.
[  504.354024][T24155] netlink: 'syz.0.5153': attribute type 13 has an invalid length.
[  504.592584][T24169] netlink: 'syz.1.5158': attribute type 29 has an invalid length.
[  504.595856][T24169] netlink: 'syz.1.5158': attribute type 29 has an invalid length.
[  505.024715][T24193] netlink: 'syz.1.5165': attribute type 29 has an invalid length.
[  505.028975][T24193] netlink: 'syz.1.5165': attribute type 29 has an invalid length.
[  505.167429][T24204] batadv_slave_0: entered promiscuous mode
[  505.343230][T24208] batadv_slave_0: left promiscuous mode
[  505.478361][T24235] netlink: 'syz.2.5172': attribute type 29 has an invalid length.
[  507.018587][T24306] __nla_validate_parse: 9 callbacks suppressed
[  507.018599][T24306] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5187'.
[  507.134544][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5190'.
[  507.135391][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5190'.
[  507.175471][T24313] netlink: 296 bytes leftover after parsing attributes in process `syz.1.5190'.
[  507.175610][T24315] netlink: 296 bytes leftover after parsing attributes in process `syz.1.5190'.
[  507.261486][T24317] batadv_slave_0: entered promiscuous mode
[  507.299003][T24317] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5191'.
[  507.402287][T24316] batadv_slave_0: left promiscuous mode
[  507.772951][T24334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.776471][T24334] syzkaller0: entered promiscuous mode
[  507.778566][T24334] syzkaller0: entered allmulticast mode
[  507.803528][T24334] tipc: Resetting bearer <eth:syzkaller0>
[  507.915266][T24341] batadv_slave_0: entered promiscuous mode
[  507.977100][T24336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5197'.
[  508.172959][T24335] batadv_slave_0: left promiscuous mode
[  508.307623][T24361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'.
[  508.312068][T24361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5203'.
[  508.531806][T24330] tipc: Resetting bearer <eth:syzkaller0>
[  508.561503][T24330] tipc: Disabling bearer <eth:syzkaller0>
[  508.775498][T24395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'.
[  508.791051][T24393] syzkaller0: entered promiscuous mode
[  508.792992][T24393] syzkaller0: entered allmulticast mode
[  509.232788][T24420] validate_nla: 6 callbacks suppressed
[  509.232803][T24420] netlink: 'syz.0.5219': attribute type 21 has an invalid length.
[  509.814005][T24440] syzkaller1: entered allmulticast mode
[  509.905519][T24441] IPv6: Can't replace route, no match found
[  509.996019][T24438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.197963][T24453] netlink: 'syz.1.5228': attribute type 29 has an invalid length.
[  510.204164][T24453] netlink: 'syz.1.5228': attribute type 29 has an invalid length.
[  510.968287][T24491] netpci0: tun_chr_ioctl cmd 1074025681
[  510.977493][T24498] netlink: 'syz.1.5241': attribute type 29 has an invalid length.
[  510.984357][T24498] netlink: 'syz.1.5241': attribute type 29 has an invalid length.
[  511.145728][T24519] netlink: 'syz.2.5245': attribute type 10 has an invalid length.
[  511.148648][T24519] dummy0: entered promiscuous mode
[  511.152555][T24519] dummy0: entered allmulticast mode
[  511.154666][T24519] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  511.376856][T24535] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  511.381450][T24535] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  511.710164][T24544] sctp: [Deprecated]: syz.0.5261 (pid 24544) Use of struct sctp_assoc_value in delayed_ack socket option.
[  511.710164][T24544] Use struct sctp_sack_info instead
[  511.716991][T24544] bridge0: entered promiscuous mode
[  511.818764][T24547] syzkaller1: entered allmulticast mode
[  512.016554][T24553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.023210][T24553] syzkaller0: entered promiscuous mode
[  512.026327][T24553] syzkaller0: entered allmulticast mode
[  512.049843][T24553] tipc: Resetting bearer <eth:syzkaller0>
[  512.648749][T24566] syzkaller1: entered promiscuous mode
[  512.652781][T24566] syzkaller1: entered allmulticast mode
[  512.832970][T24552] tipc: Resetting bearer <eth:syzkaller0>
[  512.848249][T24552] tipc: Disabling bearer <eth:syzkaller0>
[  513.398911][T24610] netlink: 'syz.0.5278': attribute type 2 has an invalid length.
[  513.404229][T24610] __nla_validate_parse: 8 callbacks suppressed
[  513.404239][T24610] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5278'.
[  513.705113][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5282'.
[  514.072598][T24634] netlink: 'syz.2.5285': attribute type 2 has an invalid length.
[  514.221012][T24648] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  514.481906][T24654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5292'.
[  514.586488][T24660] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  514.756372][T24667] netlink: 'syz.0.5297': attribute type 9 has an invalid length.
[  514.913416][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5300'.
[  515.065648][T24681] netlink: 'syz.1.5301': attribute type 2 has an invalid length.
[  515.069152][T24681] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5301'.
[  515.069634][T24685] netlink: 'syz.0.5302': attribute type 1 has an invalid length.
[  515.077717][T24685] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5302'.
[  515.080976][T24685] netlink: 'syz.0.5302': attribute type 1 has an invalid length.
[  515.083431][T24685] netlink: 'syz.0.5302': attribute type 2 has an invalid length.
[  515.338764][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5307'.
[  516.044521][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5309'.
[  517.014421][T24765] veth1_to_team: entered allmulticast mode
[  517.017617][T24765] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  517.064798][T24769] syzkaller1: entered promiscuous mode
[  517.068037][T24769] syzkaller1: entered allmulticast mode
[  517.917492][T24798] netlink: 'syz.1.5334': attribute type 29 has an invalid length.
[  517.921787][T24798] netlink: 'syz.1.5334': attribute type 29 has an invalid length.
[  517.925514][T24798] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5334'.
[  517.983776][T24802] netpci0: tun_chr_ioctl cmd 1074025681
[  517.988804][T24802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5335'.
[  518.034984][T24804] 8021q: VLANs not supported on ip_vti0
[  518.237395][T24821] netlink: 'syz.2.5342': attribute type 29 has an invalid length.
[  518.242173][T24821] netlink: 'syz.2.5342': attribute type 29 has an invalid length.
[  518.587678][T24837] __nla_validate_parse: 2 callbacks suppressed
[  518.587694][T24837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5347'.
[  518.620357][T24848] batadv_slave_0: entered promiscuous mode
[  518.623116][T24848] batadv_slave_0: left promiscuous mode
[  518.627099][T24848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5349'.
[  518.805125][T24851] netlink: 'syz.1.5350': attribute type 2 has an invalid length.
[  518.857039][T24853] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  518.933458][T24853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  518.953237][T24859] sctp: [Deprecated]: syz.1.5353 (pid 24859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.953237][T24859] Use struct sctp_sack_info instead
[  519.097483][T24872] syzkaller1: entered promiscuous mode
[  519.103756][T24872] syzkaller1: entered allmulticast mode
[  519.653336][T24908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.657301][T24908] syzkaller0: entered promiscuous mode
[  519.659987][T24908] syzkaller0: entered allmulticast mode
[  519.678517][T24908] tipc: Resetting bearer <eth:syzkaller0>
[  520.113055][T24919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.471596][T24908] tipc: Resetting bearer <eth:syzkaller0>
[  520.499688][T24908] tipc: Disabling bearer <eth:syzkaller0>
[  520.667519][T24948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5378'.
[  520.868703][T24960] batadv_slave_0: entered promiscuous mode
[  520.873822][T24959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  520.893660][T24959] batadv_slave_0: left promiscuous mode
[  521.002750][T24978] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5381'.
[  521.371145][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'.
[  521.373984][T24990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5385'.
[  521.924014][T25000] netlink: 'syz.2.5387': attribute type 29 has an invalid length.
[  521.928687][T25000] netlink: 'syz.2.5387': attribute type 29 has an invalid length.
[  521.946928][T25000] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5387'.
[  522.154211][T25011] netlink: 'syz.2.5391': attribute type 15 has an invalid length.
[  522.267107][T25013] syzkaller1: entered promiscuous mode
[  522.269790][T25013] syzkaller1: entered allmulticast mode
[  522.372552][T25022] netlink: 'syz.1.5395': attribute type 11 has an invalid length.
[  522.737762][T25036] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5400'.
[  522.847489][T25043] netlink: 'syz.0.5401': attribute type 29 has an invalid length.
[  522.853522][T25043] netlink: 'syz.0.5401': attribute type 29 has an invalid length.
[  522.857741][T25043] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5401'.
[  522.954967][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5405'.
[  523.028064][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  523.035471][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  523.043857][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  523.048310][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  523.139057][T25058] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  523.152255][T25060] netlink: 'syz.2.5409': attribute type 29 has an invalid length.
[  523.163051][T25060] netlink: 'syz.2.5409': attribute type 29 has an invalid length.
