last executing test programs:

1.711625485s ago: executing program 2 (id=1785):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x2, 0x0)
close(r1)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}, [@generic="457282a417"]}, 0x1c}}, 0x0)

1.710831607s ago: executing program 2 (id=1786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x70, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x43, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2)
recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x2f, 0x0, 0x55, 0x8, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x9, 0x3}})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300060000000000280012800c0001006d0063766c616e00180002800a000800"], 0x58}}, 0x0)

1.56850071s ago: executing program 2 (id=1787):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001200375f3f362b00fcffffff070000004de48d5bff278335", @ANYRES32=0x0, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

1.568113199s ago: executing program 2 (id=1788):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2}, 0x20)
socket(0x1, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300683a6970000500000000000900020073797a310000000005000500020000000500010006000000"], 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020008000000000000000000000900030073797a31000000000500010007800c00018008000107000000020c00028008000140e0004001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000030605000000000000000000050000040500010007006d5e5fe292ce75d34c480000116a0ea6ef7524a91308cd3355838c7465ecc3e9ee7e15e5026d60563d13bfc7f34fb9176d2f4a34a7e662fd6b74cba28e2851feceab8d58166ef8085ff822be609282baa8244cf93308ea324e014fb166b87579123366fe494bec9508b1f535f9faf5f5fee5b471566ef2f908f627a5e6219dbc9b72500100ec8971d0c96f073869c5730fae85977c33f181c0b896ade9210873ae2acf63940d86965678699869cf50edcc66079013a3438a0cffb4cc7e6ad6c27b481ca11c29071d7b2602c90c2b463f8ba313305552b7b68562f5"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
socket(0x2, 0x80805, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="898b968f9adae50e1196d2b3b92fa885aa5725da95", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004884)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x14000, 0x0)
ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000280)={0xfd})
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="de960000", @ANYRES16=r8, @ANYBLOB="030328bd7000000020000a00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x43}}, 0x0)
socket$unix(0x1, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ed}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r10}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000370410000000ffdbdf2500000000", @ANYRESHEX=r2, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008860b408000000009000000010000006d3fcfdb2cdc0dbd111fc9f2ef9c7deab5e74b361205066742753776d9c63bf83b857a4c36775da8bcac9ea430ad3fd152fac4df26b1ac2c4431a6a2b36505c8dcf093dfad68a002bc79"], 0x44}, 0x1, 0x0, 0x0, 0x8484}, 0x0)

1.501599327s ago: executing program 2 (id=1789):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38924c74d7b8806d87187d98ecb0551cacb7df0e6872ab666e77781e98e7623c261c3a27fde00a877ebdf1"], 0x18}, 0xfc00)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e6, &(0x7f0000000180)="617aec16911cd2b3c2262bdcb3ec3af9c5bf1c37b929e1549a3b12b1275edfbba262b05628a9446e3844af01f14e")
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00'}, 0x10)
shutdown(r1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f00000a5000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r8, 0x180000000)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb3e}]}}}]}, 0x44}}, 0x0)

1.29186384s ago: executing program 0 (id=1791):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64)
sendmsg$inet(r0, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
syz_emit_ethernet(0x338, &(0x7f00000020c0)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x302, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, [{}, {0xe, 0x1, "00000000000000000800ee00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000"}, {0x2, 0x5, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x21, 0x7, "fcf98a142ec1876de04ca4682fb87790a7855b4e6fa3b20519bbaa8a029cee00b8d3485efe68a356f542b043059ff05912fb0000000000"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b196e213408c"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65e81ed"}]}}}}}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a320000000005000400000000000c000300686173683a69700014000780050015000d000800114000000000050005000a0000000500010006000000"], 0x58}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r6, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x1) (async)
r7 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r8}, 0x10) (async)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a"], 0x40}}, 0x0)

1.221979257s ago: executing program 0 (id=1793):
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
close(r0)

1.220909763s ago: executing program 0 (id=1795):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socket(0x2c, 0x3, 0x0) (async)
socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0) (async)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000c1deb643", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
close(0x4) (async)
close(0x4)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1b) (async)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1b)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) (async)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
unshare(0x6a040000)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r9 = socket(0x14, 0x2, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x21, 0x1, 0x3cab, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
r11 = socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="2a0000002400000000009c5c6cb09feee8f7180c762d7493a128000077ddf3", @ANYRES32=0x0, @ANYRES64=r10], 0x20) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="2a0000002400000000009c5c6cb09feee8f7180c762d7493a128000077ddf3", @ANYRES32=0x0, @ANYRES64=r10], 0x20)
ioctl$sock_SIOCGIFINDEX(r9, 0x61d1, &(0x7f0000000100)={'dvmrp0\x00'})

