last executing test programs:

30.982009743s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

25.372183351s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

19.650557967s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

13.341165515s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

7.425491479s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

3.134975501s ago: executing program 2 (id=2361):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050004000000000005000100060000000d000300686173683a6d61630000000005000500000000000c000780080008000000009a090002"], 0x54}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000740)={<r4=>0x0, 0x4f, "bafcc5b3a3a12c7718ab49db0880a5bf999732af5f59d9590a6c9e529d2a1ce540752bf01e822f307959666278d7c235ea0b00d00b43be66c084d940f42028a9c5536f4fee5b612d1fe91f5a4b7529"}, &(0x7f00000007c0)=0x57)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000800)={r4, 0xffffffff}, &(0x7f0000000840)=0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@deltclass={0x464, 0x29, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xf, 0xfff5}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xdd, 0x81}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5e}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x418, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffffe, 0x4, 0x21, 0x2, 0x9, 0xfffffff9, 0x3fc000, 0x2b, 0x5, 0xfff, 0x9, 0x7, 0x40, 0xe622, 0x8, 0xf, 0x80000001, 0xff, 0x8, 0x7, 0x722, 0x10001, 0x1000, 0xffffffff, 0x7, 0xb1, 0x6, 0x3, 0x1, 0x9, 0x5, 0x40, 0x3, 0xfffffffe, 0x55a, 0xd, 0x605, 0xfffffff7, 0xc, 0x810, 0x400, 0x1, 0xfffffffc, 0x7fffffff, 0x2, 0x2, 0x0, 0x9, 0x2, 0x0, 0x8, 0x9932, 0x0, 0x1, 0x8001, 0xf72, 0x2ae5e598, 0x101, 0x10, 0xfffffff4, 0x7, 0x7, 0x4973, 0x0, 0x5, 0xa6, 0x6, 0x1, 0xe, 0x9b, 0x101, 0xfffffff9, 0x101, 0x3, 0xfffffffd, 0x2, 0x8, 0x3, 0x4, 0x2, 0x8, 0xb, 0x9, 0x58eb, 0x6, 0x7, 0x0, 0x1, 0x28, 0x6, 0xd, 0x5, 0x953e, 0x4, 0x7f, 0x4, 0xf, 0x4, 0x1, 0x2, 0x9, 0x6, 0xc, 0x613f, 0x6, 0x7, 0x80, 0x27c, 0x1, 0x6, 0xe, 0x10001, 0x4, 0xbd5, 0x6, 0xe2, 0x6, 0xfffffffa, 0x5b, 0x8, 0x4, 0x6, 0x8001, 0xc, 0xfffffffe, 0x2, 0x4, 0x2, 0x7ff, 0x3, 0x3aed30c6, 0xfffffff7, 0xfc, 0x9, 0x4, 0x9, 0x8, 0xc, 0x3ee7, 0x4, 0x0, 0x8, 0x2, 0x67da, 0x136, 0x400, 0x80, 0x7, 0x80000001, 0x4000000, 0xfffffffc, 0xfffffffd, 0x2, 0x9, 0xb251, 0x5, 0x6, 0xe, 0x8, 0xc6, 0x9, 0x1, 0x6, 0x10001, 0x6, 0x6, 0x7f, 0x6, 0x81, 0x0, 0x6, 0x7, 0xbbfe, 0x100, 0x7, 0xf, 0x10, 0xf, 0x1c6906f1, 0x6, 0xa4, 0x800, 0x9, 0x3, 0x4, 0x1ff, 0x5, 0x4, 0x1, 0x1, 0xa, 0x10, 0x5, 0x8, 0xfffffffc, 0x94b, 0x5, 0xe056, 0x3, 0x30, 0xff, 0x7fffffff, 0x4d, 0x3, 0x100, 0x28, 0x3, 0x8, 0x100000, 0x7, 0x342, 0xc2, 0x10000, 0x98, 0xd, 0x3, 0x9, 0x37d, 0x4, 0x3, 0x6, 0x5, 0x2, 0x1, 0x6, 0x5, 0x7f, 0x0, 0x5, 0x1000, 0x9, 0x24, 0x8, 0xff, 0x0, 0x4, 0x5, 0x7, 0x2, 0x3, 0xff, 0x9, 0x400, 0x39, 0x40, 0xff, 0xffff8001, 0x80000000, 0x2, 0x1, 0x1, 0x7, 0x9, 0x7, 0x2, 0x7ff]}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x2008004}, 0x4040000)
r5 = getpid()
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41)

3.130816371s ago: executing program 2 (id=2362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0xa0, 0x18, 0x100, 0x70bd26, 0x25dfdbfc, {0x1c, 0x10, 0x14, 0x4, 0x0, 0x3, 0xff, 0xc, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0xd}, {0x9}, {0xfbaad}, {0x40}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x9}, {0xffff9, 0x0, 0x1}, {0xc2, 0x0, 0x1}, {0x6356}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x1}, {0xfff}, {0x6}, {0xcb}, {0x1, 0x0, 0x1}, {0x80}, {0x2, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x8f8f}, {0x6}, {0x1}, {0x400, 0x0, 0x1}, {0x8001}, {0x5}, {0x89a8}, {0x401, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000002c0)='wg0\x00', 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004001)
clock_gettime(0x0, &(0x7f0000004340)={<r7=>0x0, <r8=>0x0})
recvmmsg(r1, &(0x7f0000004140)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/85, 0x55}], 0x3, &(0x7f00000006c0)=""/233, 0xe9}, 0x1}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/169, 0xa9}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f00000018c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/141, 0x8d}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/76, 0x4c}, {&(0x7f0000001bc0)=""/149, 0x95}, {&(0x7f0000001c80)=""/126, 0x7e}, {&(0x7f0000001d00)=""/102, 0x66}, {&(0x7f0000001d80)=""/221, 0xdd}], 0x8}, 0x94}, {{&(0x7f0000001f00)=@isdn, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/101, 0x65}, {&(0x7f0000002000)=""/121, 0x79}], 0x2}, 0x3f6}, {{&(0x7f00000020c0)=@isdn, 0x80, &(0x7f0000003700)=[{&(0x7f0000002140)=""/125, 0x7d}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/216, 0xd8}, {&(0x7f00000032c0)=""/146, 0x92}, {&(0x7f0000003380)=""/165, 0xa5}, {&(0x7f0000003440)=""/153, 0x99}, {&(0x7f0000003500)=""/194, 0xc2}, {&(0x7f0000003600)=""/172, 0xac}, {&(0x7f00000036c0)=""/48, 0x30}], 0x9, &(0x7f00000037c0)=""/210, 0xd2}, 0xff}, {{&(0x7f00000038c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/49, 0x31}, {&(0x7f0000003980)=""/142, 0x8e}], 0x2, &(0x7f0000003a80)=""/50, 0x32}, 0x5}, {{&(0x7f0000003ac0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b40)=""/232, 0xe8}, {&(0x7f0000003c40)=""/242, 0xf2}], 0x2, &(0x7f0000003d80)=""/202, 0xca}, 0x3}, {{&(0x7f0000003e80)=@hci, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/63, 0x3f}, {&(0x7f0000003f40)=""/151, 0x97}], 0x2, &(0x7f0000004040)=""/214, 0xd6}, 0x698f4f34}], 0x8, 0x40010020, &(0x7f0000004380)={r7, r8+60000000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004440)={{r2, <r9=>0xffffffffffffffff}, &(0x7f00000043c0), &(0x7f0000004400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004580)={r9, &(0x7f0000004480)="51374c533d1ca07fd6d1fb97b670831c380e9559d8b8df41326d79fa7eb4369d830084ff4a61c444bae875d5a335fb241d97180201e10707a8180aa5df564637967fe7647a6daf356c27c7a53cd391f8d7f386e5e59a8ed2479a2e4b980e802c6927c264a143254c22755582402b902079711eeae5df03da07901b152fe49947c95a89a09eeb209ee79a8091762f07239e82889b354816c42b08b0b51b990ce2e88b83436f4595ac6e43cf3725292fae5e744d", &(0x7f0000004540)=@tcp, 0x2}, 0x20)
socketpair(0xf, 0x5, 0x81, &(0x7f00000045c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$inet6_opts(r11, 0x29, 0x39, &(0x7f0000004600)=@srh={0xc, 0x4, 0x4, 0x2, 0x6, 0x60, 0x6, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000004640), r10)
recvmsg(r1, &(0x7f0000004800)={&(0x7f0000004680)=@can={0x1d, <r12=>0x0}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)=""/49, 0x31}, {&(0x7f0000004740)=""/85, 0x55}], 0x2}, 0x10010)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000004840)={0x0, 0x1})
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000004880))
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f00000048c0)={<r13=>r4, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff})
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004940), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000004a00)={'ip6gre0\x00', &(0x7f0000004980)={'ip6tnl0\x00', <r15=>r12, 0x29, 0x6, 0x4, 0x9, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3e}, 0x700, 0x40, 0x8, 0x1ff}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000004bc0)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004a40)={0x128, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x44000054)
openat$cgroup_ro(r13, &(0x7f0000004c00)='blkio.bfq.io_merged\x00', 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000004c40)=@device_b, &(0x7f0000004c80)=@ctrl_frame=@ba={{}, {0xff}, @device_b, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x40}, "3f466b28686b4f98a1292bdfe3558157fc4a86d302431be174f5279758efdf6bbccc40cc77ab34d327f58162676a296b3a744b42bedd91036bae11d89925390ab3a44c04415b865b8293cb803d72dfd053f904a42173348a6ecd83805e7f1899462afcca8bd66643c63a8912edb75f81fa01594929ef635af15aa9ee1af47a0b"}}, 0x94)

1.768478167s ago: executing program 1 (id=1884):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94)
syz_extract_tcp_res(&(0x7f0000000080)={<r0=>0x41424344}, 0x2, 0x8)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff7a02000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, 0x94) (async)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x8) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x0, 0x9, 0xb815, 0x6, 0x4}, @mpls={[{0x867c, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0xc, 0x4, 0x1, 0x6, 0x14d, 0x67, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0x5e, [@multicast1, @broadcast, @local, @rand_addr=0x64010101]}, @end, @end, @rr={0x7, 0x7, 0x5, [@multicast1]}]}}, {{0x4e23, 0x4e20, r0, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x9, 0x0, 0x1c0, {[@md5sig={0x13, 0x12, "50cee0fbe75e8d2cf2e7a7701b2f2e1f"}, @window={0x3, 0x3, 0xf}]}}, {"94e21e640183c5940aca9dd922cf656487f3477a7501a57bba0f00a2655743a55457154af87240511250fd8e10c746b380a866ea2d35bf9ec544488e80bb841ad55b9c5f21bde69e08341cb7c4a50ffb2cf6a08854ea4dbbf321ed67121d90a5d5f04604883ffbb458067affacfd632bbc11f62990029b685cd8b8c14184f0ed7d92873e208029ba80f06d0fa806bc00c79bd8c353f1ef365660d554bec71905963c5f6edcb31d889695a4421c7e35ccc78fb31af46502b97dad029e866561c1e5be2a630b29cd13040aaa2bb15377e6d047d2c955d949074bb5fbd3ccf59224282445133366a04955d51ad55cea5250da"}}}}}, 0x15f) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

1.747776297s ago: executing program 2 (id=2385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000008c0)=""/272, 0x110}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6, 0x0, 0x0, 0x1000000}, 0x80040000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1b19}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)

659.524641ms ago: executing program 2 (id=2387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)
read(r0, &(0x7f0000000080)=""/186, 0xba)
unshare(0x26020480)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x40000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0f00000004000000080000000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e0bc3cb258a99def556809a0aa0addaf503f2e629f3c66822f25e1b836ae88752b3467c262cb974ddefdb46a89786d6987a7e5913089b5043a12fc0504044dfee473b6eb7faa8ce199506b5eb7e2f2a7f2cd42b9b94a041a6b2fbb4b12a055e0b7de566a8a8b4acbea1f20659eb67becdd6decef97204ed799410f78aed4bdd4c2edc4445e49ac24e6e7299f4ea2cf4606"], 0x50)
writev(0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000180)="5edca6bba60b78949d16a15b25ffa64923bcf9c25e94f68f46926efbbbf405c041d5b69767e7", &(0x7f0000000000)=""/4, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}}, [@mark={0xc, 0x15, {0x20000000, 0xffff}}]}, 0xc4}}, 0x4000000)

515.030535ms ago: executing program 2 (id=2388):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x2, 0x4, 0x6, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0x2, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0xa, 0x9, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x7fffffff, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x0, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x2, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0xa, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) (rerun: 64)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='/\x00\x00\x002!\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7d31984b01eaeb21}, 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r8) (async)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r8)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002b027000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