[  523.410829][T25081] sctp: [Deprecated]: syz.2.5413 (pid 25081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  523.410829][T25081] Use struct sctp_sack_info instead
[  523.548901][T25089] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  523.569616][T25093] netlink: 'syz.1.5419': attribute type 4 has an invalid length.
[  523.612135][T25094] __nla_validate_parse: 3 callbacks suppressed
[  523.612155][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5418'.
[  524.182046][T25111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5424'.
[  524.865252][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'.
[  524.880458][T25124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5429'.
[  525.398372][T25153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5435'.
[  525.444413][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'.
[  525.456679][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5436'.
[  525.461672][T25157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.774694][T25160] netlink: 'syz.2.5437': attribute type 29 has an invalid length.
[  525.781224][T25160] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5437'.
[  526.058118][T25164] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.5439'.
[  526.316811][T25186] batadv_slave_0: entered promiscuous mode
[  526.342209][T25188] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5444'.
[  526.422685][T25190] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  526.541249][T25179] batadv_slave_0: left promiscuous mode
[  527.002537][T25228] batadv_slave_1: entered promiscuous mode
[  527.063616][T25234] validate_nla: 4 callbacks suppressed
[  527.063631][T25234] netlink: 'syz.1.5458': attribute type 29 has an invalid length.
[  527.071406][T25234] netlink: 'syz.1.5458': attribute type 29 has an invalid length.
[  527.841679][T25220] batadv_slave_1: left promiscuous mode
[  527.886134][T25245] netlink: 'syz.2.5461': attribute type 1 has an invalid length.
[  528.260194][T25291] netlink: 'syz.0.5468': attribute type 21 has an invalid length.
[  528.365116][T25298] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  528.748414][T25317] __nla_validate_parse: 12 callbacks suppressed
[  528.748427][T25317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5475'.
[  529.120631][T25324] netlink: 'syz.0.5477': attribute type 8 has an invalid length.
[  529.328316][T25331] netlink: 'syz.0.5479': attribute type 29 has an invalid length.
[  529.333031][T25331] netlink: 'syz.0.5479': attribute type 29 has an invalid length.
[  529.336879][T25331] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5479'.
[  529.822789][T25358] netlink: 'syz.0.5486': attribute type 29 has an invalid length.
[  529.828550][T25358] netlink: 'syz.0.5486': attribute type 29 has an invalid length.
[  529.834091][T25358] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5486'.
[  529.840302][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'.
[  529.843200][T25360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5487'.
[  529.942000][T25371] bond0: (slave bond_slave_0): Releasing backup interface
[  529.944728][T25371] bond_slave_0: left promiscuous mode
[  529.946638][T25371] bond_slave_0: left allmulticast mode
[  529.953428][T25371] bond0: (slave bond_slave_1): Releasing backup interface
[  529.958434][T25371] bond_slave_1: left promiscuous mode
[  529.961496][T25371] bond_slave_1: left allmulticast mode
[  529.966266][T25371] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.968954][T25371] batman_adv: batadv0: Removing interface: batadv_slave_0
[  529.976974][T25371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  529.979778][T25371] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.988292][T25371] bond1: (slave geneve2): Releasing active interface
[  529.990098][T25373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5490'.
[  529.998619][T25371] bond2: (slave bridge3): Releasing backup interface
[  530.001300][T25371] bridge3: left promiscuous mode
[  530.007206][T25371] bond3: (slave gretap2): Releasing active interface
[  530.012809][T25371] gretap2: left promiscuous mode
[  530.014890][T25371] gretap2: left allmulticast mode
[  530.028538][T25371] bond4: (slave ip6gretap1): Releasing backup interface
[  530.505876][T25390] batadv_slave_0: entered promiscuous mode
[  530.540286][T25390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5496'.
[  530.601982][T25389] batadv_slave_0: left promiscuous mode
[  531.357311][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'.
[  531.684516][T25463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5516'.
[  531.704799][T25465] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000
[  531.786195][T25468] 8021q: VLANs not supported on ip6_vti0
[  532.046166][T25483] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5524'.
[  532.132242][T25496] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  533.310637][T25540] netlink: 'syz.0.5541': attribute type 1 has an invalid length.
[  533.313784][T25540] netlink: 'syz.0.5541': attribute type 1 has an invalid length.
[  533.318530][T25540] block nbd0: shutting down sockets
[  533.809326][T25572] netlink: 'syz.0.5549': attribute type 29 has an invalid length.
[  533.812898][T25572] netlink: 'syz.0.5549': attribute type 29 has an invalid length.
[  533.816284][T25572] __nla_validate_parse: 4 callbacks suppressed
[  533.816301][T25572] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5549'.
[  534.060279][T25586] syzkaller1: entered promiscuous mode
[  534.062296][T25586] syzkaller1: entered allmulticast mode
[  534.748430][T25615] batadv_slave_0: entered promiscuous mode
[  534.786007][T25615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5561'.
[  534.986764][T25620] batadv_slave_0: left promiscuous mode
[  535.271914][T25648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.337832][T25655] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5569'.
[  535.468652][T25657] team0: Mode "loadbAlance" not found
[  535.608169][T25677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5577'.
[  535.863327][T25704] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  536.011464][T25716] netlink: 'syz.2.5590': attribute type 29 has an invalid length.
[  536.014641][T25716] netlink: 'syz.2.5590': attribute type 29 has an invalid length.
[  536.017582][T25716] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5590'.
[  536.051590][T25719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5589'.
[  536.144102][T25721] batadv_slave_0: entered promiscuous mode
[  536.198910][T25731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5592'.
[  536.302055][T25720] batadv_slave_0: left promiscuous mode
[  536.943549][T25767] sctp: [Deprecated]: syz.0.5600 (pid 25767) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.943549][T25767] Use struct sctp_sack_info instead
[  537.494316][T25783] netlink: 'syz.0.5605': attribute type 29 has an invalid length.
[  537.497590][T25783] netlink: 'syz.0.5605': attribute type 29 has an invalid length.
[  537.501356][T25783] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5605'.
[  537.722716][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'.
[  537.753172][T25795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5609'.
[  537.808317][T25803] netlink: 'syz.2.5612': attribute type 29 has an invalid length.
[  537.811750][T25803] netlink: 'syz.2.5612': attribute type 29 has an invalid length.
[  538.023209][T25810] pimreg: entered allmulticast mode
[  538.027389][T25810] pimreg: left allmulticast mode
[  539.425122][T25861] netlink: 'syz.0.5628': attribute type 1 has an invalid length.
[  539.698434][T25868] __nla_validate_parse: 4 callbacks suppressed
[  539.698444][T25868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'.
[  539.707128][T25868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5630'.
[  539.712302][T25868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5630'.
[  539.715337][T25868] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5630'.
[  539.840016][T25871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5631'.
[  540.092010][T25899] netlink: 'syz.1.5637': attribute type 29 has an invalid length.
[  540.096456][T25899] netlink: 'syz.1.5637': attribute type 29 has an invalid length.
[  540.101168][T25899] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5637'.
[  540.385107][   T33] audit: type=1800 audit(1754603609.597:6): pid=25911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5641" name=14 dev="tmpfs" ino=9952 res=0 errno=0
[  540.550739][T25921] syzkaller1: entered allmulticast mode
[  540.681036][T25934] batadv_slave_0: entered promiscuous mode
[  540.714779][T25925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5644'.
[  540.871723][T25924] batadv_slave_0: left promiscuous mode
[  540.917143][T25947] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5648'.
[  540.926939][T25947] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  541.181578][T25964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5653'.
[  542.401553][T26008] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.5664'.
[  542.649728][T26029] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  542.925563][T26044] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  543.612447][T26076] unknown channel width for channel at 909000KHz?
[  543.614507][T26076] unknown channel width for channel at 909000KHz?
[  543.641289][T26079] netlink: 'syz.2.5683': attribute type 1 has an invalid length.
[  543.716182][T26087] netlink: 'syz.2.5684': attribute type 29 has an invalid length.
[  543.728347][T26087] netlink: 'syz.2.5684': attribute type 29 has an invalid length.
[  543.787471][T26090] batadv_slave_0: entered promiscuous mode
[  544.004440][T26081] batadv_slave_0: left promiscuous mode
[  544.197377][T26112] batadv_slave_0: entered promiscuous mode
[  544.200576][T26112] batadv_slave_0: left promiscuous mode
[  545.031114][T26136] __nla_validate_parse: 10 callbacks suppressed
[  545.031124][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5701'.
[  545.989391][T26183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5713'.
[  546.741399][T26199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5719'.
[  547.132305][T26214] netlink: 'syz.0.5724': attribute type 29 has an invalid length.
[  547.135585][T26214] netlink: 'syz.0.5724': attribute type 29 has an invalid length.
[  547.138886][T26214] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5724'.
