last executing test programs:

588.397602ms ago: executing program 2 (id=1139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddf}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@mcast1, <r4=>0x0}, &(0x7f00000005c0)=0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601080000000000000000000000091400078008001140000000000500150009000000050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a6970706f72742c6e657400000000"], 0x64}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f0000000040))
r8 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000)
sendmmsg$inet(r8, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800090000000000030000001c14"], 0x30}}, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000a00)={<r11=>0x0, 0x1000, "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"}, &(0x7f00000002c0)=0x1008)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r11, 0x7}, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r12, 0x4, 0x5, 0x3, 0x621, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7800, 0x700, 0x5, 0x577}})
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r14, 0x0, 0xfffffffffffffd4a, 0x4000, &(0x7f0000000480)={0x23, 0x81, 0x8, 0x6}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r15=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r15, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
bind$xdp(r15, &(0x7f0000000280)={0x2c, 0x1, 0x0, 0x2e, r7}, 0x10)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000000000c000200367da1650e000000280003800c000100599a94d9d9f3d68a0c000100a1000000c84200000c0001000800000008000000340004800c00010006010000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r12, @ANYBLOB, @ANYRESOCT, @ANYRES32=r6, @ANYRES16=r14, @ANYRESHEX=r1], 0xb4}}, 0x0)

413.21966ms ago: executing program 2 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="080002"], 0x2c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100000309000101010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0x108}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)

412.733359ms ago: executing program 1 (id=1144):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000fddbdf2525000000050029000000000008000200", @ANYRES32=r1, @ANYBLOB="05002a0085000000"], 0x2c}, 0x1, 0x0, 0x8000000, 0x4004000}, 0x44004094)

335.759677ms ago: executing program 2 (id=1146):
sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c80c92a2aa5e6b18f412fbce8deadbf77bacc250a7bdaf504a25ce5208626980ec74f08c1157878642c648c8e86602f059e6b81f43ec6d92afe3ae90fcd9e85359c8b4409fdb9b88a56a6de2b4ef127a640c7e22d9b1", 0x56}], 0x1}, 0xb0ed4eee0f110c9e)
r0 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xe0}, 0x1)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]})
recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/235, 0xeb}], 0x6, &(0x7f0000000780)=""/151, 0x97}, 0x20000002)
r3 = socket(0x11, 0xa, 0x3)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000880)={'team_slave_0\x00', @multicast})
setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f00000008c0)=0x1, 0x4)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000940), r2)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6eb}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r1)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xbc, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2900}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8b0}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff5ba7}]}]}, 0xbc}}, 0x4004004)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
connect$inet(r6, &(0x7f0000000c00)={0x2, 0x4e22, @local}, 0x10)
recvfrom$l2tp6(r2, &(0x7f0000000c40)=""/68, 0x44, 0x1, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000d40)={'vcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x29c1c20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x6, 0xe}, {0x5, 0xfff1}, {0x1ffc0, 0xfff1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000e80)=[0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0], <r8=>0x0, 0x6b, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000001140))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001180), r9)
sendto$l2tp6(r1, &(0x7f00000011c0)="fc896bf00988da435a45f0e47a6822337ac8a119f6b8c8b9e64424efcafd9570487247bcb1ff93b1d9a71ebfc023513c494def02a20c438990752d7f6b04735913c173868d661850879ac0191a4ab50cb4b699c8096edb83884164e4bfb652f6e675a549fa6ce117717edecb4596d99fe6d133efa03bc246e8c6c248864f804e57f618ac49dccac9acf1857f3536c150cbf138848d09f463b4dbd1b872f23d24307ff2db82877726c761dfd1474905f00b7cdc", 0xb3, 0x200020c4, &(0x7f0000001280)={0xa, 0x0, 0x0, @mcast1, 0x80, 0x4}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000012c0)=0x10, 0x4)
r10 = openat$cgroup_ro(r1, &(0x7f0000001300)='freezer.state\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000001340)=@gcm_128={{0x303}, "93e82289775ee28a", "81b1efa358de06623df15116a1cc2808", "8bc15438", "fbc810653f020ec5"}, 0x28)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001400)={'nr0\x00', &(0x7f0000001380)=@ethtool_test={0x1a, 0x80000001, 0x4, 0x8, [0xff, 0xa, 0x3, 0x5, 0x1, 0x4, 0x2d0, 0x3]}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = accept4$bt_l2cap(r3, &(0x7f0000001440), &(0x7f0000001480)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f00000014c0)={0xfff, "7e1095"}, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000001600)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x3, 0x5, 0x5, 0x3}, 0x10, r8, 0x0, 0x2, &(0x7f0000001680)=[r2], &(0x7f00000016c0)=[{0x1, 0x3, 0xe}, {0x5, 0x1, 0xf, 0x2}], 0x10, 0x401}, 0x94)

334.218819ms ago: executing program 1 (id=1147):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0xfffffffd)
listen(r0, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0x8008)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r5, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000380)=""/192, 0xc0}], 0x3}, 0x1}, {{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/2, 0x2}], 0x5, &(0x7f0000001580)=""/4096, 0x1000}, 0x3}], 0x2, 0x0, &(0x7f0000000b40)={0x0, 0x989680})
syz_emit_ethernet(0x1b9, &(0x7f0000000780)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {0x2d5, 0x0, 0x1}, {0x5}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7}], @ipv4=@dccp={{0x3c, 0x4, 0x2, 0x1f, 0x18f, 0x65, 0x0, 0x6, 0x21, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x17, 0xcb, [@local, @private=0xa010102, @multicast2, @multicast1, @rand_addr=0x64010100]}, @timestamp={0x44, 0x4, 0xd3, 0x0, 0x5}, @lsrr={0x83, 0x23, 0x82, [@multicast2, @multicast2, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@broadcast, 0x4}, {@private=0xa010101, 0x8}, {@private=0xa010100, 0x3}, {@broadcast, 0x7fff}]}, @ssrr={0x89, 0x3, 0xf0}, @generic={0x86, 0x7, "db9a81771e"}, @generic={0x83, 0xe, "7a9284e157d74a0496d4e0e2"}, @timestamp_prespec={0x44, 0x54, 0x82, 0x3, 0x8, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x78fd}, {@remote}, {@local, 0xf}, {@private=0xa010101, 0x8001}, {@local, 0x2}, {@rand_addr=0x64010100, 0x9}, {@local, 0x9}, {@private=0xa010102, 0x7}, {@multicast2, 0x1}]}, @generic={0x89, 0x3, '>'}]}}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x4, 0x0, "6a71f6", 0x5, "d318ee"}, "76fb4d14a0ca4e35b149190473ba9d928be97c3ead50d12b3121fe762a2ef41f6530ebcbcae64364ad2c50213e7fd81afd9b95588f24c21b337c0269e3bc775c273fe4f1c554be9d4244ae24efc616e3c5d074e889b0b29c40473944b61326c9df8d0423d69b7742e0172889d6f318ed3a4eba0ab9b2c1c268c7fd40a7aaf14e51ffbf54abb75e527ae4e5f5dd7f00"}}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b8007008c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008800f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}, {&(0x7f0000000080)="5e81511c5486567180298aa8484117585ca0bdeafc459cad914cc5090a0f369eed02496e522d9a2cd59b38e17e913fa0d5f60f0302882925670168f374ff431c1f467b605b1b42151f0eb7a0e55aaad61aacd85e6841568a0e6996d0eb0f972d714beebbaa8cfa028fc2fe66f915e29f0df642d5b74cd527753b1e1bebd666345d9cc0444c08202e1953c0017b998a7d77e5b79197d2c3965d51dbcbd4b35e1d18d870048f63d1c132f7fd5926032e03c71e29386b6f9a54", 0xb8}, {&(0x7f0000000140)="d199288564736cc6710184fb3decd7b121d7a44b73e0ff12b7d3523e82fdc64e0a1ce0c86cb22b5d5cf48abbddc238d4a987d6a5bbb1f5a0fde88df422c1065a6cd4f29141", 0x45}], 0x3)

332.730937ms ago: executing program 0 (id=1148):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x33, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})

263.244142ms ago: executing program 0 (id=1149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delnexthop={0x28, 0x69, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x2}]}, 0x28}}, 0x440088c4)

262.299242ms ago: executing program 1 (id=1150):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000480), 0x4) (async)
setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000480), 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
sendto$inet6(r3, &(0x7f00000001c0)="a9c63bea9db34b7968e0c51f26be759577280658f7fbc6f623c321b2d73dd45a2522f82e84be43a87de67fb20056e697ba0e1f3fba39292dbb528708e649bd115ef9a3d6a6fd7e2751ad4c0ede", 0x4d, 0x20000004, &(0x7f0000000280)={0xa, 0x4e24, 0xdf, @loopback, 0x1fe000}, 0x1c) (async)
sendto$inet6(r3, &(0x7f00000001c0)="a9c63bea9db34b7968e0c51f26be759577280658f7fbc6f623c321b2d73dd45a2522f82e84be43a87de67fb20056e697ba0e1f3fba39292dbb528708e649bd115ef9a3d6a6fd7e2751ad4c0ede", 0x4d, 0x20000004, &(0x7f0000000280)={0xa, 0x4e24, 0xdf, @loopback, 0x1fe000}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x14c}}, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10)

192.266397ms ago: executing program 2 (id=1151):
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}}, 0x20040000)
vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r4, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