443.792448ms ago: executing program 2 (id=2390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0xa0, 0x18, 0x100, 0x70bd26, 0x25dfdbfc, {0x1c, 0x10, 0x14, 0x4, 0x0, 0x3, 0xff, 0xc, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0xd}, {0x9}, {0xfbaad}, {0x40}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x9}, {0xffff9, 0x0, 0x1}, {0xc2, 0x0, 0x1}, {0x6356}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x1}, {0xfff}, {0x6}, {0xcb}, {0x1, 0x0, 0x1}, {0x80}, {0x2, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x8f8f}, {0x6}, {0x1}, {0x400, 0x0, 0x1}, {0x8001}, {0x5}, {0x89a8}, {0x401, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote}}}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000002c0)='wg0\x00', 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004001)
clock_gettime(0x0, &(0x7f0000004340)={<r7=>0x0, <r8=>0x0})
recvmmsg(r1, &(0x7f0000004140)=[{{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/85, 0x55}], 0x3, &(0x7f00000006c0)=""/233, 0xe9}, 0x1}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/169, 0xa9}], 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, 0x3ff}, {{&(0x7f00000018c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001940)=""/112, 0x70}, {&(0x7f00000019c0)=""/141, 0x8d}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001b40)=""/76, 0x4c}, {&(0x7f0000001bc0)=""/149, 0x95}, {&(0x7f0000001c80)=""/126, 0x7e}, {&(0x7f0000001d00)=""/102, 0x66}, {&(0x7f0000001d80)=""/221, 0xdd}], 0x8}, 0x94}, {{&(0x7f0000001f00)=@isdn, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f80)=""/101, 0x65}, {&(0x7f0000002000)=""/121, 0x79}], 0x2}, 0x3f6}, {{&(0x7f00000020c0)=@isdn, 0x80, &(0x7f0000003700)=[{&(0x7f0000002140)=""/125, 0x7d}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/216, 0xd8}, {&(0x7f00000032c0)=""/146, 0x92}, {&(0x7f0000003380)=""/165, 0xa5}, {&(0x7f0000003440)=""/153, 0x99}, {&(0x7f0000003500)=""/194, 0xc2}, {&(0x7f0000003600)=""/172, 0xac}, {&(0x7f00000036c0)=""/48, 0x30}], 0x9, &(0x7f00000037c0)=""/210, 0xd2}, 0xff}, {{&(0x7f00000038c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/49, 0x31}, {&(0x7f0000003980)=""/142, 0x8e}], 0x2, &(0x7f0000003a80)=""/50, 0x32}, 0x5}, {{&(0x7f0000003ac0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b40)=""/232, 0xe8}, {&(0x7f0000003c40)=""/242, 0xf2}], 0x2, &(0x7f0000003d80)=""/202, 0xca}, 0x3}, {{&(0x7f0000003e80)=@hci, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/63, 0x3f}, {&(0x7f0000003f40)=""/151, 0x97}], 0x2, &(0x7f0000004040)=""/214, 0xd6}, 0x698f4f34}], 0x8, 0x40010020, &(0x7f0000004380)={r7, r8+60000000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004440)={{r2, <r9=>0xffffffffffffffff}, &(0x7f00000043c0), &(0x7f0000004400)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004580)={r9, &(0x7f0000004480)="51374c533d1ca07fd6d1fb97b670831c380e9559d8b8df41326d79fa7eb4369d830084ff4a61c444bae875d5a335fb241d97180201e10707a8180aa5df564637967fe7647a6daf356c27c7a53cd391f8d7f386e5e59a8ed2479a2e4b980e802c6927c264a143254c22755582402b902079711eeae5df03da07901b152fe49947c95a89a09eeb209ee79a8091762f07239e82889b354816c42b08b0b51b990ce2e88b83436f4595ac6e43cf3725292fae5e744d", &(0x7f0000004540)=@tcp, 0x2}, 0x20)
socketpair(0xf, 0x5, 0x81, &(0x7f00000045c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$inet6_opts(r11, 0x29, 0x39, &(0x7f0000004600)=@srh={0xc, 0x4, 0x4, 0x2, 0x6, 0x60, 0x6, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000004640), r10)
recvmsg(r1, &(0x7f0000004800)={&(0x7f0000004680)=@can={0x1d, <r12=>0x0}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004700)=""/49, 0x31}, {&(0x7f0000004740)=""/85, 0x55}], 0x2}, 0x10010)
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000004840)={0x0, 0x1})
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000004880))
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f00000048c0)={<r13=>r4, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff})
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004940), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000004a00)={'ip6gre0\x00', &(0x7f0000004980)={'ip6tnl0\x00', <r15=>r12, 0x29, 0x6, 0x4, 0x9, 0x9, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3e}, 0x700, 0x40, 0x8, 0x1ff}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000004bc0)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004a40)={0x128, r14, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x44000054)
openat$cgroup_ro(r13, &(0x7f0000004c00)='blkio.bfq.io_merged\x00', 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000004c40)=@device_b, &(0x7f0000004c80)=@ctrl_frame=@ba={{}, {0xff}, @device_b, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x40}, "3f466b28686b4f98a1292bdfe3558157fc4a86d302431be174f5279758efdf6bbccc40cc77ab34d327f58162676a296b3a744b42bedd91036bae11d89925390ab3a44c04415b865b8293cb803d72dfd053f904a42173348a6ecd83805e7f1899462afcca8bd66643c63a8912edb75f81fa01594929ef635af15aa9ee1af47a0b"}}, 0x94)

364.108801ms ago: executing program 0 (id=2393):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
unshare(0x40400)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendfile(r2, r2, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="6a36b2297219b30af8734e5633292f25d0dfbdae34de3916f2be7536814d943cee6ed6031d4ad55e0130c59f782810e471d21910e13801a260e1a1b48de7eba53d989ee9700f78ea6e0b1926e8b6cb4fc2eb200fa90eced97876c9b69f7f1f6ddcf2aee0518f033da41cc916d18ae0e8d827b4fb998cfc58fe2eca1d89197023380474fbf45c7ca37cf62a34dbe2d17c67ca2549d45bed607fce369c5e25637ca981b8c21a61ffbf9d7770bf1001171530b721e55f2082e156b96ffc4d42b4299932decf3372b6e902e2a64a77ab70f6a857e9a7d469a4", 0xd7}, {&(0x7f0000000280)="a98c75832fe818b94dde28e4174ad68c6cf098f19f74d6d6f61a7d1c581bb34dfeb809c184b3919176030aebc0657307c74c1a9f5deb174edfd535359ed7d3626fcb171a7c304e438965215c476e04b872b33580d327227206859cf84dbc631cde60052e7afda77db173a67c5b2fd2579fd06bc880dad7a1bd09e45b697f35b092df1ccae8b3a53769dccfb5f2aad4a9337a47253aa3e47562906b7d95efcfb714f3b05706fa92a9bf375532d393fd91e12e5a5f9df76f4ebdf04d048dd9bae86c7b1067ed7eecdac436e7d4bc08b48bb9b962c1", 0xd4}], 0x2, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7cc}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x2, [{@empty, 0x9}, {@private=0x5}, {@empty, 0x7}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010102, 0x3}, {@remote, 0xff}]}, @timestamp_prespec={0x44, 0x24, 0x9f, 0x3, 0xc, [{@multicast2, 0x95}, {@empty, 0x9}, {@multicast1, 0x8a6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @end, @generic={0x88, 0x5, "e3eb05"}, @timestamp_prespec={0x44, 0xc, 0x4b, 0x3, 0x6, [{@rand_addr=0x64010102, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}], 0x118}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000740)="acb9a07057d434749f466f164504da900d372d00c6eefce4d40f5431dcb6b0690ce96d44b6ae347f7e415938812e7400aa370010138f8c88b14cc8e151c1b7f633c297edbacc641ea87398838b0cda452de4e3a023f811b87fefcd251e1d3e5da96a118ead02f07031d7499f0ce1876590f387cec32a2dbe8d6666daa1293b9f9fcb3deb85950ed411a5e81c42d5317fb6d7331678e8e4387fac502448a193ac1bb27ba9eb40410b3b791b8f8db08d7d14bcbe9ccd1f92574b1c6b9400ec933c68c049dd0aaa3b392d198e62", 0xcc}, {&(0x7f0000000440)="7c7ce40a6f6c16ec0d9aa9f799dfcfb739f05f0064c16f38c3624f1edf847c3ffb1cc907fa0377d19ddafd16349a04849c1840157829fd3fb3fef55cbb95bde3f57d1f5f1dcb86a68c1370b1379620dc7c4d161c89694624ac76b32b1f19905be7d2e9b923366182deb2f9897f732513e9623ba37d", 0x75}, {&(0x7f0000000540)="439ca4fc20e74b5460b56a18c9c14ecaf500d6cdf720837b28031e32e72efcb2f924fbff34129c091822e051e64bb6b77c2aeb390a3719dddf141102dab52f1263b5e3d740b970a8029e0089b151757364e37bc0d2be838e1a6efa7d88aa", 0x5e}, {&(0x7f0000000840)="2ac2f8f1fbdb25b4e94e721d1a8e3b7cf6b522806e7188beea807f2a2b133c38ad24a67f9fe86a791b33c2fc96254ce4d507a73afaf3b57d7c1fa60952c2f04ee51380a2843402c2e030a6f75df80225696daee65448421d92d47edcb6cd55fc6f7c5e8ef201752a67daf1a501152da0399f17869f81c3c4f501cb1096d25903680df295d7823166477c39b3efca38a8b33cbb770fd222bfcd6fa4c2ef1bc9", 0x9f}, {&(0x7f0000000900)="c066e19c37ce63e217e55a3d22f39a29bfbd5c5e17001a56db6f9ef6c2693b6fec13fcfb138960301ef8d62ae08609782cdcebc30516028f2408947f3535be8424bb38ab1a88171422156a41b7c4af7ec428027066dbc435ee447db5941cd87cfe4cdf99c9bcfe", 0x67}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="2ecfcb9abfa6ebe858fabef505c54b87cfbd9c5b75a4d12fa5d1fb320adf19b5269db9097fca9631fc093bba582dca2923f61197f60d03b75b0d8356614804b83a9248ebbdc47dda9f0305d63fd7208b2f7a87a0e07584a83e805c15bea76bfd524d8755b9afd928b7118552051ec091ed460f8506da38089f0c8a7ff2e0184b9009841ee2edc9517a990212558baa77", 0x90}], 0x7}}], 0x3, 0x4000800)

363.428648ms ago: executing program 0 (id=2394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @loopback, @private1, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

174.479202ms ago: executing program 0 (id=2395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000008c0)=""/272, 0x110}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6, 0x0, 0x0, 0x3000000}, 0x80040000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1b19}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0)

114.87834ms ago: executing program 0 (id=2396):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000001480)={r2, 0x2}, &(0x7f00000014c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @empty}}}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r8 = socket(0x2b, 0x80801, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001680)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x4000)
r11 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000c40), 0x2)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500270f0002030005006395f04203d62f0100000000000000000000ffff7f00000100000000000000000000ffffac1414bb2c000541640000001606023600000000fe80000000000000000000000000002afe8000000000000000000000000000aafc0100000000000000000000000000005c0400000000000007200000000006030700"], 0x408)
r12 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r13, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20)
pipe(&(0x7f0000000100)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0700000000000000000000000000000000000000369eed2188de93888962389f9265d2bdc169e6205006f838ce13d571fce6fbc7e668c05f1291180b22908329f2c53ea065b4d77acfed1350088365e5ac5d9c087c3516d868d886477ff272597dd77550b993cbc1f7dd11255c508173299649fb5af8435632", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000300"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x8010, r15, 0xb2ab7000)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x27, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xa, 0x6, 0x7, 0x18, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xcdfd}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x0, 0x1, 0x0, r15}, @map_val={0x18, 0x3, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0xf, 0x2, 0x5, 0x18, 0xffffffffffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9b}}, @alu={0x7, 0x1, 0x7, 0x0, 0x7, 0x100, 0x8}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001440)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_lookup, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

903.168µs ago: executing program 0 (id=2397):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000))
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080))
close(0x3)
write$tun(r0, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x1dc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x1dc, 0x0, @opaque="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"}}}}, 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
sendmmsg$unix(r3, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) (async)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async)
epoll_create1(0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)) (async)
close(0x3) (async)
write$tun(r0, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x1dc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x1dc, 0x0, @opaque="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"}}}}, 0x204) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async)