995.686831ms ago: executing program 0 (id=1798):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x5, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x2}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @const={0x5}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000002c0)=""/243, 0x64, 0xf3, 0x0, 0x9, 0x10000}, 0x28) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x8001, <r1=>0x0}, 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r2=>0x0})
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_getneigh={0x40, 0x1e, 0x2, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x408, 0x81}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x40}}, 0x11) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000005c0), 0x4) (async)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r9, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) (async)
writev(r9, &(0x7f0000000600)=[{&(0x7f0000000280)="a1818522bafd0096cd3ff43a463d18d07d5466584c20dbc1c17d6e5c30d25719899852afdd71d81c8eaa", 0x2a}, {&(0x7f0000000540)}, {&(0x7f0000000840)}, {0x0}], 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x0, 0x3, 0x14000, r5, 0xffffffff, '\x00', 0x0, r0, 0x2, 0x1, 0x4, 0x5, @void, @value, @value=r9}, 0x50) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdd254400000008000300", @ANYRES32=r11, @ANYBLOB="10007000050008000f000000040005000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24040890)

890.815655ms ago: executing program 0 (id=1799):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) (async)
socket(0x40000000015, 0x5, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) (async)

720.439349ms ago: executing program 1 (id=1801):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

719.979562ms ago: executing program 0 (id=1802):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1)
socket(0x400000000010, 0x3, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r7, 0x8000)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
shutdown(r4, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000300)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0006fd00"/20, @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000008000"/28], 0x48)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2507000000140002000400000000000000000000000000000014000300fc00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r11, 0x0, 0x0)
sendmsg$can_bcm(r11, 0x0, 0x14)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/198, 0x30000, 0x1800, 0x5}, 0x20)
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000, 0x0, 0xfffffffc}, 0x10)

719.436817ms ago: executing program 1 (id=1803):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180000801fbf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dba04000a0000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
r2 = accept$alg(r0, 0x0, 0x0)
read$alg(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f0000001b80)=""/4108, 0x100c}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000000640)=""/91, 0x5b}], 0x6, 0x1, 0xd)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48805}, 0x8800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000740), &(0x7f0000000780)=0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x4000)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x40)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x1}], 0x1)
connect$x25(r0, &(0x7f0000000180), 0x12)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x0, 0x27}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x20, 0x40}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

