last executing test programs:

4.69679904s ago: executing program 1 (id=3258):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nr0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r1, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000)
r4 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf25070000903c000300ffffffff33ee0d5062f990057584d01f6adbd822790c9c28fcf13808b371b54e36947e7b8bedc8e57dffe4ced216c0589ded6a4fcefe06bcd3f6d295e74f1b1987d7bcdd6a1ea236935def947c5ffd147571b19b8938ee0ce296fff3e3b449663b0caabfa39dc4041ab1ef8e27fdf4f05d5a2637bcaff6382cd8d1db375d23be0e7a00000000000000000000d72644f1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48c5)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="09042cbd7000fddbdf25130862c98f4499007f0000004c0000100500c2000000000006003600ff070000"], 0x30}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x40)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800)

4.364703277s ago: executing program 1 (id=3261):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x796}]}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x1, 0x10001, @mcast1}}]}, 0x70}, 0x1, 0x7}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xaf01, &(0x7f00000001c0)={r2, 0x66c, 0xf, 0x7c09})
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

4.250464556s ago: executing program 1 (id=3262):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f00000001c0)={<r1=>r0, 0x66c, 0x6, 0x1})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r6 = accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f0000000180)=0x60, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000300))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
socket(0x5, 0xa, 0x800)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f0000001440)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1000c}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840025}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x31e68c1, 0x13}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20000040)

3.363577316s ago: executing program 1 (id=3265):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback}}}, 0x32)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)

3.227158265s ago: executing program 1 (id=3267):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff}) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000680)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x1d0, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="19b82099aa1f92b5c213a4dbccedd9ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cdd7566ba2138de4a01d3c6af6577912"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c82521c81593257ecf460fdba3dd92dc0f5982fa73fa64a9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0f51de2ca38be469e66962e77d3203f6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b801a128181723e7528a0f509d61b029846c370d10d549170d444cab1de25db4"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3996e618b8b9943"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b49129cbdf120040deaf70f752131df0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5b7822a905ae2f594461ecb97f8b3a27d48494e85231714b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d357739967524f3ff566217e73bd5642"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x996f}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d519b2e82d2da1e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0d23bd2ab3af0b2e"}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b967547f6b2b5c9e512f540b29fdf3fb4d633e1d21425bd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="95ba2cd1f0a49cb7f3b7aca3a7448c85"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0ce5c5e01e0735972730ea88f2f82ee8ea030c6e2d778c38"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07961b2a591c720d9a47e1438a1e192e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d667e0f659518dfa31a46a7d1711a96d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0d95918acef744e1c3f7e60cb3a1c9bdb60a252ec3ee27b94fd483b10c9f8d11"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "544eb01c6fa2d598"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8880}, 0x2041021) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) (async)
bind$can_raw(r2, &(0x7f0000000040), 0x10) (async)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x1, @local}, 0x4, {0x2, 0x4e24, @rand_addr=0x64010103}, 'syz_tun\x00'}) (async)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r8}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x12)
socket$kcm(0x29, 0x5, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9)

3.165612935s ago: executing program 1 (id=3269):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24040014)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)}, 0x100) (async)
recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)}, 0x100)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r5, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r5, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
sendmsg$can_bcm(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x0, 0x140, 0x7fff, {0x0, 0xea60}, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x2c, 0x1, 0x0, 0x0, "fc8eb97cc405a58c4da29dfbf16f48b9b2d69b7f4e3c12e85b99c26ec2f92007a258ad5e2fe843d717a02fe39ffc99e01851c2a7091e73299224fb346192e04d"}}, 0x80}}, 0x4008004)

1.569110263s ago: executing program 2 (id=3290):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x8001af85, &(0x7f00000001c0)={0xffffffffffffffff, 0x66c, 0x6, 0x1})

1.446135626s ago: executing program 2 (id=3292):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r1=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @pid=r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0xa, 0x8000, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x1, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '!\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x11a, 0x8, {0x0, @broadcast, @multicast1}}}], 0x20}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x20048054)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080))

1.224572052s ago: executing program 2 (id=3293):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x7c, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x6}, {0xfff2, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xfffffffffffffdf9, 0x2, [@TCA_BPF_ACT={0x4c, 0x1, [@m_tunnel_key={0x48, 0x4, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x7c}}, 0x40)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000070100800c0001"], 0x114}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x38, 0x3c, 0x107, 0x0, 0x0, {0xd, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11d}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r4, 0x0, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket(0x23, 0x803, 0xfffffffd)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000940), 0x10)

586.444138ms ago: executing program 2 (id=3297):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x10, 0x2f, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x10}, {0x0, 0x10}], 0x2, 0x0, 0x0, 0x40}, 0x22004881)

520.165413ms ago: executing program 0 (id=3298):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xaf01, &(0x7f00000001c0)={r0, 0x66c, 0x6, 0x7ffffffe})

519.731437ms ago: executing program 0 (id=3299):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0]}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r0}, 0x50)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000001c0)={r4, 0x66c, 0x6, 0x1})

419.907154ms ago: executing program 0 (id=3300):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf986, 0x0, 0x0, 0x0, 0xe9}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0xd, 0x6, 0x9, 0x20, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xa1, &(0x7f0000000300)=""/161, 0x41100, 0x12, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0xf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf986, 0x0, 0x0, 0x0, 0xe9}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @alu={0x4, 0x1, 0xd, 0x6, 0x9, 0x20, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xa1, &(0x7f0000000300)=""/161, 0x41100, 0x12, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0xf, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1f, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0x0, 0xa, 0x3, 0x2, 0x8}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x82, &(0x7f00000006c0)=""/130, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x3, 0xd, 0xb}, {0x3, 0x3, 0x2, 0xa}, {0x2, 0x5, 0x5, 0xa}, {0x3, 0x3, 0x3, 0x4}], 0x10, 0x8000}, 0x94) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1f, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x4, 0x0, 0x0, 0xa, 0x3, 0x2, 0x8}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x82, &(0x7f00000006c0)=""/130, 0x41000, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[0xffffffffffffffff], &(0x7f0000000840)=[{0x5, 0x3, 0xd, 0xb}, {0x3, 0x3, 0x2, 0xa}, {0x2, 0x5, 0x5, 0xa}, {0x3, 0x3, 0x3, 0x4}], 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup, 0x3d, 0x1, 0xff, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x1, 0x87, 0x251, 0x46, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x6}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000b40))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map=r6, r3, 0x1c, 0x3, r4, @void, @value=r8, @void, @void, r5}, 0x20) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@map=r6, r3, 0x1c, 0x3, r4, @void, @value=r8, @void, @void, r5}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1ff, 0x800, 0x6, 0x5, 0x5d9, 0x6, 0x5, {<r9=>0x0, @in6={{0xa, 0x4e23, 0x9, @loopback, 0xf}}, 0x6, 0x0, 0x8, 0x7ff, 0x6}}, &(0x7f0000000040)=0xb0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x3, 0xc, 0x7, r9}, &(0x7f0000000000)=0x10) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x3, 0xc, 0x7, r9}, &(0x7f0000000000)=0x10)

279.160364ms ago: executing program 0 (id=3301):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
listen(r0, 0x5) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000200)=0x3c, 0x4) (async)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad56b6c5820fae9d6decdd6c5054c7beef915d3b4c90c20025e981fea046c42477cd17f53a2b02afc8611b7cf353297cac5786fbdf91672c8b849c2e3b0df0b18cfeefd0aacc2ffea6da54d9851b3dba", 0xfffffffffffffcb1) (async)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40801) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

189.533801ms ago: executing program 0 (id=3302):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) (async)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000002000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e5f2e008a188784c3d7e6a6993aa65dbb7188b4467f8ae4d5a3473f367646e949685d4092b512f8ff96a73f76e13d17057214bffc521ef9f6307c390eec69f1ec0ace04c3327359c090a6b44f1583e51ab5"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r5}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8)
unshare(0x6a040000) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x12) (rerun: 64)
r7 = socket$kcm(0x29, 0x5, 0x0)
recvmmsg(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000004c0)=""/6, 0x6}], 0x3, &(0x7f0000001500)=""/4096, 0x1000}, 0x4}], 0x1, 0x60, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)

110.3615ms ago: executing program 0 (id=3303):
r0 = epoll_create(0x2040)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x14, 0x4f, 0x1, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x20008040)
unshare(0x6a040000)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000000)=0xffffffff, 0x4)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
getsockopt$ax25_int(r4, 0x101, 0x4, 0x0, &(0x7f0000000400))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
socketpair(0x3, 0x3, 0x1, &(0x7f0000000000))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x6}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
sendto$packet(r2, &(0x7f00000000c0)="00008828", 0x4, 0x20008040, &(0x7f0000000000)={0x11, 0x8100, r6, 0x1, 0xfb, 0x6, @local}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)

109.869724ms ago: executing program 2 (id=3304):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x8c0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)