0s ago: executing program 0 (id=2398):
r0 = socket(0x1d, 0x2, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket(0x10, 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x8000)
read$alg(r6, &(0x7f0000000000)=""/35, 0x23)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.199198][ T8677] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.227172][ T8677] gretap1: left promiscuous mode
[  101.315905][ T8685] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  101.460508][ T8697] ip6gre2: entered allmulticast mode
[  101.788053][ T8700] IPVS: length: 173 != 8
[  101.819578][ T8702] vlan2: entered promiscuous mode
[  101.822001][ T8702] bridge0: entered promiscuous mode
[  102.207504][ T8733] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  102.310318][ T8738] xt_limit: Overflow, try lower: 262144/524288
[  102.496043][ T8751] netlink: 'syz.2.853': attribute type 14 has an invalid length.
[  102.513007][ T8751] __nla_validate_parse: 23 callbacks suppressed
[  102.513023][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'.
[  102.530694][ T8751] syz_tun: left allmulticast mode
[  102.532994][ T8751] syz_tun: left promiscuous mode
[  102.536962][ T8751] bridge0: port 3(syz_tun) entered disabled state
[  102.542662][ T8751] bridge_slave_1: left allmulticast mode
[  102.547386][ T8751] bridge_slave_1: left promiscuous mode
[  102.549830][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.562716][ T8751] bridge_slave_0: left allmulticast mode
[  102.566345][ T8751] bridge_slave_0: left promiscuous mode
[  102.569136][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.708438][ T8760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.062215][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'.
[  103.110179][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[  103.966483][ T8803] xt_SECMARK: invalid mode: 0
[  104.075649][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'.
[  104.080586][ T8805] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  104.165262][ T8808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.226432][ T8808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.280799][ T8808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.326961][ T8808] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  104.331390][ T8808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.416306][ T8808] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.429126][ T8808] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.441904][ T8808] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.455940][ T8808] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.516129][ T8812] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  104.858349][ T8834] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  104.892920][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'.
[  104.897745][ T8841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.005195][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.885'.
[  105.009972][ T8854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.885'.
[  105.013190][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.885'.
[  105.016394][ T8854] netlink: 'syz.1.885': attribute type 7 has an invalid length.
[  105.020194][ T8854] netlink: 'syz.1.885': attribute type 8 has an invalid length.
[  105.026779][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'.
[  105.032024][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'.
[  105.055417][ T8854] gretap0: entered promiscuous mode
[  105.057918][ T8854] batadv_slave_1: entered promiscuous mode
[  105.117963][ T8865] netlink: 'syz.1.889': attribute type 7 has an invalid length.
[  105.595924][ T8867] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.599584][ T8867] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.602977][ T8867] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.607348][ T8867] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.652971][ T8867] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.656283][ T8867] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.659357][ T8867] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.662515][ T8867] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.807802][ T8887] netlink: 'syz.0.894': attribute type 8 has an invalid length.
[  105.835742][ T8891] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  105.838713][ T8889] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  105.899415][ T8886] tipc: Disabling bearer <eth:syzkaller0>
[  105.972491][ T8893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.187667][ T8924] sctp: [Deprecated]: syz.2.906 (pid 8924) Use of int in max_burst socket option deprecated.
[  106.187667][ T8924] Use struct sctp_assoc_value instead
[  106.216951][ T8926] trusted_key: syz.1.907 sent an empty control message without MSG_MORE.
[  106.268930][ T8933] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003
[  106.371564][ T8940] ip6gre3: entered allmulticast mode
[  107.518937][ T8973] xt_CT: No such helper "snmp"
[  107.530946][ T8973] __nla_validate_parse: 3 callbacks suppressed
[  107.530955][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'.
[  107.651474][ T8985] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  107.656356][ T8985] netlink: 224 bytes leftover after parsing attributes in process `syz.2.928'.
[  108.000721][ T9014] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  108.188039][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.191544][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.246393][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'.
[  108.250039][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  108.275949][ T9038] netlink: 'syz.0.946': attribute type 10 has an invalid length.
[  108.285319][ T9038] bridge0: port 1(team0) entered blocking state
[  108.288044][ T9038] bridge0: port 1(team0) entered disabled state
[  108.290859][ T9038] team0: entered allmulticast mode
[  108.293133][ T9038] team_slave_0: entered allmulticast mode
[  108.301142][ T9038] team_slave_1: entered allmulticast mode
[  108.303158][ T9038] bridge_slave_0: entered allmulticast mode
[  108.306596][ T9038] team0: entered promiscuous mode
[  108.308311][ T9038] team_slave_0: entered promiscuous mode
[  108.310537][ T9038] team_slave_1: entered promiscuous mode
[  108.315927][ T9038] bridge_slave_0: entered promiscuous mode
[  108.318406][ T9038] bridge0: port 1(team0) entered blocking state
[  108.320739][ T9038] bridge0: port 1(team0) entered forwarding state
[  108.429208][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'.
[  108.524895][ T9063] netlink: 104 bytes leftover after parsing attributes in process `syz.0.955'.
[  108.618063][ T9071] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[  108.621403][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.956'.
[  108.776099][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'.
[  108.781380][   T33] audit: type=1804 audit(1751608134.455:3): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.962" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1571 res=1 errno=0
[  108.789134][   T33] audit: type=1800 audit(1751608134.465:4): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.962" name="cgroup.controllers" dev="tmpfs" ino=1571 res=0 errno=0
[  108.841697][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  108.858657][ T9088] ipvlan2: entered promiscuous mode
[  109.540920][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'.
[  109.570847][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.202156][ T9058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.205909][ T9058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.571064][ T9198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.582706][ T9198] syzkaller0: MTU too low for tipc bearer
[  110.586119][ T9198] tipc: Disabling bearer <eth:syzkaller0>
[  110.665111][ T9203] netlink: 'syz.2.1001': attribute type 2 has an invalid length.
[  110.678388][ T9203] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  110.776673][ T9209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.256736][ T9251] netlink: 'syz.2.1013': attribute type 1 has an invalid length.
[  111.729647][ T9253] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  112.281859][ T9308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.492548][ T9322] sctp: [Deprecated]: syz.2.1035 (pid 9322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.492548][ T9322] Use struct sctp_sack_info instead
[  112.704209][ T9331] __nla_validate_parse: 19 callbacks suppressed
[  112.704219][ T9331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1037'.
[  112.709834][ T9330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1037'.
[  112.826424][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1038'.
[  113.002557][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1045'.
[  113.046594][ T9352] tc_dump_action: action bad kind
[  113.082819][ T9356] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  113.087130][ T9356] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  113.090991][ T9356] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  113.159207][ T9361] syzkaller1: entered promiscuous mode
[  113.161694][ T9361] syzkaller1: entered allmulticast mode
[  113.505505][ T9387] IPVS: Scheduler module ip_vs_sip not found
[  113.509292][ T9387] xt_bpf: check failed: parse error
[  113.588280][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[  113.596286][ T9396] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  113.639548][ T9396] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.658444][ T9396] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.661067][ T9396] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  113.665710][ T9396] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  113.705889][ T9404] gretap1: entered promiscuous mode
[  113.709281][ T9404] bond3: (slave gretap1): making interface the new active one
[  113.712183][ T9404] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  113.730612][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.747497][ T9407] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  113.750994][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1066'.
[  113.847962][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[  113.855643][ T9413] bridge0: port 1(team0) entered disabled state
[  113.913112][ T9413] team0 (unregistering): left allmulticast mode
[  113.916074][ T9413] team_slave_0: left allmulticast mode
[  113.918057][ T9413] team_slave_1: left allmulticast mode
[  113.920245][ T9413] bridge_slave_0: left allmulticast mode
[  113.922395][ T9413] team0 (unregistering): left promiscuous mode
[  113.926300][ T9413] team_slave_0: left promiscuous mode
[  113.929082][ T9413] team_slave_1: left promiscuous mode
[  113.931657][ T9413] bridge_slave_0: left promiscuous mode
[  113.936354][ T9413] bridge0: port 1(team0) entered disabled state
[  113.951589][ T9413] team0 (unregistering): Port device team_slave_0 removed
[  113.961707][ T9413] team0 (unregistering): Port device team_slave_1 removed
[  113.972703][ T9413] team0 (unregistering): Port device bridge_slave_0 removed
[  114.180921][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1072'.
[  114.283506][ T9437] netlink: 'syz.0.1075': attribute type 4 has an invalid length.
[  114.302030][ T9437] netlink: 'syz.0.1075': attribute type 4 has an invalid length.
[  114.334941][ T9433] netlink: 'syz.1.1076': attribute type 39 has an invalid length.
[  114.334948][ T9435] netlink: 'syz.1.1076': attribute type 39 has an invalid length.
[  114.711728][ T9459] netlink: 'syz.1.1083': attribute type 29 has an invalid length.
[  114.715498][ T9459] netlink: 'syz.1.1083': attribute type 29 has an invalid length.
[  114.860149][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1084'.
[  114.865526][ T9461] SET target dimension over the limit!
[  114.869686][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1084'.
[  115.132428][ T9466] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  115.319803][ T9492] netlink: 'syz.0.1095': attribute type 1 has an invalid length.
[  115.379622][ T9495] tls_set_device_offload: netdev not found
[  115.421133][ T9497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  115.427712][ T9497] gretap2: entered promiscuous mode
[  115.429967][ T9497] gretap2: entered allmulticast mode
[  115.432362][ T9499] sit0: entered promiscuous mode
[  115.437745][ T9499] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  115.581495][ T9518] xt_l2tp: v2 sid > 0xffff: 4294901760
[  115.737166][ T9534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.850595][ T9542] pimreg: entered allmulticast mode
[  115.877525][ T9544] netlink: 'syz.0.1115': attribute type 1 has an invalid length.
[  116.760053][ T9560] dvmrp0: entered allmulticast mode
[  116.869291][ T9568] batadv1: entered promiscuous mode
[  117.130225][ T9574] bond4 (unregistering): Released all slaves
[  117.257519][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.681659][ T9629] tipc: Enabled bearer <eth:gre0>, priority 10
[  117.724854][ T9631] __nla_validate_parse: 20 callbacks suppressed
[  117.724863][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'.
[  117.810050][ T9638] team0: Device gtp0 failed to enter team mode
[  117.813012][ T9638] team0: Device gtp0 failed to enter team mode
[  117.900133][ T9645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1146'.
[  117.914698][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'.
[  118.032255][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'.
[  118.050082][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1149'.
[  118.275674][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'.
[  118.284927][ T9670] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1153'.
[  118.348796][ T5818] Bluetooth: hci2: link tx timeout
[  118.351514][ T5818] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  118.358363][ T5818] Bluetooth: hci2: link tx timeout
[  118.360719][ T5818] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.727494][ T9710] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1166'.
[  118.734131][ T9710] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1166'.
[  118.738350][ T9710] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1166'.
[  118.901676][ T9719] xt_hashlimit: size too large, truncated to 1048576
[  119.074039][ T9719] validate_nla: 3 callbacks suppressed
[  119.074055][ T9719] netlink: 'syz.1.1169': attribute type 2 has an invalid length.
[  119.170564][ T9735] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  119.174251][ T9736] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  119.450339][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.586819][ T9766] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  119.590958][ T9766] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  120.046148][ T9787] tun1: tun_chr_ioctl cmd 2148553947
[  120.399816][ T9807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.441199][ T9810] netlink: 'syz.2.1193': attribute type 7 has an invalid length.
[  120.444325][ T5818] Bluetooth: hci2: command 0x0405 tx timeout
[  121.446723][ T9911] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.973548][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.274564][T10001] macsec1: entered allmulticast mode
[  122.276377][T10001] macsec0: entered allmulticast mode
[  122.311603][T10006] xt_CT: You must specify a L4 protocol and not use inversions on it
[  122.523632][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  123.072460][T10039] __nla_validate_parse: 87 callbacks suppressed
[  123.072474][T10039] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1248'.
[  123.140405][T10041] SET target dimension over the limit!
[  123.145547][T10044] SET target dimension over the limit!
[  123.367913][T10055] bridge0: port 3(dummy0) entered disabled state
[  123.386535][T10055] bridge_slave_1: left allmulticast mode
[  123.389205][T10055] bridge_slave_1: left promiscuous mode
[  123.391939][T10055] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.402981][T10055] bond0: (slave bond_slave_0): Releasing backup interface
[  123.415940][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.418790][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.421480][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'.
[  123.426145][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.428795][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.437864][T10055] bond3: (slave gretap1): Releasing active interface
[  123.449277][T10051] dvmrp1: entered allmulticast mode
[  123.451507][T10051] dvmrp0: left allmulticast mode
[  123.453226][T10051] dvmrp1: left allmulticast mode
[  123.474549][T10055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1254'.
[  123.838474][T10076] tipc: Enabling of bearer <th:syer0> rejected, media not registered
[  124.076915][T10084] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1263'.
[  124.210286][T10096] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1266'.
[  124.214509][T10096] team0: entered allmulticast mode
[  124.222253][T10096] team0: Cannot enslave team device to itself
[  124.361998][T10106] SET target dimension over the limit!
[  124.399430][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  124.410290][T10114] netlink: 'syz.1.1269': attribute type 11 has an invalid length.
[  124.412944][T10114] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1269'.
[  124.483138][T10124] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1273'.
[  124.486832][T10124] unsupported nla_type 65024
[  124.678389][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'.
[  124.683121][T10145] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1281'.
[  124.706915][T10147] netlink: 'syz.2.1282': attribute type 2 has an invalid length.
[  125.028348][T10183] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  125.032484][T10183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.075541][T10185] netlink: 'syz.2.1294': attribute type 8 has an invalid length.
[  125.306963][T10194] syzkaller1: entered promiscuous mode
[  125.309101][T10194] syzkaller1: entered allmulticast mode
[  125.604180][T10196] pim6reg: entered allmulticast mode
[  125.912037][T10224] netlink: 'syz.0.1307': attribute type 9 has an invalid length.
[  126.518894][T10299] bridge2: entered promiscuous mode
[  126.525354][T10303] bridge3: entered promiscuous mode
[  126.699788][T10321] pim6reg: entered allmulticast mode
[  126.703224][T10321] netlink: 'syz.2.1329': attribute type 10 has an invalid length.
[  126.711547][T10321] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  126.766688][T10328] openvswitch: netlink: Multiple metadata blocks provided
[  127.040535][T10351] bond0: (slave wlan1): Releasing backup interface
[  127.057407][T10351] xt_time: invalid argument - start or stop time greater than 23:59:59
[  127.157503][T10360] netlink: 'syz.2.1344': attribute type 7 has an invalid length.
[  127.195987][T10363] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  127.244921][T10366] sctp: [Deprecated]: syz.2.1347 (pid 10366) Use of int in max_burst socket option deprecated.
[  127.244921][T10366] Use struct sctp_assoc_value instead
[  127.365591][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.826668][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.869252][T10381] netlink: 'syz.0.1353': attribute type 10 has an invalid length.
[  127.874533][T10381] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  127.994354][T10392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.421507][T10402] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  128.428874][T10401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.534343][T10404] __nla_validate_parse: 18 callbacks suppressed
[  128.534353][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'.
[  128.539803][T10404] netlink: 'syz.0.1361': attribute type 30 has an invalid length.