[  547.327394][T26217] syzkaller1: entered promiscuous mode
[  547.331307][T26217] syzkaller1: entered allmulticast mode
[  547.458223][T26230] netlink: 'syz.0.5731': attribute type 1 has an invalid length.
[  547.468356][T26236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5733'.
[  547.472467][T26236] netlink: 'syz.2.5733': attribute type 5 has an invalid length.
[  547.475177][T26236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5733'.
[  547.483003][T26236] geneve3: entered promiscuous mode
[  547.485050][T26236] geneve3: entered allmulticast mode
[  547.488089][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  547.492310][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  547.495328][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  547.498293][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  547.635005][T26249] sctp: [Deprecated]: syz.2.5736 (pid 26249) Use of struct sctp_assoc_value in delayed_ack socket option.
[  547.635005][T26249] Use struct sctp_sack_info instead
[  547.778419][T26252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  547.782291][T26259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  547.865622][T26269] ipvlan0: left promiscuous mode
[  547.954983][T26275] netlink: 'syz.1.5742': attribute type 29 has an invalid length.
[  547.958470][T26275] netlink: 'syz.1.5742': attribute type 29 has an invalid length.
[  547.962080][T26275] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5742'.
[  548.084942][T26282] syzkaller1: entered allmulticast mode
[  548.163433][T26287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5747'.
[  548.166489][T26287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5747'.
[  548.186741][T26289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5748'.
[  548.208280][T26289] netlink: 'syz.0.5748': attribute type 2 has an invalid length.
[  548.241396][T26294] netlink: 'syz.0.5750': attribute type 29 has an invalid length.
[  548.244481][T26294] netlink: 'syz.0.5750': attribute type 29 has an invalid length.
[  548.416695][T26299] syzkaller1: entered promiscuous mode
[  548.418506][T26299] syzkaller1: entered allmulticast mode
[  548.446535][T26308] netlink: 'syz.1.5755': attribute type 11 has an invalid length.
[  548.483574][T26310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.591399][T26316] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  548.593958][T26316] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  549.946101][T26364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  550.230283][T26379] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  550.375919][T26385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  551.377983][T26438] __nla_validate_parse: 8 callbacks suppressed
[  551.378001][T26438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5793'.
[  551.433451][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.433451][T26442] Use struct sctp_sack_info instead
[  551.438975][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.438975][T26442] Use struct sctp_sack_info instead
[  551.445357][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.445357][T26442] Use struct sctp_sack_info instead
[  551.451201][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.451201][T26442] Use struct sctp_sack_info instead
[  551.462590][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.462590][T26442] Use struct sctp_sack_info instead
[  551.467868][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.467868][T26442] Use struct sctp_sack_info instead
[  551.489926][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.489926][T26442] Use struct sctp_sack_info instead
[  551.495915][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.495915][T26442] Use struct sctp_sack_info instead
[  551.506601][T26442] sctp: [Deprecated]: syz.0.5794 (pid 26442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  551.506601][T26442] Use struct sctp_sack_info instead
[  551.805809][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5799'.
[  551.958283][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5804'.
[  551.961414][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5804'.
[  552.098582][T26488] bond0: option mode: unable to set because the bond device has slaves
[  552.103491][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5806'.
[  552.813523][T26498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  553.176040][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5815'.
[  553.411404][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'.
[  553.414432][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'.
[  553.888607][T26549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5824'.
[  553.988642][T26514] delete_channel: no stack
[  554.357818][T26569] batadv_slave_0: entered promiscuous mode
[  554.406432][T26578] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  554.410785][T26577] IPVS: stopping backup sync thread 26578 ...
[  554.432265][T26574] batadv_slave_0: left promiscuous mode
[  555.850039][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'.
[  555.909966][T26628] validate_nla: 4 callbacks suppressed
[  555.909978][T26628] netlink: 'syz.2.5845': attribute type 21 has an invalid length.
[  556.424088][T26666] tipc: Enabling of bearer <et:g> rejected, media not registered
[  556.466356][T26670] __nla_validate_parse: 3 callbacks suppressed
[  556.466372][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5857'.
[  556.473693][T26670] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5857'.
[  556.548379][T26672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5858'.
[  556.554281][T26672] netlink: 'syz.1.5858': attribute type 21 has an invalid length.
[  557.005608][T26683] netlink: 'syz.1.5862': attribute type 2 has an invalid length.
[  557.235414][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5865'.
[  557.821957][T26710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.125709][T26724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5872'.
[  558.311147][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5875'.
[  558.314625][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5875'.
[  558.569893][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5879'.
[  558.575455][T26749] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  559.322749][T26749] netlink: 'syz.1.5879': attribute type 1 has an invalid length.
[  559.326056][T26749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5879'.
[  559.428389][T26758] netlink: 'syz.2.5882': attribute type 1 has an invalid length.
[  559.431624][T26758] netlink: 'syz.2.5882': attribute type 1 has an invalid length.
[  559.647251][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5887'.
[  560.174151][T26789] netlink: 'syz.1.5892': attribute type 10 has an invalid length.
[  560.183086][T26789] team0: Port device dummy0 added
[  560.187516][T26789] netlink: 'syz.1.5892': attribute type 10 has an invalid length.
[  560.202184][T26789] team0: Port device dummy0 removed
[  560.896649][T26816] netlink: 'syz.0.5901': attribute type 29 has an invalid length.
[  560.900899][T26816] netlink: 'syz.0.5901': attribute type 29 has an invalid length.
[  561.404799][T26834] syzkaller1: entered promiscuous mode
[  561.406683][T26834] syzkaller1: entered allmulticast mode
[  561.474020][T26839] netlink: 'syz.2.5908': attribute type 29 has an invalid length.
[  561.504906][T26839] netlink: 'syz.2.5908': attribute type 29 has an invalid length.
[  561.509953][T26839] __nla_validate_parse: 10 callbacks suppressed
[  561.509966][T26839] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5908'.
[  561.716904][T26858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5916'.
[  561.745416][T26861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5917'.
[  562.564570][T26865] netlink: 'syz.2.5918': attribute type 2 has an invalid length.
[  562.745929][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5921'.
[  562.761998][T26875] netlink: 'syz.2.5921': attribute type 21 has an invalid length.
[  562.765337][T26875] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5921'.
[  562.795354][T26877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5923'.
[  562.875927][T26883] openvswitch: netlink: Unknown key attributes 2
[  563.007834][T26890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5927'.
[  563.170777][T26891] delete_channel: no stack
[  563.227398][T26894] netlink: 'syz.0.5929': attribute type 4 has an invalid length.
[  563.238274][T26894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5929'.
[  563.423539][T26900] ip6erspan0: entered promiscuous mode
[  563.718619][T26911] batadv_slave_0: entered promiscuous mode
[  563.862444][T26919] syzkaller1: entered promiscuous mode
[  563.864217][T26919] syzkaller1: entered allmulticast mode
[  564.027215][T26932] netlink: 'syz.2.5939': attribute type 29 has an invalid length.
[  564.033238][T26932] netlink: 'syz.2.5939': attribute type 29 has an invalid length.
[  564.037471][T26932] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5939'.
[  564.043999][T26910] batadv_slave_0: left promiscuous mode
[  564.197559][T26942] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5943'.
[  564.301106][T26946] netlink: 'syz.0.5946': attribute type 29 has an invalid length.
[  564.305321][T26946] netlink: 'syz.0.5946': attribute type 29 has an invalid length.
[  564.463184][T26962] 8021q: adding VLAN 0 to HW filter on device bond7
[  564.653083][T26975] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_tx_wq": -EINTR
[  564.871854][T27007] batadv_slave_0: entered promiscuous mode
[  565.062050][T26997] batadv_slave_0: left promiscuous mode
[  565.293035][T27030] netlink: 'syz.2.5960': attribute type 2 has an invalid length.
[  565.299805][T27030] : entered promiscuous mode
[  565.781545][T27052] nbd: must specify a size in bytes for the device
[  565.891312][T27060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  566.562932][T27089] netlink: 'syz.2.5975': attribute type 29 has an invalid length.
[  566.566606][T27089] netlink: 'syz.2.5975': attribute type 29 has an invalid length.
[  566.570019][T27089] __nla_validate_parse: 74 callbacks suppressed
[  566.570029][T27089] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5975'.
[  566.633462][T27099] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5974'.
[  566.633579][T27100] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5977'.
[  566.636716][T27098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5974'.
[  566.870357][T27118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5982'.
[  567.058236][T27123] syzkaller1: entered promiscuous mode
[  567.078340][T27123] syzkaller1: entered allmulticast mode
[  567.286300][T27134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  567.485830][T27140] batadv_slave_0: entered promiscuous mode
[  567.497990][T27140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5987'.
[  567.711992][T27154] macsec0: entered allmulticast mode
[  567.714284][T27154] ip6gretap0: entered allmulticast mode
[  567.723509][T27154] ip6gretap0: left allmulticast mode
[  567.800803][T27139] batadv_slave_0: left promiscuous mode
[  568.043494][T27181] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5995'.