0s ago: executing program 2 (id=3305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x40005)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
writev(r0, &(0x7f00000002c0), 0x0) (async)
writev(r0, &(0x7f00000002c0), 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) (async)
sendto$inet(r2, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8)
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r5, &(0x7f0000000280), 0x10) (async)
connect$vsock_stream(r5, &(0x7f0000000280), 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="180002000000001811006e", @ANYRES32=r4, @ANYRESDEC=r3], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0x0)
unshare(0x42000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780800001cac1414aac100089078"], 0x0)
close(r9)
socket(0x10, 0x1, 0x0)

kernel console output (not intermixed with test programs):

syzkaller login: [   53.094175][ T5813] sshd (5813) used greatest stack depth: 19720 bytes left
Warning: Permanently added '[localhost]:50083' (ED25519) to the list of known hosts.
[   56.384094][ T5836] cgroup: Unknown subsys name 'net'
[   56.525457][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.532442][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.770215][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.514502][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.524687][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.528888][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.532575][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.537079][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.537780][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.541493][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.543361][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.550663][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.554497][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.558325][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.599872][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.605521][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.614935][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.619877][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.853546][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.910709][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   64.992612][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.995028][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.999636][ T5852] bridge_slave_0: entered allmulticast mode
[   65.002693][ T5852] bridge_slave_0: entered promiscuous mode
[   65.017786][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.020172][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.022598][ T5852] bridge_slave_1: entered allmulticast mode
[   65.025453][ T5852] bridge_slave_1: entered promiscuous mode
[   65.055379][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.062951][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.097278][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.100986][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.103981][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.108610][ T5861] bridge_slave_0: entered allmulticast mode
[   65.112493][ T5861] bridge_slave_0: entered promiscuous mode
[   65.142935][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.145887][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.149838][ T5861] bridge_slave_1: entered allmulticast mode
[   65.153749][ T5861] bridge_slave_1: entered promiscuous mode
[   65.185813][ T5852] team0: Port device team_slave_0 added
[   65.200980][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.209876][ T5852] team0: Port device team_slave_1 added
[   65.217898][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.283948][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.289297][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.300013][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.304516][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.307001][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.309732][ T5853] bridge_slave_0: entered allmulticast mode
[   65.312821][ T5853] bridge_slave_0: entered promiscuous mode
[   65.317712][ T5861] team0: Port device team_slave_0 added
[   65.320425][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.322819][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.325198][ T5853] bridge_slave_1: entered allmulticast mode
[   65.329502][ T5853] bridge_slave_1: entered promiscuous mode
[   65.332970][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.335833][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.344562][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.350904][ T5861] team0: Port device team_slave_1 added
[   65.405130][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.411505][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.413886][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.424604][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.430928][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.434440][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.437730][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.447752][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.497526][ T5852] hsr_slave_0: entered promiscuous mode
[   65.500192][ T5852] hsr_slave_1: entered promiscuous mode
[   65.513176][ T5853] team0: Port device team_slave_0 added
[   65.529154][ T5861] hsr_slave_0: entered promiscuous mode
[   65.531981][ T5861] hsr_slave_1: entered promiscuous mode
[   65.534645][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   65.537238][ T5861] Cannot create hsr debugfs directory
[   65.540716][ T5853] team0: Port device team_slave_1 added
[   65.587118][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.589633][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.598866][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.617008][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.619271][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.627892][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.704259][ T5853] hsr_slave_0: entered promiscuous mode
[   65.708817][ T5853] hsr_slave_1: entered promiscuous mode
[   65.711748][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.714032][ T5853] Cannot create hsr debugfs directory
[   66.000376][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.022719][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.040836][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.047101][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.092170][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.107460][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.130063][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.145523][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.186799][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.194180][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.212244][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.219874][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.333770][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.368829][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.390481][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.393274][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.399703][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.410284][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.413312][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.429005][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.456061][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   66.469296][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   66.479793][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.482054][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.501703][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.504281][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.509869][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.512366][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.535707][ T4488] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.538622][ T4488] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.639484][ T5236] Bluetooth: hci1: command tx timeout
[   66.646761][ T5236] Bluetooth: hci2: command tx timeout
[   66.649335][ T5236] Bluetooth: hci0: command tx timeout
[   66.721947][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.779784][ T5852] veth0_vlan: entered promiscuous mode
[   66.791215][ T5852] veth1_vlan: entered promiscuous mode
[   66.814368][ T5852] veth0_macvtap: entered promiscuous mode
[   66.824061][ T5852] veth1_macvtap: entered promiscuous mode
[   66.854316][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.864947][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.873960][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.890194][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.893937][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.906878][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.915064][ T5887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.965448][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.004914][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.017367][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.060172][ T5853] veth0_vlan: entered promiscuous mode
[   67.065655][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.075372][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.083670][ T5853] veth1_vlan: entered promiscuous mode
[   67.108953][ T5861] veth0_vlan: entered promiscuous mode
[   67.128265][ T5861] veth1_vlan: entered promiscuous mode
[   67.135394][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.156086][ T5853] veth0_macvtap: entered promiscuous mode
[   67.167970][ T5853] veth1_macvtap: entered promiscuous mode
[   67.198689][ T5861] veth0_macvtap: entered promiscuous mode
[   67.212098][ T5861] veth1_macvtap: entered promiscuous mode
[   67.221775][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.225361][ T5922] Zero length message leads to an empty skb
[   67.234679][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.251464][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.265032][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.268074][ T5887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.272858][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.289186][ T5887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.295760][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.332165][ T5887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.335958][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.351884][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.355408][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.472576][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.475738][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.500819][ T5929] Illegal XDP return value 4294967283 on prog  (id 3) dev N/A, expect packet loss!
[   67.522580][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.523905][ T4488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.538117][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.542726][ T4488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.590886][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.604413][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.903872][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'.
[   67.933048][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.453549][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'.
[   68.716495][   T55] Bluetooth: hci0: command tx timeout
[   68.718771][   T55] Bluetooth: hci2: command tx timeout
[   68.720855][   T55] Bluetooth: hci1: command tx timeout
[   68.861761][ T6002] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.35'.
[   69.192361][    T9] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[   69.210275][    T9] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   69.222556][ T6031] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   69.224988][ T6031] netlink: 172 bytes leftover after parsing attributes in process `syz.2.48'.
[   69.240691][ T6029] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   70.792475][ T6086] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   70.798600][   T55] Bluetooth: hci2: command tx timeout
[   70.798658][ T5859] Bluetooth: hci1: command tx timeout
[   70.801993][ T5236] Bluetooth: hci0: command tx timeout
[   71.145754][ T6114] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   71.211353][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.213920][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   72.058897][ T6167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.104'.
[   72.405208][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'.
[   72.657480][ T6208] netlink: 'syz.2.122': attribute type 2 has an invalid length.
[   72.876469][   T55] Bluetooth: hci2: command tx timeout
[   72.878742][   T55] Bluetooth: hci1: command tx timeout
[   72.880897][   T55] Bluetooth: hci0: command tx timeout
[   73.231273][ T6241] warning: `syz.1.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.034278][ T6305] syzkaller1: tun_chr_ioctl cmd 1074025677
[   74.037191][ T6305] syzkaller1: linktype set to 823