411.237507ms ago: executing program 1 (id=1804):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000080)=0x80, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48044}, 0x45)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x33a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8be}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x87f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004891}, 0x24000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000340)={0x4, 0x1000, "6aba33", 0x16, 0x3})
bind$llc(r0, &(0x7f0000000380)={0x1a, 0x0, 0x4, 0xe4, 0x45, 0x1, @multicast}, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000018c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000000580)={0x1300, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x6c, 0xc5, "95d54f0d333857b5d3da9e706790395c9744a54b13e1ce8083dff69f1e2eb9849e1c56a4526d4f8209c95e507dc24d8ba735f414379d33bd6a0074d4949c471cf534c18194bdee96e6a3839e3bd96b3a31f09a7523d793500c3c561edcd2c779721eb513ac0fa92f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000000}, @NL80211_ATTR_VENDOR_DATA={0xbf, 0xc5, "aa0ae3ffed5cff5adb0ed1f947441e7e29ecc7ceb9737ae981650c47de5da1014692514268903582baf56f30b8b126039c1491da244856f09e8542d4011d6b3a7fee4c429b53b2ca3b72863e1ffd62716a8b4d449a3e83e061104794ecd719a089cd1ecb3c017172c0033bffbf108623dbc9955dfd8fd088ea2e886ca612799f26da6efb1913d1b3a9a59f2ce833684420aae7a6332b7b6ff36ada8ff976b91bd8c29a3e7b06df1af784cca26b250df6c2f91694934c196ece6ae6"}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "c39c9c60671f2616bf8170ea435562a0f77c8b0de085d67c42a1a77f7657291add5c2a75ba204947cff0f9948dc020b913a9550e90f56671efefd642068dd18b7276bf897b54bcb15038d8d04313c24e8b43930ebbc343119efa085b0137b425842cf3a27a48d827d4568169fb9bffbfa74cbb3ba1434ee8dcfb2db314d2425059fed6e55f008354a565f99af07d8e7ca92065b3baf047"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x25, 0xc5, "181ff9e9cfaaa7d0ee1584f575381a6fbe8009755819116c94a8619482ea79dfb5"}, @NL80211_ATTR_VENDOR_DATA={0xd0, 0xc5, "9f1825f164f8cb2bd43f75427a99ae33b6f179fbd8bafd24b9174e9d5995eecf2d7185be71c3493e05aad6e75694ecb4548cdef23494686fea58602fa3592948c3185a577044c4fb7ad37f165cdf8d702ed117e3f5bed19dc5342dd322b1ca5862b94e92329694c0c7e8f21ca40e782c87149cfc3bfeb9d3ef17bb0b9874f093d2b07fb74c0783498d775ca6a293cc3c9a75089bfae2c08379c93786649ac6bb8ec5e615f1efe445088d03c6d67cb130676181ef2dcf1d3c3b8485e3afffce8a32f264a503054d136a713478"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7a4}]}, 0x1300}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001980)={0x148, r3, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xd39c, 0x6, 0xdec, 0x8, 0x1, 0x9a]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x1b, 0x9, 0x48, 0x36, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x6bf, 0x3ff, 0x800, 0x9, 0xf888, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xfff8, 0x6, 0x2662, 0x0, 0x7, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7ff, 0x5, 0x4, 0x0, 0x8, 0x2, 0xe88]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd0b, 0x200, 0x1, 0x8f0, 0x9, 0xff, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {0x5, 0x5}, {0x7, 0x7}, {0x3}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x8}, {0x7, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x7}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x8}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x16, 0x60, 0x36, 0x1, 0x1b, 0xb, 0x5, 0x24, 0xe, 0xc, 0x0, 0x5, 0x3, 0x60, 0x36]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x6, 0x48, 0x48, 0xc, 0x1, 0x6c, 0x30, 0x24, 0x1b, 0xb, 0x30, 0x2, 0x3, 0x6c, 0xc, 0x9, 0x5, 0x3, 0x36, 0x46, 0x4, 0x18, 0x6, 0x1b, 0xc, 0x9, 0x4, 0x3, 0x5a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000)