[  128.549681][T10404] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.552399][T10404] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.555713][T10404] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.558420][T10404] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.673265][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  128.859790][T10425] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.862935][T10425] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.866107][T10425] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.869169][T10425] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.905110][T10425] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.907805][T10425] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.910519][T10425] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.913307][T10425] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.040194][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.048121][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'.
[  129.163940][T10439] netlink: 'syz.2.1374': attribute type 303 has an invalid length.
[  129.219984][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'.
[  129.224483][T10445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  129.228472][T10445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  129.848614][T10448] syzkaller1: entered promiscuous mode
[  129.850980][T10448] syzkaller1: entered allmulticast mode
[  129.856024][T10448] netlink: 'syz.1.1375': attribute type 10 has an invalid length.
[  129.861731][T10448] batman_adv: batadv0: Adding interface: dummy0
[  129.866563][T10448] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.877065][T10448] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  130.340466][T10460] netlink: 'syz.0.1380': attribute type 84 has an invalid length.
[  130.421623][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'.
[  130.463803][T10468] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1383'.
[  130.806275][T10476] netlink: 'syz.2.1386': attribute type 1 has an invalid length.
[  130.811508][T10476] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1386'.
[  130.936420][T10486] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1390'.
[  130.940122][T10486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.943250][T10486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.953522][T10486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.956433][T10486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.973722][T10486] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1390'.
[  131.462343][T10493] netlink: 'syz.0.1392': attribute type 5 has an invalid length.
[  131.467237][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'.
[  131.905048][T10512] netlink: 'syz.2.1399': attribute type 2 has an invalid length.
[  131.959923][T10515] tipc: Resetting bearer <eth:gre0>
[  131.962237][T10515] tipc: Resetting bearer <eth:gre0>
[  131.971646][T10515] sit0: left promiscuous mode
[  131.976893][T10515] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.979673][T10515] team0: left allmulticast mode
[  131.982455][T10515] 8021q: adding VLAN 0 to HW filter on device team0
[  131.987104][T10515] batman_adv: batadv0: Interface activated: dummy0
[  131.991191][T10515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.262283][T10531] netlink: 'syz.2.1405': attribute type 4 has an invalid length.
[  132.270585][T10531] : renamed from bond0
[  132.447396][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004989][T10547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.168627][T10559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.231116][T10552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.295534][T10559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.289158][T10580] __nla_validate_parse: 5 callbacks suppressed
[  154.289177][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  154.676856][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1425'.
[  155.266190][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'.
[  155.479147][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'.
[  155.521683][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'.
[  155.545023][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'.
[  155.980079][T10671] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1449'.
[  156.049316][T10680] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1452'.
[  156.061787][T10680] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  156.107377][T10679] tipc: Resetting bearer <eth:syzkaller0>
[  156.119853][T10679] tipc: Disabling bearer <eth:syzkaller0>
[  156.264696][T10711] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1461'.
[  156.283313][T10715] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1462'.
[  156.319215][T10718] ipt_REJECT: TCP_RESET invalid for non-tcp
[  156.330830][T10717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.508551][T10735] delete_channel: no stack
[  156.537459][T10748] netlink: 'syz.0.1472': attribute type 13 has an invalid length.
[  156.541706][T10748] gretap0: refused to change device tx_queue_len
[  156.544587][T10748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  156.570022][T10750] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  156.579140][T10751] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  156.613304][T10753] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  156.620074][T10754] netlink: 'syz.0.1472': attribute type 39 has an invalid length.
[  156.905276][T10769] netlink: 'syz.1.1481': attribute type 11 has an invalid length.
[  156.955816][T10771] pimreg: left allmulticast mode
[  157.202838][T10784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.426468][T10786] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  157.438159][T10786] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  157.684736][T10790] netlink: 'syz.0.1489': attribute type 1 has an invalid length.
[  157.741175][T10790] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  157.749832][T10790] 8021q: adding VLAN 0 to HW filter on device bond4
[  157.759110][ T7502] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  157.915466][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  158.124091][T10815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.189250][T10819] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  158.260320][T10828] sctp: [Deprecated]: syz.0.1504 (pid 10828) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.260320][T10828] Use struct sctp_sack_info instead
[  158.547860][T10864] netlink: 'syz.0.1516': attribute type 1 has an invalid length.
[  158.577183][T10866] netlink: 'syz.1.1517': attribute type 9 has an invalid length.
[  158.597807][T10869] openvswitch: netlink: Message has 8 unknown bytes.
[  159.360819][T10929] netlink: 'syz.1.1537': attribute type 10 has an invalid length.
[  159.365073][T10929] __nla_validate_parse: 65 callbacks suppressed
[  159.365081][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1537'.
[  159.370212][T10929] dummy0: entered promiscuous mode
[  159.372012][T10929] dummy0: entered allmulticast mode
[  159.375110][T10929] batman_adv: batadv0: Interface deactivated: dummy0
[  159.377967][T10929] batman_adv: batadv0: Removing interface: dummy0
[  159.381220][T10929] bridge0: port 1(dummy0) entered blocking state
[  159.385274][T10929] bridge0: port 1(dummy0) entered disabled state
[  159.420279][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  159.425695][T10931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  159.520603][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'.
[  159.535593][T10939] netlink: 'syz.2.1540': attribute type 3 has an invalid length.
[  159.587428][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  159.592080][T10945] x_tables: duplicate underflow at hook 1
[  159.595927][T10945] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96
[  159.602549][T10945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1542'.
[  160.080993][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  160.555229][T10986] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  160.689386][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1560'.
[  160.742693][   T33] audit: type=1800 audit(1751608186.415:5): pid=10994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1562" name=33FFFF dev="tmpfs" ino=2893 res=0 errno=0
[  160.785701][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  160.790405][T10996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1563'.
[  160.884782][T11005] ip6t_rpfilter: unknown options
[  161.227411][T11036] vlan0: entered promiscuous mode
[  161.229722][T11036] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  161.697292][T11061] netlink: 'syz.1.1583': attribute type 5 has an invalid length.
[  161.712978][T11063] openvswitch: netlink: Unknown nsh attribute 0
[  161.715514][T11063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.807895][T11069] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  161.820899][T11069] nbd: nbd1 already in use
[  161.823226][T11069] block nbd1: NBD_DISCONNECT
[  161.828564][T11069] block nbd1: Send disconnect failed -32
[  162.107056][   T33] audit: type=1800 audit(1751608187.775:6): pid=11098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1596" name="memory.events" dev="tmpfs" ino=2742 res=0 errno=0
[  162.116910][T11098] x_tables: duplicate underflow at hook 2
[  162.235501][T11114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.263095][T11117] netlink: 'syz.0.1603': attribute type 4 has an invalid length.
[  162.267793][T11117] netlink: 'syz.0.1603': attribute type 17 has an invalid length.
[  162.275261][T11122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.380148][T11137] netlink: 'syz.2.1608': attribute type 4 has an invalid length.
[  162.387430][T11139] macvtap0: entered promiscuous mode
[  162.389253][T11139] erspan0: entered promiscuous mode
[  162.391061][T11139] macvtap0: entered allmulticast mode
[  162.392835][T11139] erspan0: entered allmulticast mode
[  162.394849][T11137] netlink: 'syz.2.1608': attribute type 4 has an invalid length.
[  162.406698][T11137] team0: No ports can be present during mode change
[  162.527947][T11149] netlink: 'syz.0.1613': attribute type 7 has an invalid length.
[  162.531147][T11149] netlink: 'syz.0.1613': attribute type 8 has an invalid length.
[  163.176426][T11195] vlan0: entered promiscuous mode
[  164.151564][T11227] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  164.226670][T11230] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  164.576978][T11248] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  164.580056][T11248] __nla_validate_parse: 42 callbacks suppressed
[  164.580068][T11248] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1646'.
[  164.589029][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1646'.
[  164.592419][T11248] netlink: 'syz.0.1646': attribute type 23 has an invalid length.
[  164.604572][T11248] netlink: 'syz.0.1646': attribute type 23 has an invalid length.
[  164.795557][T11251] vlan2: entered allmulticast mode
[  164.797876][T11251] bond0: entered allmulticast mode
[  165.216284][T11260] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1651'.
[  165.465849][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1655'.
[  165.525259][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'.
[  165.543833][T11276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.556267][T11276] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  165.557137][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'.
[  165.560164][T11276] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  165.563066][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'.
[  165.607831][T11282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1661'.
[  165.610804][T11282] batadv0: entered promiscuous mode
[  165.612472][T11282] batadv0: entered allmulticast mode
[  165.615407][T11282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.617982][T11282] bridge0: port 1(batadv0) entered blocking state
[  165.620206][T11282] bridge0: port 1(batadv0) entered disabled state
[  165.680369][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1664'.
[  165.684106][T11290] IPv6: NLM_F_REPLACE set, but no existing node found!
[  165.698914][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1665'.
[  165.875794][ T7502] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  165.879285][ T7502] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  166.269955][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.273161][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.291411][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.313729][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.317049][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.320394][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.325652][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.329426][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.332569][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.335988][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.339300][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.342491][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.347432][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.351026][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.363706][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.369869][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.372879][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.379723][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.383326][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.388332][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.391449][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.395253][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.398796][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.401918][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.406737][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.410001][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.413328][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.416618][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.420731][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.427334][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.430584][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.433995][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.437652][T11375] sock: sock_timestamping_bind_phc: sock not bind to device
[  166.909645][T11411] validate_nla: 63 callbacks suppressed
[  166.909663][T11411] netlink: 'syz.2.1707': attribute type 30 has an invalid length.
[  166.923029][T11411] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.926718][T11411] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.930307][T11411] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.933976][T11411] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.017490][T11417] netlink: 'syz.2.1709': attribute type 13 has an invalid length.
[  167.021095][T11417] netlink: 'syz.2.1709': attribute type 11 has an invalid length.
[  167.081045][T11421] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  167.155963][T11428] xt_bpf: check failed: parse error
[  167.712077][T11462] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  167.816798][T11475] netlink: 'syz.0.1730': attribute type 1 has an invalid length.
[  167.829932][T11475] 8021q: adding VLAN 0 to HW filter on device bond5
[  168.312576][T11511] nbd: must specify an index to disconnect
[  168.563078][T11532] unknown channel width for channel at 909000KHz?
[  168.568578][T11533] unknown channel width for channel at 909000KHz?
[  169.027817][T11561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  169.185765][T11574] netlink: 'syz.1.1765': attribute type 3 has an invalid length.
[  169.188509][T11574] netlink: 'syz.1.1765': attribute type 1 has an invalid length.
[  169.471460][T11603] netlink: 'syz.2.1778': attribute type 21 has an invalid length.
[  169.476709][T11603] netlink: 'syz.2.1778': attribute type 4 has an invalid length.
[  169.551457][T11611] bridge11: entered allmulticast mode
[  169.844673][T11629] netlink: 'syz.0.1790': attribute type 10 has an invalid length.
[  169.852167][T11629] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  169.870184][T11631] IPVS: set_ctl: invalid protocol: 219 10.1.1.0:20004
[  169.879017][T11631] __nla_validate_parse: 38 callbacks suppressed
[  169.879028][T11631] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1791'.
[  170.018281][T11641] netlink: 'syz.0.1795': attribute type 10 has an invalid length.
[  170.024872][T11641] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1795'.
[  170.028877][T11641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1795'.
[  170.085165][T11647] nbd: must specify an index to disconnect
[  170.100410][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'.
[  170.104135][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1798'.
[  170.107787][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'.
[  170.111520][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1798'.
[  170.115661][T11647] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1798'.
[  170.578915][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'.
[  170.881239][T11678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1810'.
[  171.120308][T11696] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  171.253778][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  171.375310][T11714] 8021q: adding VLAN 0 to HW filter on device bond6
[  172.378843][T11754] xt_cgroup: invalid path, errno=-2
[  172.433134][T11760] validate_nla: 1 callbacks suppressed
[  172.433151][T11760] netlink: 'syz.0.1839': attribute type 8 has an invalid length.
[  172.586345][T11774] IPVS: Error joining to the multicast group
[  173.098210][T11797] syzkaller0: entered promiscuous mode
[  173.100202][T11797] syzkaller0: entered allmulticast mode
[  174.228821][T11823] netlink: 'syz.2.1852': attribute type 83 has an invalid length.
[  174.305226][T11830] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  174.819042][T11878] netlink: zone id is out of range
[  174.821975][T11878] netlink: zone id is out of range
[  174.823800][T11878] netlink: zone id is out of range
[  174.825631][T11878] netlink: zone id is out of range
[  174.827393][T11878] netlink: zone id is out of range
[  174.829160][T11878] netlink: zone id is out of range
[  174.830933][T11878] netlink: get zone limit has 8 unknown bytes
[  174.844877][T11881] IPVS: Unknown mcast interface: vcan0
[  174.867105][T11883] xt_hashlimit: size too large, truncated to 1048576
[  174.869490][T11883] xt_hashlimit: max too large, truncated to 1048576
[  175.194114][T11890] : entered promiscuous mode
[  175.228224][T11892] __nla_validate_parse: 6 callbacks suppressed
[  175.228235][T11892] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1874'.
[  175.233594][T11892] netlink: zone id is out of range
[  175.235516][T11892] netlink: zone id is out of range
[  175.483695][ T5818] Bluetooth: hci1: command 0x0406 tx timeout
[  175.529806][ T5641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.538680][T11903] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1879'.
[  175.606831][ T5641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.681470][ T5641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.705780][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'.
[  175.708786][T11907] IPVS: Unknown mcast interface: vcan0
[  175.765101][ T5641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.779932][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.783216][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.786383][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.789686][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.793135][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.983792][T11914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'.
[  175.996897][ T5641] bridge0: port 1(dummy0) entered disabled state
[  176.051610][ T5641] tipc: Resetting bearer <eth:gre0>
[  176.263323][T11920] SET target dimension over the limit!
[  176.328878][ T5641] gretap0 (unregistering): left promiscuous mode
[  176.342293][ T5641] tipc: Disabling bearer <eth:gre0>
[  176.890326][ T5641] bond0 (unregistering): Released all slaves
[  176.973964][ T5641] bond1 (unregistering): Released all slaves
[  177.059091][ T5641] bond2 (unregistering): Released all slaves
[  177.214472][ T5641] : left promiscuous mode
[  177.304533][ T5641] tipc: Left network mode
[  177.321266][T11908] chnl_net:caif_netlink_parms(): no params data found
[  177.524382][T11908] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.528106][T11908] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.530919][T11908] bridge_slave_0: entered allmulticast mode