[   74.570988][ T6355] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   74.573855][ T6355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.075747][ T6392] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   75.330583][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'.
[   75.649826][ T6435] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   75.674792][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.217'.
[   75.934320][ T6462] syz.2.230 uses obsolete (PF_INET,SOCK_PACKET)
[   77.840413][ T6609] ieee802154 phy0 wpan0: encryption failed: -22
[   77.985114][   T24] IPVS: starting estimator thread 0...
[   78.076361][ T6619] IPVS: using max 35 ests per chain, 84000 per kthread
[   79.275539][ T6708] batadv0: entered promiscuous mode
[   79.281600][ T6708] vlan2: entered promiscuous mode
[   80.590645][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[   81.101631][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[   81.217700][ T6786] vlan2: entered promiscuous mode
[   81.219911][ T6786] macvtap0: entered promiscuous mode
[   81.268990][ T6790] netlink: 104 bytes leftover after parsing attributes in process `syz.2.364'.
[   81.415187][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.368'.
[   81.622277][ T6806] netlink: 'syz.2.372': attribute type 11 has an invalid length.
[   81.623400][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'.
[   81.689751][ T6808] netlink: 152 bytes leftover after parsing attributes in process `syz.2.373'.
[   82.068644][ T6837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.071820][ T6837] IPv6: NLM_F_CREATE should be set when creating new route
[   82.074772][ T6837] IPv6: NLM_F_CREATE should be set when creating new route
[   82.257750][ T6849] ieee802154 phy0 wpan0: encryption failed: -22
[   83.400332][ T6935] tipc: Started in network mode
[   83.403797][ T6935] tipc: Node identity b2b25c4f6b45, cluster identity 4711
[   83.408166][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.410987][ T6935] syzkaller0: entered promiscuous mode
[   83.412746][ T6935] syzkaller0: entered allmulticast mode
[   83.424975][ T6935] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[   83.435173][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   83.439222][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   83.448161][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   83.571800][   T10] cfg80211: failed to load regulatory.db
[   83.818816][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.0.439'.
[   84.070955][ T6976] veth0: entered promiscuous mode
[   84.075441][ T6975] veth0: left promiscuous mode
[   84.188043][ T6982] netlink: 277 bytes leftover after parsing attributes in process `syz.0.451'.
[   84.644974][ T7012] syz.0.466 (7012) used greatest stack depth: 19664 bytes left
[   85.343810][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.489'.
[   85.361293][ T7068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.489'.
[   85.464724][ T7074] tipc: Started in network mode
[   85.471075][ T7074] tipc: Node identity 9e1cc38dc65d, cluster identity 4711
[   85.474133][ T7074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.503717][ T7074] syzkaller0: entered promiscuous mode
[   85.506109][ T7074] syzkaller0: entered allmulticast mode
[   85.595314][ T7074] tipc: Resetting bearer <eth:syzkaller0>
[   85.630503][ T7071] tipc: Resetting bearer <eth:syzkaller0>
[   85.656264][ T7071] tipc: Disabling bearer <eth:syzkaller0>
[   85.701628][ T7087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'.
[   85.891903][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'.
[   87.406506][ T7170] netlink: 'syz.2.520': attribute type 21 has an invalid length.
[   87.409680][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.520'.
[   87.612671][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'.
[   87.625876][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.658407][ T7186] bridge_slave_1 (unregistering): left allmulticast mode
[   87.662115][ T7186] bridge_slave_1 (unregistering): left promiscuous mode
[   87.665369][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.808810][ T7193] netlink: 256 bytes leftover after parsing attributes in process `syz.2.528'.
[   88.828906][ T7221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.937121][ T7234] netem: incorrect ge model size
[   88.938956][ T7234] netem: change failed
[   89.043814][ T7221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.123468][ T7221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.199338][ T7221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.298572][ T5868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.316456][ T5868] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.339395][ T5868] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.351245][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[   89.361897][ T5868] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.031487][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.035102][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.124222][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.133696][ T7281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.249661][ T5868] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.256279][ T5868] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.260455][ T5868] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.269426][ T5868] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.548074][ T7293] syzkaller1: entered allmulticast mode
[   91.117263][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   91.749676][ T7359] netlink: 'syz.2.603': attribute type 3 has an invalid length.
[   91.752730][ T7359] netlink: 666 bytes leftover after parsing attributes in process `syz.2.603'.
[   91.918901][ T7370] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   92.024298][ T7375] bridge_slave_0: left allmulticast mode
[   92.030525][ T7375] bridge_slave_0: left promiscuous mode
[   92.033062][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.048529][ T7375] bridge_slave_1: left allmulticast mode
[   92.050814][ T7375] bridge_slave_1: left promiscuous mode
[   92.053205][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.072489][ T7375] bond0: (slave bond_slave_0): Releasing backup interface
[   92.082419][ T7375] bond0: (slave bond_slave_1): Releasing backup interface
[   92.090352][ T7375] team0: Port device team_slave_0 removed
[   92.107823][ T7375] team0: Port device team_slave_1 removed
[   92.110749][ T7375] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.135461][ T7375] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.361388][ T7400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.621'.
[   92.400305][ T7400] batadv1: entered promiscuous mode
[   92.402518][ T7400] batadv1: entered allmulticast mode
[   92.672021][ T7425] netlink: 'syz.1.632': attribute type 3 has an invalid length.
[   92.771668][ T7431] syzkaller0: entered promiscuous mode
[   92.773464][ T7431] syzkaller0: entered allmulticast mode
[   94.067108][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.648'.
[   94.089277][ T7459] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   94.185165][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'.
[   95.217517][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'.
[   95.234420][ T7486] vlan0: entered promiscuous mode
[   95.503671][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'.
[   96.483927][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'.
[   96.551474][ T7532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.164464][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'.
[   98.191688][ T7597] macvtap1: entered promiscuous mode
[   98.193925][ T7597] macvtap1: entered allmulticast mode
[   98.195925][ T7597] batadv0: entered allmulticast mode
[   98.234658][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'.
[   98.238490][ T7597] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   98.242926][ T7602] batadv0: left allmulticast mode
[   98.886873][ T7636] netlink: 332 bytes leftover after parsing attributes in process `syz.0.720'.
[   98.890425][ T7636] netlink: 104 bytes leftover after parsing attributes in process `syz.0.720'.
[   98.907116][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.720'.
[   98.979416][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'.
[   99.071377][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'.
[   99.144571][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'.
[   99.669141][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[   99.682600][ T7691] netlink: zone id is out of range
[   99.684549][ T7691] netlink: zone id is out of range
[   99.706297][ T7691] netlink: set zone limit has 4 unknown bytes
[  100.276301][ T7726] nbd0: detected capacity change from 0 to 63
[  100.283161][ T7728] block nbd0: NBD_DISCONNECT
[  100.285427][ T7728] block nbd0: Disconnected due to user request.
[  100.289517][ T7728] block nbd0: shutting down sockets
[  100.293912][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.297714][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.301035][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.304470][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.307508][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.310755][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.313823][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.317394][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.320755][ T5860] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.325550][ T5860] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.330688][ T5860] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.335550][ T5860] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.346354][ T5860] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.350437][ T5860] Buffer I/O error on dev nbd0, logical block 2, async page read
[  100.361655][ T5860] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.364969][ T5860] Buffer I/O error on dev nbd0, logical block 3, async page read
[  100.368465][ T5860] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.371809][ T5860] Buffer I/O error on dev nbd0, logical block 0, async page read
[  100.375643][ T5860] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.379987][ T5860] Buffer I/O error on dev nbd0, logical block 1, async page read
[  100.389350][ T5860] ldm_validate_partition_table(): Disk read failed.
[  100.397358][ T5860] Dev nbd0: unable to read RDB block 0
[  100.403209][ T5860]  nbd0: unable to read partition table
[  100.428471][ T5860] ldm_validate_partition_table(): Disk read failed.
[  100.438921][ T5860] Dev nbd0: unable to read RDB block 0
[  100.455732][ T5860]  nbd0: unable to read partition table
[  101.135961][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[  101.457123][ T7802] tipc: Started in network mode
[  101.459188][ T7802] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  101.463768][ T7802] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  101.938634][ T7833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.942498][ T7833] syzkaller0: entered promiscuous mode
[  101.944746][ T7833] syzkaller0: entered allmulticast mode
[  101.989953][ T7833] tipc: Resetting bearer <eth:syzkaller0>
[  101.995798][ T7832] tipc: Resetting bearer <eth:syzkaller0>
[  102.029275][ T7832] tipc: Disabling bearer <eth:syzkaller0>
[  102.413263][ T7880] netlink: 'syz.0.827': attribute type 4 has an invalid length.
[  102.635716][ T7900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.778607][ T7911] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  102.844927][ T7915] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  103.106999][ T7927] trusted_key: syz.0.848 sent an empty control message without MSG_MORE.
[  103.508598][ T7936] Bluetooth: MGMT ver 1.23
[  103.974182][ T7945] vxcan1: entered allmulticast mode
[  104.099200][ T7953] vlan0: entered promiscuous mode
[  104.550670][ T7988] gtp0: entered promiscuous mode
[  104.552738][ T7988] gtp0: entered allmulticast mode
[  104.698030][ T7995] netlink: 'syz.0.876': attribute type 21 has an invalid length.
[  105.005172][ T8008] netlink: 'syz.1.880': attribute type 10 has an invalid length.
[  105.022864][ T8008] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  105.593210][ T8016] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  105.609404][ T5908] IPVS: starting estimator thread 0...
[  105.722261][ T8018] IPVS: using max 48 ests per chain, 115200 per kthread
[  105.843026][ T8028] __nla_validate_parse: 3 callbacks suppressed
[  105.843045][ T8028] netlink: 288 bytes leftover after parsing attributes in process `syz.2.889'.
[  105.981655][ T8039] netlink: zone id is out of range
[  105.984368][ T8039] netlink: zone id is out of range
[  105.991570][ T8039] netlink: zone id is out of range
[  105.993619][ T8039] netlink: zone id is out of range
[  106.004256][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.896'.
[  106.014797][ T8043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.029615][ T8039] netlink: set zone limit has 4 unknown bytes
[  106.081736][ T8044] netlink: del zone limit has 4 unknown bytes
[  106.145070][ T8052] netlink: 'syz.2.901': attribute type 39 has an invalid length.
[  106.378051][ T8065] _Z`Ԁ@S: entered promiscuous mode
[  106.405290][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'.
[  106.719685][ T8074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.910'.