[  568.188821][T27194] syzkaller1: entered promiscuous mode
[  568.192074][T27194] syzkaller1: entered allmulticast mode
[  568.199443][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6001'.
[  568.267008][T27198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6003'.
[  568.284298][T27198] sch_tbf: burst 88 is lower than device veth15 mtu (1514) !
[  568.335594][T27200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6004'.
[  568.455130][T27214] sctp: [Deprecated]: syz.2.6008 (pid 27214) Use of int in maxseg socket option.
[  568.455130][T27214] Use struct sctp_assoc_value instead
[  568.484181][ T5892] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  568.493915][ T5892] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  568.499689][ T5892] bond0: now running without any active interface!
[  568.578356][T27224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.720471][T27237] batadv_slave_0: entered promiscuous mode
[  568.830673][T27236] dummy0: left promiscuous mode
[  568.832683][T27236] dummy0: left allmulticast mode
[  568.842364][T27236] bond_slave_0: left allmulticast mode
[  568.844934][T27236] veth1_to_team: left allmulticast mode
[  568.847429][T27236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.856137][T27236] ipvlan0: left allmulticast mode
[  568.858025][T27236] veth0_vlan: left allmulticast mode
[  568.861939][T27236] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  568.864434][T27236] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  568.866817][T27236] hsr1: left allmulticast mode
[  568.868354][T27236] syz_tun: left allmulticast mode
[  568.872041][T27236] batadv_slave_0: left allmulticast mode
[  568.876238][T27236] bond1: left promiscuous mode
[  568.878265][T27236] wireguard0: left promiscuous mode
[  568.881772][T27236] wireguard2: left promiscuous mode
[  568.884175][T27236] wireguard2: left allmulticast mode
[  568.887038][T27236] bond3: left promiscuous mode
[  568.889182][T27236] bridge3: left promiscuous mode
[  568.891253][T27236] bond3: left allmulticast mode
[  568.893153][T27236] bridge3: left allmulticast mode
[  568.896013][T27236] bond8: left promiscuous mode
[  568.900752][T27236] sit4: left promiscuous mode
[  568.912998][T27236] geneve3: left promiscuous mode
[  568.914696][T27236] geneve3: left allmulticast mode
[  568.936855][ T5892] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.942757][ T5892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  568.950391][ T5857] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.956921][ T5857] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  568.963093][ T5857] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.966112][ T5857] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  568.976722][ T5857] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.980753][ T5857] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  569.180390][T27230] batadv_slave_0: left promiscuous mode
[  569.334409][T27252] netlink: 'syz.0.6019': attribute type 29 has an invalid length.
[  569.338947][T27252] netlink: 'syz.0.6019': attribute type 29 has an invalid length.
[  569.561913][T27271] rdma_op ffff888119e741f0 conn xmit_rdma 0000000000000000
[  569.691387][T27276] syzkaller1: entered promiscuous mode
[  569.693548][T27276] syzkaller1: entered allmulticast mode
[  570.944127][T27308] batadv_slave_0: entered promiscuous mode
[  571.132825][T27305] batadv_slave_0: left promiscuous mode
[  571.251988][T27323] sch_tbf: burst 1476 is lower than device bridge1 mtu (1514) !
[  571.682129][T27352] __nla_validate_parse: 15 callbacks suppressed
[  571.682144][T27352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6048'.
[  571.697918][T27352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.702788][T27352] syzkaller0: entered promiscuous mode
[  571.704742][T27352] syzkaller0: entered allmulticast mode
[  571.715625][T27351] tipc: Resetting bearer <eth:syzkaller0>
[  571.741020][T27351] tipc: Disabling bearer <eth:syzkaller0>
[  571.979054][T27364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  572.471832][T27370] netlink: 'syz.2.6053': attribute type 29 has an invalid length.
[  572.475431][T27370] netlink: 'syz.2.6053': attribute type 29 has an invalid length.
[  572.478820][T27370] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6053'.
[  572.616325][T27378] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  572.620902][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'.
[  572.774946][T27386] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6058'.
[  573.154985][T27392] netlink: 'syz.0.6061': attribute type 29 has an invalid length.
[  573.161303][T27392] netlink: 'syz.0.6061': attribute type 29 has an invalid length.
[  573.165257][T27392] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6061'.
[  573.212377][T27394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6062'.
[  573.216719][T27394] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6062'.
[  573.569021][T27421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6066'.
[  573.574880][T27420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6066'.
[  573.674572][T27432] netlink: 'syz.2.6068': attribute type 29 has an invalid length.
[  573.688137][T27432] netlink: 'syz.2.6068': attribute type 29 has an invalid length.
[  573.692694][T27432] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6068'.
[  573.758867][T27440] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  573.765642][T27441] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  574.674466][T27458] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  574.677427][T27458] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  574.794885][T27472] netlink: 'syz.2.6079': attribute type 29 has an invalid length.
[  574.797949][T27472] netlink: 'syz.2.6079': attribute type 29 has an invalid length.
[  575.053568][T27506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  575.228827][T27516] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  575.403570][T27533] nft_compat: unsupported protocol 0
[  575.608344][T27543] netlink: 'syz.2.6090': attribute type 29 has an invalid length.
[  575.614157][T27543] netlink: 'syz.2.6090': attribute type 29 has an invalid length.
[  575.893741][T27551] syzkaller1: entered promiscuous mode
[  575.896213][T27551] syzkaller1: entered allmulticast mode
[  577.215822][T27588] __nla_validate_parse: 14 callbacks suppressed
[  577.215836][T27588] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6101'.
[  577.955143][T27618] validate_nla: 2 callbacks suppressed
[  577.955161][T27618] netlink: 'syz.1.6108': attribute type 29 has an invalid length.
[  577.971042][T27618] netlink: 'syz.1.6108': attribute type 29 has an invalid length.
[  577.977309][T27618] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6108'.
[  578.045620][T27622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6109'.
[  578.413772][   T33] audit: type=1800 audit(1754603647.627:7): pid=27635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6111" name=14 dev="tmpfs" ino=10714 res=0 errno=0
[  578.740797][T27662] netlink: 'syz.2.6118': attribute type 29 has an invalid length.
[  578.775103][T27662] netlink: 'syz.2.6118': attribute type 29 has an invalid length.
[  578.779552][T27662] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6118'.
[  578.930672][T27673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6121'.
[  579.858169][T27698] batadv_slave_0: entered promiscuous mode
[  579.874431][T27692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6127'.
[  580.063420][T27691] batadv_slave_0: left promiscuous mode
[  580.385486][T27712] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6131'.
[  580.425174][T27714] netlink: 'syz.0.6132': attribute type 29 has an invalid length.
[  580.428442][T27714] netlink: 'syz.0.6132': attribute type 29 has an invalid length.
[  580.433142][T27714] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6132'.
[  580.523877][T27724] IPv6: sit4: Disabled Multicast RS
[  580.526114][T27724] sit4: entered allmulticast mode
[  580.581252][T27727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6136'.
[  580.806198][T27738] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  580.819942][T27737] IPVS: stopping backup sync thread 27738 ...
[  580.837622][T27737] dummy0: entered allmulticast mode
[  580.847869][T27740] netlink: 'syz.1.6141': attribute type 29 has an invalid length.
[  580.853122][T27740] netlink: 'syz.1.6141': attribute type 29 has an invalid length.
[  580.857120][T27740] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6141'.
[  581.285056][T27765] syzkaller0: entered promiscuous mode
[  581.288106][T27765] syzkaller0: entered allmulticast mode
[  581.298334][T27772] netlink: 'syz.1.6151': attribute type 29 has an invalid length.
[  581.314614][T27772] netlink: 'syz.1.6151': attribute type 29 has an invalid length.
[  582.188345][T27776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  582.337710][T27788] __nla_validate_parse: 2 callbacks suppressed
[  582.337721][T27788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6155'.
[  582.773825][T27818] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6162'.
[  583.598470][T27845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6168'.
[  583.718388][T27850] validate_nla: 3 callbacks suppressed
[  583.718402][T27850] netlink: 'syz.1.6170': attribute type 29 has an invalid length.
[  583.728961][T27850] netlink: 'syz.1.6170': attribute type 29 has an invalid length.
[  583.734638][T27850] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6170'.
[  583.764178][T27853] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6171'.
[  584.206186][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6174'.
[  584.223367][T27870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6174'.
[  584.662159][T27906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6181'.
[  584.826176][T27913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6183'.
[  585.255708][T27937] netlink: 'syz.2.6191': attribute type 29 has an invalid length.
[  585.260335][T27937] netlink: 'syz.2.6191': attribute type 29 has an invalid length.
[  585.263503][T27937] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6191'.