[  177.537142][T11908] bridge_slave_0: entered promiscuous mode
[  177.589921][T11908] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.595041][T11908] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.597544][T11908] bridge_slave_1: entered allmulticast mode
[  177.601975][T11908] bridge_slave_1: entered promiscuous mode
[  177.696309][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.703314][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.717023][ T5641] batadv_slave_1: left promiscuous mode
[  177.721914][ T5641] hsr_slave_0: left promiscuous mode
[  177.724609][ T5641] hsr_slave_1: left promiscuous mode
[  177.739037][ T5641] pim6reg (unregistering): left allmulticast mode
[  177.884188][ T5818] Bluetooth: hci1: command tx timeout
[  178.257143][T11908] team0: Port device team_slave_0 added
[  178.276880][T11965] syzkaller0: entered promiscuous mode
[  178.278668][T11965] syzkaller0: entered allmulticast mode
[  178.308393][T11968] erspan0: left allmulticast mode
[  178.310380][T11968] erspan0: left promiscuous mode
[  178.367927][T11908] team0: Port device team_slave_1 added
[  179.357102][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.359962][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.374444][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.381872][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.385140][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.395657][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.525976][T11908] hsr_slave_0: entered promiscuous mode
[  179.528940][T11908] hsr_slave_1: entered promiscuous mode
[  179.531656][T11908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.547541][T11908] Cannot create hsr debugfs directory
[  179.628210][ T5641] IPVS: stop unused estimator thread 0...
[  179.754681][T11991] wg1: entered promiscuous mode
[  179.756782][T11991] wg1: entered allmulticast mode
[  179.964898][ T5818] Bluetooth: hci1: command tx timeout
[  180.041582][T12006] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1902'.
[  180.090612][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'.
[  180.101419][T12006] netlink: 'syz.0.1902': attribute type 4 has an invalid length.
[  180.104868][T12006] netlink: 'syz.0.1902': attribute type 2 has an invalid length.
[  180.257780][T12014] netlink: 'syz.0.1903': attribute type 4 has an invalid length.
[  180.260945][T12014] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1903'.
[  180.265804][T11908] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.273017][T11908] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.279423][T11908] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.286522][T11908] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.410851][T11908] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.435115][T11908] 8021q: adding VLAN 0 to HW filter on device team0
[  180.449220][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.452114][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.462797][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.465733][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.577293][T12034] team0: No ports can be present during mode change
[  180.730881][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'.
[  180.744291][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.806600][T11908] veth0_vlan: entered promiscuous mode
[  180.817948][T11908] veth1_vlan: entered promiscuous mode
[  180.848645][T11908] veth0_macvtap: entered promiscuous mode
[  180.860459][T11908] veth1_macvtap: entered promiscuous mode
[  180.892425][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.915185][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.929227][T12053] net_ratelimit: 25 callbacks suppressed
[  180.929242][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.932643][T11908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.939853][T11908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.943687][T11908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.947403][T11908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.956852][T12053] netlink: 'syz.2.1909': attribute type 12 has an invalid length.
[  181.057842][T12063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1910'.
[  181.085326][ T7785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.088727][ T7785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.156684][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'.
[  181.162636][T12070] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  181.174038][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'.
[  181.181217][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.191207][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.589886][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1917'.
[  181.866917][T12095] x_tables: duplicate underflow at hook 1
[  182.001899][T12102] delete_channel: no stack
[  182.076355][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1926'.
[  182.392286][T12116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1929'.
[  182.397174][T12116] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1929'.
[  183.030999][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.319956][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.324036][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.327272][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.331831][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.337829][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.460531][T12140] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.505078][T12136] chnl_net:caif_netlink_parms(): no params data found
[  183.565513][T12151] netlink: 'syz.0.1939': attribute type 1 has an invalid length.
[  183.568088][T12151] netlink: 'syz.0.1939': attribute type 2 has an invalid length.
[  183.569531][T12154] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1940'.
[  183.578842][T12151] nbd: must specify an index to disconnect
[  183.583237][T12136] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.593738][T12136] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.596708][T12136] bridge_slave_0: entered allmulticast mode
[  183.599442][T12136] bridge_slave_0: entered promiscuous mode
[  183.616897][T12136] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.619881][T12136] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.623345][T12136] bridge_slave_1: entered allmulticast mode
[  183.627388][T12136] bridge_slave_1: entered promiscuous mode
[  183.685868][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.708656][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.466125][T12136] team0: Port device team_slave_0 added
[  184.471114][T12136] team0: Port device team_slave_1 added
[  184.504791][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.507671][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.518181][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.524851][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.526610][T12170] netlink: 'syz.0.1943': attribute type 11 has an invalid length.
[  184.527671][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.546086][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.600711][T12136] hsr_slave_0: entered promiscuous mode
[  184.604380][T12136] hsr_slave_1: entered promiscuous mode
[  184.607227][T12136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.610301][T12136] Cannot create hsr debugfs directory
[  184.740700][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.820916][T12182] netlink: 'syz.0.1947': attribute type 29 has an invalid length.
[  184.824022][T12182] netlink: 'syz.0.1947': attribute type 29 has an invalid length.
[  184.850300][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.921675][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.077710][   T13] bridge_slave_1: left allmulticast mode
[  185.083004][   T13] bridge_slave_1: left promiscuous mode
[  185.085949][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.091895][   T13] bridge_slave_0: left allmulticast mode
[  185.094859][   T13] bridge_slave_0: left promiscuous mode
[  185.096818][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.345427][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.351805][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.357993][   T13] bond0 (unregistering): Released all slaves
[  185.403954][ T5818] Bluetooth: hci1: command tx timeout
[  185.570008][T12219] __nla_validate_parse: 5 callbacks suppressed
[  185.570018][T12219] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1961'.
[  185.727680][   T13] hsr_slave_0: left promiscuous mode
[  185.736409][   T13] hsr_slave_1: left promiscuous mode
[  185.741704][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.750285][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.758096][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.761191][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.789517][   T13] veth1_macvtap: left promiscuous mode
[  185.792124][   T13] veth0_macvtap: left promiscuous mode
[  185.797500][   T13] veth1_vlan: left promiscuous mode
[  185.799864][   T13] veth0_vlan: left promiscuous mode
[  186.275900][   T13] team0 (unregistering): Port device team_slave_1 removed
[  186.307393][   T13] team0 (unregistering): Port device team_slave_0 removed
[  186.652867][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1966'.
[  186.691800][T12136] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.748868][T12233] syzkaller0: entered promiscuous mode
[  186.751237][T12233] syzkaller0: entered allmulticast mode
[  186.754455][T12136] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.772935][T12136] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  187.483624][ T5818] Bluetooth: hci1: command tx timeout
[  187.811893][T12136] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  187.942325][T12136] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.978782][T12136] 8021q: adding VLAN 0 to HW filter on device team0
[  187.995373][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.998432][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.026389][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.029093][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.241735][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.312178][T12136] veth0_vlan: entered promiscuous mode
[  188.312458][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'.
[  188.321479][T12136] veth1_vlan: entered promiscuous mode
[  188.360342][T12313] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.398576][T12136] veth0_macvtap: entered promiscuous mode
[  188.407550][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'.
[  188.415846][T12136] veth1_macvtap: entered promiscuous mode
[  188.431951][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.440528][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.448470][T12136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.452089][T12136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.456249][T12136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.459343][T12136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.526841][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.529357][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.559899][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.562440][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.796557][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'.
[  188.953072][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  188.956432][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'.
[  189.047510][T12367] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1998'.
[  189.287600][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.540724][T12395] netlink: 'syz.0.2005': attribute type 1 has an invalid length.
[  189.611860][T12399] bond7: entered promiscuous mode
[  189.615579][T12399] bond7: entered allmulticast mode
[  189.618049][T12399] 8021q: adding VLAN 0 to HW filter on device bond7
[  189.686416][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'.
[  189.689499][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'.
[  189.732065][T12408] sctp: [Deprecated]: syz.0.2010 (pid 12408) Use of int in max_burst socket option.
[  189.732065][T12408] Use struct sctp_assoc_value instead
[  189.767125][T12410] IPVS: length: 139 != 8
[  189.851772][T12421] ip6gre2: entered allmulticast mode
[  189.997887][ T7502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.240195][T12444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.283386][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.287651][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.291160][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.295415][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.298825][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.419775][T12445] chnl_net:caif_netlink_parms(): no params data found
[  190.467677][T12445] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.470109][T12445] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.472403][T12445] bridge_slave_0: entered allmulticast mode
[  190.476029][T12445] bridge_slave_0: entered promiscuous mode
[  190.479209][T12445] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.481495][T12445] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.483935][T12445] bridge_slave_1: entered allmulticast mode
[  190.487275][T12445] bridge_slave_1: entered promiscuous mode
[  190.508843][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.514547][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.534428][T12445] team0: Port device team_slave_0 added
[  190.538603][T12445] team0: Port device team_slave_1 added
[  190.559347][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.561942][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.571522][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.576943][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.580362][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.589192][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.615709][T12445] hsr_slave_0: entered promiscuous mode
[  190.618115][T12445] hsr_slave_1: entered promiscuous mode
[  190.620281][T12445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.622736][T12445] Cannot create hsr debugfs directory
[  190.866152][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'.
[  190.911978][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'.
[  190.951421][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  190.956311][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'.
[  191.348592][T12491] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  191.447439][ T7502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.615579][ T7502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.691366][ T7502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.705147][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'.
[  191.816498][ T7502] bridge_slave_1: left allmulticast mode
[  191.823666][ T7502] bridge_slave_1: left promiscuous mode
[  191.828547][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.840575][ T7502] bridge_slave_0: left allmulticast mode
[  191.845621][ T7502] bridge_slave_0: left promiscuous mode
[  191.848700][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.034341][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.159147][ T7502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.163859][ T7502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.168768][ T7502] bond0 (unregistering): Released all slaves
[  192.364713][   T55] Bluetooth: hci1: command tx timeout
[  192.433532][ T7502] hsr_slave_0: left promiscuous mode
[  192.435959][ T7502] hsr_slave_1: left promiscuous mode
[  192.438225][ T7502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.441105][ T7502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.445288][ T7502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.447697][ T7502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.460253][ T7502] veth1_macvtap: left promiscuous mode
[  192.462469][ T7502] veth0_macvtap: left promiscuous mode
[  192.468274][ T7502] veth1_vlan: left promiscuous mode
[  192.470324][ T7502] veth0_vlan: left promiscuous mode
[  192.826510][ T7502] team0 (unregistering): Port device team_slave_1 removed
[  192.859726][ T7502] team0 (unregistering): Port device team_slave_0 removed
[  193.255046][T12445] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.277778][T12445] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.305248][T12445] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.326283][T12445] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.380190][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'.
[  193.459285][T12553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2046'.
[  193.516033][T12445] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.540158][T12445] 8021q: adding VLAN 0 to HW filter on device team0
[  193.555792][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.558721][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.574556][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.577356][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.705282][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.744903][T12445] veth0_vlan: entered promiscuous mode
[  193.752635][T12445] veth1_vlan: entered promiscuous mode
[  193.776787][T12445] veth0_macvtap: entered promiscuous mode
[  193.782484][T12445] veth1_macvtap: entered promiscuous mode
[  193.794005][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.801389][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.807993][T12445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.811106][T12445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.813966][T12445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.816978][T12445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.877359][ T7782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.883938][ T7782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.887775][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  193.912808][ T7782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.916623][ T7782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.465392][T12586] openvswitch: netlink: IPv4 tun info is not correct
[  194.510559][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'.
[  194.698873][T12596] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2056'.
[  194.708434][T12596] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  195.147068][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2057'.
[  195.281672][T12610] bond5: entered promiscuous mode
[  195.284670][T12610] 8021q: adding VLAN 0 to HW filter on device bond5
[  195.451683][T12626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.723338][ T7502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.365612][T12636] sctp: [Deprecated]: syz.0.2066 (pid 12636) Use of int in maxseg socket option.
[  196.365612][T12636] Use struct sctp_assoc_value instead
[  196.463809][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.468218][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.471446][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.475716][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.479020][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.640674][T12639] chnl_net:caif_netlink_parms(): no params data found
[  196.697901][T12639] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.700312][T12639] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.702777][T12639] bridge_slave_0: entered allmulticast mode
[  196.705906][T12639] bridge_slave_0: entered promiscuous mode
[  196.709670][T12639] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.712154][T12639] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.714733][T12639] bridge_slave_1: entered allmulticast mode
[  196.717423][T12639] bridge_slave_1: entered promiscuous mode
[  196.741378][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.746254][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.758631][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'.
[  196.777128][T12639] team0: Port device team_slave_0 added
[  196.783019][T12639] team0: Port device team_slave_1 added