[  106.815920][   T34] audit: type=1800 audit(1757376760.578:2): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.916" name="memory.events" dev="tmpfs" ino=1536 res=0 errno=0
[  106.833631][   T34] audit: type=1804 audit(1757376760.588:3): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.916" name="/newroot/300/memory.events" dev="tmpfs" ino=1536 res=1 errno=0
[  106.982882][ T8102] netlink: 248 bytes leftover after parsing attributes in process `syz.1.923'.
[  107.749699][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.933'.
[  107.813195][ T8138] netlink: 'syz.1.934': attribute type 32 has an invalid length.
[  107.816534][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'.
[  107.825975][ T8138] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  108.326089][ T8176] ieee802154 phy0 wpan0: encryption failed: -22
[  108.633063][ T8193] netlink: 'syz.2.952': attribute type 1 has an invalid length.
[  108.645716][ T8195] syzkaller1: entered promiscuous mode
[  108.650014][ T8195] syzkaller1: entered allmulticast mode
[  108.654935][ T8193] netlink: 'syz.2.952': attribute type 1 has an invalid length.
[  110.251731][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1006'.
[  110.663891][   T34] audit: type=1800 audit(1757376764.428:4): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1024" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1711 res=0 errno=0
[  110.689614][   T34] audit: type=1800 audit(1757376764.438:5): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1024" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1711 res=0 errno=0
[  110.743035][ T8362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.746570][ T8362] syzkaller0: entered promiscuous mode
[  110.748819][ T8362] syzkaller0: entered allmulticast mode
[  110.774170][ T8362] tipc: Resetting bearer <eth:syzkaller0>
[  110.783229][ T8361] tipc: Resetting bearer <eth:syzkaller0>
[  110.803545][ T8361] tipc: Disabling bearer <eth:syzkaller0>
[  110.875740][    C1] Unknown status report in ack skb
[  111.195298][ T8408] delete_channel: no stack
[  111.695323][ T8455] netlink: 'syz.0.1067': attribute type 30 has an invalid length.
[  111.698616][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'.
[  111.702561][ T8455] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  111.810203][ T8468] netlink: 'syz.2.1066': attribute type 74 has an invalid length.
[  111.840541][ T8474] netlink: 'syz.0.1070': attribute type 8 has an invalid length.
[  113.223373][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'.
[  113.243313][ T8521] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.250323][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'.
[  113.258871][ T8521] macsec1: entered promiscuous mode
[  113.260689][ T8521] bond1: entered promiscuous mode
[  113.262670][ T8521] macsec1: entered allmulticast mode
[  113.268785][ T8521] bond1: entered allmulticast mode
[  113.273206][ T8521] bond1: left allmulticast mode
[  113.275435][ T8521] bond1: left promiscuous mode
[  113.450461][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  113.453948][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'.
[  113.466354][ T8535] netlink: 'syz.0.1097': attribute type 1 has an invalid length.
[  113.469401][ T8535] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1097'.
[  113.496881][ T8535] nbd: socks must be embedded in a SOCK_ITEM attr
[  113.499578][ T8535] block nbd0: shutting down sockets
[  113.602537][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'.
[  113.615394][ T8546] netlink: 'syz.0.1101': attribute type 4 has an invalid length.
[  113.779996][ T8568] netlink: 'syz.1.1111': attribute type 1 has an invalid length.
[  113.784380][ T8568] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1111'.
[  114.175420][ T8601] : renamed from team_slave_1 (while UP)
[  114.340138][ T8615] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  114.356978][ T8617] netlink: 'syz.2.1132': attribute type 12 has an invalid length.
[  114.567329][ T8636] vlan0: entered promiscuous mode
[  114.569122][ T8636] bridge0: entered promiscuous mode
[  114.892830][ T8654] openvswitch: netlink: Message has 16 unknown bytes.
[  114.951030][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1151'.
[  115.351568][ T8678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.773261][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  117.197600][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  117.249093][ T8784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.251983][ T8784] syzkaller0: entered promiscuous mode
[  117.254317][ T8784] syzkaller0: entered allmulticast mode
[  117.269394][ T8784] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  117.287173][ T8784] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  117.302564][ T8784] tipc: Resetting bearer <eth:syzkaller0>
[  117.305918][ T8782] tipc: Resetting bearer <eth:syzkaller0>
[  117.320193][ T8782] tipc: Disabling bearer <eth:syzkaller0>
[  119.081905][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.248642][ T5925] IPVS: starting estimator thread 0...
[  119.337758][ T8864] IPVS: using max 57 ests per chain, 136800 per kthread
[  119.347324][ T8870] vlan0: left promiscuous mode
[  119.349340][ T8870] bridge0: left promiscuous mode
[  119.661577][ T8884] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  119.664483][ T8884] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1243'.
[  119.679011][ T8884] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  119.682045][ T8884] netlink: 'syz.1.1243': attribute type 2 has an invalid length.
[  119.705208][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'.
[  120.334772][ T8939] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  120.566095][ T8943] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  120.629236][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1272'.
[  120.641717][ T8949] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1272'.
[  121.137295][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  121.228765][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'.
[  121.288535][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'.
[  121.291655][ T8975] netlink: 'syz.0.1282': attribute type 1 has an invalid length.
[  121.361135][ T8970] team0 (unregistering): Port device team_slave_0 removed
[  121.369723][ T8970] team0 (unregistering): Port device team_slave_1 removed
[  121.392754][ T8979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.396029][ T8979] syzkaller0: entered promiscuous mode
[  121.400342][ T8979] syzkaller0: entered allmulticast mode
[  121.414131][ T8979] tipc: Resetting bearer <eth:syzkaller0>
[  121.420623][ T8978] tipc: Resetting bearer <eth:syzkaller0>
[  121.431971][ T8978] tipc: Disabling bearer <eth:syzkaller0>
[  121.549092][ T8991] netlink: 'syz.2.1290': attribute type 21 has an invalid length.
[  121.552308][ T8991] netlink: 'syz.2.1290': attribute type 1 has an invalid length.
[  121.554901][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1290'.
[  122.186976][ T9025] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1303'.
[  122.462697][ T9049] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1313'.
[  122.640594][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1320'.
[  122.737867][ T9070] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.798749][ T9070] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.847552][ T9070] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.917291][ T9070] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.034167][ T5868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.039397][ T9091] netlink: 'syz.0.1333': attribute type 7 has an invalid length.
[  123.042897][ T9091] netlink: 'syz.0.1333': attribute type 8 has an invalid length.
[  123.067984][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.091555][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.107488][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.133785][ T9093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.140897][ T9093] syzkaller0: entered promiscuous mode
[  123.143154][ T9093] syzkaller0: entered allmulticast mode
[  123.164768][ T9093] tipc: Resetting bearer <eth:syzkaller0>
[  123.171221][ T9092] tipc: Resetting bearer <eth:syzkaller0>
[  123.183430][ T9092] tipc: Disabling bearer <eth:syzkaller0>
[  123.293512][ T9099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.302309][ T9099] syzkaller0: entered promiscuous mode
[  123.304735][ T9099] syzkaller0: entered allmulticast mode
[  123.325586][ T9099] tipc: Resetting bearer <eth:syzkaller0>
[  123.332305][ T9098] tipc: Resetting bearer <eth:syzkaller0>
[  123.349116][ T9098] tipc: Disabling bearer <eth:syzkaller0>
[  123.500323][ T9112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.503821][ T9112] syzkaller0: entered promiscuous mode
[  123.509448][ T9112] syzkaller0: entered allmulticast mode
[  123.534581][ T9112] tipc: Resetting bearer <eth:syzkaller0>
[  123.542750][ T9111] tipc: Resetting bearer <eth:syzkaller0>
[  123.594423][ T9111] tipc: Disabling bearer <eth:syzkaller0>
[  123.744052][ T9130] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  123.886665][ T9140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.299877][ T9177] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1371'.
[  124.714176][ T9210] Bluetooth: MGMT ver 1.23
[  124.944208][ T9234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.949439][ T9234] syzkaller0: entered promiscuous mode
[  124.951716][ T9234] syzkaller0: entered allmulticast mode
[  124.979810][ T9234] tipc: Resetting bearer <eth:syzkaller0>
[  124.987725][ T9233] tipc: Resetting bearer <eth:syzkaller0>
[  125.014497][ T9233] tipc: Disabling bearer <eth:syzkaller0>
[  127.378550][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'.
[  128.588454][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1450'.
[  128.591845][ T9365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1450'.
[  128.618008][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'.
[  129.078609][ T9404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.081428][ T9404] syzkaller0: entered promiscuous mode
[  129.083329][ T9404] syzkaller0: entered allmulticast mode
[  129.095962][ T9404] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  129.150590][ T9404] tipc: Resetting bearer <eth:syzkaller0>
[  129.155345][ T9403] tipc: Resetting bearer <eth:syzkaller0>
[  129.178588][ T9403] tipc: Disabling bearer <eth:syzkaller0>
[  129.204852][ T9408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.280971][ T9408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.409355][ T9408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.475390][ T9421] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.500043][ T9408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.597392][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.614423][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.630795][ T5868] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.645898][ T5868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.745696][ T9437] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1483'.
[  130.022386][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'.
[  130.617043][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  130.674446][ T9504] openvswitch: netlink: IP tunnel dst address not specified
[  130.790232][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'.
[  130.830558][ T9521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1521'.
[  130.833545][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  131.799295][ T9580] sctp: [Deprecated]: syz.2.1547 (pid 9580) Use of int in maxseg socket option.
[  131.799295][ T9580] Use struct sctp_assoc_value instead
[  132.017488][   T34] audit: type=1800 audit(1757376785.788:6): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1549" name="memory.events" dev="tmpfs" ino=2564 res=0 errno=0
[  132.041487][ T9598] vlan0: entered promiscuous mode
[  132.043152][ T9598] team0: entered promiscuous mode
[  132.132272][ T9604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.135581][ T9604] syzkaller0: entered promiscuous mode
[  132.140957][ T9604] syzkaller0: entered allmulticast mode
[  132.161731][ T9604] tipc: Resetting bearer <eth:syzkaller0>
[  132.165879][ T9603] tipc: Resetting bearer <eth:syzkaller0>
[  132.178400][ T9603] tipc: Disabling bearer <eth:syzkaller0>
[  132.313338][ T9617] sctp: [Deprecated]: syz.2.1562 (pid 9617) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.313338][ T9617] Use struct sctp_sack_info instead
[  132.346033][ T9620] block nbd1: NBD_DISCONNECT
[  132.520090][ T9639] __nla_validate_parse: 2 callbacks suppressed
[  132.520110][ T9639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1573'.
[  132.640715][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.644298][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.081362][ T9689] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  135.052945][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1641'.
[  135.322759][ T9809] IPVS: rr: FWM 3 0x00000003 - no destination available
[  135.374167][ T9813] openvswitch: netlink: IP tunnel TTL not specified.
[  136.069233][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  136.073209][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  136.112317][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'.
[  136.115251][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'.