191.748964ms ago: executing program 0 (id=1152):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
socketpair(0x22, 0x5, 0x5, &(0x7f00000005c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x900102}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030000007000fddbdf256200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900020000002f0000000600b300000000000600b4006b0900000600b300020000000600b40040090000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_type(r10, &(0x7f0000000040), 0x2, 0x0)
r12 = socket$inet6(0xa, 0xa, 0xacb6)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={<r13=>0x0, 0x8, 0x10}, &(0x7f0000000540)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000580)={r13, 0x4}, 0x8)
sendfile(r9, r11, &(0x7f0000000240)=0x6, 0x9)
r14 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) (async)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000000000000000000000340a02734eb8f8d2f0fdbcde952fdaaab32c761e8ea5ab98dc77c80b69f10daf377d004fb7fb59a1a3e8408038c912fdfeb249f4cdff4b0fa80f926ead355db4236cd1b7a9d40046b62cd828e70b165613365bb44b29d4671056981cb1dd6a9af10fa8c1f6025b95380c6ddb0af4d1a44865468ca05fff127869ee1abebbac5c9c45d9769d2b77bb9e5583f5811210021d267ab9061757a7731c18d0501c9292baf404439db5aa98276ebb3661b469e295", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0)

130.475507ms ago: executing program 1 (id=1153):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190026bd7000fddbdf2525000000050029000000000008000200", @ANYRES32=r1, @ANYBLOB="05002a0085000000"], 0x2c}, 0x1, 0x0, 0x800000000000000, 0x4004000}, 0x44004094)

129.823298ms ago: executing program 0 (id=1154):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000130000d38300f62d000000000400c78b4ae0d550601db3d233006a61282a642f75b503489f391141d0629b9d7b17ae61b53616d29b9328f12ec0261d5581b56c00bcd45198f39c7ed6aaf7c32b5db22c60e06708e9bc966b4c2d21ecaf93b00808a4c19b386c519bd203c8e3f2aace40db38475ed957b27fea542cc1e445e8a5acf02a9daa0113872aa34409f4278a316409a3324f3751ef1dfce1357460429b3a48d5b3b2ad1071c9c3aa559bfe01d300"/198], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)

129.422001ms ago: executing program 1 (id=1155):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async)

63.362146ms ago: executing program 0 (id=1156):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x41, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})

60.591946ms ago: executing program 2 (id=1157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18)
getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f00000000c0))
setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86)

717.367µs ago: executing program 0 (id=1158):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@remote}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x23c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)={0x10, 0x1401, 0x9, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x8884}, 0xc010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$FITHAW(r0, 0xc0045878)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000000)={0x2, 0x0, 0x9})
recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x200000d}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4101, 0x1005}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x40000160, 0x0)

170.873µs ago: executing program 1 (id=1159):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0xb4, 0x24, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x2}, {0xb, 0xfff1}, {0xffe0, 0xfff2}}, [@TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x2, 0xffffffff, 0x0, 0x33e, 0x0, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x9, 0x6, 0x38, 0x191b, 0x0, 0x0, 0x100}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0x6, 0xbaa, 0x2, 0x3ff, 0x10000, 0x2}}, {0x8, 0x2, [0x3, 0x0]}}, {{0x1c, 0x1, {0x3, 0xb6, 0xd, 0xc0, 0x2, 0x3d29f837, 0x4, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x40)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20)
sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='*', 0x1}], 0x1}, 0x4)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