[  196.807586][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.810111][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.819677][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.826189][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.828573][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.840153][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.870104][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'.
[  196.881600][T12639] hsr_slave_0: entered promiscuous mode
[  196.889718][T12639] hsr_slave_1: entered promiscuous mode
[  196.892793][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.896501][T12639] Cannot create hsr debugfs directory
[  197.004525][ T5818] Bluetooth: hci2: command 0x0405 tx timeout
[  197.152507][T12665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.268969][T12667] "syz.0.2075" (12667) uses obsolete ecb(arc4) skcipher
[  197.361621][ T7502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.425461][ T7502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.482406][ T7502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.638977][ T7502] bridge_slave_1: left allmulticast mode
[  197.640817][ T7502] bridge_slave_1: left promiscuous mode
[  197.642886][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.651543][ T7502] bridge_slave_0: left allmulticast mode
[  197.654929][ T7502] bridge_slave_0: left promiscuous mode
[  197.656839][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.901527][ T7502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.907281][ T7502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.910973][ T7502] bond0 (unregistering): Released all slaves
[  198.228249][ T7502] hsr_slave_0: left promiscuous mode
[  198.230560][ T7502] hsr_slave_1: left promiscuous mode
[  198.233603][ T7502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.236411][ T7502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.249551][ T7502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.252047][ T7502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.278676][ T7502] veth1_macvtap: left promiscuous mode
[  198.280500][ T7502] veth0_macvtap: left promiscuous mode
[  198.282271][ T7502] veth1_vlan: left promiscuous mode
[  198.285162][ T7502] veth0_vlan: left promiscuous mode
[  198.321218][T12704] netlink: 'syz.0.2082': attribute type 16 has an invalid length.
[  198.524548][ T5818] Bluetooth: hci1: command tx timeout
[  198.608726][ T7502] team0 (unregistering): Port device team_slave_1 removed
[  198.630991][ T7502] team0 (unregistering): Port device team_slave_0 removed
[  198.916990][T12701] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2082'.
[  198.923076][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'.
[  198.931414][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2084'.
[  199.025810][T12639] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.031196][T12639] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.039559][T12639] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.049222][T12639] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.066731][T12721] Bluetooth: hci1: Opcode 0x080f failed: -4
[  199.070063][T12721] x_tables: duplicate underflow at hook 4
[  199.134991][T12639] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.145244][T12639] 8021q: adding VLAN 0 to HW filter on device team0
[  199.150499][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.153062][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.164975][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.167292][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.257822][T12734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.319060][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.361080][T12639] veth0_vlan: entered promiscuous mode
[  199.371585][T12639] veth1_vlan: entered promiscuous mode
[  199.396599][T12639] veth0_macvtap: entered promiscuous mode
[  199.401018][T12639] veth1_macvtap: entered promiscuous mode
[  199.410593][T12639] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.417828][T12639] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.422799][T12639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.427689][T12639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.431214][T12639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.435013][T12639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.500174][ T7782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.502659][ T7782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.532354][ T7782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.535993][ T7782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.933036][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'.
[  200.906246][T12749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.917798][T12749] syzkaller1: entered promiscuous mode
[  200.919780][T12749] syzkaller1: entered allmulticast mode
[  201.156294][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'.
[  201.164762][T12761] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  201.219611][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'.
[  201.352380][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.070412][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'.
[  202.106032][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  202.109938][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  202.119317][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  202.127358][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  202.130684][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  202.135611][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'.
[  202.344689][T12802] netlink: 'syz.0.2110': attribute type 1 has an invalid length.
[  202.359144][T12802] bond8: entered promiscuous mode
[  202.361074][T12802] 8021q: adding VLAN 0 to HW filter on device bond8
[  202.365661][T12802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2110'.
[  202.396292][T12782] chnl_net:caif_netlink_parms(): no params data found
[  202.479135][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'.
[  202.505613][T12816] lo: entered promiscuous mode
[  202.507510][T12816] lo: entered allmulticast mode
[  202.511823][T12816] tunl0: entered promiscuous mode
[  202.514775][T12816] tunl0: entered allmulticast mode
[  202.517334][T12816] gre0: entered promiscuous mode
[  202.519398][T12816] gre0: entered allmulticast mode
[  202.525868][T12816] gretap0: entered promiscuous mode
[  202.528034][T12816] gretap0: entered allmulticast mode
[  202.532097][T12816] erspan0: entered promiscuous mode
[  202.536562][T12816] erspan0: entered allmulticast mode
[  202.540385][T12816] ip_vti0: entered promiscuous mode
[  202.542680][T12816] ip_vti0: entered allmulticast mode
[  202.546112][T12816] ip6_vti0: entered promiscuous mode
[  202.548401][T12816] ip6_vti0: entered allmulticast mode
[  202.552038][T12816] sit0: entered allmulticast mode
[  202.561369][T12816] ip6tnl0: entered promiscuous mode
[  202.563400][T12816] ip6tnl0: entered allmulticast mode
[  202.566691][T12816] ip6gre0: entered promiscuous mode
[  202.568430][T12816] ip6gre0: entered allmulticast mode
[  202.571703][T12816] ip6gretap0: entered promiscuous mode
[  202.576227][T12816] ip6gretap0: entered allmulticast mode
[  202.579873][T12816] : entered promiscuous mode
[  202.581685][T12816] bond_slave_0: entered promiscuous mode
[  202.584259][T12816] bond_slave_1: entered promiscuous mode
[  202.586559][T12816] bridge_slave_1: entered promiscuous mode
[  202.589003][T12816] : entered allmulticast mode
[  202.590942][T12816] bond_slave_0: entered allmulticast mode
[  202.593317][T12816] bond_slave_1: entered allmulticast mode
[  202.597803][T12816] bridge_slave_1: entered allmulticast mode
[  202.600688][T12816] 8021q: adding VLAN 0 to HW filter on device 
[  202.603766][T12816] team0: entered promiscuous mode
[  202.605496][T12816] team_slave_0: entered promiscuous mode
[  202.608205][T12816] team_slave_1: entered promiscuous mode
[  202.610502][T12816] team0: entered allmulticast mode
[  202.612517][T12816] team_slave_0: entered allmulticast mode
[  202.617200][T12816] team_slave_1: entered allmulticast mode
[  202.620257][T12816] 8021q: adding VLAN 0 to HW filter on device team0
[  202.623726][T12816] dummy0: entered promiscuous mode
[  202.625784][T12816] dummy0: entered allmulticast mode
[  202.631572][T12816] nlmon0: entered promiscuous mode
[  202.635966][T12816] nlmon0: entered allmulticast mode
[  202.639205][T12816] caif0: entered promiscuous mode
[  202.641432][T12816] caif0: entered allmulticast mode
[  202.643645][T12816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.655104][T12782] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.657484][T12782] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.660464][T12782] bridge_slave_0: entered allmulticast mode
[  202.664849][T12782] bridge_slave_0: entered promiscuous mode
[  202.679045][T12782] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.682127][T12782] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.687801][T12782] bridge_slave_1: entered allmulticast mode
[  202.691315][T12782] bridge_slave_1: entered promiscuous mode
[  202.769154][T12782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.782333][T12782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.845135][T12782] team0: Port device team_slave_0 added
[  202.848783][T12782] team0: Port device team_slave_1 added
[  202.904793][T12782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.907351][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.918108][T12782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.923024][T12782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.927382][T12782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.937708][T12782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.975929][T12782] hsr_slave_0: entered promiscuous mode
[  202.978605][T12782] hsr_slave_1: entered promiscuous mode
[  202.990006][T12782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.992380][T12782] Cannot create hsr debugfs directory
[  203.099028][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.162253][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.189031][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.210327][T12859] netlink: 'syz.0.2125': attribute type 39 has an invalid length.
[  203.226583][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'.
[  203.239228][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.262273][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'.
[  203.362641][ T5840] bridge_slave_1: left allmulticast mode
[  203.364915][ T5840] bridge_slave_1: left promiscuous mode
[  203.366995][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.374873][ T5840] bridge_slave_0: left allmulticast mode
[  203.376859][ T5840] bridge_slave_0: left promiscuous mode
[  203.378948][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.394451][T12863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2126'.
[  203.611286][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.615908][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.619475][ T5840] bond0 (unregistering): Released all slaves
[  203.735811][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'.
[  203.763245][T12872] bond9: entered promiscuous mode
[  203.766249][T12872] 8021q: adding VLAN 0 to HW filter on device bond9
[  203.823940][T12872] bond9 (unregistering): Released all slaves
[  203.960775][ T5840] hsr_slave_0: left promiscuous mode
[  203.962931][ T5840] hsr_slave_1: left promiscuous mode
[  203.965724][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.968850][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.971573][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.974862][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.984879][ T5840] veth1_macvtap: left promiscuous mode
[  203.987167][ T5840] veth0_macvtap: left promiscuous mode
[  203.989663][ T5840] veth1_vlan: left promiscuous mode
[  203.991965][ T5840] veth0_vlan: left promiscuous mode
[  204.206000][   T55] Bluetooth: hci1: command tx timeout
[  204.320110][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  204.340285][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  204.728969][T12782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.746245][T12782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.770527][T12782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.792550][T12782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.900719][T12782] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.924156][T12782] 8021q: adding VLAN 0 to HW filter on device team0
[  204.929289][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.931613][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.939461][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.942289][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.960929][T12914] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.181792][T12782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.234207][T12782] veth0_vlan: entered promiscuous mode
[  205.247931][T12782] veth1_vlan: entered promiscuous mode
[  205.267586][T12782] veth0_macvtap: entered promiscuous mode
[  205.273228][T12782] veth1_macvtap: entered promiscuous mode
[  205.292361][T12782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.314703][T12782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.327628][T12782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.332678][T12782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.340945][T12782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.347524][T12782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.437690][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.440306][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.480723][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.483241][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.673113][T12973] netlink: 'syz.0.2154': attribute type 1 has an invalid length.
[  205.676931][T12973] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2154'.
[  205.679965][T12973] netlink: 'syz.0.2154': attribute type 1 has an invalid length.
[  206.628155][T12985] IPVS: length: 238 != 24
[  206.905219][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'.
[  206.935470][T13009] team_slave_0: left promiscuous mode
[  206.938321][T13009] team_slave_0: left allmulticast mode
[  206.943359][T13009] team0 (unregistering): Port device team_slave_0 removed
[  206.947686][T13009] team_slave_1: left promiscuous mode
[  206.950192][T13009] team_slave_1: left allmulticast mode
[  206.956407][T13009] team0 (unregistering): Port device team_slave_1 removed
[  207.095511][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.118114][T13016] tipc: Started in network mode
[  207.120468][T13016] tipc: Node identity ac14142f, cluster identity 229
[  207.132826][T13016] tipc: New replicast peer: 0.0.0.0
[  207.136583][T13016] tipc: Enabled bearer <udp:syz2>, priority 10
[  207.139875][T13017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.146687][T13016] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  207.483784][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  207.869285][T13024] netlink: 'syz.2.2170': attribute type 2 has an invalid length.
[  207.874949][T13024] netlink: 'syz.2.2170': attribute type 2 has an invalid length.
[  207.972589][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.039666][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  208.042776][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  208.048481][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  208.052818][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  208.057765][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.133943][ T2307] tipc: Node number set to 2886997039
[  208.164326][T13034] chnl_net:caif_netlink_parms(): no params data found
[  208.198982][T13046] netlink: 'syz.2.2175': attribute type 21 has an invalid length.
[  208.202417][T13046] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2175'.
[  208.208106][T13046] netlink: 'syz.2.2175': attribute type 4 has an invalid length.
[  208.211242][T13046] netlink: 'syz.2.2175': attribute type 5 has an invalid length.
[  208.216400][T13046] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2175'.
[  208.227673][T13034] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.229987][T13034] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.232254][T13034] bridge_slave_0: entered allmulticast mode
[  208.235287][T13034] bridge_slave_0: entered promiscuous mode
[  208.239512][T13034] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.242148][T13034] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.244638][T13034] bridge_slave_1: entered allmulticast mode
[  208.247377][T13034] bridge_slave_1: entered promiscuous mode
[  208.269887][T13034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.275912][T13034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.341885][T13034] team0: Port device team_slave_0 added
[  208.353304][T13034] team0: Port device team_slave_1 added
[  208.373920][T13056] netlink: 'syz.0.2178': attribute type 11 has an invalid length.
[  208.376602][T13056] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2178'.
[  208.381847][T13034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.385187][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.396735][T13034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.402877][T13034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.406234][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.418177][T13034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.468455][T13034] hsr_slave_0: entered promiscuous mode
[  208.471579][T13034] hsr_slave_1: entered promiscuous mode
[  208.475554][T13034] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.479254][T13034] Cannot create hsr debugfs directory
[  208.567918][T13059] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  208.571061][T13063] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.585890][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2182'.
[  208.722648][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.736140][T13067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.768444][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.933686][ T5840] bridge_slave_1: left allmulticast mode
[  208.938048][ T5840] bridge_slave_1: left promiscuous mode
[  208.953999][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.962657][ T5840] bridge_slave_0: left allmulticast mode
[  208.970487][ T5840] bridge_slave_0: left promiscuous mode
[  208.972429][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.277046][T13089] "syz.2.2188" (13089) uses obsolete ecb(arc4) skcipher
[  209.284983][T13089] netlink: 'syz.2.2188': attribute type 11 has an invalid length.
[  209.290087][T13089] netlink: 'syz.2.2188': attribute type 4 has an invalid length.
[  209.292719][T13089] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2188'.
[  209.302575][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.310093][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.314776][ T5840] bond0 (unregistering): Released all slaves
[  209.538216][T13100] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2191'.
[  209.653990][T13109] bond0: entered promiscuous mode
[  209.656461][T13109] macvlan1: entered promiscuous mode
[  209.658861][T13109] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  209.661863][T13109] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  209.666325][T13109] hsr1: entered promiscuous mode
[  209.758049][ T5840] hsr_slave_0: left promiscuous mode
[  209.760862][T13116] No such timeout policy "syz1"
[  209.764984][ T5840] hsr_slave_1: left promiscuous mode
[  209.768368][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.770846][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.775545][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.778833][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.791017][T13121] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2197'.
[  209.797142][T13121] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2197'.
[  209.801901][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2197'.
[  209.802450][ T5840] veth1_macvtap: left promiscuous mode