[  136.120035][ T9870] netlink: 'syz.1.1674': attribute type 11 has an invalid length.
[  137.228994][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'.
[  137.449898][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1701'.
[  137.561741][ T9945] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1704'.
[  137.602456][ T9947] nbd: socks must be embedded in a SOCK_ITEM attr
[  137.651346][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'.
[  137.976598][ T9975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.981865][ T9975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  138.812139][ T9980] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1718'.
[  139.159762][T10004] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1726'.
[  139.163424][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1726'.
[  139.193470][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'.
[  139.253232][T10016] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1733'.
[  140.364573][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1749'.
[  140.442088][T10058] bridge_slave_0: left allmulticast mode
[  140.446545][T10058] bridge_slave_0: left promiscuous mode
[  140.449071][T10058] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.868760][T10074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.873102][T10074] syzkaller0: entered promiscuous mode
[  140.876552][T10074] syzkaller0: entered allmulticast mode
[  140.895927][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  140.899845][T10073] tipc: Resetting bearer <eth:syzkaller0>
[  140.908699][T10073] tipc: Disabling bearer <eth:syzkaller0>
[  142.269385][T10136] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  143.264396][T10162] IPVS: Scheduler module ip_vs_sip not found
[  143.365129][T10169] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  143.444631][T10177] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  143.553692][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'.
[  144.477999][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1830'.
[  144.481115][T10241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  145.345360][T10283] batadv1: entered allmulticast mode
[  145.352511][T10283] 8021q: adding VLAN 0 to HW filter on device batadv1
[  146.191779][T10328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.566030][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'.
[  146.574463][T10349] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  146.578709][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.702348][T10357] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1880'.
[  146.834049][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  146.842715][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  147.063957][T10381] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1892'.
[  147.192199][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'.
[  147.232838][T10387] netlink: 'syz.1.1894': attribute type 1 has an invalid length.
[  148.043869][ T5296] udevd[5296]: worker [9803] terminated by signal 33 (Unknown signal 33)
[  148.049683][ T5296] udevd[5296]: worker [10260] terminated by signal 33 (Unknown signal 33)
[  148.321359][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'.
[  148.324913][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'.
[  148.633177][T10470] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  149.004598][T10504] pimreg: entered allmulticast mode
[  149.055222][T10510] netlink: 'syz.0.1942': attribute type 39 has an invalid length.
[  149.449336][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'.
[  149.452738][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'.
[  149.849872][T10543] netlink: 'syz.1.1956': attribute type 12 has an invalid length.
[  149.932263][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  149.955643][T10549] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1959'.
[  150.206585][T10559] bridge0: entered promiscuous mode
[  150.208856][T10559] bridge0: entered allmulticast mode
[  150.269997][T10564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1965'.
[  150.752230][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1977'.
[  150.755552][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'.
[  150.759190][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1977'.
[  150.762554][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1977'.
[  150.874206][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'.
[  151.089206][T10619] team0: entered promiscuous mode
[  151.091255][T10619] team_slave_0: entered promiscuous mode
[  151.093296][T10619] : entered promiscuous mode
[  151.098552][T10619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  152.529887][T10707] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  152.984527][T10743] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  153.661203][T10779] openvswitch: netlink: IP tunnel dst address not specified
[  153.878471][T10798] ieee802154 phy0 wpan0: encryption failed: -22
[  154.941753][T10837] netlink: 'syz.0.2079': attribute type 1 has an invalid length.
[  154.972292][T10837] 8021q: adding VLAN 0 to HW filter on device bond2
[  154.979857][T10837] bond2: (slave wlan0): Opening slave failed
[  155.022278][T10837] vlan0: entered allmulticast mode
[  155.024459][T10837] veth1: entered allmulticast mode
[  155.032483][T10837] bond2: (slave vlan0): Opening slave failed
[  156.319945][T10921] __nla_validate_parse: 6 callbacks suppressed
[  156.320022][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'.
[  156.335805][T10921] veth1: entered promiscuous mode
[  156.347315][T10921] netlink: 'syz.2.2114': attribute type 1 has an invalid length.
[  156.350536][T10921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2114'.
[  156.354068][T10921] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  157.045078][T10935] netlink: 'syz.2.2119': attribute type 12 has an invalid length.
[  157.306786][T10943] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  157.502181][T10960] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2129'.
[  157.571166][T10963] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  157.582404][T10960] tipc: Cannot configure node identity twice
[  157.765219][T10977] netlink: 'syz.2.2138': attribute type 1 has an invalid length.
[  158.082569][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'.
[  158.316977][T11013] pim6reg: entered allmulticast mode
[  158.490735][T11029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.496768][T11029] syzkaller0: entered promiscuous mode
[  158.508548][T11029] syzkaller0: entered allmulticast mode
[  158.550775][T11029] tipc: Resetting bearer <eth:syzkaller0>
[  158.568849][T11028] tipc: Resetting bearer <eth:syzkaller0>
[  158.597266][T11028] tipc: Disabling bearer <eth:syzkaller0>
[  158.612746][T11039] netlink: 'syz.1.2168': attribute type 10 has an invalid length.
[  158.617003][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'.
[  159.200229][T11069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.640107][T11136] netlink: 'syz.0.2207': attribute type 1 has an invalid length.
[  160.656729][T11136] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2207'.
[  160.929593][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'.
[  160.938226][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2218'.
[  160.971998][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2221'.
[  161.040701][T11172] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2225'.
[  161.204098][T11189] bond0: invalid ARP target 0.0.0.0 specified for addition
[  161.207190][T11189] bond0: option arp_ip_target: invalid value (0)
[  161.622184][T11231] __nla_validate_parse: 2 callbacks suppressed
[  161.622205][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2249'.
[  161.763300][T11244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2254'.
[  161.830979][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'.
[  161.891785][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'.
[  161.895482][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2259'.
[  161.921711][T11255] erspan0: entered promiscuous mode
[  161.924954][T11255] gretap0: entered promiscuous mode
[  161.930048][T11258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2260'.
[  162.393848][T11295] netlink: 'syz.1.2278': attribute type 16 has an invalid length.
[  162.399480][T11295] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2278'.
[  162.434639][T11299] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2280'.
[  162.805910][T11322] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.859385][T11328] pim6reg: left allmulticast mode
[  163.057732][T11338] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2295'.
[  163.209408][T11349] syzkaller1: entered promiscuous mode
[  163.211819][T11349] syzkaller1: entered allmulticast mode
[  163.238733][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2301'.
[  164.260095][T11433] tc_dump_action: action bad kind
[  164.817227][T11467] bond0: option resend_igmp: invalid value (6225920)
[  164.819938][T11467] bond0: option resend_igmp: allowed values 0 - 255
[  165.689464][T11506] bridge_slave_1: left allmulticast mode
[  165.692525][T11506] bridge_slave_1: left promiscuous mode
[  165.695323][T11506] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.705240][T11506] bridge_slave_0: left allmulticast mode
[  165.709490][T11506] bridge_slave_0: left promiscuous mode
[  165.712097][T11506] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.491747][T11545] tipc: Failed to remove unknown binding: 66,1,1/0:2863078680/2863078682
[  166.495801][T11545] tipc: Failed to remove unknown binding: 66,1,1/0:2863078680/2863078682
[  166.530826][T11549] netlink: 'syz.1.2380': attribute type 3 has an invalid length.
[  167.068341][T11597] __nla_validate_parse: 6 callbacks suppressed
[  167.068356][T11597] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2398'.
[  167.429310][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'.
[  167.441110][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'.
[  167.531384][T11636] sctp: [Deprecated]: syz.0.2412 (pid 11636) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.531384][T11636] Use struct sctp_sack_info instead
[  167.604292][T11640] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2414'.
[  167.972685][T11669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2425'.
[  168.533124][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2446'.
[  168.537438][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'.
[  168.547048][T11719] netlink: 'syz.0.2446': attribute type 10 has an invalid length.
[  168.551222][T11719] bridge0: port 1(team0) entered blocking state
[  168.560412][T11719] bridge0: port 1(team0) entered disabled state
[  168.563236][T11719] team0: entered allmulticast mode
[  168.643921][T11731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2450'.
[  168.937421][T11756] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2461'.
[  169.517551][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'.
[  170.347725][T11835] netlink: 'syz.1.2497': attribute type 9 has an invalid length.
[  171.024073][T11860] netlink: 'syz.2.2509': attribute type 1 has an invalid length.
[  172.109261][T11914] __nla_validate_parse: 6 callbacks suppressed
[  172.109276][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'.
[  172.198608][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2532'.
[  172.322549][T11922] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2535'.
[  172.328648][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'.
[  172.332906][T11922] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2535'.
[  172.336039][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'.
[  172.341313][T11922] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2535'.
[  172.791023][T11945] netlink: 'syz.1.2546': attribute type 3 has an invalid length.
[  172.873650][T11955] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2551'.
[  172.877936][T11959] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2552'.
[  173.177897][T11994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2570'.
[  173.336035][T12009] lo speed is unknown, defaulting to 1000
[  173.340561][T12009] lo speed is unknown, defaulting to 1000
[  173.343749][T12009] lo speed is unknown, defaulting to 1000
[  173.352529][T12009] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  173.368494][T12009] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  173.414600][T12009] lo speed is unknown, defaulting to 1000
[  173.437183][T12009] lo speed is unknown, defaulting to 1000
[  173.440265][T12009] lo speed is unknown, defaulting to 1000
[  173.481255][T12009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.489641][T12009] veth0_to_bridge: entered promiscuous mode
[  173.492323][T12009] veth0_to_bridge: entered allmulticast mode
[  173.534851][T12007] tipc: Disabling bearer <eth:syzkaller0>
[  173.867788][T12058] IPVS: length: 163 != 8
[  174.210475][T12097] netlink: 'syz.1.2619': attribute type 4 has an invalid length.
[  174.350392][T12106] IPv6: Can't replace route, no match found
[  174.671401][T12118] rdma_op ffff8880326371f0 conn xmit_rdma 0000000000000000
[  176.324571][T12216] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.537628][T12228] netlink: 'syz.2.2676': attribute type 12 has an invalid length.
[  177.100632][T12283] netlink: 'syz.1.2700': attribute type 13 has an invalid length.