sendmsg$can_j1939(r0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x1d, 0x0, 0x0, {0x1, 0xff}}, 0x18, &(0x7f0000001c40)={&(0x7f0000001bc0)="2c83c9bf30b10f52fc767d498c928844007f4ca69165ccd61a44b08653924e8abc3c6871a1ee92c6f71a02537ad216f085adb5a0a49b2717cdcb3e25705174061fabe7e6afa8682cc2ee94c529244d2447a3f1ddc55dee583d365af9", 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x8800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r0)
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000001d40)={0x104c, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x54}}}}, [@NL80211_ATTR_BEACON_TAIL={0xc9, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x21}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @fast_bss_trans={0x37, 0x5b, {0xa, 0x1, "6b67a47221158adbb42f9b0604b67f0f", "4dc9c014576d6b598129e672ca54cb7eae99c301a0950708ff7c2b88cad59108", "1f0577ac135256590f55e8320a18312a55bf1ed8582c6e0e2fec9c4581246c75", [{0x1, 0x7, "1c128e41c40003"}]}}, @link_id={0x65, 0x12, {@random="f50b0b1e946f", @broadcast, @device_b}}, @preq={0x82, 0x46, {{0x0, 0x0, 0x1}, 0xa6, 0x0, 0x0, @device_a, 0x8, @void, 0xfffffffc, 0x3, 0x4, [{{0x0, 0x0, 0x1}, @device_a, 0x910}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{}, @broadcast, 0x3}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa, 0x7f, [@chsw_timing={0x68, 0x4, {0x5, 0x7}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x14a, 0x7f, [@dsss={0x3, 0x1, 0x2d}, @gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0xd8, {0x6, 0x5, "416b4127b4d4adcacf80882b5fa0f947", "c7dd280399dc2fa1f565831d10c568d0401d7b12cede8c0180b72436050933d6", "31aa9de3d8b215b6d4d861db64121a4ed575fba1b8309dc5cdcbfddb02ec7f58", [{0x3, 0x18, "2f3057c7fad9ad107b420bfb91cc4a0f67a1d6a5a447752c"}, {0x4, 0x11, "f3aef1f128522e5787714e479f151c4c31"}, {0x1, 0x23, "2f49de5a6a32f2faf57c5e328122c6fcd4df506d4d16b6e7722a77ea1ae9496806d249"}, {0x2, 0xb, "5e6c5857a310eac06c50fa"}, {0x3, 0x25, "03d8d7ef7832c90737185b7840ac7636b9757fb017396a2cadf54df0f66e0e1191cfea4d56"}]}}, @measure_req={0x26, 0x5f, {0x6, 0x3, 0x8, "508217a95fc3b7606fd8edcf29e0b7b7ce384ff8dbe4f8b20b09accca9615e063fcf5ed47c04b7b8fbc4814d7eb6e12686bba751de4f405687d7e9623c8f93ae21528cf50bf06e88ea8e8edf55496d460182cca1afe04c3d86594885"}}]}, @NL80211_ATTR_BEACON_HEAD={0x5eb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7ff1}, @device_b, @device_a, @from_mac=@device_b, {0x2}, @value=@ver_80211n={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x7fffffffffffffff, @random=0x2, 0x5, @void, @void, @val={0x3, 0x1, 0xb0}, @void, @val={0x6, 0x2, 0x11}, @void, @val={0x25, 0x3, {0x0, 0x6c, 0x10}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0xe, 0x1, 0x0, 0x0, {0x6, 0x2, 0x0, 0x86, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0xb9, 0x10}}, @void, @void, @void, [{0xdd, 0x56, "2f1e2256254067a7d33e1940a87abf151955a46443685beb220d7e374f0e82316106d61d2795499a5efb42a445d05b971fb05510e2dae2c734659ac6d0c23a28a26205185be6eba03cb21573d7bcb9d59ebfae1e2cd5"}, {0xdd, 0x9f, "031573c17c9d370966534f1531d5cdf5be267ec01dcfe09ccb86faef924e4adbe5832962e8b25e7a13d44b31ab1f5ede4c4e96f3d391d532f03e2de4f8a5c3853df4e49ef2db6cbcc6086baaf6f3b85635758db067da3b0704bda830b59350af571c521063d1dffce96b1e00e3f6d286e62d7e56e22e9126d33d3bbe8e6d0fa8f5996d9817fd09d9fb6ddcc75f6ae8875860d56c9cec3bf8491bfa25b91183"}, {0xdd, 0xae, "772eee2d9c04427bd7609455aabd0a31f9791008d6c07c746d1f46971744ce9076716ebba2f7058b72c194eb729581d03597bfe76f018ae78dd4f5ce989339df3b5651d90764c911b41621aa409cb06a527ecb87bb752019e63ee2a293f21b0155ca5f94a238db4e42cc4d28ab899ff384fcab0a2b165fb0c19617b4a16ea49e72bb477717666c91e5c9e9e927e321fe202e8680e18ee72b5704274aee9b9f0f547bf110751f3e02c57603900721"}, {0xdd, 0x8f, "b40afe66bd1f5de25a4806265d151dd2d90cd4756a3afa76496a1436c8dd2938ba5f7644dda176cfc83256694c43f5f55637c82c2062c60d8e54bd23913f4dec34e888924c8aafe4960c2cd384e6bfe9553d72fffeabfd725bf446a3a3a3ae81dbc0d46020b018e7e41831f26f358eca75c1bf177d670f0386d082355a0e56bdb30ef7bde0f80288c6ba3e2cc04bbf"}, {0xdd, 