0s ago: executing program 2 (id=1160):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000), 0x0, 0x3)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)
write(r0, &(0x7f00000001c0)="b19305ee28c6a71849b832f4b8af60ea45536b1773e1bcc24ab65447daebf1e212cf97462ff5b543b5a615db9ad1682e4c385035389e7a08c1b4e367b656ba2c5c6d11af15d54288f69808be53edb6b2fc371390bca12e96dd19c07e263a5ccf85dca7c65a2d875f540ea8820878bb563a4299580b7a174f8ed91fe2ac10df4f53cdf7ae06c835a448f757ddf68380effbe5e1842a87ddbd5ca440d114e76a20dd15dcef08242c916a25b3eced5670e56acf531ebd473da27ad7b124908ec175557e2b6f564a464a3d28791ed4d5c730510da9ae7b08aeabe7", 0xd9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15762' (ED25519) to the list of known hosts.
syzkaller login: [   48.777897][ T5826] cgroup: Unknown subsys name 'net'
[   48.895605][ T5826] cgroup: Unknown subsys name 'cpuset'
[   48.899378][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.523791][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.479208][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.482304][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.485745][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.488218][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.491061][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.493276][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.493741][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.498163][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.500547][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.500564][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.504307][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.505411][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.507590][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.513089][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.520291][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.790224][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   54.796492][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.832931][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.939801][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.943616][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.946074][ T5839] bridge_slave_0: entered allmulticast mode
[   54.949573][ T5839] bridge_slave_0: entered promiscuous mode
[   54.968055][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.970874][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.974205][ T5840] bridge_slave_0: entered allmulticast mode
[   54.977780][ T5840] bridge_slave_0: entered promiscuous mode
[   54.980537][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.983492][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.986028][ T5839] bridge_slave_1: entered allmulticast mode
[   54.989210][ T5839] bridge_slave_1: entered promiscuous mode
[   55.008900][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.011160][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.014482][ T5840] bridge_slave_1: entered allmulticast mode
[   55.017088][ T5840] bridge_slave_1: entered promiscuous mode
[   55.030347][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.033502][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.035715][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.038051][ T5835] bridge_slave_0: entered allmulticast mode
[   55.041003][ T5835] bridge_slave_0: entered promiscuous mode
[   55.054027][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.056863][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.059419][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.061659][ T5835] bridge_slave_1: entered allmulticast mode
[   55.064666][ T5835] bridge_slave_1: entered promiscuous mode
[   55.079646][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.099800][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.138828][ T5840] team0: Port device team_slave_0 added
[   55.143440][ T5840] team0: Port device team_slave_1 added
[   55.147074][ T5839] team0: Port device team_slave_0 added
[   55.150414][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.170733][ T5839] team0: Port device team_slave_1 added
[   55.173921][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.175970][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.184013][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.189496][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.216076][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.218209][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.226434][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.244480][ T5835] team0: Port device team_slave_0 added
[   55.247686][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.249776][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.258066][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.263005][ T5835] team0: Port device team_slave_1 added
[   55.265222][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.267373][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.276064][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.320240][ T5840] hsr_slave_0: entered promiscuous mode
[   55.323092][ T5840] hsr_slave_1: entered promiscuous mode
[   55.335097][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.337185][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.345554][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.355299][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.357456][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.366208][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.415145][ T5839] hsr_slave_0: entered promiscuous mode
[   55.417398][ T5839] hsr_slave_1: entered promiscuous mode
[   55.419491][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.421901][ T5839] Cannot create hsr debugfs directory
[   55.463027][ T5835] hsr_slave_0: entered promiscuous mode
[   55.465310][ T5835] hsr_slave_1: entered promiscuous mode
[   55.467553][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.469869][ T5835] Cannot create hsr debugfs directory
[   55.623290][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.629270][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.645655][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.659951][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.706166][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.718688][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.721345][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.724002][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.726184][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.733552][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.744539][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.750783][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.754497][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.772368][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.797593][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.803915][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.815979][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.821353][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.870983][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.914791][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   55.939399][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.945853][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.948394][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.956820][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.959514][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.978116][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.983037][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   56.007041][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.009324][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.027050][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.029660][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.039200][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.060017][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.068751][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.070998][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.084517][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.086793][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.092861][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.212339][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.256296][ T5840] veth0_vlan: entered promiscuous mode
[   56.261692][ T5840] veth1_vlan: entered promiscuous mode
[   56.274703][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.310342][ T5840] veth0_macvtap: entered promiscuous mode
[   56.315197][ T5840] veth1_macvtap: entered promiscuous mode
[   56.322225][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.344824][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.348909][ T5839] veth0_vlan: entered promiscuous mode
[   56.354118][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.361444][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.364886][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.367544][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.370083][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.379099][ T5839] veth1_vlan: entered promiscuous mode
[   56.447479][ T5839] veth0_macvtap: entered promiscuous mode
[   56.450603][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.450664][ T5835] veth0_vlan: entered promiscuous mode
[   56.455878][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.458210][ T5839] veth1_macvtap: entered promiscuous mode
[   56.488691][ T5835] veth1_vlan: entered promiscuous mode
[   56.491158][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.493954][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.494724][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.505307][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.530113][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.534391][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.537077][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.539649][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.542817][ T5845] Bluetooth: hci0: command tx timeout
[   56.544899][ T5838] Bluetooth: hci1: command tx timeout
[   56.552175][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.553309][ T5838] Bluetooth: hci2: command tx timeout
[   56.569572][ T5835] veth0_macvtap: entered promiscuous mode
[   56.603277][ T5835] veth1_macvtap: entered promiscuous mode
[   56.627961][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.631249][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.635014][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.647989][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.665376][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.668103][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.670739][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.676681][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.685083][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.687864][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.767636][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.770061][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.806905][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.811764][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.836124][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.916005][ T5919] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   56.918887][ T5919] gre0: entered promiscuous mode
[   56.920390][ T5919] gre0: entered allmulticast mode
[   56.941985][ T5921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.040677][ T5933] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.100700][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.119809][ T5936] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.129526][ T5936] sch_tbf: burst 7818 is lower than device lo mtu (65550) !
[   57.271492][ T5944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14'.
[   57.359373][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.365109][ T5952] macvlan1: entered promiscuous mode
[   57.366903][ T5952] macvlan1: entered allmulticast mode
[   57.482229][ T5960] ipvlan0: entered promiscuous mode
[   57.494710][ T5960] ipvlan0: left promiscuous mode
[   57.557928][ T5966] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   57.564962][ T5966] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   57.618454][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   57.624942][ T5970] Cannot find del_set index 0 as target
[   57.627034][ T5968] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[   57.629458][ T5968] netlink: 208 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.634619][ T5968] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[   57.637812][ T5968] netlink: 'syz.1.24': attribute type 2 has an invalid length.
[   57.696331][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   57.699986][ T5976] Zero length message leads to an empty skb
[   57.762929][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   57.766118][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   57.775011][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27'.
[   57.778229][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27'.
[   57.873697][ T5987] 8021q: VLANs not supported on ip_vti0
[   57.909194][ T5991] x_tables: unsorted entry at hook 1
[   57.909578][ T5992] x_tables: unsorted entry at hook 1
[   58.028790][ T6001] veth0: entered promiscuous mode
[   58.064692][ T6009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.186858][ T6016] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   58.287978][ T6021] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   58.491129][ T6047] veth1_to_bond: entered allmulticast mode
[   58.510225][ T6047] bond0: (slave bond_slave_1): Releasing backup interface
[   58.525955][ T6047] veth1_to_bond (unregistering): left allmulticast mode
[   58.532056][ T6049] Cannot find del_set index 0 as target
[   58.605263][ T6054] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   58.608864][ T6054] veth1_macvtap: entered allmulticast mode
[   58.622945][ T5838] Bluetooth: hci2: command tx timeout
[   58.624708][ T5838] Bluetooth: hci1: command tx timeout
[   58.626379][ T5838] Bluetooth: hci0: command tx timeout
[   58.651576][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.654762][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.720128][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.725967][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.773968][ T6054] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.776662][ T6054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.779400][ T6054] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.781976][ T6054] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.291707][ T6070] netlink: 'syz.1.55': attribute type 1 has an invalid length.
[   59.296734][ T6070] veth1_macvtap: entered allmulticast mode