[  177.103351][T12283] netlink: 'syz.1.2700': attribute type 17 has an invalid length.
[  177.152870][T12283] team0: left promiscuous mode
[  177.154995][T12283] team_slave_0: left promiscuous mode
[  177.160424][T12283] : left promiscuous mode
[  177.164393][T12283] 8021q: adding VLAN 0 to HW filter on device team0
[  177.170067][T12283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.200730][T12287] bond3: entered promiscuous mode
[  177.202976][T12287] bond3: entered allmulticast mode
[  177.205461][T12287] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.254207][T12362] IPVS: Unknown mcast interface: macvlan1
[  178.360976][T12370] __nla_validate_parse: 36 callbacks suppressed
[  178.360988][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2735'.
[  178.466104][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  180.079140][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'.
[  180.316853][T12408] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2750'.
[  180.854517][T12463] ipvlan0: entered promiscuous mode
[  180.989368][T12476] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  181.010691][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2783'.
[  181.098415][T12485] tipc: Cannot configure node identity twice
[  181.498498][T12513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2798'.
[  181.531806][T12515] netlink: 'syz.0.2799': attribute type 21 has an invalid length.
[  182.069513][T12524] netlink: 'syz.1.2803': attribute type 1 has an invalid length.
[  182.082834][T12524] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2803'.
[  182.101187][T12526] netlink: 'syz.2.2804': attribute type 42 has an invalid length.
[  182.813814][T12556] netlink: 'syz.2.2814': attribute type 1 has an invalid length.
[  182.816766][T12556] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2814'.
[  182.873386][T12561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.906897][ T5925] hid-generic 0005:16C0:0009.0002: unknown main item tag 0x0
[  182.930295][ T5925] hid-generic 0005:16C0:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  184.025527][ T5887] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  185.135553][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'.
[  185.155669][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'.
[  185.654517][T12653] netlink: zone id is out of range
[  185.658803][T12653] netlink: zone id is out of range
[  185.660930][T12653] netlink: zone id is out of range
[  185.663260][T12653] netlink: zone id is out of range
[  185.665140][T12653] netlink: zone id is out of range
[  185.667006][T12653] netlink: zone id is out of range
[  185.669322][T12653] netlink: zone id is out of range
[  185.671217][T12653] netlink: zone id is out of range
[  185.672962][T12653] netlink: zone id is out of range
[  186.561305][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'.
[  186.913283][T12695] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  186.916663][T12695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2854'.
[  187.880354][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'.
[  187.932389][T12723] netlink: 'syz.2.2860': attribute type 2 has an invalid length.
[  188.368837][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'.
[  190.838618][T12782] can: request_module (can-proto-0) failed.
[  190.842448][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'.
[  190.845982][T12782] net_ratelimit: 15 callbacks suppressed
[  190.846011][T12782] openvswitch: netlink: Flow key attr not present in new flow.
[  190.855596][T12782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  191.036458][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  191.555877][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'.
[  191.663141][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'.
[  191.880412][T12812] geneve2: entered promiscuous mode
[  191.882619][T12812] geneve2: entered allmulticast mode
[  192.154550][T12823] bond0: entered promiscuous mode
[  192.158946][T12823] bond_slave_0: entered promiscuous mode
[  192.161554][T12823] bond_slave_1: entered promiscuous mode
[  192.327604][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'.
[  192.371423][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'.
[  192.495978][T12838] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  192.865026][T12853] netlink: 'syz.0.2886': attribute type 1 has an invalid length.
[  192.904387][T12853] bond4: entered promiscuous mode
[  192.908800][T12853] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.983435][T12853] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.993208][T12853] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  193.001687][T12853] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  193.012101][T12858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.015095][T12858] IPv6: NLM_F_CREATE should be set when creating new route
[  193.017997][T12858] IPv6: NLM_F_CREATE should be set when creating new route
[  193.024956][T12858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  193.032599][T12853] bond4: (slave wireguard0): making interface the new active one
[  193.035983][T12853] wireguard0: entered promiscuous mode
[  193.042952][T12853] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  193.539191][T12875] netlink: 'syz.2.2891': attribute type 1 has an invalid length.
[  193.662197][T12877] bond3: (slave geneve2): making interface the new active one
[  193.669633][T12877] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  193.695225][ T5886] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  193.703112][ T5886] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  193.714902][ T5886] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  193.720799][ T5886] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  193.833163][T12887] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2893'.
[  193.921466][T12890] bond5: entered promiscuous mode
[  193.923911][T12890] 8021q: adding VLAN 0 to HW filter on device bond5
[  194.545183][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'.
[  194.939702][T12913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2898'.
[  195.284332][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'.
[  195.299361][T12933] vxcan1 (unregistering): left allmulticast mode
[  196.418777][T12973] syzkaller1: entered promiscuous mode
[  196.424855][T12973] syzkaller1: entered allmulticast mode
[  197.311741][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'.
[  197.319563][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'.
[  197.414841][T13006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2915'.
[  197.460251][T13006] batadv2: entered promiscuous mode
[  197.462421][T13006] batadv2: entered allmulticast mode
[  198.259819][ T5236] Bluetooth: hci2: link tx timeout
[  198.262696][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  198.267663][ T5236] Bluetooth: hci2: link tx timeout
[  198.269785][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.274612][ T5236] Bluetooth: hci2: link tx timeout
[  198.284644][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  198.287942][ T5236] Bluetooth: hci2: link tx timeout
[  198.290037][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.292906][ T5236] Bluetooth: hci2: link tx timeout
[  198.294813][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  198.298108][ T5236] Bluetooth: hci2: link tx timeout
[  198.300076][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.311930][ T5236] Bluetooth: hci2: link tx timeout
[  198.314100][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  198.318949][ T5236] Bluetooth: hci2: link tx timeout
[  198.321113][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.324130][ T5236] Bluetooth: hci2: link tx timeout
[  198.326079][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  198.329228][ T5236] Bluetooth: hci2: link tx timeout
[  198.331439][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.517865][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'.
[  199.949488][T13031] hsr_slave_1 (unregistering): left promiscuous mode
[  200.266682][ T5236] Bluetooth: hci2: link tx timeout
[  200.268729][ T5236] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  200.271593][ T5236] Bluetooth: hci2: link tx timeout
[  200.286215][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.312900][T13045] veth3: entered promiscuous mode
[  200.320844][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  200.835848][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2924'.
[  201.035640][T13064] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  201.219480][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'.
[  201.245645][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'.
[  202.797569][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  203.731209][T13122] netlink: 'syz.0.2938': attribute type 2 has an invalid length.
[  205.182190][T13122] : entered promiscuous mode
[  207.636098][T13158] bridge0: port 2(syz_tun) entered blocking state
[  207.646425][T13158] bridge0: port 2(syz_tun) entered disabled state
[  207.648856][T13158] syz_tun: entered allmulticast mode
[  207.651470][T13158] syz_tun: entered promiscuous mode
[  207.974900][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'.
[  207.993147][T13173] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.997942][T13173] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  208.054864][T13173] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.058858][T13173] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  208.105256][T13173] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.116302][T13173] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  208.161592][T13173] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.164765][T13173] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  208.195474][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'.
[  208.377865][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  208.382385][ T5887] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  208.419686][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  208.423363][ T5887] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  208.439189][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  208.442091][ T5887] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  208.481759][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  208.484994][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  208.530667][T13189] netlink: 'syz.0.2952': attribute type 10 has an invalid length.
[  208.560298][T13189] bond0: (slave wlan1): Opening slave failed
[  208.821110][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'.
[  209.427265][T13227] syz_tun: entered promiscuous mode
[  209.429732][T13227] vlan0: entered promiscuous mode
[  210.886003][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'.
[  211.510243][T13261] batadv_slave_1: entered promiscuous mode
[  211.533070][T13263] batadv_slave_1 (unregistering): left promiscuous mode
[  212.080979][T13283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2969'.
[  212.174872][T13283] team0: Port device team_slave_0 removed
[  212.622028][T13304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2973'.
[  212.664177][T13304] netlink: 'syz.0.2973': attribute type 1 has an invalid length.
[  212.691261][T13304] 8021q: adding VLAN 0 to HW filter on device bond7
[  212.718626][T13304] bond7: (slave gretap2): making interface the new active one
[  212.724557][T13304] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  212.802486][T13312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2975'.
[  213.398743][T13345] netlink: 'syz.2.2982': attribute type 29 has an invalid length.
[  213.407282][T13345] netlink: 'syz.2.2982': attribute type 29 has an invalid length.
[  213.702190][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'.
[  215.288583][T13419] netlink: 'syz.1.2994': attribute type 16 has an invalid length.
[  215.291264][T13419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2994'.
[  215.376049][T13424] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.452486][T13432] pim6reg: entered allmulticast mode
[  215.547776][T13442] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2999'.
[  215.642107][T13424] syz_tun: entered allmulticast mode
[  215.672117][T13424] dvmrp8: entered allmulticast mode
[  215.692728][T13431] pim6reg: left allmulticast mode
[  215.737593][T13423] syz_tun: left allmulticast mode
[  215.739942][T13423] dvmrp8: left allmulticast mode
[  215.785684][T13447] dvmrp8: entered allmulticast mode
[  215.797451][T13446] dvmrp8: left allmulticast mode
[  215.825518][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'.
[  216.573064][T13504] syzkaller1: entered promiscuous mode
[  216.583799][T13504] syzkaller1: entered allmulticast mode
[  216.728187][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3014'.
[  216.802969][T13524] 8021q: adding VLAN 0 to HW filter on device bond2
[  216.880868][T13524] bond0: (slave dummy0): Releasing backup interface
[  216.888125][T13524] bond0: (slave bond_slave_0): Releasing backup interface
[  216.893559][T13524] bond0: (slave bond_slave_1): Releasing backup interface
[  216.918178][T13524] team0: Port device 56 removed