[  585.513680][T27962] syzkaller1: entered allmulticast mode
[  585.640701][T27977] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  586.841719][T28042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.404598][T28079] __nla_validate_parse: 8 callbacks suppressed
[  587.404615][T28079] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6224'.
[  588.405826][T28101] netlink: 'syz.0.6232': attribute type 29 has an invalid length.
[  588.411185][T28101] netlink: 'syz.0.6232': attribute type 29 has an invalid length.
[  588.414957][T28101] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6232'.
[  588.532285][T28102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6231'.
[  588.858468][T28122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.862992][T28118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.946648][T28128] pimreg3: entered allmulticast mode
[  588.957664][T28130] netlink: 'syz.2.6240': attribute type 29 has an invalid length.
[  588.963725][T28130] netlink: 'syz.2.6240': attribute type 29 has an invalid length.
[  588.967529][T28130] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6240'.
[  589.187149][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6244'.
[  589.274463][T28145] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6244'.
[  589.402814][T28156] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6243'.
[  589.580625][T28161] batadv_slave_0: entered promiscuous mode
[  589.618928][T28162] batadv_slave_0: left promiscuous mode
[  589.759401][T28173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6249'.
[  589.811218][T28176] netlink: 'syz.0.6250': attribute type 1 has an invalid length.
[  589.817442][T28176] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  589.946488][T28189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6254'.
[  590.269857][T28211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6261'.
[  592.073123][T28249] batadv_slave_0: entered promiscuous mode
[  592.201763][T28244] batadv_slave_0: left promiscuous mode
[  592.759672][T28276] __nla_validate_parse: 5 callbacks suppressed
[  592.759688][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6280'.
[  593.015347][T28287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'.
[  593.019219][T28287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'.
[  593.233706][T28302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6286'.
[  593.418253][T28304] netlink: 'syz.1.6287': attribute type 1 has an invalid length.
[  594.068937][T28329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6293'.
[  594.189720][T28337] netlink: 'syz.0.6297': attribute type 4 has an invalid length.
[  594.192283][T28336] netlink: 'syz.0.6297': attribute type 4 has an invalid length.
[  594.195928][T28337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6297'.
[  594.201275][T28336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6297'.
[  594.222616][T28337] : renamed from bond0 (while UP)
[  594.222635][T28339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6296'.
[  594.266707][T28339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6296'.
[  594.738992][T28368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6303'.
[  595.175781][T28387] sctp_setsockopt_delayed_ack: 24 callbacks suppressed
[  595.175795][T28387] sctp: [Deprecated]: syz.0.6310 (pid 28387) Use of struct sctp_assoc_value in delayed_ack socket option.
[  595.175795][T28387] Use struct sctp_sack_info instead
[  595.406913][T28391] netlink: 'syz.2.6311': attribute type 29 has an invalid length.
[  595.410545][T28391] netlink: 'syz.2.6311': attribute type 29 has an invalid length.
[  595.686425][T28416] netlink: 'syz.1.6318': attribute type 29 has an invalid length.
[  595.693140][T28416] netlink: 'syz.1.6318': attribute type 29 has an invalid length.
[  595.895086][T28426] syzkaller1: entered promiscuous mode
[  595.897475][T28426] syzkaller1: entered allmulticast mode
[  596.056681][T28433] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  596.206494][T28442] netlink: 'syz.0.6327': attribute type 29 has an invalid length.
[  596.210884][T28442] netlink: 'syz.0.6327': attribute type 29 has an invalid length.
[  596.258957][T28444] netlink: 'syz.0.6328': attribute type 3 has an invalid length.
[  596.555825][T28453] syzkaller1: entered promiscuous mode
[  596.557669][T28453] syzkaller1: entered allmulticast mode
[  596.567024][T28454] lo speed is unknown, defaulting to 1000
[  596.571365][T28454] lo speed is unknown, defaulting to 1000
[  596.577747][T28454] lo speed is unknown, defaulting to 1000
[  596.585987][T28454] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  596.600937][T28454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  596.640425][T28454] lo speed is unknown, defaulting to 1000
[  596.654270][T28454] lo speed is unknown, defaulting to 1000
[  596.671941][T28454] lo speed is unknown, defaulting to 1000
[  597.224783][T28471] netlink: 'syz.2.6334': attribute type 29 has an invalid length.
[  597.813862][T28508] __nla_validate_parse: 13 callbacks suppressed
[  597.813876][T28508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6343'.
[  597.944225][T28526] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6347'.
[  597.975811][T28528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6346'.
[  597.983753][T28529] sctp: [Deprecated]: syz.1.6348 (pid 28529) Use of struct sctp_assoc_value in delayed_ack socket option.
[  597.983753][T28529] Use struct sctp_sack_info instead
[  598.367331][T28552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6352'.
[  598.590767][T28568] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6355'.
[  598.798882][T28578] syzkaller1: entered promiscuous mode
[  598.803259][T28578] syzkaller1: entered allmulticast mode
[  599.031973][T28598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6361'.
[  599.088748][T28604] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6363'.
[  599.224273][T28612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6365'.
[  599.277721][T28614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6366'.
[  600.106053][T28632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6370'.
[  600.188006][T28634] validate_nla: 8 callbacks suppressed
[  600.188020][T28634] netlink: 'syz.2.6371': attribute type 29 has an invalid length.
[  600.236856][T28634] netlink: 'syz.2.6371': attribute type 29 has an invalid length.
[  600.358908][T28641] netlink: 'syz.2.6374': attribute type 6 has an invalid length.
[  600.367569][T28641] netlink: 'syz.2.6374': attribute type 6 has an invalid length.
[  601.395742][T28693] netlink: 'syz.2.6388': attribute type 29 has an invalid length.
[  601.402515][T28693] netlink: 'syz.2.6388': attribute type 29 has an invalid length.
[  602.446369][T28741] netlink: 'syz.0.6400': attribute type 29 has an invalid length.
[  602.452573][T28741] netlink: 'syz.0.6400': attribute type 29 has an invalid length.
[  603.060206][T28763] __nla_validate_parse: 11 callbacks suppressed
[  603.060222][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6407'.
[  603.097632][T28763] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  603.109929][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6407'.
[  603.125621][T28763] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  603.131146][T28765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6408'.
[  603.188695][T28771] sctp: [Deprecated]: syz.1.6409 (pid 28771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  603.188695][T28771] Use struct sctp_sack_info instead
[  603.452202][T28789] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6413'.
[  603.776176][T28805] batadv_slave_0: entered promiscuous mode
[  603.807868][T28805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6418'.
[  603.931288][T28804] batadv_slave_0: left promiscuous mode
[  604.090101][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6420'.
[  604.093791][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6420'.
[  604.163828][T28820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6420'.
[  604.813147][T28846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6427'.
[  605.030131][T28858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  605.096638][T28866] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  605.620577][T28893] netlink: 'syz.0.6441': attribute type 29 has an invalid length.
[  605.627174][T28893] netlink: 'syz.0.6441': attribute type 29 has an invalid length.
[  605.631152][T28892] netlink: 'syz.1.6440': attribute type 1 has an invalid length.
[  605.631159][T28893] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6441'.
[  605.932362][T28917] netlink: 'syz.0.6448': attribute type 29 has an invalid length.
[  605.936646][T28917] netlink: 'syz.0.6448': attribute type 29 has an invalid length.
[  606.721767][T28942] netlink: 'syz.1.6454': attribute type 29 has an invalid length.
[  606.725644][T28942] netlink: 'syz.1.6454': attribute type 29 has an invalid length.
[  607.058662][T28955] batadv_slave_0: entered promiscuous mode
[  607.242114][T28950] batadv_slave_0: left promiscuous mode
[  607.391019][T28969] netlink: 'syz.2.6461': attribute type 29 has an invalid length.
[  607.396040][T28969] netlink: 'syz.2.6461': attribute type 29 has an invalid length.
[  607.595384][T28989] Bluetooth: MGMT ver 1.23
[  607.983119][T29008] netlink: 'syz.2.6472': attribute type 1 has an invalid length.
[  608.483627][T29033] __nla_validate_parse: 10 callbacks suppressed
[  608.483647][T29033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6483'.
[  608.685754][T29039] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6485'.
[  609.414686][T29050] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  609.420528][T29050] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  609.726091][T29064] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6492'.
[  609.883022][T29073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6494'.
[  609.898311][T29074] syzkaller1: entered promiscuous mode
[  609.908286][T29074] syzkaller1: entered allmulticast mode
[  611.193810][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6507'.
[  611.197443][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6507'.
[  611.202548][T29128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6507'.
[  611.205753][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6507'.
[  611.208808][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6507'.
[  611.218318][T29128] batadv_slave_1: entered promiscuous mode
[  611.222650][T29133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6509'.
[  611.229605][T29128] batadv_slave_1: left promiscuous mode
[  611.447679][T29141] validate_nla: 11 callbacks suppressed
[  611.447696][T29141] netlink: 'syz.0.6512': attribute type 1 has an invalid length.