[   59.330395][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.333098][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.378463][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.386715][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.428117][ T6070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.430857][ T6070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.434725][ T6070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.437573][ T6070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.514491][ T6073] macsec0: entered promiscuous mode
[   59.516664][ T6073] macsec0: left promiscuous mode
[   59.604360][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.606866][ T6075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   59.628707][ T6075] syz.1.57 (6075) used greatest stack depth: 20904 bytes left
[   59.761873][ T6091] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   59.769280][ T6091] team_slave_0: entered promiscuous mode
[   59.771765][ T6091] team_slave_0: entered allmulticast mode
[   59.820484][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.823659][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.877845][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.885221][ T6091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.941111][ T6091] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.944237][ T6091] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.946943][ T6091] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.949666][ T6091] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.707600][ T5845] Bluetooth: hci0: command tx timeout
[   60.709730][ T5845] Bluetooth: hci1: command tx timeout
[   60.712493][ T5838] Bluetooth: hci2: command tx timeout
[   60.717127][ T6117] tipc: Started in network mode
[   60.719152][ T6117] tipc: Node identity 7, cluster identity 4711
[   60.721526][ T6117] tipc: Node number set to 7
[   60.932350][ T6141] Bluetooth: MGMT ver 1.23
[   60.959985][ T6143] bond1: entered promiscuous mode
[   60.961610][ T6143] bond1: entered allmulticast mode
[   60.964233][ T6143] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.059766][ T6149] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.067181][ T6149] veth1_vlan: entered allmulticast mode
[   61.072243][ T6149] bond2: (slave macvlan1): Enslaving as an active interface with an up link
[   61.118995][ T6152] 8021q: adding VLAN 0 to HW filter on device team0
[   61.127415][ T6152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.188284][ T6156] batadv_slave_1: entered promiscuous mode
[   61.190878][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.818098][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.827534][ T6175] 8021q: adding VLAN 0 to HW filter on device team0
[   61.833952][ T6175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.042591][ T6175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.092268][ T6183] __nla_validate_parse: 18 callbacks suppressed
[   62.092285][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   62.110514][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.137612][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   62.169246][ T6186] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.176565][ T6186] veth1_vlan: left allmulticast mode
[   62.180475][ T6186] bond2: (slave macvlan1): Releasing backup interface
[   62.183376][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.194170][ T6186] veth1_vlan: entered allmulticast mode
[   62.198068][ T6186] bond3: (slave macvlan1): Enslaving as an active interface with an up link
[   62.248408][ T6196] netlink: del zone limit has 4 unknown bytes
[   62.481841][ T6215] batadv1: entered promiscuous mode
[   62.528241][ T6220] Illegal XDP return value 16128 on prog  (id 5) dev syz_tun, expect packet loss!
[   62.531263][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'.
[   62.535920][ T6220] xt_CT: You must specify a L4 protocol and not use inversions on it
[   62.618590][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[   62.682817][ T6234] validate_nla: 3 callbacks suppressed
[   62.682843][ T6234] netlink: 'syz.1.102': attribute type 15 has an invalid length.
[   62.782751][ T5838] Bluetooth: hci1: command tx timeout
[   62.782795][   T54] Bluetooth: hci2: command tx timeout
[   62.792829][   T54] Bluetooth: hci0: command tx timeout
[   62.814793][ T6240] pim6reg: entered allmulticast mode
[   62.828937][ T6240] pim6reg: left allmulticast mode
[   62.933044][ T6243] veth1_macvtap: left allmulticast mode
[   63.014304][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'.
[   63.028567][ T6248] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.033694][ T6248] macvlan1: entered promiscuous mode
[   63.035638][ T6248] macvlan1: entered allmulticast mode
[   63.038145][ T6248] veth1_vlan: entered allmulticast mode
[   63.041931][ T6248] bond2: (slave macvlan1): Enslaving as an active interface with an up link
[   63.073019][ T6251] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001
[   63.188933][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[   63.226754][ T6260] netlink: 'syz.2.113': attribute type 2 has an invalid length.
[   63.230049][ T6260] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   63.234152][ T6260] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   63.312279][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'.
[   63.415434][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'.
[   63.472706][ T6266] bridge2: entered allmulticast mode
[   63.529512][ T6269] netlink: 252 bytes leftover after parsing attributes in process `syz.1.117'.
[   63.534419][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[   63.537434][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.555108][ T6276] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.565604][ T6276] veth1_vlan: left allmulticast mode
[   63.573362][ T6276] bond2: (slave macvlan1): Releasing backup interface
[   63.577778][ T6276] veth1_vlan: entered allmulticast mode
[   63.584727][ T6276] bond3: (slave macvlan1): Enslaving as an active interface with an up link
[   63.595337][ T6279] syzkaller1: entered promiscuous mode
[   63.597061][ T6279] syzkaller1: entered allmulticast mode
[   63.725108][ T6298] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   63.734880][ T6298] ipvlan2: entered promiscuous mode
[   63.737581][ T6298] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   63.741170][ T6300] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   63.917447][ T6315] netlink: 'syz.2.131': attribute type 6 has an invalid length.
[   64.428183][ T6334] tap0: tun_chr_ioctl cmd 1074812118
[   64.647776][ T6342] bond1: entered promiscuous mode
[   64.649738][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.698157][ T6342] bond1 (unregistering): Released all slaves
[   64.830913][ T6349] xt_connbytes: Forcing CT accounting to be enabled
[   64.834579][ T6349] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   64.862932][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   64.895917][ T6351] veth0: entered promiscuous mode
[   64.899157][ T6351] veth0: left promiscuous mode
[   65.386253][ T6404] openvswitch: netlink: IP tunnel dst address not specified
[   65.414327][ T6395] bond4 (unregistering): Released all slaves
[   66.037621][ T6448] netlink: 'syz.1.168': attribute type 5 has an invalid length.
[   66.155062][ T6461] openvswitch: netlink: Unknown nsh attribute 0
[   66.157169][ T6461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.368839][ T6481] netlink: 'syz.1.177': attribute type 10 has an invalid length.
[   66.369369][ T6475] ip6erspan0: entered allmulticast mode
[   66.384180][ T6481] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.401223][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.223646][ T6485] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   67.226074][ T6485] __nla_validate_parse: 18 callbacks suppressed
[   67.226081][ T6485] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.179'.
[   67.232067][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   67.266549][ T6496] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.317771][ T6496] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[   67.337878][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   67.355490][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.365947][ T6501] macvlan1: entered promiscuous mode
[   67.367731][ T6501] macvlan1: entered allmulticast mode
[   67.370109][ T6501] veth1_vlan: entered allmulticast mode
[   67.374839][ T6501] bond1: (slave macvlan1): Enslaving as an active interface with an up link
[   67.378219][ T6506] tap0: tun_chr_ioctl cmd 1074025678
[   67.379864][ T6506] tap0: group set to 0
[   67.523827][ T6520] netlink: 148 bytes leftover after parsing attributes in process `syz.2.187'.
[   67.533589][ T6520] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   67.563286][ T6524] x_tables: duplicate underflow at hook 2
[   67.565159][ T6524] x_tables: duplicate underflow at hook 2
[   67.584299][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   67.611295][ T6531] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   67.670202][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'.
[   67.695454][ T6537] 8021q: adding VLAN 0 to HW filter on device bond4
[   67.703825][ T6537] veth1_vlan: left allmulticast mode
[   67.710355][ T6537] bond3: (slave macvlan1): Releasing backup interface
[   67.720464][ T6537] veth1_vlan: entered allmulticast mode
[   67.727234][ T6537] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[   67.798544][ T6552] tipc: Invalid UDP bearer configuration
[   67.798574][ T6552] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   67.815100][ T6549] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET)
[   67.883423][ T6559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.198'.
[   67.888929][ T6559] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   67.909763][ T6559] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.915473][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[   67.915968][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.195'.
[   67.964566][ T6565] nbd: must specify a device to reconfigure
[   68.018371][ T6567] netlink: 22 bytes leftover after parsing attributes in process `syz.0.200'.
[   68.106742][ T6572] 8021q: adding VLAN 0 to HW filter on device bond5
[   68.111365][ T6572] veth1_vlan: left allmulticast mode
[   68.119141][ T6572] bond4: (slave macvlan1): Releasing backup interface
[   68.124012][ T6572] veth1_vlan: entered allmulticast mode
[   68.129454][ T6572] bond5: (slave macvlan1): Enslaving as an active interface with an up link
[   68.140451][ T6570] openvswitch: netlink: Duplicate or invalid key (type 0).
[   68.145818][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.179875][ T6570] syzkaller0: entered promiscuous mode
[   68.181587][ T6570] syzkaller0: entered allmulticast mode
[   68.917313][ T6589] netlink: 'syz.1.206': attribute type 11 has an invalid length.
[   69.010252][ T6597] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.024460][ T6597] veth1_vlan: left allmulticast mode
[   69.028519][ T6597] bond3: (slave macvlan1): Releasing backup interface
[   69.036362][ T6597] veth1_vlan: entered allmulticast mode
[   69.043759][ T6597] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[   69.058127][ T6601] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   69.092030][ T6601] bond6: entered promiscuous mode
[   69.094328][ T6601] bond6: entered allmulticast mode
[   69.096105][ T6601] 8021q: adding VLAN 0 to HW filter on device bond6
[   69.115260][ T6601] veth1_vlan: left allmulticast mode
[   69.385860][ T6612] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   69.673766][ T6623] netlink: 'syz.1.218': attribute type 3 has an invalid length.
[   69.686519][ T6623] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[   69.803514][ T6628] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   69.806108][ T6628] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   69.808522][ T6628] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   69.810988][ T6628] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   69.838139][ T6632] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   70.007289][ T6642] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   70.174856][ T6665] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[   70.180701][ T6665] 8021q: adding VLAN 0 to HW filter on device team0
[   70.185786][ T6665] bond0: (slave team0): Enslaving as an active interface with an up link
[   70.206372][ T6664] netlink: 'syz.2.228': attribute type 1 has an invalid length.
[   70.369150][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802aeddc00: rx timeout, send abort
[   70.388094][ T6683] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   70.416569][ T6687] netlink: 'syz.0.234': attribute type 15 has an invalid length.
[   70.463840][ T6690] openvswitch: netlink: Flow key attr not present in new flow.
[   70.872068][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802aeddc00: abort rx timeout. Force session deactivation
[   70.958510][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.960528][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.083035][ T6704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.203365][ T6719] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   71.252202][ T6724] xt_hashlimit: max too large, truncated to 1048576
[   71.328058][ T6727] bond5: entered promiscuous mode
[   71.330258][ T6727] bond5: entered allmulticast mode
[   71.334228][ T6727] 8021q: adding VLAN 0 to HW filter on device bond5
[   71.349366][ T6728] macvlan1: left promiscuous mode
[   71.350978][ T6728] macvlan1: left allmulticast mode
[   71.363950][ T6728] bridge2: left allmulticast mode
[   71.366080][ T6728] ipvlan2: left promiscuous mode
[   71.368380][ T6728] ip6erspan0: left allmulticast mode
[   71.385740][ T6728] bond6: left promiscuous mode
[   71.387706][ T6728] bond6: left allmulticast mode
[   71.514582][ T6743] lo: entered promiscuous mode
[   71.516217][ T6743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.199701][   T24] cfg80211: failed to load regulatory.db
[  105.264778][ T6768] __nla_validate_parse: 21 callbacks suppressed
[  105.264792][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'.
[  105.273019][ T6771] bridge: RTM_NEWNEIGH with invalid ether address
[  105.336711][ T6776] validate_nla: 4 callbacks suppressed
[  105.336763][ T6776] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[  106.238529][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'.
[  106.467842][ T6815] netlink: 'syz.0.263': attribute type 10 has an invalid length.
[  106.471448][ T6809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.262'.
[  106.478986][ T6815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'.
[  106.498734][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.501915][ T6815] bridge0: port 3(batadv0) entered blocking state