[  216.922930][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.927337][T13524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.940115][T13524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.943163][T13524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.055824][T13532] netlink: 'syz.0.3018': attribute type 6 has an invalid length.
[  217.072032][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'.
[  217.169398][T13540] netlink: 'syz.2.3020': attribute type 3 has an invalid length.
[  217.187005][T13540] netlink: 'syz.2.3020': attribute type 1 has an invalid length.
[  217.216421][T13540] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3020'.
[  217.237796][T13540] NCSI netlink: No device for ifindex 0
[  217.347669][T13553] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3024'.
[  217.387602][T13555] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3023'.
[  217.553179][T13553] bond0 (unregistering): Released all slaves
[  217.612799][T13565] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  217.642281][T13565] 8021q: adding VLAN 0 to HW filter on device bond4
[  217.698803][T13565] bond4: (slave ip6erspan0): making interface the new active one
[  217.702580][T13565] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  218.225079][T13592] bridge3: entered promiscuous mode
[  218.229917][T13592] bridge3: entered allmulticast mode
[  218.614711][T13608] netlink: 'syz.1.3036': attribute type 1 has an invalid length.
[  218.668261][T13608] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.684204][T13610] gretap2: entered promiscuous mode
[  218.707052][T13610] bond3: (slave gretap2): making interface the new active one
[  218.710991][T13610] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  218.792356][T13608] macvlan0: entered promiscuous mode
[  218.800821][T13608] macvlan0: entered allmulticast mode
[  218.804174][T13608] bond3: entered promiscuous mode
[  218.812395][T13608] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  218.815896][T13608] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  218.823947][T13608] bond3: left promiscuous mode
[  219.995275][T13657] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3045'.
[  220.000929][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  220.313299][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'.
[  220.515759][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3050'.
[  221.091317][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'.
[  221.308126][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'.
[  221.426496][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3055'.
[  221.951681][T13719] netlink: 'syz.0.3059': attribute type 1 has an invalid length.
[  222.015418][T13719] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.052253][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  224.154498][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'.
[  224.163170][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'.
[  224.168305][T13753] netlink: 'syz.1.3063': attribute type 19 has an invalid length.
[  224.252847][T13759] netlink: 'syz.1.3063': attribute type 1 has an invalid length.
[  224.257034][T13759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3063'.
[  224.264979][T13759] batadv2: entered promiscuous mode
[  224.270350][T13759] batadv2: entered allmulticast mode
[  225.033689][T13785] __nla_validate_parse: 1 callbacks suppressed
[  225.033705][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'.
[  225.163466][T13796] netlink: 'syz.1.3072': attribute type 1 has an invalid length.
[  225.166738][T13796] netlink: 'syz.1.3072': attribute type 4 has an invalid length.
[  225.169817][T13796] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3072'.
[  226.189513][T13843] netlink: 432 bytes leftover after parsing attributes in process `syz.2.3078'.
[  226.909430][T13856] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3081'.
[  226.914441][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3081'.
[  227.109012][T13863] delete_channel: no stack
[  227.632138][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'.
[  228.367885][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'.
[  229.053337][T13950] bond0: entered promiscuous mode
[  229.060408][T13950] batadv0: entered promiscuous mode
[  229.065363][T13950] debugfs: 'hsr1' already exists in 'hsr'
[  229.074043][T13950] Cannot create hsr debugfs directory
[  229.082887][T13950] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  229.095297][T13950] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  229.103693][T13950] hsr1: entered allmulticast mode
[  229.106636][T13950] bond0: entered allmulticast mode
[  229.108967][T13950] batadv0: entered allmulticast mode
[  229.111230][T13950] 8021q: adding VLAN 0 to HW filter on device hsr1
[  229.124524][T13950] bond0: left promiscuous mode
[  229.127740][T13950] batadv0: left promiscuous mode
[  229.483275][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'.
[  229.625090][T13987] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  229.748183][T13987] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  230.407117][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'.
[  230.415083][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'.
[  230.426428][T14025] netlink: 'syz.0.3111': attribute type 1 has an invalid length.
[  230.429977][T14023] netlink: 'syz.2.3112': attribute type 6 has an invalid length.
[  230.439190][T14025] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  230.532642][T14035] sctp: [Deprecated]: syz.2.3114 (pid 14035) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.532642][T14035] Use struct sctp_sack_info instead
[  231.507825][T14078] netlink: 'syz.2.3120': attribute type 1 has an invalid length.
[  232.508963][T14098] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3125'.
[  232.512595][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'.
[  232.542486][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'.
[  232.597297][T14102] syzkaller1: entered promiscuous mode
[  232.599620][T14102] syzkaller1: entered allmulticast mode
[  233.285277][T14139] netlink: 'syz.1.3133': attribute type 13 has an invalid length.
[  233.289200][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'.
[  233.296402][T14139] netlink: 'syz.1.3133': attribute type 13 has an invalid length.
[  233.300758][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'.
[  234.171465][T14189] netlink: 'syz.2.3140': attribute type 1 has an invalid length.
[  234.198744][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'.
[  234.205987][T14189] 8021q: adding VLAN 0 to HW filter on device bond5
[  234.244692][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  234.303930][T14189] veth5: entered promiscuous mode
[  234.311542][T14189] bond5: (slave veth5): Enslaving as an active interface with an up link
[  234.339068][T14192] macvlan0: entered promiscuous mode
[  234.342642][T14192] macvlan0: entered allmulticast mode
[  234.583120][T14204] syztnl0: entered promiscuous mode
[  234.797111][T14213] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  235.895980][T14239] netlink: 'syz.0.3153': attribute type 3 has an invalid length.
[  236.093625][T14249] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3155'.
[  236.134065][T14249] lo speed is unknown, defaulting to 1000
[  236.231731][T14249] lo speed is unknown, defaulting to 1000
[  236.260385][T14249] lo speed is unknown, defaulting to 1000
[  236.461731][T14249] infiniband syz0: set active
[  236.464774][T14249] infiniband syz0: added lo
[  236.480440][ T5908] lo speed is unknown, defaulting to 1000
[  236.528460][T14249] RDS/IB: syz0: added
[  236.530961][T14249] smc: adding ib device syz0 with port count 1
[  236.533690][T14249] smc:    ib device syz0 port 1 has no pnetid
[  236.546738][ T5908] lo speed is unknown, defaulting to 1000
[  236.562039][T14249] lo speed is unknown, defaulting to 1000
[  236.750947][T14249] lo speed is unknown, defaulting to 1000
[  236.927159][T14260] lo speed is unknown, defaulting to 1000
[  237.090000][T14265] lo speed is unknown, defaulting to 1000
[  237.342958][T14249] lo speed is unknown, defaulting to 1000
[  237.442091][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'.
[  237.552875][T14268] lo speed is unknown, defaulting to 1000
[  237.701659][T14249] lo speed is unknown, defaulting to 1000
[  238.183447][T14296] lo speed is unknown, defaulting to 1000
[  238.699561][T14318] netlink: 'syz.1.3171': attribute type 1 has an invalid length.
[  238.892832][T14318] 8021q: adding VLAN 0 to HW filter on device bond6
[  239.301940][T14327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.310439][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.382430][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.386067][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.392634][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.419161][T14329] netlink: 540 bytes leftover after parsing attributes in process `syz.1.3173'.
[  239.449268][T14333] netlink: 'syz.1.3173': attribute type 10 has an invalid length.
[  239.471322][T14334] netlink: 'syz.0.3174': attribute type 8 has an invalid length.
[  239.643425][T14339] lo speed is unknown, defaulting to 1000
[  239.881985][T14342] lo speed is unknown, defaulting to 1000
[  240.168790][T14350] lo speed is unknown, defaulting to 1000
[  240.366676][T14356] lo speed is unknown, defaulting to 1000
[  240.982225][T14360] lo speed is unknown, defaulting to 1000
[  241.203811][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'.
[  241.339710][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3186'.
[  241.401513][T14378] batman_adv: batadv0: Adding interface: dummy0
[  241.404212][T14378] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.416475][T14378] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  241.461086][T14378] batman_adv: batadv0: Adding interface: ip6gretap2
[  241.463557][T14378] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.474503][T14378] batman_adv: batadv0: Interface activated: ip6gretap2
[  241.604280][T14384] lo speed is unknown, defaulting to 1000
[  241.661323][T14385] vlan0: entered promiscuous mode
[  241.663615][T14385] vlan0: entered allmulticast mode
[  241.665944][T14385] hsr_slave_1: entered allmulticast mode
[  241.684283][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'.
[  241.930279][T14388] lo speed is unknown, defaulting to 1000
[  242.573461][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'.
[  242.843007][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3198'.
[  242.847114][T14425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3198'.
[  242.995174][T14428] lo speed is unknown, defaulting to 1000
[  243.464729][T14435] lo speed is unknown, defaulting to 1000
[  243.644526][T14438] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  243.719978][T14448] lo speed is unknown, defaulting to 1000
[  243.871855][T14445] lo speed is unknown, defaulting to 1000
[  244.093946][T14455] lo speed is unknown, defaulting to 1000
[  244.800389][T14475] lo speed is unknown, defaulting to 1000
[  245.018346][T14476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.030124][T14476] syzkaller0: entered promiscuous mode
[  245.032115][T14476] syzkaller0: entered allmulticast mode
[  245.053389][T14476] tipc: Resetting bearer <eth:syzkaller0>
[  245.090063][T14490] netlink: 'syz.2.3214': attribute type 1 has an invalid length.
[  245.094672][T14490] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  245.186579][T14488] lo speed is unknown, defaulting to 1000
[  245.400399][T14474] tipc: Resetting bearer <eth:syzkaller0>
[  245.427364][T14474] tipc: Disabling bearer <eth:syzkaller0>
[  245.793849][T14519] lo speed is unknown, defaulting to 1000
[  245.931584][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3226'.
[  245.968465][T14528] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  245.998256][T14518] lo speed is unknown, defaulting to 1000
[  246.229052][T14527] lo speed is unknown, defaulting to 1000
[  246.417194][T14533] lo speed is unknown, defaulting to 1000
[  247.000294][T14558] IPVS: Scheduler module ip_vs_sip not found
[  247.279141][T14575] lo speed is unknown, defaulting to 1000
[  247.489776][T14580] lo speed is unknown, defaulting to 1000
[  247.963954][T14595] lo speed is unknown, defaulting to 1000
[  248.388939][T14612] lo speed is unknown, defaulting to 1000
[  249.040713][T14632] lo speed is unknown, defaulting to 1000
[  249.375714][T14643] lo speed is unknown, defaulting to 1000
[  249.843975][T14646] lo speed is unknown, defaulting to 1000
[  250.815139][T14666] netlink: 'syz.1.3257': attribute type 83 has an invalid length.
[  250.884423][T14669] netlink: 'syz.1.3257': attribute type 4 has an invalid length.
[  250.974645][T14666] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3257'.
[  250.982237][T14666] nbd: couldn't find a device at index 0
[  251.001477][T14667] lo speed is unknown, defaulting to 1000
[  251.004083][ T5908] lo speed is unknown, defaulting to 1000
[  251.009490][ T5908] syz0: Port: 1 Link DOWN
[  251.012194][ T5908] lo speed is unknown, defaulting to 1000
[  251.217088][T14669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3257'.
[  251.632891][T14675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3259'.
[  251.655603][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3259'.
[  251.661869][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3259'.
[  251.919146][T14683] lo speed is unknown, defaulting to 1000