[  611.571957][T29145] netlink: 'syz.0.6513': attribute type 29 has an invalid length.
[  611.577081][T29145] netlink: 'syz.0.6513': attribute type 29 has an invalid length.
[  612.172779][T29164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.180647][T29160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  612.266594][T29169] netlink: 'syz.1.6520': attribute type 1 has an invalid length.
[  612.394008][T29176] netlink: 'syz.1.6522': attribute type 9 has an invalid length.
[  612.922041][T29206] netlink: 'syz.1.6529': attribute type 29 has an invalid length.
[  612.926375][T29206] netlink: 'syz.1.6529': attribute type 29 has an invalid length.
[  613.268179][T29214] 8021q: VLANs not supported on syzkaller1
[  613.353890][T29218] syzkaller1: entered promiscuous mode
[  613.355854][T29218] syzkaller1: entered allmulticast mode
[  613.358928][T29218] netlink: 'syz.2.6533': attribute type 21 has an invalid length.
[  613.361772][T29218] netlink: 'syz.2.6533': attribute type 1 has an invalid length.
[  613.428754][T29223] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001
[  613.431580][T29221] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001
[  613.639211][T29234] netlink: 'syz.1.6538': attribute type 29 has an invalid length.
[  613.644106][T29234] __nla_validate_parse: 6 callbacks suppressed
[  613.644121][T29234] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6538'.
[  613.655536][T29236] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6539'.
[  613.701423][T29238] nbd: couldn't find device at index 536870912
[  613.822828][T29245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'.
[  614.017098][T29258] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6546'.
[  615.114420][T29295] syzkaller1: entered promiscuous mode
[  615.116096][T29295] syzkaller1: entered allmulticast mode
[  615.158516][T29298] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6558'.
[  615.571342][T29329] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6566'.
[  615.646013][T29336] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6568'.
[  615.651772][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6568'.
[  615.659374][T29336] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6568'.
[  615.708638][T29340] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6565'.
[  615.927442][T29348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.935365][T29353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  615.998047][T29363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.002941][T29363] syzkaller0: entered promiscuous mode
[  616.004935][T29363] syzkaller0: entered allmulticast mode
[  616.025293][T29363] tipc: Resetting bearer <eth:syzkaller0>
[  616.492757][T29385] validate_nla: 11 callbacks suppressed
[  616.492769][T29385] netlink: 'syz.0.6582': attribute type 29 has an invalid length.
[  616.497439][T29385] netlink: 'syz.0.6582': attribute type 29 has an invalid length.
[  616.743450][T29408] netlink: 'syz.0.6590': attribute type 29 has an invalid length.
[  616.746699][T29408] netlink: 'syz.0.6590': attribute type 29 has an invalid length.
[  616.753857][T29410] netlink: 'syz.2.6591': attribute type 15 has an invalid length.
[  616.823191][T29362] tipc: Resetting bearer <eth:syzkaller0>
[  616.849899][T29362] tipc: Disabling bearer <eth:syzkaller0>
[  616.918506][T29428] batadv_slave_0: entered promiscuous mode
[  617.142895][T29436] veth1_vlan (unregistering): left allmulticast mode
[  617.145341][T29436] veth1_vlan (unregistering): left promiscuous mode
[  617.761196][T29416] batadv_slave_0: left promiscuous mode
[  617.806101][T29439] netlink: 'syz.0.6598': attribute type 29 has an invalid length.
[  617.809697][T29439] netlink: 'syz.0.6598': attribute type 29 has an invalid length.
[  617.973555][T29451] bridge0: entered allmulticast mode
[  618.022446][T29458] batadv_slave_0: entered promiscuous mode
[  618.024634][T29454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  618.035927][T29458] batadv_slave_0: left promiscuous mode
[  618.370715][T29476] netlink: 'syz.1.6608': attribute type 29 has an invalid length.
[  618.373687][T29476] netlink: 'syz.1.6608': attribute type 29 has an invalid length.
[  618.611915][T29506] netlink: 'syz.1.6617': attribute type 29 has an invalid length.
[  618.885727][T29528] __nla_validate_parse: 14 callbacks suppressed
[  618.885738][T29528] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6625'.
[  619.009920][T29538] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6632'.
[  619.812644][T29543] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6634'.
[  619.970530][T29554] netlink: del zone limit has 4 unknown bytes
[  619.972928][T29554] netlink: del zone limit has 4 unknown bytes
[  619.980043][T29554] netlink: del zone limit has 4 unknown bytes
[  619.982873][T29554] netlink: del zone limit has 4 unknown bytes
[  619.985232][T29554] netlink: del zone limit has 4 unknown bytes
[  620.184178][T29575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6638'.
[  620.238795][T29584] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6640'.
[  620.302979][T29592] syzkaller1: entered promiscuous mode
[  620.305129][T29592] syzkaller1: entered allmulticast mode
[  620.423127][T29601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6646'.
[  620.471027][T29604] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6648'.
[  620.830813][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6653'.
[  620.834182][T29626] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  620.836645][T29626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.176239][T29628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6654'.
[  621.216664][T29633] batadv_slave_0: entered promiscuous mode
[  621.219021][T29632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  621.237642][T29632] batadv_slave_0: left promiscuous mode
[  621.400827][T29648] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6658'.
[  621.410632][T29650] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  621.413633][T29650] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  621.705443][T29675] validate_nla: 14 callbacks suppressed
[  621.705455][T29675] netlink: 'syz.2.6666': attribute type 29 has an invalid length.
[  621.715597][T29675] netlink: 'syz.2.6666': attribute type 29 has an invalid length.
[  622.273116][T29701] netlink: 'syz.2.6674': attribute type 29 has an invalid length.
[  622.276862][T29701] netlink: 'syz.2.6674': attribute type 29 has an invalid length.
[  622.576466][T29728] netlink: 'syz.0.6684': attribute type 29 has an invalid length.
[  622.580816][T29728] netlink: 'syz.0.6684': attribute type 29 has an invalid length.
[  622.623157][T29730] lo speed is unknown, defaulting to 1000
[  623.524548][T29751] netlink: 'syz.0.6692': attribute type 29 has an invalid length.
[  623.527614][T29751] netlink: 'syz.0.6692': attribute type 29 has an invalid length.
[  623.638178][T29766] netlink: 'syz.0.6694': attribute type 3 has an invalid length.
[  623.698954][T29777] netlink: 'syz.0.6700': attribute type 29 has an invalid length.
[  624.114917][T29807] __nla_validate_parse: 20 callbacks suppressed
[  624.114930][T29807] netlink: 184356 bytes leftover after parsing attributes in process `syz.2.6707'.
[  624.165898][T29813] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6710'.
[  624.211404][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6711'.
[  624.236454][T29817] syzkaller0: entered promiscuous mode
[  624.238201][T29817] syzkaller0: entered allmulticast mode
[  625.608801][T29822] macvtap0: entered promiscuous mode
[  625.611887][T29822] macvtap0: entered allmulticast mode
[  625.613742][T29822] veth0_macvtap: entered allmulticast mode
[  625.699460][T29827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6714'.
[  625.988570][T29839] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6718'.
[  626.736440][T29869] validate_nla: 6 callbacks suppressed
[  626.736454][T29869] netlink: 'syz.2.6726': attribute type 29 has an invalid length.
[  626.745566][T29869] netlink: 'syz.2.6726': attribute type 29 has an invalid length.
[  626.755608][T29869] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6726'.
[  627.180485][T29882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.183396][T29882] syzkaller0: entered promiscuous mode
[  627.185289][T29882] syzkaller0: entered allmulticast mode
[  627.199880][T29882] tipc: Resetting bearer <eth:syzkaller0>
[  627.256918][T29884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'.
[  627.381009][T29881] tipc: Resetting bearer <eth:syzkaller0>
[  627.396739][T29881] tipc: Disabling bearer <eth:syzkaller0>
[  627.493602][T29893] netlink: 'syz.2.6734': attribute type 29 has an invalid length.
[  627.496582][T29893] netlink: 'syz.2.6734': attribute type 29 has an invalid length.
[  627.499495][T29893] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6734'.
[  627.571797][T29895] veth11: entered promiscuous mode
[  628.187295][T29919] netlink: 'syz.0.6742': attribute type 29 has an invalid length.
[  628.190877][T29919] netlink: 'syz.0.6742': attribute type 29 has an invalid length.
[  628.193997][T29919] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6742'.
[  628.259525][T29921] sctp: [Deprecated]: syz.0.6743 (pid 29921) Use of struct sctp_assoc_value in delayed_ack socket option.
[  628.259525][T29921] Use struct sctp_sack_info instead
[  628.671160][T29938] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6747'.
[  628.697471][T29935] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  628.700539][T29934] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  628.821287][T29948] netlink: 'syz.1.6750': attribute type 29 has an invalid length.