[  106.513442][ T6815] bridge0: port 3(batadv0) entered disabled state
[  106.520576][ T6815] batadv0: entered allmulticast mode
[  106.528213][ T6815] batadv0: entered promiscuous mode
[  106.770621][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.267'.
[  106.846672][ T6835] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[  106.922858][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[  106.992779][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  106.996684][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  107.010111][ T6843] SET target dimension over the limit!
[  107.031908][ T6844] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.270'.
[  107.123837][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.144686][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'.
[  107.336799][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.275'.
[  107.349432][ T6864] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.353141][ T6864] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.356352][ T6864] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.358898][ T6864] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.364667][ T6864] vxlan0: entered promiscuous mode
[  107.367102][ T6864] vxlan0: entered allmulticast mode
[  107.546913][ T6871] netlink: 304 bytes leftover after parsing attributes in process `syz.2.277'.
[  107.913437][ T6895] wg1 speed is unknown, defaulting to 1000
[  107.916093][ T6895] wg1 speed is unknown, defaulting to 1000
[  107.920761][ T6895] wg1 speed is unknown, defaulting to 1000
[  107.942578][ T6895] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.954949][ T6895] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  107.986630][ T6895] wg1 speed is unknown, defaulting to 1000
[  107.989964][ T6895] wg1 speed is unknown, defaulting to 1000
[  107.994078][ T6895] wg1 speed is unknown, defaulting to 1000
[  108.727225][ T6925] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  108.867658][ T6935] netlink: 'syz.2.295': attribute type 6 has an invalid length.
[  108.872140][ T6935] netlink: 'syz.2.295': attribute type 6 has an invalid length.
[  108.888568][ T6936] bond3: entered promiscuous mode
[  108.890159][ T6936] bond3: entered allmulticast mode
[  108.893330][ T6936] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.198276][ T6950] IPVS: persistence engine module ip_vs_pe_ not found
[  109.209389][ T2279] IPVS: starting estimator thread 0...
[  109.334172][ T6955] IPVS: using max 42 ests per chain, 100800 per kthread
[  109.362261][ T6962] veth0: entered promiscuous mode
[  109.439149][ T6961] veth0: left promiscuous mode
[  109.512359][ T6970] x_tables: duplicate underflow at hook 1
[  110.484769][ T6999] __nla_validate_parse: 8 callbacks suppressed
[  110.484782][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.314'.
[  110.493656][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'.
[  110.598674][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'.
[  110.652274][ T7013] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  110.858453][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'.
[  111.445317][ T7057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.336'.
[  111.774131][ T7075] netlink: 92 bytes leftover after parsing attributes in process `syz.0.341'.
[  111.809263][ T7074] wg1 speed is unknown, defaulting to 1000
[  111.950792][ T7082] netlink: 'syz.0.343': attribute type 58 has an invalid length.
[  111.957937][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'.
[  111.991643][ T7085] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.344'.
[  112.168649][ T7092] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[  112.171825][ T7092] netlink: 'syz.0.347': attribute type 4 has an invalid length.
[  112.177984][ T7092] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.347'.
[  112.178675][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[  112.362282][ T7097] netlink: 'syz.2.348': attribute type 7 has an invalid length.
[  112.365833][ T7097] netlink: 'syz.2.348': attribute type 8 has an invalid length.
[  112.377988][ T7097] erspan0: entered promiscuous mode
[  112.381270][ T7097] batadv_slave_1: entered promiscuous mode
[  112.390183][ T7097] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  112.394449][ T7097] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.963691][ T7119] nbd: illegal input index -381222912
[  113.134519][ T7134] xt_hashlimit: size too large, truncated to 1048576
[  113.220776][ T7139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.314359][ T7134] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  113.634711][ T7163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.662121][ T7163] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.665982][ T7163] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.668996][ T7163] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.671668][ T7163] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.681656][ T7163] vxlan0: left promiscuous mode
[  113.683358][ T7163] vxlan0: left allmulticast mode
[  113.683657][ T7168] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[  113.687977][ T7169] netlink: 'syz.1.371': attribute type 1 has an invalid length.
[  113.772170][ T7170] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.775805][ T7170] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.779222][ T7170] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.782797][ T7170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.845143][ T7179] netlink: 'syz.1.374': attribute type 3 has an invalid length.
[  114.342648][ T7201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.684868][ T7209] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  114.826867][ T7217] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.830224][ T7223] netlink: 'syz.1.385': attribute type 1 has an invalid length.
[  114.841105][ T7217] bond1: (slave macvlan1): Releasing backup interface
[  114.868728][ T7217] veth1_vlan: left allmulticast mode
[  114.879729][ T7217] veth1_vlan: entered allmulticast mode
[  114.885222][ T7217] bond4: (slave macvlan1): Enslaving as an active interface with an up link
[  115.468014][ T7278] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.481413][ T7278] veth1_vlan: left allmulticast mode
[  115.489714][ T7278] bond4: (slave macvlan1): Releasing backup interface
[  115.499935][ T7278] veth1_vlan: entered allmulticast mode
[  115.507933][ T7278] bond5: (slave macvlan1): Enslaving as an active interface with an up link
[  116.029545][ T7319] __nla_validate_parse: 19 callbacks suppressed
[  116.029558][ T7319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'.
[  116.064200][ T7310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.402'.
[  116.189806][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  116.271118][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'.
[  116.294333][ T7340] syz.0.415 (7340) used greatest stack depth: 20552 bytes left
[  116.306793][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[  116.311669][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  116.342276][ T7351] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  116.352749][ T7351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.417'.
[  116.376263][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'.
[  116.379567][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  116.385198][ T7354] netlink: 10 bytes leftover after parsing attributes in process `syz.2.418'.
[  116.404434][ T7354] nbd: socks must be embedded in a SOCK_ITEM attr
[  116.406944][ T7354] block nbd0: shutting down sockets
[  116.906323][ T7444] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  116.908935][ T7444] openvswitch: netlink: Duplicate key (type 0).
[  117.544727][ T7455] macvlan0: entered allmulticast mode
[  117.546523][ T7455] validate_nla: 2 callbacks suppressed
[  117.546530][ T7455] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[  117.550477][ T7455] netlink: 'syz.1.435': attribute type 2 has an invalid length.
[  117.960042][ T7479] blkio.reset_stats is deprecated
[  118.223611][ T7499] bridge: RTM_NEWNEIGH with invalid state 0x31
[  118.840525][ T7557] netlink: 'syz.0.464': attribute type 4 has an invalid length.
[  118.846149][ T7557] netlink: 'syz.0.464': attribute type 4 has an invalid length.
[  118.852207][ T7557] netlink: 'syz.0.464': attribute type 1 has an invalid length.
[  119.082900][ T7579] veth0: entered promiscuous mode
[  119.110610][ T7579] veth0 (unregistering): left promiscuous mode
[  119.269005][ T7600] xt_socket: unknown flags 0xd0
[  119.319502][ T7606] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[  119.583725][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  120.050932][ T7666] netlink: 'syz.2.475': attribute type 9 has an invalid length.
[  120.053774][ T7666] netlink: 'syz.2.475': attribute type 6 has an invalid length.
[  120.056091][ T7666] netlink: 'syz.2.475': attribute type 7 has an invalid length.
[  120.058396][ T7666] netlink: 'syz.2.475': attribute type 8 has an invalid length.
[  120.473465][ T7696] nbd0: detected capacity change from 0 to 127
[  120.487828][   T55] block nbd0: Receive control failed (result -104)
[  121.314255][ T7714] __nla_validate_parse: 17 callbacks suppressed
[  121.314271][ T7714] netlink: 224 bytes leftover after parsing attributes in process `syz.1.486'.
[  121.364311][ T7714] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.380170][ T7714] bond6: (slave gretap1): making interface the new active one
[  121.384435][ T7714] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  121.396573][ T7714] syz.1.486 (7714) used greatest stack depth: 20136 bytes left
[  121.524444][ T7727] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.491'.
[  121.575042][ T7733] tipc: MTU too low for tipc bearer
[  121.609036][ T7737] netlink: 56 bytes leftover after parsing attributes in process `syz.0.493'.
[  121.630950][ T7738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.493'.
[  121.640657][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'.
[  121.645417][ T7741] netlink: 3 bytes leftover after parsing attributes in process `syz.1.494'.
[  121.665512][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'.
[  121.917317][ T7777] netlink: 148 bytes leftover after parsing attributes in process `syz.2.503'.
[  122.230850][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'.
[  122.233746][ T7812] netlink: 80 bytes leftover after parsing attributes in process `syz.2.517'.
[  122.331546][ T7821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.637668][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.758443][ T7846] x_tables: duplicate underflow at hook 1
[  122.931988][ T7859] pim6reg1: entered promiscuous mode
[  122.934933][ T7859] pim6reg1: entered allmulticast mode
[  123.306276][ T7874] validate_nla: 8 callbacks suppressed
[  123.306289][ T7874] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[  123.318820][ T7871] wg1 speed is unknown, defaulting to 1000
[  123.530210][ T7893] netlink: 'syz.0.544': attribute type 4 has an invalid length.
[  123.551339][ T7893] : renamed from bond0
[  123.616843][ T7903] netlink: 'syz.2.547': attribute type 21 has an invalid length.
[  123.725831][ T7911] netlink: 'syz.2.551': attribute type 1 has an invalid length.
[  123.750958][ T7911] 8021q: adding VLAN 0 to HW filter on device bond7
[  123.757274][ T7917] xt_hashlimit: size too large, truncated to 1048576
[  123.768664][ T7911] ipvlan3: entered allmulticast mode
[  123.770398][ T7911] bond7: entered allmulticast mode
[  123.793788][ T7911] bond7: (slave gretap1): making interface the new active one
[  123.796035][ T7911] gretap1: entered allmulticast mode
[  123.801330][ T7911] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  123.947775][ T7925] ip6tnl1: entered promiscuous mode
[  123.949393][ T7925] ip6tnl1: entered allmulticast mode
[  123.973421][ T7925] team0: Device ip6tnl1 is of different type
[  124.148081][ T7936] pim6reg1: entered promiscuous mode
[  124.149702][ T7936] pim6reg1: entered allmulticast mode
[  124.493667][ T7946] batadv1: entered promiscuous mode
[  124.692195][ T7958] syzkaller0: entered promiscuous mode
[  124.694219][ T7958] syzkaller0: entered allmulticast mode
[  124.736640][ T7963] netlink: 'syz.2.567': attribute type 3 has an invalid length.
[  124.910698][ T7971] netlink: 'syz.0.568': attribute type 4 has an invalid length.
[  125.870553][ T7980] syzkaller0: entered promiscuous mode
[  125.872328][ T7980] syzkaller0: entered allmulticast mode
[  126.056462][ T8000] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[  126.058859][ T8000] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[  126.146940][ T8002] netlink: 'syz.1.577': attribute type 12 has an invalid length.
[  126.187204][ T8009] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  126.190713][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.269036][ T8018] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[  126.435717][ T8035] __nla_validate_parse: 21 callbacks suppressed
[  126.435728][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[  126.486500][ T8037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.591'.
[  126.489252][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'.
[  126.495784][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.499798][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'.
[  126.546219][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'.
[  126.574632][ T8042] team0: Port device team_slave_0 removed
[  126.738934][ T8047] syzkaller0: entered promiscuous mode
[  126.741194][ T8047] syzkaller0: entered allmulticast mode
[  126.882133][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.596'.
[  127.957140][ T8056] wg1 speed is unknown, defaulting to 1000
[  128.185607][ T8069] pim6reg0: tun_chr_ioctl cmd 1074025694
[  128.388734][ T8088] netlink: 'syz.1.606': attribute type 13 has an invalid length.
[  128.413872][ T8095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.607'.
[  128.450302][ T8099] bridge0: port 3(gretap0) entered blocking state
[  128.453461][ T8099] bridge0: port 3(gretap0) entered disabled state
[  128.456247][ T8099] gretap0: entered allmulticast mode
[  128.465517][ T8099] gretap0: entered promiscuous mode
[  128.475168][ T8099] bridge0: port 3(gretap0) entered blocking state
[  128.477404][ T8099] bridge0: port 3(gretap0) entered forwarding state
[  128.488280][ T8104] xt_TCPMSS: Only works on TCP SYN packets
[  128.496773][ T8099] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  128.505553][ T8104] netlink: 270 bytes leftover after parsing attributes in process `syz.0.610'.
[  128.511231][ T8106] sock: sock_timestamping_bind_phc: sock not bind to device
[  128.673746][ T8124] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.616'.
[  128.694049][ T8128] netlink: 'syz.1.619': attribute type 7 has an invalid length.
[  128.707155][ T8128] : entered promiscuous mode
[  128.958967][ T8150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.626'.