[  252.224846][T14693] netlink: 'syz.0.3263': attribute type 3 has an invalid length.
[  252.595802][T14697] lo speed is unknown, defaulting to 1000
[  253.053950][T14721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.122334][T14721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.211330][T14721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.234734][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3274'.
[  253.258985][T14736] batman_adv: batadv0: Adding interface: ip6gretap1
[  253.261485][T14736] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.271523][T14736] batman_adv: batadv0: Interface activated: ip6gretap1
[  253.293226][T14721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.448759][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.497264][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.635219][ T5868] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.640375][T14751] lo speed is unknown, defaulting to 1000
[  253.651991][ T5868] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.674816][T14722] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.722242][T14759] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.736301][T14759] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  253.749373][T14722] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.782470][T14759] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.790123][T14759] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  253.804258][T14722] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.833673][T14759] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.839089][T14759] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  253.863363][T14722] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.898528][T14759] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  253.902409][T14759] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  253.990695][ T5868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  253.994044][ T5868] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  254.041763][ T5868] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  254.045103][ T5868] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  254.078314][ T5886] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  254.081616][ T5886] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  254.106756][ T5886] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  254.109792][ T5886] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  254.305767][T14768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3283'.
[  254.333307][T14768] lo speed is unknown, defaulting to 1000
[  254.871692][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'.
[  254.944150][T14798] netlink: 'syz.2.3293': attribute type 1 has an invalid length.
[  254.948581][T14798] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3293'.
[  254.980772][T14798] lo speed is unknown, defaulting to 1000
[  255.710935][T14816] lo speed is unknown, defaulting to 1000
[  255.740624][T14820] bridge0: port 3(batadv0) entered blocking state
[  255.743906][T14820] bridge0: port 3(batadv0) entered disabled state
[  255.748950][T14820] batadv0: entered allmulticast mode
[  255.754481][T14820] batadv0: entered promiscuous mode
[  255.769806][T14822] bridge0: port 4(batadv2) entered blocking state
[  255.772332][T14822] bridge0: port 4(batadv2) entered disabled state
[  255.774805][T14822] batadv2: entered allmulticast mode
[  255.786075][T14822] batadv2: entered promiscuous mode
[  255.905620][T14826] netlink: 'syz.0.3301': attribute type 8 has an invalid length.
[  256.041680][T14837] lo speed is unknown, defaulting to 1000
[  256.086095][T14841] netlink: 'syz.2.3304': attribute type 5 has an invalid length.
[  256.090631][T14841] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3304'.
[  256.246721][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  256.250657][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  256.280182][   T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  256.283822][   T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
Connection to localhost closed by remote host.
[  257.103811][T14837] syz_tun (unregistering): left allmulticast mode
[  257.106006][T14837] syz_tun (unregistering): left promiscuous mode
[  257.108134][T14837] bridge0: port 2(syz_tun) entered disabled state
[  257.210671][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.220261][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.229293][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.235967][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.139386][T13739] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.213275][T13739] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.272686][T13739] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.370975][T13739] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.485536][T13739] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  261.615271][T13739] batman_adv: batadv0: Removing interface: ip6gretap2
[  261.731716][T13739] erspan0 (unregistering): left promiscuous mode
[  261.748433][T13739] gretap0 (unregistering): left promiscuous mode
[  261.788897][T13739] bond3 (unregistering): (slave gretap2): Releasing active interface
[  261.883893][T13739] bond0 (unregistering): Released all slaves
[  261.891266][T13739] bond1 (unregistering): Released all slaves
[  262.001187][T13739] bond2 (unregistering): Released all slaves
[  262.102690][T13739] bond3 (unregistering): Released all slaves
[  262.112195][T13739] bond4 (unregistering): Released all slaves
[  262.123925][T13739] bond5 (unregistering): Released all slaves
[  262.227290][T13739] bond6 (unregistering): Released all slaves
[  262.365189][T13739] tipc: Left network mode
[  262.738694][T13739] hsr_slave_0: left promiscuous mode
[  262.741102][T13739] batman_adv: batadv0: Removing interface: dummy0
[  262.763223][T13739] veth1_macvtap: left promiscuous mode
[  262.765808][T13739] veth0_macvtap: left promiscuous mode
[  263.572687][ T4488] smc: removing ib device syz0
[  264.023158][T13739] ------------[ cut here ]------------
[  264.025417][T13739] WARNING: CPU: 0 PID: 13739 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  264.029754][T13739] Modules linked in:
[  264.031756][T13739] CPU: 0 UID: 0 PID: 13739 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  264.037029][T13739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.041075][T13739] Workqueue: netns cleanup_net
[  264.043096][T13739] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  264.045558][T13739] Code: e8 a4 de f7 4b 83 3c 2c 00 75 19 e8 fc 30 7b f7 49 81 fd f8 07 00 00 74 1d e8 ee 30 7b f7 49 83 c5 08 eb c9 e8 e3 30 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  264.053765][T13739] RSP: 0018:ffffc90007b378b0 EFLAGS: 00010293
[  264.056435][T13739] RAX: ffffffff8a447d6d RBX: ffff8880277ac000 RCX: ffff888021230000
[  264.059739][T13739] RDX: 0000000000000000 RSI: ffffffff8d9b9dd7 RDI: ffff8880277ac628
[  264.062997][T13739] RBP: ffffc90007b379b0 R08: ffffffff8fa39437 R09: 1ffffffff1f47286
[  264.066552][T13739] R10: dffffc0000000000 R11: fffffbfff1f47287 R12: ffff8880277ac000
[  264.069802][T13739] R13: 0000000000000628 R14: ffff8880222fa440 R15: dffffc0000000000
[  264.072942][T13739] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  264.076660][T13739] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  264.079458][T13739] CR2: 0000001b32b21ff8 CR3: 000000000df36000 CR4: 00000000000006f0
[  264.082743][T13739] Call Trace:
[  264.084189][T13739]  <TASK>
[  264.085381][T13739]  ops_undo_list+0x49a/0x990
[  264.087388][T13739]  ? __pfx_ops_undo_list+0x10/0x10
[  264.089430][T13739]  ? do_raw_spin_unlock+0x4d/0x240
[  264.091499][T13739]  cleanup_net+0x4c5/0x800
[  264.093376][T13739]  ? __pfx_cleanup_net+0x10/0x10
[  264.095457][T13739]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.097797][T13739]  ? process_scheduled_works+0x9ef/0x17b0
[  264.100173][T13739]  ? process_scheduled_works+0x9ef/0x17b0
[  264.102453][T13739]  process_scheduled_works+0xae1/0x17b0
[  264.104792][T13739]  ? __pfx_process_scheduled_works+0x10/0x10
[  264.107606][T13739]  worker_thread+0x8a0/0xda0
[  264.109485][T13739]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.112075][T13739]  ? __kthread_parkme+0x7b/0x200
[  264.114167][T13739]  kthread+0x711/0x8a0
[  264.115875][T13739]  ? __pfx_worker_thread+0x10/0x10
[  264.118220][T13739]  ? __pfx_kthread+0x10/0x10
[  264.120183][T13739]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.122354][T13739]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.124525][T13739]  ? __pfx_kthread+0x10/0x10
[  264.126573][T13739]  ret_from_fork+0x3fc/0x770
[  264.128533][T13739]  ? __pfx_ret_from_fork+0x10/0x10
[  264.130675][T13739]  ? __switch_to_asm+0x39/0x70
[  264.132697][T13739]  ? __switch_to_asm+0x33/0x70
[  264.134725][T13739]  ? __pfx_kthread+0x10/0x10
[  264.136984][T13739]  ret_from_fork_asm+0x1a/0x30
[  264.138848][T13739]  </TASK>
[  264.140118][T13739] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  264.143079][T13739] CPU: 0 UID: 0 PID: 13739 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  264.146989][T13739] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.150975][T13739] Workqueue: netns cleanup_net
[  264.152903][T13739] Call Trace:
[  264.154266][T13739]  <TASK>
[  264.155496][T13739]  dump_stack_lvl+0x99/0x250
[  264.157448][T13739]  ? __asan_memcpy+0x40/0x70
[  264.159413][T13739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.161563][T13739]  ? __pfx__printk+0x10/0x10
[  264.163508][T13739]  vpanic+0x281/0x750
[  264.165203][T13739]  ? __pfx__printk+0x10/0x10
[  264.167024][T13739]  ? __pfx_vpanic+0x10/0x10
[  264.168924][T13739]  ? is_bpf_text_address+0x292/0x2b0
[  264.171137][T13739]  panic+0xb9/0xc0
[  264.172694][T13739]  ? __pfx_panic+0x10/0x10
[  264.174498][T13739]  __warn+0x31b/0x4b0
[  264.176202][T13739]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  264.178440][T13739]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  264.180682][T13739]  report_bug+0x2be/0x4f0
[  264.182510][T13739]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  264.184763][T13739]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  264.187010][T13739]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  264.189206][T13739]  handle_bug+0x84/0x160
[  264.191009][T13739]  exc_invalid_op+0x1a/0x50
[  264.192816][T13739]  asm_exc_invalid_op+0x1a/0x20
[  264.194767][T13739] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  264.197218][T13739] Code: e8 a4 de f7 4b 83 3c 2c 00 75 19 e8 fc 30 7b f7 49 81 fd f8 07 00 00 74 1d e8 ee 30 7b f7 49 83 c5 08 eb c9 e8 e3 30 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  264.204792][T13739] RSP: 0018:ffffc90007b378b0 EFLAGS: 00010293
[  264.207295][T13739] RAX: ffffffff8a447d6d RBX: ffff8880277ac000 RCX: ffff888021230000
[  264.210509][T13739] RDX: 0000000000000000 RSI: ffffffff8d9b9dd7 RDI: ffff8880277ac628
[  264.213633][T13739] RBP: ffffc90007b379b0 R08: ffffffff8fa39437 R09: 1ffffffff1f47286
[  264.216759][T13739] R10: dffffc0000000000 R11: fffffbfff1f47287 R12: ffff8880277ac000
[  264.219968][T13739] R13: 0000000000000628 R14: ffff8880222fa440 R15: dffffc0000000000
[  264.223182][T13739]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  264.225378][T13739]  ops_undo_list+0x49a/0x990
[  264.227315][T13739]  ? __pfx_ops_undo_list+0x10/0x10
[  264.229381][T13739]  ? do_raw_spin_unlock+0x4d/0x240
[  264.231491][T13739]  cleanup_net+0x4c5/0x800
[  264.233359][T13739]  ? __pfx_cleanup_net+0x10/0x10
[  264.235404][T13739]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.237499][T13739]  ? process_scheduled_works+0x9ef/0x17b0
[  264.239846][T13739]  ? process_scheduled_works+0x9ef/0x17b0
[  264.242207][T13739]  process_scheduled_works+0xae1/0x17b0
[  264.244522][T13739]  ? __pfx_process_scheduled_works+0x10/0x10
[  264.247015][T13739]  worker_thread+0x8a0/0xda0
[  264.248905][T13739]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.251529][T13739]  ? __kthread_parkme+0x7b/0x200
[  264.253601][T13739]  kthread+0x711/0x8a0
[  264.255330][T13739]  ? __pfx_worker_thread+0x10/0x10
[  264.257444][T13739]  ? __pfx_kthread+0x10/0x10
[  264.259362][T13739]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.261586][T13739]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.263678][T13739]  ? __pfx_kthread+0x10/0x10
[  264.265348][T13739]  ret_from_fork+0x3fc/0x770
[  264.267169][T13739]  ? __pfx_ret_from_fork+0x10/0x10
[  264.269314][T13739]  ? __switch_to_asm+0x39/0x70
[  264.271290][T13739]  ? __switch_to_asm+0x33/0x70
[  264.273291][T13739]  ? __pfx_kthread+0x10/0x10
[  264.275233][T13739]  ret_from_fork_asm+0x1a/0x30
[  264.277153][T13739]  </TASK>
[  264.279087][T13739] Kernel Offset: disabled
[  264.280671][T13739] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:15:17  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007b37050
R8 =ffff888106738237 R9 =1ffff11020ce7046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018db R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32b21ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d17d8e8dbdb52900 RBX=ffffffff819683f8 RCX=d17d8e8dbdb52900 RDX=0000000000000001
RSI=ffffffff8d9b9dd7 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39430 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a83f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2a4bbd0e80 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