[  628.825340][T29948] netlink: 'syz.1.6750': attribute type 29 has an invalid length.
[  629.230851][T29982] netlink: 'syz.0.6758': attribute type 29 has an invalid length.
[  629.234838][T29982] netlink: 'syz.0.6758': attribute type 29 has an invalid length.
[  629.238034][T29982] __nla_validate_parse: 3 callbacks suppressed
[  629.238044][T29982] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6758'.
[  629.935863][T30003] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6766'.
[  630.167502][T30030] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6774'.
[  630.202166][T30035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6775'.
[  630.314777][T30051] sctp: [Deprecated]: syz.0.6780 (pid 30051) Use of int in max_burst socket option.
[  630.314777][T30051] Use struct sctp_assoc_value instead
[  630.443747][T30058] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6784'.
[  630.623277][T30075] lo speed is unknown, defaulting to 1000
[  630.755621][T30084] netlink: 380 bytes leftover after parsing attributes in process `syz.2.6791'.
[  630.835870][T30089] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6792'.
[  630.927830][T30093] syzkaller1: entered promiscuous mode
[  630.931594][T30093] syzkaller1: entered allmulticast mode
[  631.164581][T30111] lo speed is unknown, defaulting to 1000
[  631.217271][T30114] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6800'.
[  631.406909][T30127] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6805'.
[  631.444895][T30127]  (unregistering): Released all slaves
[  631.509389][T30128] lo speed is unknown, defaulting to 1000
[  631.693358][T30142] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6810'.
[  631.826735][T30147] netlink: 'syz.2.6812': attribute type 11 has an invalid length.
[  631.985405][T30162] validate_nla: 21 callbacks suppressed
[  631.985418][T30162] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  631.991591][T30162] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  631.991612][T30163] netlink: 'syz.1.6816': attribute type 2 has an invalid length.
[  632.180311][T30168] netlink: 'syz.2.6818': attribute type 29 has an invalid length.
[  632.184433][T30168] netlink: 'syz.2.6818': attribute type 29 has an invalid length.
[  632.650882][T30191] netlink: 'syz.2.6826': attribute type 29 has an invalid length.
[  632.655430][T30191] netlink: 'syz.2.6826': attribute type 29 has an invalid length.
[  632.907097][T30211] lo speed is unknown, defaulting to 1000
[  633.115158][T30219] netlink: 'syz.2.6834': attribute type 29 has an invalid length.
[  633.118777][T30219] netlink: 'syz.2.6834': attribute type 29 has an invalid length.
[  633.841759][T30232] delete_channel: no stack
[  634.067443][T30242] veth0_to_bond: entered promiscuous mode
[  634.070853][T30242] veth0_to_bond: entered allmulticast mode
[  634.171254][T30251] netlink: 'syz.2.6842': attribute type 29 has an invalid length.
[  634.196216][T30255] batadv_slave_0: entered promiscuous mode
[  634.431393][T30245] batadv_slave_0: left promiscuous mode
[  634.452802][T30270] __nla_validate_parse: 23 callbacks suppressed
[  634.452817][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6850'.
[  634.467408][T30270] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6850'.
[  634.503849][T30272] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.6851'.
[  634.522712][T30274] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6852'.
[  634.977842][T30298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6858'.
[  634.982227][T30299] openvswitch: netlink: Multiple metadata blocks provided
[  634.985210][T30298] openvswitch: netlink: Multiple metadata blocks provided
[  635.025660][T30307] syzkaller0: entered promiscuous mode
[  635.027499][T30307] syzkaller0: entered allmulticast mode
[  635.283715][T30313] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6862'.
[  635.325018][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6863'.
[  635.466520][T30321] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6865'.
[  635.576848][T25275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.580384][T25275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.612296][    C0] ------------[ cut here ]------------
[  635.614078][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  635.617746][    C0] WARNING: CPU: 0 PID: 30327 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  635.621154][    C0] Modules linked in:
[  635.622772][    C0] CPU: 0 UID: 0 PID: 30327 Comm: modprobe Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  635.627497][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  635.630943][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  635.633011][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 f0 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  635.641018][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  635.643540][    C0] RAX: 0c310ac2e9ffea00 RBX: 000000000000000c RCX: ffff8881077a9cc0
[  635.646882][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  635.650246][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  635.653547][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff888105942f28
[  635.656737][    C0] R13: 0000000000000000 R14: ffff88803d548e40 R15: ffff88803d54b0d8
[  635.660125][    C0] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  635.663904][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  635.666619][    C0] CR2: 00007fcb4cd5c440 CR3: 000000000df38000 CR4: 00000000000006f0
[  635.669928][    C0] Call Trace:
[  635.671319][    C0]  <IRQ>
[  635.672513][    C0]  rate_control_send_low+0x194/0x7a0
[  635.674664][    C0]  rate_control_get_rate+0x20b/0x5d0
[  635.676864][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  635.679551][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  635.682300][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  635.684750][    C0]  ? rcu_read_lock_sched_held+0x89/0x100
[  635.687069][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  635.689527][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  635.691722][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  635.693854][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  635.696071][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  635.698591][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  635.700994][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  635.704143][    C0]  __iterate_interfaces+0x2ab/0x590
[  635.706536][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  635.709025][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  635.712015][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  635.714467][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  635.717326][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  635.719597][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  635.722026][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  635.724294][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  635.726770][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  635.729373][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  635.731511][    C0]  handle_softirqs+0x286/0x870
[  635.733481][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  635.735422][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  635.737624][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  635.739908][    C0]  __irq_exit_rcu+0xca/0x1f0
[  635.741896][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  635.744140][    C0]  irq_exit_rcu+0x9/0x30
[  635.745999][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  635.748461][    C0]  </IRQ>
[  635.749891][    C0]  <TASK>
[  635.751170][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  635.753599][    C0] RIP: 0010:folio_mark_accessed+0x6b/0x8b0
[  635.756114][    C0] Code: 41 48 c7 44 24 28 9a 0d 9e 8d 48 c7 44 24 30 d0 6b fa 81 4c 8d 7c 24 20 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2f <66> 43 c7 44 2f 09 f3 f3 43 c6 44 2f 0b f3 e8 62 44 c5 ff 4c 8d 63
[  635.764381][    C0] RSP: 0018:ffffc900087f7500 EFLAGS: 00000a02
[  635.767049][    C0] RAX: f2f2f200f1f1f1f1 RBX: ffffea0004d9d880 RCX: ffff8881077a9cc0
[  635.770346][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0004d9d880
[  635.773494][    C0] RBP: ffffc900087f75d0 R08: ffff888102a04eef R09: 1ffff110205409dd
[  635.776666][    C0] R10: dffffc0000000000 R11: ffffed10205409de R12: ffffea0004d9d898
[  635.779988][    C0] R13: dffffc0000000000 R14: ffff8881198ec200 R15: 1ffff920010feea4
[  635.783285][    C0]  ? __pfx_folio_mark_accessed+0x10/0x10
[  635.785622][    C0]  ? page_table_check_clear+0x187/0x700
[  635.787927][    C0]  ? page_table_check_clear+0x187/0x700
[  635.790241][    C0]  ? page_table_check_clear+0x4f3/0x700
[  635.792465][    C0]  ? page_table_check_clear+0x187/0x700
[  635.794714][    C0]  unmap_page_range+0x1c69/0x41c0
[  635.796816][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  635.799055][    C0]  ? unmap_vmas+0x144/0x580
[  635.801106][    C0]  unmap_vmas+0x399/0x580
[  635.803106][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  635.805312][    C0]  exit_mmap+0x248/0xb50
[  635.807185][    C0]  ? uprobe_clear_state+0x20f/0x290
[  635.809383][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  635.811445][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  635.813848][    C0]  ? __pfx_exit_aio+0x10/0x10
[  635.815836][    C0]  ? uprobe_clear_state+0x274/0x290
[  635.818055][    C0]  __mmput+0x118/0x420
[  635.819943][    C0]  exit_mm+0x1da/0x2c0
[  635.821671][    C0]  ? __pfx_exit_mm+0x10/0x10
[  635.823561][    C0]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  635.825779][    C0]  ? rcu_is_watching+0x15/0xb0
[  635.827741][    C0]  do_exit+0x648/0x22e0
[  635.829515][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  635.831680][    C0]  ? __pfx_do_exit+0x10/0x10
[  635.833561][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  635.835828][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.838087][    C0]  do_group_exit+0x21c/0x2d0
[  635.840178][    C0]  __x64_sys_exit_group+0x3f/0x40
[  635.842246][    C0]  x64_sys_call+0x21f7/0x2200
[  635.844174][    C0]  do_syscall_64+0xfa/0x3b0
[  635.846110][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.848263][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.850875][    C0]  ? exc_page_fault+0x9f/0xf0
[  635.852902][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.855437][    C0] RIP: 0033:0x7fcb4ce1aa90
[  635.857361][    C0] Code: Unable to access opcode bytes at 0x7fcb4ce1aa66.