[  129.167444][ T8177] @: renamed from ip_vti0
[  129.322362][ T8186] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.326037][ T8186] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.328654][ T8186] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.331340][ T8186] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.837856][ T8233] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  129.909652][ T8238] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  130.454568][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.464339][ T8272] bond5: (slave macvlan1): Releasing backup interface
[  130.468491][ T8272] veth1_vlan: left allmulticast mode
[  130.471639][ T8272] veth1_vlan: entered allmulticast mode
[  130.477844][ T8272] bond0: (slave macvlan1): Enslaving as an active interface with an up link
[  130.519126][ T8276] netlink: 'syz.0.657': attribute type 9 has an invalid length.
[  130.521538][ T8276] netlink: 'syz.0.657': attribute type 6 has an invalid length.
[  130.524305][ T8276] netlink: 'syz.0.657': attribute type 7 has an invalid length.
[  130.526654][ T8276] netlink: 'syz.0.657': attribute type 8 has an invalid length.
[  130.582830][ T8277] gre0: left allmulticast mode
[  131.496553][ T8302] __nla_validate_parse: 11 callbacks suppressed
[  131.496579][ T8302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.663'.
[  131.508304][ T8297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.663'.
[  131.700759][ T8312] ip6tnl2: entered promiscuous mode
[  131.704402][ T8312] ip6tnl2: entered allmulticast mode
[  131.777911][ T8315] No such timeout policy "syz1"
[  131.875797][ T8318] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.671'.
[  132.007606][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'.
[  132.044911][ T8325] 8021q: adding VLAN 0 to HW filter on device bond8
[  132.055835][ T8336] netlink: 248 bytes leftover after parsing attributes in process `syz.0.678'.
[  132.058854][ T8325] bond5: (slave macvlan1): Releasing backup interface
[  132.076712][ T8325] bond8: (slave macvlan1): Enslaving as an active interface with an up link
[  132.156919][ T8346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[  132.163826][ T8347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.166258][ T8347] IPv6: NLM_F_CREATE should be set when creating new route
[  132.168473][ T8347] IPv6: NLM_F_CREATE should be set when creating new route
[  132.170625][ T8347] IPv6: NLM_F_CREATE should be set when creating new route
[  132.185670][ T8346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.282979][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'.
[  132.321141][ T8367] 8021q: adding VLAN 0 to HW filter on device bond9
[  132.330750][ T8367] bond8: (slave macvlan1): Releasing backup interface
[  132.338301][ T8367] bond9: (slave macvlan1): Enslaving as an active interface with an up link
[  132.387886][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.728798][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[  133.094550][ T8425] wg1 speed is unknown, defaulting to 1000
[  133.597536][ T8442] netlink: 'syz.1.704': attribute type 9 has an invalid length.
[  133.600279][ T8442] netlink: 'syz.1.704': attribute type 6 has an invalid length.
[  133.603359][ T8442] netlink: 'syz.1.704': attribute type 7 has an invalid length.
[  133.606236][ T8442] netlink: 'syz.1.704': attribute type 8 has an invalid length.
[  133.854303][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'.
[  133.868489][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv1
[  133.871827][ T8460] team0: Port device batadv1 added
[  133.900069][ T8464] netlink: 9 bytes leftover after parsing attributes in process `syz.0.712'.
[  133.910056][ T8464] gretap0: entered promiscuous mode
[  133.969776][ T8468] ieee802154 phy0 wpan0: encryption failed: -90
[  134.026109][ T8475] vcan1: entered allmulticast mode
[  134.140617][ T8480] 8021q: adding VLAN 0 to HW filter on device bond10
[  134.148327][ T8480] macvlan1: entered allmulticast mode
[  134.150839][ T8480] veth1_vlan: entered allmulticast mode
[  134.157744][ T8480] bond9: (slave macvlan1): Releasing backup interface
[  134.162325][ T8480] veth1_vlan: left allmulticast mode
[  134.169365][ T8480] veth1_vlan: entered allmulticast mode
[  134.178564][ T8480] bond10: (slave macvlan1): Enslaving as an active interface with an up link
[  134.182135][ T8483] : renamed from bond_slave_0
[  134.388339][ T8496] tipc: Trying to set illegal importance in message
[  134.488671][ T8500] gretap0: left allmulticast mode
[  134.491096][ T8500] gretap0: left promiscuous mode
[  134.501000][ T8500] bridge0: port 3(gretap0) entered disabled state
[  134.520943][ T8500] bond0: (slave team0): Releasing backup interface
[  134.528273][ T8500] bridge_slave_0: left allmulticast mode
[  134.530539][ T8500] bridge_slave_0: left promiscuous mode
[  134.534392][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.541245][ T8500] bridge_slave_1: left allmulticast mode
[  134.551146][ T8500] bridge_slave_1: left promiscuous mode
[  134.555588][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.565697][ T8500] bond0: (slave bond_slave_0): Releasing backup interface
[  134.570910][ T8500] bond0: (slave bond_slave_1): Releasing backup interface
[  134.578716][ T8500] team0: Port device team_slave_1 removed
[  134.583151][ T8500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.588309][ T8500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.595292][ T8500] bond4: (slave macvlan1): Releasing backup interface
[  134.599919][ T8500] veth1_vlan: left allmulticast mode
[  134.607319][ T8500] bond0: (slave wlan1): Releasing backup interface
[  134.626469][ T8500] bond6: (slave gretap1): Releasing active interface
[  134.680361][ T8502] 8021q: adding VLAN 0 to HW filter on device bond6
[  134.686333][ T8504] bond0: (slave macvlan1): Releasing backup interface
[  134.691063][ T8504] veth1_vlan: left allmulticast mode
[  134.699843][ T8504] veth1_vlan: entered allmulticast mode
[  134.708305][ T8504] bond6: (slave macvlan1): Enslaving as an active interface with an up link
[  134.909390][ T8524] netlink: 'syz.0.732': attribute type 3 has an invalid length.
[  134.948444][ T8527] vlan0: entered promiscuous mode
[  135.020247][ T8530] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.026476][ T8530] veth1_vlan: entered allmulticast mode
[  135.033546][ T8530] bond7: (slave macvlan1): Enslaving as an active interface with an up link
[  135.329066][ T8547] netlink: 'syz.1.740': attribute type 14 has an invalid length.
[  135.336827][ T8547] netlink: 'syz.1.740': attribute type 13 has an invalid length.
[  136.068982][ T8584] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  136.238098][ T8590] bond7: entered promiscuous mode
[  136.240269][ T8590] bond7: entered allmulticast mode
[  136.243328][ T8590] 8021q: adding VLAN 0 to HW filter on device bond7
[  136.451697][ T8602] 8021q: adding VLAN 0 to HW filter on device bond8
[  136.458394][ T8602] bond6: (slave macvlan1): Releasing backup interface
[  136.461668][ T8602] veth1_vlan: left allmulticast mode
[  136.468741][ T8602] veth1_vlan: entered allmulticast mode
[  136.481094][ T8602] bond8: (slave macvlan1): Enslaving as an active interface with an up link
[  136.497290][ T8608] x_tables: duplicate underflow at hook 2
[  136.497297][ T8607] x_tables: duplicate underflow at hook 2
[  136.566722][ T8614] netlink: 'syz.0.763': attribute type 1 has an invalid length.
[  136.587426][ T8614] 8021q: adding VLAN 0 to HW filter on device bond9
[  136.605102][ T8614] 8021q: adding VLAN 0 to HW filter on device bond9
[  136.607075][ T8619] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  136.609866][ T8614] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  136.617057][ T8614] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  136.650874][ T8620] gretap1: entered promiscuous mode
[  136.657702][ T8620] bond9: (slave gretap1): making interface the new active one
[  136.660420][ T8620] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  136.982061][ T8649] netlink: 'syz.1.774': attribute type 1 has an invalid length.
[  136.988097][ T8649] __nla_validate_parse: 18 callbacks suppressed
[  136.988105][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'.
[  137.000466][ T8650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.163921][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'.
[  137.167956][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'.
[  137.175801][ T8670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  137.178553][ T8670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  137.181383][ T8670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  137.184676][ T8670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  137.195369][ T8669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.781'.
[  137.262038][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'.
[  137.396948][ T8681] netlink: 'syz.2.786': attribute type 4 has an invalid length.
[  137.457116][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'.
[  137.459911][ T8685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'.
[  137.501918][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'.
[  137.505770][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'.
[  137.559341][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'.
[  137.603044][ T8690] 8021q: adding VLAN 0 to HW filter on device bond10
[  137.743117][ T8705] nbd: socks must be embedded in a SOCK_ITEM attr
[  137.745716][ T8705] block nbd1: shutting down sockets
[  138.304618][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.504368][ T8826] xt_ipcomp: unknown flags F7
[  138.651422][ T8846] validate_nla: 6 callbacks suppressed
[  138.651433][ T8846] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  138.689253][ T8851] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  138.854419][ T8865] wg1 speed is unknown, defaulting to 1000
[  139.125612][ T8879] 8021q: adding VLAN 0 to HW filter on device bond11
[  139.151061][ T8879] bond8: (slave macvlan1): Releasing backup interface
[  139.155978][ T8879] veth1_vlan: left allmulticast mode
[  139.159236][ T8879] veth1_vlan: entered allmulticast mode
[  139.164345][ T8879] bond11: (slave macvlan1): Enslaving as an active interface with an up link
[  139.218598][ T8887] openvswitch: netlink: IPv4 tun info is not correct
[  139.218749][ T8883] team0: Port device team_slave_1 removed
[  139.331949][ T8895] netlink: 'syz.2.854': attribute type 4 has an invalid length.
[  139.395494][ T8897] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  139.616123][ T8907] netlink: 'syz.2.859': attribute type 9 has an invalid length.
[  139.620094][ T8907] netlink: 'syz.2.859': attribute type 6 has an invalid length.
[  139.623500][ T8907] netlink: 'syz.2.859': attribute type 7 has an invalid length.
[  139.633176][ T8907] netlink: 'syz.2.859': attribute type 8 has an invalid length.
[  139.749361][ T8921] netlink: 'syz.2.865': attribute type 12 has an invalid length.
[  139.815451][ T8929] netlink: 'syz.0.868': attribute type 9 has an invalid length.
[  139.817741][ T8929] netlink: 'syz.0.868': attribute type 6 has an invalid length.
[  139.901369][ T8937] ip6t_srh: unknown srh invflags 4449
[  140.901122][ T8979] 8021q: adding VLAN 0 to HW filter on device bond11
[  140.908961][ T8979] bond10: (slave macvlan1): Releasing backup interface
[  140.911989][ T8979] veth1_vlan: left allmulticast mode
[  140.917437][ T8979] veth1_vlan: entered allmulticast mode
[  140.921553][ T8979] bond11: (slave macvlan1): Enslaving as an active interface with an up link
[  140.954705][ T8982] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.140331][ T9000] wg1 speed is unknown, defaulting to 1000
[  141.178031][ T9003] tipc: Started in network mode
[  141.180063][ T9003] tipc: Node identity 76ca0e44c322, cluster identity 4711
[  141.185378][ T9003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.198298][ T9003] syzkaller0: entered promiscuous mode
[  141.200325][ T9003] syzkaller0: entered allmulticast mode
[  141.216414][ T9003] SET target dimension over the limit!
[  141.236718][ T9008] 8021q: adding VLAN 0 to HW filter on device bond8
[  141.240794][ T9002] tipc: Resetting bearer <eth:syzkaller0>
[  141.255991][ T9002] tipc: Disabling bearer <eth:syzkaller0>
[  141.261982][ T9008] bond7: (slave macvlan1): Releasing backup interface
[  141.267289][ T9008] veth1_vlan: left allmulticast mode
[  141.271206][ T9008] veth1_vlan: entered allmulticast mode
[  141.275628][ T9008] bond8: (slave macvlan1): Enslaving as an active interface with an up link
[  141.532246][ T9027] 8021q: adding VLAN 0 to HW filter on device bond12
[  141.551946][ T9027] bond11: (slave macvlan1): Releasing backup interface
[  141.555945][ T9027] veth1_vlan: left allmulticast mode
[  141.559027][ T9027] veth1_vlan: entered allmulticast mode
[  141.563559][ T9027] bond12: (slave macvlan1): Enslaving as an active interface with an up link
[  141.646756][ T9038] sctp: [Deprecated]: syz.0.906 (pid 9038) Use of int in maxseg socket option.
[  141.646756][ T9038] Use struct sctp_assoc_value instead
[  141.839513][ T9057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  141.846518][ T9054] 8021q: adding VLAN 0 to HW filter on device bond9
[  141.862260][ T9054] bond8: (slave macvlan1): Releasing backup interface
[  141.867007][ T9054] veth1_vlan: left allmulticast mode
[  141.868800][ T9059] ieee802154 phy0 wpan0: encryption failed: -22
[  141.875038][ T9054] veth1_vlan: entered allmulticast mode
[  141.879299][ T9054] bond9: (slave macvlan1): Enslaving as an active interface with an up link
[  141.889024][ T9057] tun0: tun_chr_ioctl cmd 35108
[  141.916009][ T9059] wg1 speed is unknown, defaulting to 1000
[  142.055832][ T9081] __nla_validate_parse: 107 callbacks suppressed
[  142.055843][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.917'.
[  142.060245][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'.
[  142.089383][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'.
[  142.117550][ T9085] 8021q: adding VLAN 0 to HW filter on device bond13
[  142.122706][ T9085] bond12: (slave macvlan1): Releasing backup interface
[  142.127123][ T9085] veth1_vlan: left allmulticast mode
[  142.130405][ T9085] veth1_vlan: entered allmulticast mode
[  142.137310][ T9085] bond13: (slave macvlan1): Enslaving as an active interface with an up link
[  142.206193][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[  142.316965][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  142.326818][ T9112] pim6reg: entered allmulticast mode
[  142.365327][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.930'.
[  142.716840][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  142.727341][ T9145] wg1 speed is unknown, defaulting to 1000
[  142.766447][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[  142.797565][ T9150] mac80211_hwsim hwsim6 ": renamed from wlan0
[  143.036467][ T9172] wg1 speed is unknown, defaulting to 1000