[  209.807059][ T5840] veth0_macvtap: left promiscuous mode
[  209.808841][ T5840] veth1_vlan: left promiscuous mode
[  209.810546][ T5840] veth0_vlan: left promiscuous mode
[  210.072623][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  210.095973][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  210.123585][ T5818] Bluetooth: hci1: command tx timeout
[  210.465387][T13034] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  210.478250][T13034] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  210.504603][T13034] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  210.516477][T13034] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  210.651406][T13034] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.665628][T13034] 8021q: adding VLAN 0 to HW filter on device team0
[  210.677401][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.679909][ T5932] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.697123][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.699576][ T5932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.839705][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.851000][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'.
[  210.851061][T13183] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  210.857201][T13182] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  210.860777][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.868714][T13034] veth0_vlan: entered promiscuous mode
[  210.877465][T13034] veth1_vlan: entered promiscuous mode
[  210.880237][T13183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.896441][T13034] veth0_macvtap: entered promiscuous mode
[  210.900897][T13034] veth1_macvtap: entered promiscuous mode
[  210.910494][T13034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.918417][T13034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.923649][T13034] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.926780][T13034] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.929880][T13034] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.932859][T13034] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.000535][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.003204][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.008186][T13192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.058877][ T7785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.061664][ T7785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.722241][T13240] batman_adv: batadv0: Adding interface: dummy0
[  212.724468][T13240] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  212.730732][T13240] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  212.818604][T13246] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  212.981310][T13259] netlink: 'syz.0.2237': attribute type 10 has an invalid length.
[  212.984523][T13259] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  213.086809][T13267] delete_channel: no stack
[  213.195635][T13277] netlink: 'syz.2.2245': attribute type 2 has an invalid length.
[  213.198840][T13277] netlink: 'syz.2.2245': attribute type 1 has an invalid length.
[  213.343265][T13298] xt_SECMARK: invalid mode: 0
[  213.365281][ T5641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.368452][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.374421][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.377446][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.380206][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.382761][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.439979][T13334] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  214.452351][T13332] x9: renamed from bridge_slave_0
[  214.525705][T13324] chnl_net:caif_netlink_parms(): no params data found
[  214.645576][T13350] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.680629][T13324] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.692244][T13324] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.699595][T13324] bridge_slave_0: entered allmulticast mode
[  214.703937][T13324] bridge_slave_0: entered promiscuous mode
[  214.710092][T13350] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.722513][T13324] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.725889][T13324] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.729269][T13324] bridge_slave_1: entered allmulticast mode
[  214.733392][T13324] bridge_slave_1: entered promiscuous mode
[  214.759255][T13350] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.780935][T13324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.786491][T13324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.813114][T13324] team0: Port device team_slave_0 added
[  214.818916][T13350] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.828424][T13324] team0: Port device team_slave_1 added
[  214.850487][T13324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.853227][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.865404][T13324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.870676][T13324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.875447][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.887865][T13324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.919037][T13350] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.934580][T13324] hsr_slave_0: entered promiscuous mode
[  214.937394][T13324] hsr_slave_1: entered promiscuous mode
[  214.940036][T13324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  214.943086][T13324] Cannot create hsr debugfs directory
[  214.951420][T13350] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.960826][T13350] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.978487][T13350] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  215.012286][ T5641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.018597][T13352] __nla_validate_parse: 7 callbacks suppressed
[  215.018607][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'.
[  215.089820][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'.
[  215.130463][ T5641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.294977][ T5641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.498887][ T5641] bridge_slave_1: left allmulticast mode
[  215.501127][ T5641] bridge_slave_1: left promiscuous mode
[  215.503165][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.512545][ T5641] bridge_slave_0: left allmulticast mode
[  215.518806][ T5641] bridge_slave_0: left promiscuous mode
[  215.521393][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.797484][ T5641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.803164][ T5641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.808812][ T5641] bond0 (unregistering): Released all slaves
[  216.028975][T13379] netlink: 'syz.2.2276': attribute type 1 has an invalid length.
[  216.052933][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'.
[  216.065071][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2274'.
[  216.072147][T13379] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.107224][T13379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2276'.
[  216.161616][ T5641] hsr_slave_0: left promiscuous mode
[  216.168659][ T5641] hsr_slave_1: left promiscuous mode
[  216.171991][ T5641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.182694][ T5641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.191679][ T5641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.194322][ T5641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.207717][ T5641] veth1_macvtap: left promiscuous mode
[  216.209563][ T5641] veth0_macvtap: left promiscuous mode
[  216.211600][ T5641] veth1_vlan: left promiscuous mode
[  216.223035][ T5641] veth0_vlan: left promiscuous mode
[  216.283618][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  216.445277][   T55] Bluetooth: hci1: command tx timeout
[  216.540315][ T5641] team0 (unregistering): Port device team_slave_1 removed
[  216.569823][ T5641] team0 (unregistering): Port device team_slave_0 removed
[  216.841110][T13379] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.845040][T13379] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  216.850917][T13379] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  216.972951][T13324] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  216.986282][T13324] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  217.011104][T13324] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  217.042627][T13324] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  217.149328][T13324] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.176358][T13324] 8021q: adding VLAN 0 to HW filter on device team0
[  217.188714][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.191676][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.220455][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.223056][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.356931][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'.
[  217.470227][T13324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.529437][T13324] veth0_vlan: entered promiscuous mode
[  217.550000][T13324] veth1_vlan: entered promiscuous mode
[  217.609879][T13324] veth0_macvtap: entered promiscuous mode
[  217.614441][T13324] veth1_macvtap: entered promiscuous mode
[  217.622311][T13324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.629220][T13324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.656883][T13324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.659783][T13324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.662840][T13324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.667795][T13324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.691545][T13461] netlink: 'syz.2.2291': attribute type 6 has an invalid length.
[  217.757466][T13465] bond0: option min_links: invalid value (18446744073709551604)
[  217.760551][T13465] bond0: option min_links: allowed values 0 - 2147483647
[  217.765193][ T9058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.767883][ T9058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.797283][T13467] syzkaller1: entered promiscuous mode
[  217.799311][T13467] syzkaller1: entered allmulticast mode
[  217.830832][T13469] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2295'.
[  217.836102][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.840146][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.845979][T13470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2295'.
[  218.024407][T13484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'.
[  218.046610][T13484] 8021q: adding VLAN 0 to HW filter on device bond9
[  218.051050][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  218.064021][T13487] netlink: 'syz.2.2302': attribute type 1 has an invalid length.
[  218.364381][T13517] netlink: 'syz.2.2310': attribute type 13 has an invalid length.
[  218.371547][T13517] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  218.583114][T13522] openvswitch: netlink: IP tunnel dst address not specified
[  218.689382][T13542] nftables ruleset with unbound chain
[  218.693143][T13542] netlink: zone id is out of range
[  218.697300][T13542] netlink: zone id is out of range
[  218.699627][T13542] netlink: set zone limit has 4 unknown bytes
[  218.731020][T13544] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  218.846540][T13554] netlink: 'syz.0.2322': attribute type 11 has an invalid length.
[  219.029031][T13555] lo speed is unknown, defaulting to 1000
[  219.031269][T13555] lo speed is unknown, defaulting to 1000
[  219.033985][T13555] lo speed is unknown, defaulting to 1000
[  219.041512][T13555] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  219.058688][T13555] lo speed is unknown, defaulting to 1000
[  219.061926][T13555] lo speed is unknown, defaulting to 1000
[  219.065436][T13555] lo speed is unknown, defaulting to 1000
[  219.068219][T13555] lo speed is unknown, defaulting to 1000
[  219.286830][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.246116][T13562] netlink: 'syz.2.2324': attribute type 10 has an invalid length.
[  220.270138][T13562] __nla_validate_parse: 7 callbacks suppressed
[  220.270153][T13562] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2324'.
[  220.404698][T13573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.438397][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.443009][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.447346][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.455636][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.459506][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.475417][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'.
[  220.482464][T13577] lo speed is unknown, defaulting to 1000
[  220.501406][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.525783][ T5932] wlan0: Trigger new scan to find an IBSS to join
[  220.583019][T13577] chnl_net:caif_netlink_parms(): no params data found
[  220.627045][T13577] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.629477][T13577] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.631930][T13577] bridge_slave_0: entered allmulticast mode
[  220.634847][T13577] bridge_slave_0: entered promiscuous mode
[  220.637895][T13577] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.640148][T13577] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.642428][T13577] bridge_slave_1: entered allmulticast mode
[  220.645488][T13577] bridge_slave_1: entered promiscuous mode
[  220.665644][T13577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.670165][T13577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.694059][T13577] team0: Port device team_slave_0 added
[  220.697893][T13577] team0: Port device team_slave_1 added
[  220.714772][T13577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.717136][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.726113][T13577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.730351][T13577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.732635][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.741730][T13577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.768184][T13577] hsr_slave_0: entered promiscuous mode
[  220.770498][T13577] hsr_slave_1: entered promiscuous mode
[  220.772653][T13577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  220.775484][T13577] Cannot create hsr debugfs directory
[  220.979603][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.025970][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.136552][   T13] bridge_slave_1: left allmulticast mode
[  221.138903][   T13] bridge_slave_1: left promiscuous mode
[  221.141444][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.147384][   T13] bridge_slave_0: left allmulticast mode
[  221.149545][   T13] bridge_slave_0: left promiscuous mode
[  221.151546][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.380138][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.385161][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.389022][   T13] bond0 (unregistering): Released all slaves
[  221.457153][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2334'.
[  221.460711][T13602] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  221.533382][T13608] macsec2: entered allmulticast mode
[  221.537071][T13608] macsec0: entered allmulticast mode
[  221.718076][T13621] @: renamed from veth0_vlan
[  221.768040][   T13] hsr_slave_0: left promiscuous mode
[  221.771181][   T13] hsr_slave_1: left promiscuous mode
[  221.773683][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.776773][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.780850][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.789628][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.816778][   T13] veth1_macvtap: left promiscuous mode
[  221.818579][   T13] veth0_macvtap: left promiscuous mode
[  221.820502][   T13] veth1_vlan: left promiscuous mode
[  221.822496][   T13] veth0_vlan: left promiscuous mode
[  222.037499][T13636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.134416][   T13] team0 (unregistering): Port device team_slave_1 removed
[  222.156060][   T13] team0 (unregistering): Port device team_slave_0 removed
[  222.462900][T13577] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  222.477977][T13577] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  222.491009][T13577] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  222.495850][T13577] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  222.530809][ T5818] Bluetooth: hci1: command tx timeout
[  222.532179][T13651] netlink: 'syz.0.2343': attribute type 5 has an invalid length.
[  222.571841][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'.
[  222.634538][T13577] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.657198][T13577] 8021q: adding VLAN 0 to HW filter on device team0
[  222.680513][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.683774][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.701694][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.704948][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.764213][T13662] ieee802154 phy1 wpan1: encryption failed: -90
[  222.843320][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'.
[  223.041270][T13577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.135202][T13577] veth0_vlan: entered promiscuous mode
[  223.154940][T13577] veth1_vlan: entered promiscuous mode
[  223.174895][T13577] veth0_macvtap: entered promiscuous mode
[  223.178920][T13577] veth1_macvtap: entered promiscuous mode
[  223.199979][T13577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.208793][T13577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.226040][T13577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.229186][T13577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.232280][T13577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.238992][T13577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.332876][ T7783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.344638][ T7783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.365200][ T7783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.367831][ T7783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.411705][T13717] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  223.417213][T13717] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  223.483893][ T5932] wlan0: Trigger new scan to find an IBSS to join
[  223.618140][T13733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.818635][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'.
[  224.089306][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2372'.
[  224.168882][T13762] netlink: 'syz.0.2373': attribute type 21 has an invalid length.
[  224.171867][T13762] netlink: 'syz.0.2373': attribute type 22 has an invalid length.
[  224.175273][T13762] netlink: 'syz.0.2373': attribute type 23 has an invalid length.
[  224.178306][T13762] netlink: 'syz.0.2373': attribute type 25 has an invalid length.
[  224.182108][T13762] netlink: 'syz.0.2373': attribute type 26 has an invalid length.
[  224.187609][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'.
[  224.310786][T13770] xt_hashlimit: size too large, truncated to 1048576
[  224.629943][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2379'.
[  224.681942][T13792] netlink: 'syz.0.2380': attribute type 1 has an invalid length.
[  224.706117][T13792] 8021q: adding VLAN 0 to HW filter on device bond10
[  224.716348][T13792] ipvlan1: entered allmulticast mode
[  224.718690][T13792] bond10: entered allmulticast mode
[  224.756254][T13801] openvswitch: netlink: Duplicate or invalid key (type 0).
[  224.759565][T13801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.809366][T13805] tipc: Enabled bearer <eth:gre0>, priority 10
[  224.882574][T13811] netlink: 'syz.0.2384': attribute type 1 has an invalid length.
[  224.941340][T13811] bond11: entered promiscuous mode
[  224.943233][T13811] 8021q: adding VLAN 0 to HW filter on device bond11
[  224.955152][T13815] bond11: (slave bridge14): making interface the new active one
[  224.958090][T13815] bridge14: entered promiscuous mode
[  224.960772][T13815] bond11: (slave bridge14): Enslaving as an active interface with an up link
[  224.988131][T11924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.960378][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'.