[  635.860366][    C0] RSP: 002b:00007ffd30976bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  635.863754][    C0] RAX: ffffffffffffffda RBX: 00007fcb4cf0b860 RCX: 00007fcb4ce1aa90
[  635.867050][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001
[  635.870338][    C0] RBP: 00007fcb4cf0b860 R08: 00007ffd30976a30 R09: 00007ffd30976b10
[  635.873544][    C0] R10: 00007ffd30976a70 R11: 0000000000000246 R12: 0000000000000000
[  635.876718][    C0] R13: 0000000000000001 R14: 00007fcb4cf0f658 R15: 0000000000000001
[  635.880126][    C0]  </TASK>
[  635.881501][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  635.884676][    C0] CPU: 0 UID: 0 PID: 30327 Comm: modprobe Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  635.889669][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  635.893894][    C0] Call Trace:
[  635.895325][    C0]  <IRQ>
[  635.896607][    C0]  dump_stack_lvl+0x99/0x250
[  635.898668][    C0]  ? __asan_memcpy+0x40/0x70
[  635.900594][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  635.902702][    C0]  ? __pfx__printk+0x10/0x10
[  635.904702][    C0]  panic+0x2db/0x790
[  635.906412][    C0]  ? __pfx_panic+0x10/0x10
[  635.908364][    C0]  __warn+0x31b/0x4b0
[  635.910105][    C0]  ? __rate_control_send_low+0x5df/0x820
[  635.912558][    C0]  ? __rate_control_send_low+0x5df/0x820
[  635.914949][    C0]  report_bug+0x2be/0x4f0
[  635.916806][    C0]  ? __rate_control_send_low+0x5df/0x820
[  635.919212][    C0]  ? __rate_control_send_low+0x5df/0x820
[  635.921566][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  635.923915][    C0]  handle_bug+0x84/0x160
[  635.925688][    C0]  exc_invalid_op+0x1a/0x50
[  635.927615][    C0]  asm_exc_invalid_op+0x1a/0x20
[  635.929665][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  635.932203][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 f2 f0 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  635.939912][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  635.942385][    C0] RAX: 0c310ac2e9ffea00 RBX: 000000000000000c RCX: ffff8881077a9cc0
[  635.945637][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  635.948964][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  635.952302][    C0] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff888105942f28
[  635.955468][    C0] R13: 0000000000000000 R14: ffff88803d548e40 R15: ffff88803d54b0d8
[  635.958641][    C0]  ? __rate_control_send_low+0x5de/0x820
[  635.960927][    C0]  rate_control_send_low+0x194/0x7a0
[  635.963045][    C0]  rate_control_get_rate+0x20b/0x5d0
[  635.965223][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  635.967628][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  635.970384][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  635.972668][    C0]  ? rcu_read_lock_sched_held+0x89/0x100
[  635.974973][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  635.977442][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  635.979654][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  635.981897][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  635.984102][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  635.986569][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  635.988803][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  635.991713][    C0]  __iterate_interfaces+0x2ab/0x590
[  635.993811][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  635.996259][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  635.999208][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  636.001731][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  636.004632][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  636.006726][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  636.009082][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  636.011206][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  636.013490][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  636.016236][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  636.018330][    C0]  handle_softirqs+0x286/0x870
[  636.020306][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  636.022352][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  636.024570][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  636.026753][    C0]  __irq_exit_rcu+0xca/0x1f0
[  636.028667][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  636.030973][    C0]  irq_exit_rcu+0x9/0x30
[  636.032703][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  636.034988][    C0]  </IRQ>
[  636.036189][    C0]  <TASK>
[  636.037398][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  636.040070][    C0] RIP: 0010:folio_mark_accessed+0x6b/0x8b0
[  636.042531][    C0] Code: 41 48 c7 44 24 28 9a 0d 9e 8d 48 c7 44 24 30 d0 6b fa 81 4c 8d 7c 24 20 49 c1 ef 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4b 89 04 2f <66> 43 c7 44 2f 09 f3 f3 43 c6 44 2f 0b f3 e8 62 44 c5 ff 4c 8d 63
[  636.050566][    C0] RSP: 0018:ffffc900087f7500 EFLAGS: 00000a02
[  636.053084][    C0] RAX: f2f2f200f1f1f1f1 RBX: ffffea0004d9d880 RCX: ffff8881077a9cc0
[  636.056320][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0004d9d880
[  636.059630][    C0] RBP: ffffc900087f75d0 R08: ffff888102a04eef R09: 1ffff110205409dd
[  636.062833][    C0] R10: dffffc0000000000 R11: ffffed10205409de R12: ffffea0004d9d898
[  636.066014][    C0] R13: dffffc0000000000 R14: ffff8881198ec200 R15: 1ffff920010feea4
[  636.069236][    C0]  ? __pfx_folio_mark_accessed+0x10/0x10
[  636.071553][    C0]  ? page_table_check_clear+0x187/0x700
[  636.073927][    C0]  ? page_table_check_clear+0x187/0x700
[  636.076219][    C0]  ? page_table_check_clear+0x4f3/0x700
[  636.078482][    C0]  ? page_table_check_clear+0x187/0x700
[  636.080802][    C0]  unmap_page_range+0x1c69/0x41c0
[  636.082888][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  636.085147][    C0]  ? unmap_vmas+0x144/0x580
[  636.086609][    C0]  unmap_vmas+0x399/0x580
[  636.087983][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  636.089502][    C0]  exit_mmap+0x248/0xb50
[  636.090941][    C0]  ? uprobe_clear_state+0x20f/0x290
[  636.092547][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  636.094157][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  636.095919][    C0]  ? __pfx_exit_aio+0x10/0x10
[  636.097395][    C0]  ? uprobe_clear_state+0x274/0x290
[  636.099036][    C0]  __mmput+0x118/0x420
[  636.100373][    C0]  exit_mm+0x1da/0x2c0
[  636.101649][    C0]  ? __pfx_exit_mm+0x10/0x10
[  636.103308][    C0]  ? hrtimer_try_to_cancel+0x3d9/0x420
[  636.105127][    C0]  ? rcu_is_watching+0x15/0xb0
[  636.106687][    C0]  do_exit+0x648/0x22e0
[  636.108056][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  636.109804][    C0]  ? __pfx_do_exit+0x10/0x10
[  636.111426][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  636.113056][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.114679][    C0]  do_group_exit+0x21c/0x2d0
[  636.116165][    C0]  __x64_sys_exit_group+0x3f/0x40
[  636.117804][    C0]  x64_sys_call+0x21f7/0x2200
[  636.119315][    C0]  do_syscall_64+0xfa/0x3b0
[  636.120872][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.122593][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.124595][    C0]  ? exc_page_fault+0x9f/0xf0
[  636.126094][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.127957][    C0] RIP: 0033:0x7fcb4ce1aa90
[  636.129306][    C0] Code: Unable to access opcode bytes at 0x7fcb4ce1aa66.
[  636.131656][    C0] RSP: 002b:00007ffd30976bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  636.134299][    C0] RAX: ffffffffffffffda RBX: 00007fcb4cf0b860 RCX: 00007fcb4ce1aa90
[  636.136874][    C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000001
[  636.139346][    C0] RBP: 00007fcb4cf0b860 R08: 00007ffd30976a30 R09: 00007ffd30976b10
[  636.141888][    C0] R10: 00007ffd30976a70 R11: 0000000000000246 R12: 0000000000000000
[  636.144261][    C0] R13: 0000000000000001 R14: 00007fcb4cf0f658 R15: 0000000000000001
[  636.146888][    C0]  </TASK>
[  636.148468][    C0] Kernel Offset: disabled
[  636.149846][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:55:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006ef0
R8 =ffff8880215f0237 R9 =1ffff110042be046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95926 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcb4cd5c440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=303636302d72656c 6c616b7a79732d30 XMM03=2d30316430393564 3166626431672d30
XMM04=2779747269642d30 3164303935643166 XMM05=626431672d303036 36302d72656c6c61
XMM06=6b7a79732d302e36 312e3627206f7420 XMM07=79726f7463657269 642065676e616863
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dc514749e688f300 RBX=ffffffff81969b18 RCX=dc514749e688f300 RDX=0000000000000001
RSI=ffffffff8d9792b8 RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07bf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6fd4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556820e87000 CR3=000000010e9d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555576e224a0
XMM02=0890032bfe080005 89c0030a04000589 XMM03=10000fc003021000 0fb00304a4c81000
XMM04=a0a280d008000fe0 030010000fd00300 XMM05=010008000a100052 10000601718c2080
XMM06=10000f8004010000 020806060168e204 XMM07=a0a280d008000fe0 030010000fd00300
XMM08=10000fc003021000 0fb00304a4c81000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