[  143.178129][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  143.261614][ T9185] netlink: 116 bytes leftover after parsing attributes in process `syz.0.952'.
[  143.474337][ T9206] veth6: entered allmulticast mode
[  143.762152][ T9224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.764782][ T9224] syzkaller0: entered promiscuous mode
[  143.766501][ T9224] syzkaller0: entered allmulticast mode
[  143.777600][ T9224] tipc: Resetting bearer <eth:syzkaller0>
[  143.781760][ T9223] tipc: Resetting bearer <eth:syzkaller0>
[  143.788929][ T9223] tipc: Disabling bearer <eth:syzkaller0>
[  143.927287][ T9231] sctp: [Deprecated]: syz.1.963 (pid 9231) Use of int in max_burst socket option.
[  143.927287][ T9231] Use struct sctp_assoc_value instead
[  144.327623][ T9253] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  144.505088][ T9260] veth0_to_team: entered promiscuous mode
[  144.506995][ T9260] veth0_to_team: entered allmulticast mode
[  144.601579][ T9273] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  144.607701][ T9273] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  144.647843][ T9277] syzkaller1: entered promiscuous mode
[  144.649585][ T9277] syzkaller1: entered allmulticast mode
[  144.654776][ T9277] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  144.746047][ T9285] : entered promiscuous mode
[  144.969020][ T9310] veth0: entered promiscuous mode
[  145.005452][ T9315] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  145.028915][ T9299] veth0: left promiscuous mode
[  145.114716][ T9321] vlan3: entered promiscuous mode
[  145.116627][ T9321] bridge0: entered promiscuous mode
[  145.220626][ T9325] validate_nla: 11 callbacks suppressed
[  145.220639][ T9325] netlink: 'syz.2.995': attribute type 13 has an invalid length.
[  145.606607][ T9338] netlink: 'syz.2.999': attribute type 3 has an invalid length.
[  145.851901][ T9348] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  145.955525][ T9364] netlink: 'syz.2.1009': attribute type 3 has an invalid length.
[  146.167230][ T9385] netlink: 'syz.1.1015': attribute type 2 has an invalid length.
[  146.169980][ T9385] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  146.173582][ T9385] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[  146.275994][ T9390] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.280239][ T9390] bond0: (slave bond10): Enslaving as an active interface with an up link
[  146.586987][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.879156][ T9420] netlink: 'syz.0.1025': attribute type 3 has an invalid length.
[  146.925818][ T9422] netlink: 'syz.0.1026': attribute type 12 has an invalid length.
[  146.969107][ T9422] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  147.031356][ T9428] netlink: 'syz.0.1029': attribute type 21 has an invalid length.
[  147.036084][ T9428] netlink: 'syz.0.1029': attribute type 22 has an invalid length.
[  147.049091][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.719784][ T9439] bond0: entered promiscuous mode
[  147.726525][ T9439] bond0: left promiscuous mode
[  148.040493][ T9453] bond9: (slave macvlan1): Releasing backup interface
[  148.048335][ T9453] veth1_vlan: left allmulticast mode
[  148.056043][ T9453] bond0: (slave bond10): Releasing backup interface
[  148.158312][ T9459] team0: Mode changed to "broadcast"
[  148.209330][ T9467] __nla_validate_parse: 24 callbacks suppressed
[  148.209344][ T9467] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1041'.
[  148.232175][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'.
[  148.238908][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  148.325661][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'.
[  148.355245][ T9476] 8021q: adding VLAN 0 to HW filter on device bond12
[  148.363677][ T9480] pimreg: entered allmulticast mode
[  148.374833][ T9480] pimreg: left allmulticast mode
[  148.387888][ T7439] wlan0: Trigger new scan to find an IBSS to join
[  148.396251][ T9476] veth1_vlan: left allmulticast mode
[  148.398694][ T9476] macvlan1: entered promiscuous mode
[  148.405097][ T9476] bond11: (slave macvlan1): Releasing backup interface
[  148.410056][ T9476] veth1_vlan: entered allmulticast mode
[  148.414382][ T9476] bond12: (slave macvlan1): Enslaving as an active interface with an up link
[  148.492570][  T791] IPVS: starting estimator thread 0...
[  148.592967][ T9487] IPVS: using max 62 ests per chain, 148800 per kthread
[  148.638390][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'.
[  148.676135][ T9501] wg1 speed is unknown, defaulting to 1000
[  148.714694][ T9507] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  148.887672][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'.
[  148.891497][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'.
[  149.238513][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'.
[  149.282158][ T9534] 8021q: adding VLAN 0 to HW filter on device bond11
[  149.296482][ T9534] veth1_vlan: entered allmulticast mode
[  149.302143][ T9534] bond11: (slave macvlan1): Enslaving as an active interface with an up link
[  149.491120][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'.
[  149.637114][ T9548] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1069'.
[  149.646101][ T9550] x_tables: duplicate underflow at hook 3
[  149.652877][ T9552] x_tables: duplicate underflow at hook 3
[  149.729662][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.732155][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.753749][ T9555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.331071][ T9575] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  150.569757][ T9595] xt_cgroup: path and classid specified
[  150.880778][ T9608] validate_nla: 5 callbacks suppressed
[  150.880798][ T9608] netlink: 'syz.2.1089': attribute type 4 has an invalid length.
[  150.897208][ T9611] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  150.900194][ T9611] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  150.970277][  T129] block nbd0: Possible stuck request ffff888020488000: control (read@0,1024B). Runtime 30 seconds
[  150.976556][  T129] block nbd0: Possible stuck request ffff888020488200: control (read@1024,1024B). Runtime 30 seconds
[  150.981178][  T129] block nbd0: Possible stuck request ffff888020488400: control (read@2048,1024B). Runtime 30 seconds
[  150.981348][ T9616] netlink: 'syz.2.1092': attribute type 10 has an invalid length.
[  150.986140][  T129] block nbd0: Possible stuck request ffff888020488600: control (read@3072,1024B). Runtime 30 seconds
[  151.018347][ T9616] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  151.254001][ T9639] netlink: 'syz.0.1099': attribute type 21 has an invalid length.
[  151.379692][ T9655] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  151.434313][ T9655] 8021q: adding VLAN 0 to HW filter on device bond12
[  151.438085][ T7431] wlan0: Trigger new scan to find an IBSS to join
[  151.611792][ T9672] bond12: (slave gretap2): making interface the new active one
[  151.617111][ T9672] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  152.236765][ T9716] netlink: 'syz.2.1121': attribute type 83 has an invalid length.
[  152.556175][ T9736] sctp: [Deprecated]: syz.2.1128 (pid 9736) Use of int in max_burst socket option deprecated.
[  152.556175][ T9736] Use struct sctp_assoc_value instead
[  152.911983][ T9765] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  153.047890][ T9771] vlan3: entered allmulticast mode
[  153.114539][ T9780] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  153.299195][ T9794] netlink: 'syz.1.1150': attribute type 2 has an invalid length.
[  153.315156][ T9794] dvmrp0: entered allmulticast mode
[  153.541612][ T9821] 
[  153.542666][ T9821] ======================================================
[  153.545430][ T9821] WARNING: possible circular locking dependency detected
[  153.548192][ T9821] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  153.552300][ T9821] ------------------------------------------------------
[  153.555075][ T9821] syz.1.1159/9821 is trying to acquire lock:
[  153.557402][ T9821] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  153.560999][ T9821] 
[  153.560999][ T9821] but task is already holding lock:
[  153.563786][ T9821] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  153.567531][ T9821] 
[  153.567531][ T9821] which lock already depends on the new lock.
[  153.567531][ T9821] 
[  153.571581][ T9821] 
[  153.571581][ T9821] the existing dependency chain (in reverse order) is:
[  153.574982][ T9821] 
[  153.574982][ T9821] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  153.578095][ T9821]        lock_acquire+0x120/0x360
[  153.580117][ T9821]        _raw_spin_lock_bh+0x36/0x50
[  153.582245][ T9821]        nr_rt_ioctl+0x390/0xd50
[  153.584233][ T9821]        sock_do_ioctl+0xdc/0x300
[  153.586301][ T9821]        sock_ioctl+0x576/0x790
[  153.588279][ T9821]        __se_sys_ioctl+0xfc/0x170
[  153.590368][ T9821]        do_syscall_64+0xfa/0x3b0
[  153.592406][ T9821]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.594903][ T9821] 
[  153.594903][ T9821] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  153.597979][ T9821]        lock_acquire+0x120/0x360
[  153.599973][ T9821]        _raw_spin_lock_bh+0x36/0x50
[  153.602084][ T9821]        nr_rt_ioctl+0x193/0xd50
[  153.604062][ T9821]        sock_do_ioctl+0xdc/0x300
[  153.606056][ T9821]        sock_ioctl+0x576/0x790
[  153.608018][ T9821]        __se_sys_ioctl+0xfc/0x170
[  153.610086][ T9821]        do_syscall_64+0xfa/0x3b0
[  153.612103][ T9821]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.614633][ T9821] 
[  153.614633][ T9821] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  153.617722][ T9821]        validate_chain+0xb9b/0x2140
[  153.619856][ T9821]        __lock_acquire+0xab9/0xd20
[  153.621943][ T9821]        lock_acquire+0x120/0x360
[  153.623994][ T9821]        _raw_spin_lock_bh+0x36/0x50
[  153.626105][ T9821]        nr_rt_device_down+0xa9/0x720
[  153.628190][ T9821]        nr_device_event+0x137/0x150
[  153.630330][ T9821]        notifier_call_chain+0x1b6/0x3e0
[  153.632468][ T9821]        __dev_notify_flags+0x18d/0x2e0
[  153.634701][ T9821]        netif_change_flags+0xe8/0x1a0
[  153.636856][ T9821]        dev_change_flags+0x130/0x260
[  153.638928][ T9821]        dev_ioctl+0x7b4/0x1150
[  153.640857][ T9821]        sock_do_ioctl+0x22c/0x300
[  153.642852][ T9821]        sock_ioctl+0x576/0x790
[  153.644812][ T9821]        __se_sys_ioctl+0xfc/0x170
[  153.646847][ T9821]        do_syscall_64+0xfa/0x3b0
[  153.648866][ T9821]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.651328][ T9821] 
[  153.651328][ T9821] other info that might help us debug this:
[  153.651328][ T9821] 
[  153.655277][ T9821] Chain exists of:
[  153.655277][ T9821]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  153.655277][ T9821] 
[  153.660550][ T9821]  Possible unsafe locking scenario:
[  153.660550][ T9821] 
[  153.663050][ T9821]        CPU0                    CPU1
[  153.664707][ T9821]        ----                    ----
[  153.666335][ T9821]   lock(nr_neigh_list_lock);
[  153.667998][ T9821]                                lock(&nr_node->node_lock);
[  153.670775][ T9821]                                lock(nr_neigh_list_lock);
[  153.673498][ T9821]   lock(nr_node_list_lock);
[  153.675339][ T9821] 
[  153.675339][ T9821]  *** DEADLOCK ***
[  153.675339][ T9821] 
[  153.678354][ T9821] 2 locks held by syz.1.1159/9821:
[  153.680113][ T9821]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  153.682963][ T9821]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  153.685896][ T9821] 
[  153.685896][ T9821] stack backtrace:
[  153.687703][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz.1.1159 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  153.687716][ T9821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.687723][ T9821] Call Trace:
[  153.687732][ T9821]  <TASK>
[  153.687738][ T9821]  dump_stack_lvl+0x189/0x250
[  153.687754][ T9821]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.687766][ T9821]  ? __pfx__printk+0x10/0x10
[  153.687779][ T9821]  ? print_lock_name+0xde/0x100
[  153.687791][ T9821]  print_circular_bug+0x2ee/0x310
[  153.687803][ T9821]  check_noncircular+0x134/0x160
[  153.687814][ T9821]  validate_chain+0xb9b/0x2140
[  153.687828][ T9821]  __lock_acquire+0xab9/0xd20
[  153.687837][ T9821]  ? nr_rt_device_down+0xa9/0x720
[  153.687845][ T9821]  lock_acquire+0x120/0x360
[  153.687852][ T9821]  ? nr_rt_device_down+0xa9/0x720
[  153.687861][ T9821]  ? nr_rt_device_down+0xa9/0x720
[  153.687868][ T9821]  _raw_spin_lock_bh+0x36/0x50
[  153.687880][ T9821]  ? nr_rt_device_down+0xa9/0x720
[  153.687888][ T9821]  nr_rt_device_down+0xa9/0x720
[  153.687896][ T9821]  ? do_raw_spin_unlock+0x4d/0x240
[  153.687908][ T9821]  nr_device_event+0x137/0x150
[  153.687923][ T9821]  notifier_call_chain+0x1b6/0x3e0
[  153.687936][ T9821]  __dev_notify_flags+0x18d/0x2e0
[  153.687947][ T9821]  ? __pfx___dev_notify_flags+0x10/0x10
[  153.687955][ T9821]  ? __dev_change_flags+0x4cc/0x6d0
[  153.687965][ T9821]  ? __pfx___dev_change_flags+0x10/0x10
[  153.687974][ T9821]  ? dev_ioctl+0x7a4/0x1150
[  153.687983][ T9821]  ? full_name_hash+0x92/0xe0
[  153.687996][ T9821]  netif_change_flags+0xe8/0x1a0
[  153.688007][ T9821]  dev_change_flags+0x130/0x260
[  153.688017][ T9821]  dev_ioctl+0x7b4/0x1150
[  153.688026][ T9821]  sock_do_ioctl+0x22c/0x300
[  153.688039][ T9821]  ? __pfx_sock_do_ioctl+0x10/0x10
[  153.688050][ T9821]  ? __lock_acquire+0xab9/0xd20
[  153.688060][ T9821]  sock_ioctl+0x576/0x790
[  153.688071][ T9821]  ? __pfx_sock_ioctl+0x10/0x10
[  153.688082][ T9821]  ? __fget_files+0x2a/0x420
[  153.688094][ T9821]  ? __fget_files+0x3a0/0x420
[  153.688104][ T9821]  ? __fget_files+0x2a/0x420
[  153.688116][ T9821]  ? bpf_lsm_file_ioctl+0x9/0x20
[  153.688125][ T9821]  ? __pfx_sock_ioctl+0x10/0x10
[  153.688136][ T9821]  __se_sys_ioctl+0xfc/0x170
[  153.688144][ T9821]  do_syscall_64+0xfa/0x3b0
[  153.688153][ T9821]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.688164][ T9821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.688172][ T9821]  ? exc_page_fault+0x9f/0xf0
[  153.688183][ T9821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.688191][ T9821] RIP: 0033:0x7f2f8778e929
[  153.688202][ T9821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.688209][ T9821] RSP: 002b:00007f2f885fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  153.688220][ T9821] RAX: ffffffffffffffda RBX: 00007f2f879b5fa0 RCX: 00007f2f8778e929
[  153.688227][ T9821] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004
[  153.688232][ T9821] RBP: 00007f2f87810b39 R08: 0000000000000000 R09: 0000000000000000
[  153.688238][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.688243][ T9821] R13: 0000000000000000 R14: 00007f2f879b5fa0 R15: 00007ffcd561eb38
[  153.688253][ T9821]  </TASK>
[  154.462842][ T7431] wlan0: Trigger new scan to find an IBSS to join
[  155.353113][ T7439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50