[  225.964376][T13819] netlink: 'syz.2.2387': attribute type 39 has an invalid length.
[  226.135992][T13831] netlink: 'syz.2.2388': attribute type 33 has an invalid length.
[  226.138723][T13831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2388'.
[  226.146369][T13832] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2389'.
[  226.160855][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.165078][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.168408][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.172416][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.178219][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  226.235947][T13843] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2392'.
[  226.260885][T13845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.300929][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'.
[  226.408601][T13836] chnl_net:caif_netlink_parms(): no params data found
[  226.457400][ T7785] wlan0: Trigger new scan to find an IBSS to join
[  226.474645][T11924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.536979][T11924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.565867][T13836] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.568914][T13836] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.571969][T13836] bridge_slave_0: entered allmulticast mode
[  226.582918][T13836] bridge_slave_0: entered promiscuous mode
[  226.604591][T11924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.617257][T13836] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.620211][T13836] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.624604][T13836] bridge_slave_1: entered allmulticast mode
[  226.628366][T13836] bridge_slave_1: entered promiscuous mode
[  226.676562][T13836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.683017][T13836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.728500][T13836] team0: Port device team_slave_0 added
[  226.741804][T13836] team0: Port device team_slave_1 added
[  226.813009][T13836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.817141][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.829202][T13836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.840925][T11924] bridge_slave_1: left allmulticast mode
[  226.846859][T11924] bridge_slave_1: left promiscuous mode
[  226.850648][T11924] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.862831][T11924] bridge_slave_0: left allmulticast mode
[  226.867579][T11924] bridge_slave_0: left promiscuous mode
[  226.870228][T11924] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.112192][T11924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.117540][T11924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.121259][T11924] bond0 (unregistering): Released all slaves
[  227.128083][T13836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.131199][T13836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.142874][T13836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.192170][T13836] hsr_slave_0: entered promiscuous mode
[  227.197605][T13836] hsr_slave_1: entered promiscuous mode
[  227.200460][T13836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.203415][T13836] Cannot create hsr debugfs directory
[  227.357180][T11924] hsr_slave_0: left promiscuous mode
[  227.359824][T11924] hsr_slave_1: left promiscuous mode
[  227.362018][T11924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.367590][ T9058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.370777][T11924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.374837][T11924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.377257][T11924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.387171][T11924] veth1_macvtap: left promiscuous mode
[  227.389014][T11924] veth0_macvtap: left promiscuous mode
[  227.390846][T11924] veth1_vlan: left promiscuous mode
[  227.393029][T11924] veth0_vlan: left promiscuous mode
[  227.441787][    C0] ------------[ cut here ]------------
[  227.443834][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  227.448128][    C0] WARNING: CPU: 0 PID: 11924 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  227.451841][    C0] Modules linked in:
[  227.453844][    C0] CPU: 0 UID: 0 PID: 11924 Comm: kworker/u8:5 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  227.459230][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.462368][    C0] Workqueue: netns cleanup_net
[  227.464092][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  227.466391][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 1a a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  227.473238][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  227.475600][    C0] RAX: 9d2f42be8b21bf00 RBX: 000000000000000c RCX: ffff88810a6ab980
[  227.478228][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  227.480834][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  227.483377][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888020bd5e28
[  227.486061][    C0] R13: 0000000000000000 R14: ffff888038570e40 R15: ffff8880385730d8
[  227.488820][    C0] FS:  0000000000000000(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  227.491829][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.494009][    C0] CR2: 00007ffffb5e1e88 CR3: 000000011e8c2000 CR4: 00000000000006f0
[  227.496623][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  227.499400][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  227.502012][    C0] Call Trace:
[  227.503324][    C0]  <IRQ>
[  227.504585][    C0]  rate_control_send_low+0x194/0x7a0
[  227.506501][    C0]  rate_control_get_rate+0x20b/0x5d0
[  227.508358][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  227.510171][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  227.512157][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  227.514110][    C0]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  227.516019][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.517804][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.519579][    C0]  __ieee80211_beacon_get+0x1033/0x17b0
[  227.521383][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.523312][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  227.525338][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  227.527318][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  227.529144][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  227.531454][    C0]  __iterate_interfaces+0x2ab/0x590
[  227.533144][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  227.535287][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  227.537674][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  227.539640][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  227.541934][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  227.543659][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  227.545554][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  227.547265][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  227.549096][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  227.551036][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  227.552855][    C0]  handle_softirqs+0x286/0x870
[  227.554647][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  227.556303][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  227.558015][    C0]  __irq_exit_rcu+0xca/0x1f0
[  227.559526][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  227.561215][    C0]  irq_exit_rcu+0x9/0x30
[  227.562594][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
Connection to localhost closed by remote host.
[  227.564728][    C0]  </IRQ>
[  227.565972][    C0]  <TASK>
[  227.567034][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.569160][    C0] RIP: 0010:__cancel_work+0x25e/0x2e0
[  227.570903][    C0] Code: 2c 35 00 90 0f 0b 90 e9 1d ff ff ff e8 ab 2c 35 00 e8 06 97 db 09 48 85 db 74 ce e8 9c 2c 35 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 10 4a c7 04 20 00 00 00 00 65 48 8b 05 2d de 11 11 48
[  227.577248][    C0] RSP: 0018:ffffc9000853f200 EFLAGS: 00000293
[  227.579223][    C0] RAX: ffffffff818b21d4 RBX: 0000000000000200 RCX: ffff88810a6ab980
[  227.581948][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.584783][    C0] RBP: ffffc9000853f2b8 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be
[  227.587375][    C0] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: dffffc0000000000
[  227.589905][    C0] R13: 1ffff11023affe35 R14: 0000000000000000 R15: 0000000000800000
[  227.592440][    C0]  ? __cancel_work+0x254/0x2e0
[  227.594174][    C0]  ? __pfx___cancel_work+0x10/0x10
[  227.596049][    C0]  ipv6_mc_down+0x326/0x480
[  227.597725][    C0]  addrconf_ifdown+0x163d/0x1880
[  227.599518][    C0]  ? tls_dev_event+0x717/0xec0
[  227.601130][    C0]  ? __pfx_addrconf_ifdown+0x10/0x10
[  227.602812][    C0]  addrconf_notify+0x1bc/0x1010
[  227.604696][    C0]  notifier_call_chain+0x1b6/0x3e0
[  227.606420][    C0]  dev_close_many+0x29c/0x410
[  227.607953][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.609884][    C0]  ? __pfx_dev_close_many+0x10/0x10
[  227.611703][    C0]  unregister_netdevice_many_notify+0x834/0x2320
[  227.613977][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  227.615868][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  227.617764][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  227.620018][    C0]  ? unregister_netdevice_queue+0x1b3/0x380
[  227.621905][    C0]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  227.623972][    C0]  default_device_exit_batch+0x819/0x890
[  227.625820][    C0]  ? __pfx___might_resched+0x10/0x10
[  227.627567][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  227.629675][    C0]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  227.631660][    C0]  ? net_generic+0x1e/0x240
[  227.633377][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  227.635767][    C0]  ops_undo_list+0x525/0x990
[  227.637482][    C0]  ? __pfx_ops_undo_list+0x10/0x10
[  227.639410][    C0]  cleanup_net+0x4c5/0x800
[  227.640918][    C0]  ? __pfx_cleanup_net+0x10/0x10
[  227.642731][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.644675][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  227.646500][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  227.648345][    C0]  process_scheduled_works+0xae1/0x17b0
[  227.650158][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  227.652086][    C0]  worker_thread+0x8a0/0xda0
[  227.653619][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.655760][    C0]  ? __kthread_parkme+0x7b/0x200
[  227.657370][    C0]  kthread+0x711/0x8a0
[  227.658770][    C0]  ? __pfx_worker_thread+0x10/0x10
[  227.660436][    C0]  ? __pfx_kthread+0x10/0x10
[  227.661949][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.663688][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.665361][    C0]  ? __pfx_kthread+0x10/0x10
[  227.666859][    C0]  ret_from_fork+0x3fc/0x770
[  227.668331][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  227.669963][    C0]  ? __switch_to_asm+0x39/0x70
[  227.671496][    C0]  ? __switch_to_asm+0x33/0x70
[  227.673041][    C0]  ? __pfx_kthread+0x10/0x10
[  227.674585][    C0]  ret_from_fork_asm+0x1a/0x30
[  227.676175][    C0]  </TASK>
[  227.677215][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  227.679646][    C0] CPU: 0 UID: 0 PID: 11924 Comm: kworker/u8:5 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  227.683763][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.687591][    C0] Workqueue: netns cleanup_net
[  227.689247][    C0] Call Trace:
[  227.690332][    C0]  <IRQ>
[  227.691372][    C0]  dump_stack_lvl+0x99/0x250
[  227.692933][    C0]  ? __asan_memcpy+0x40/0x70
[  227.694737][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.696422][    C0]  ? __pfx__printk+0x10/0x10
[  227.697932][    C0]  panic+0x2db/0x790
[  227.699220][    C0]  ? __pfx_panic+0x10/0x10
[  227.700686][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  227.702316][    C0]  __warn+0x31b/0x4b0
[  227.703635][    C0]  ? __rate_control_send_low+0x5df/0x820
[  227.705843][    C0]  ? __rate_control_send_low+0x5df/0x820
[  227.707642][    C0]  report_bug+0x2be/0x4f0
[  227.709085][    C0]  ? __rate_control_send_low+0x5df/0x820
[  227.710907][    C0]  ? __rate_control_send_low+0x5df/0x820
[  227.712764][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  227.714718][    C0]  handle_bug+0x84/0x160
[  227.716291][    C0]  exc_invalid_op+0x1a/0x50
[  227.717991][    C0]  asm_exc_invalid_op+0x1a/0x20
[  227.719806][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  227.722037][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 1a a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  227.728681][    C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246
[  227.730652][    C0] RAX: 9d2f42be8b21bf00 RBX: 000000000000000c RCX: ffff88810a6ab980
[  227.733208][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  227.735775][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  227.738297][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888020bd5e28
[  227.740968][    C0] R13: 0000000000000000 R14: ffff888038570e40 R15: ffff8880385730d8
[  227.743772][    C0]  ? __rate_control_send_low+0x5de/0x820
[  227.745690][    C0]  rate_control_send_low+0x194/0x7a0
[  227.747376][    C0]  rate_control_get_rate+0x20b/0x5d0
[  227.749096][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  227.750981][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  227.753046][    C0]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  227.755218][    C0]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  227.757303][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.759216][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.761007][    C0]  __ieee80211_beacon_get+0x1033/0x17b0
[  227.762796][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  227.764630][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  227.766387][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  227.768446][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  227.770292][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  227.772581][    C0]  __iterate_interfaces+0x2ab/0x590
[  227.774482][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  227.776546][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  227.778974][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  227.780921][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  227.783286][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  227.784936][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  227.786969][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  227.788675][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  227.790457][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  227.792313][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  227.794017][    C0]  handle_softirqs+0x286/0x870
[  227.795767][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  227.797292][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  227.799017][    C0]  __irq_exit_rcu+0xca/0x1f0
[  227.800731][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  227.802518][    C0]  irq_exit_rcu+0x9/0x30
[  227.804026][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  227.805792][    C0]  </IRQ>
[  227.806795][    C0]  <TASK>
[  227.807771][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.809700][    C0] RIP: 0010:__cancel_work+0x25e/0x2e0
[  227.811454][    C0] Code: 2c 35 00 90 0f 0b 90 e9 1d ff ff ff e8 ab 2c 35 00 e8 06 97 db 09 48 85 db 74 ce e8 9c 2c 35 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 10 4a c7 04 20 00 00 00 00 65 48 8b 05 2d de 11 11 48
[  227.818056][    C0] RSP: 0018:ffffc9000853f200 EFLAGS: 00000293
[  227.820011][    C0] RAX: ffffffff818b21d4 RBX: 0000000000000200 RCX: ffff88810a6ab980
[  227.822548][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.825114][    C0] RBP: ffffc9000853f2b8 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be
[  227.827737][    C0] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: dffffc0000000000
[  227.830279][    C0] R13: 1ffff11023affe35 R14: 0000000000000000 R15: 0000000000800000
[  227.832812][    C0]  ? __cancel_work+0x254/0x2e0
[  227.834634][    C0]  ? __pfx___cancel_work+0x10/0x10
[  227.836332][    C0]  ipv6_mc_down+0x326/0x480
[  227.837835][    C0]  addrconf_ifdown+0x163d/0x1880
[  227.839437][    C0]  ? tls_dev_event+0x717/0xec0
[  227.840985][    C0]  ? __pfx_addrconf_ifdown+0x10/0x10
[  227.842676][    C0]  addrconf_notify+0x1bc/0x1010
[  227.844371][    C0]  notifier_call_chain+0x1b6/0x3e0
[  227.846175][    C0]  dev_close_many+0x29c/0x410
[  227.847706][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.849682][    C0]  ? __pfx_dev_close_many+0x10/0x10
[  227.851463][    C0]  unregister_netdevice_many_notify+0x834/0x2320
[  227.853481][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  227.855272][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  227.856956][    C0]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  227.859049][    C0]  ? unregister_netdevice_queue+0x1b3/0x380
[  227.860966][    C0]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  227.862987][    C0]  default_device_exit_batch+0x819/0x890
[  227.864813][    C0]  ? __pfx___might_resched+0x10/0x10
[  227.866528][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  227.868553][    C0]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  227.870773][    C0]  ? net_generic+0x1e/0x240
[  227.872240][    C0]  ? __pfx_default_device_exit_batch+0x10/0x10
[  227.874166][    C0]  ops_undo_list+0x525/0x990
[  227.875892][    C0]  ? __pfx_ops_undo_list+0x10/0x10
[  227.877494][    C0]  cleanup_net+0x4c5/0x800
[  227.878929][    C0]  ? __pfx_cleanup_net+0x10/0x10
[  227.880516][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.882151][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  227.883910][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  227.886106][    C0]  process_scheduled_works+0xae1/0x17b0
[  227.887824][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  227.889698][    C0]  worker_thread+0x8a0/0xda0
[  227.891393][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.893616][    C0]  ? __kthread_parkme+0x7b/0x200
[  227.895460][    C0]  kthread+0x711/0x8a0
[  227.896786][    C0]  ? __pfx_worker_thread+0x10/0x10
[  227.898777][    C0]  ? __pfx_kthread+0x10/0x10
[  227.900626][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  227.902707][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.904684][    C0]  ? __pfx_kthread+0x10/0x10
[  227.906159][    C0]  ret_from_fork+0x3fc/0x770
[  227.907670][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  227.909364][    C0]  ? __switch_to_asm+0x39/0x70
[  227.910910][    C0]  ? __switch_to_asm+0x33/0x70
[  227.912708][    C0]  ? __pfx_kthread+0x10/0x10
[  227.914572][    C0]  ret_from_fork_asm+0x1a/0x30
[  227.916429][    C0]  </TASK>
[  227.918109][    C0] Kernel Offset: disabled
[  227.919522][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:50:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006ef0
R8 =ffff888108b80237 R9 =1ffff11021170046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48dc R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffffb5e1e88 CR3=000000011e8c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6bdfef589727f574 e11b4302d3864afc
XMM02=6b296a676281f527 d334ab77cc40ccbc XMM03=0a392599d811ae6b 0391ddbe424b743a
XMM04=0b7af41aeea95af1 5a63ef29495901fa XMM05=815fb7ed12893ac6 4366d68bcafc2a46
XMM06=99187f5e8083cd6e 8a347321a404f953 XMM07=d0df723d80cb9382 5b865b41044ca4b3
XMM08=895ac94799e42f15 1b9007da03dfe5ea XMM09=0000000000000000 00007f164c411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ef536b882c277500 RBX=ffffffff81974d58 RCX=ef536b882c277500 RDX=0000000000000001
RSI=ffffffff8d98233c RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10df0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056122bada000 CR3=000000003bbce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdb86584478 00007fdb86584450 XMM03=00007fdb86584488 00007fdb86584480
XMM04=00007fdb870ed100 00007fdb86584440 XMM05=00007fdb86584458 00007fdb865844a0
XMM06=00007fdb86584498 00007fdb86584490 XMM07=00007fdb86584488 00007fdb86584480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdb86411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