VM DIAGNOSIS:
06:34:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff8881088f3980 RDX=0000000000000000
RSI=0000000000000027 RDI=0000000000000040 RBP=ffffea00004a36c0 RSP=ffffc90006a8f928
R8 =ffffea00004a3737 R9 =1ffffd40000946e6 R10=dffffc0000000000 R11=fffff940000946e7
R12=1ffff92000d51f65 R13=ffffc90006a8fb28 R14=ffff888020c80c68 R15=ffff88801ddbab00
RIP=ffffffff8b6f3fcd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570747500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc045fa9630 CR3=000000001142a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=6966696e752f7075 6f7267637a79732f XMM01=7a79732f64656966 696e752f70756f72
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc046011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002923 RDI=0000000000002924 RBP=00000000000003f8 RSP=ffffc9000669f030
R8 =ffff888108990237 R9 =1ffff11021132046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2f885fa6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b2615 CR3=000000010883a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ae00040000000100 0000000000000003
XMM02=00007f9b59b85478 00007f9b59b85450 XMM03=00007f9b59b85488 00007f9b59b85480
XMM04=00007f9b5a6ed100 00007f9b59b85440 XMM05=00007f9b59b85458 00007f9b59b854a0
XMM06=00007f9b59b85498 00007f9b59b85490 XMM07=00007f9b59b85488 00007f9b59b85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9b59a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