0xa6, "e04212c9e6996740bfd2c75df197af7dd56a6b02bf795ccb91c37c271b69c885a1b6d998773e27a68975d10b5ca9d08974adf8dc4092aa27384ab807d643937fdd6c32ec7cd756dfb2129db149e44317df97c7bc7c73bfacb11d8d7ee7cee268ae23449300873ef0c887a0b012e71134c6af34cd5c2e9a9596230a373d2327524108cd116f73132f16fbe48493def0a9ec7041f134ea0998b4ef1c4b078c206dbef157b1eda8"}, {0xdd, 0xd9, "34b69adae9c8e70dfa1d5e90ab06341742618524ecdf1054455855f659da8ac48308f9746f512f787904bb542e27ef45f6fbc0f5bfe4ad9fd14a8cce19cbdbeab7d89cb4e5ada452e5eabaa2ce92f3df2b2af47ceed5b017d1b84dd4c9e830a3c68420202ca30b36d88c2dc40b5379c3e55036d52086dd19daace7da200eb1754fcdae21957ad15b61334e069685bebece446281ce178c2c6bb3834e0126959acdcb893d6e027beedff7197a51cc2478454c7deca0351c1e4360d97093956aec4ecef8d06699692324435e7a3f6ae183baa2a206dc46a6d7ff"}, {0xdd, 0xc1, "287bc24120c2febb3acf327d58687ed2058ac8d185a082f74f2667c053ddd2d7fed3f2c098101a6b3512a14f4cd98309f1d0c6d62dd3c5ef55dad95d2c381f2407ae963c380bc331d8f7dd771264b53750a2e0b0219926cc4d7c25a5e3b4fe319e983b250dd324f9b01f5bf17c73c15c964c214437facd910b1c75d17348b0c830224f17706b78e0b1d65d43645c67326bd5150428ac440a7569150a3484899f20009a1c6789feb8b0e05a3d3a8ac5cfbe383fa4e4855c78965639e8d9c943528d"}, {0xdd, 0x31, "18dd9a2035dc0f490c64b50c14bc65c25a198b905c69e3bd01a8ddb3e2918cf740a33e159c1d0b878a462053cc5e272d68"}, {0xdd, 0xdf, "99ec3a20fdbdba9ca1e6f35655c5fe4bd666bb54cfdccb15ba50b40cfa2798424fb9ac9fb045e45529e53cda6f36e9663a6606ff880f594696aa850f4d17f8e84d9dc1c494e0da0a47e2984d77dde6ac008aa18891fa954dbe9c45b9466f49e6592a39e54424d4284b80b8dc94a52d05bcf66896e6d5e9e83a364d2b4258dbb0191edd4d492e6069d87edd56fbd1d5b65af32970eed2d95cce643a9279f68f64c0c12ba29bba52c00cf59a990d2220b45ba5e28f0ff0d8b7c70f459018287fbe9d5e7f2b88c758de9a9923f77c813941253ba91fd2936b12e48045331e0c5a"}]}}, @NL80211_ATTR_BEACON_HEAD={0x4a4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_b, @random="40617ed376fb", {0xb, 0x39c}}, 0x0, @random=0x3, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x48, 0x1}]}, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x3ff}, @void, @val={0x25, 0x3, {0x0, 0xae, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x3, 0x0, {0x6, 0x7, 0x0, 0x25, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x9, 0x23}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}}, @void, [{0xdd, 0x83, "96ed0b605329593d698ca4550a4a88d78b86ae224972d340d3ce8deaa178bdfb462f293ef5b7726ff941df79a122b7fb588f2dd615532165979e50b82a54bc9f35d77da973ac9f8bbd5f3f88a112459b6313c16f2888a934747ca2c7ae459e256502c0a7a7de0f9080b64c4a032e0048c8a8824abcd7bfa2c38ffdff687fbb19ef65ba"}, {0xdd, 0x9d, "317cde29c40e7d8dd88d14877a3c622b58d8321820c0efeec274667dd7e3322340cbcc004393413c44fd334511ae847f020b01d77f34d2eccce8106dc1b531bce1513f5bb47d4f1ee7e2e723819395837d61dc7a3d241bca3a615f39ab659917319b2ef55cac9d2d77ab3fed3b4ebb46982bfeb2fb6d0813d92cc7006d37880cfbef41df2a016fc711ad2efbadcc8bf5c513902a9999efa357aaf840e1"}, {0xdd, 0x29, "81c4188b959c2f3190e67a04cc87be213f39c7d8dc799d989f39359ab568803426b4d1a983d1fe5e72"}, {0xdd, 0x36, "cd639e54aefac43c5485e8cc59c1d41c47290fe4d2d8a15e84fd1d208d169dc39d3adf8c1281b0c118cb1e7a2a17df4884ed92592b0b"}, {0xdd, 0x99, "5da42b1a7261bcc91dbcd50285a7ab6515f9ff665bf21bcd45e4eec12298693a6e1e7115af98f01a2e687d83a34bb9dc442b151a8ae692c8c9706a88f4661a4ca89a26dce6cdd3606917d2d0f55bfd24355bb49a2d0e6ad90e3b28d14058b72d5176584751fedc66cf1c558aeb4716b289a38369d46f50b1f6bce56d656250ec9ac1133d9aedf291a188dfb609e522e98fa1e2654fd696584b"}, {0xdd, 0xd3, "1704338d873fabd68b986670629eca1e8fe68fdc98d28296cd07aae1c5d6bbbf895cb6029957f88ae94c7af851759d9caa106ddeb76ab4fd09b7041e218cf792188769915ed070a4e547833e919ce324a6a72f482576da1cd345c70293f151fb0cc38f3bb9edd67682a70c1f9940b3bfc2aab7ccdcb160ca4f4ade663cca5b61bfe4e63306273f9ac96eb38bf5ce8e23369f3b31e9b4bd977ab25898c10c770d03599804e0732b5de23268dc85a1300d4b83631ab528553fcb4b88fc0e64484eae1e1f0ba1c33441afb589a63c399400045879"}, {0xdd, 0xe7, "39cdaeced6bf99f25d2157eb8aa9f3c6e7819d1a81ff3576bef16f3ce184bf868efc4e07afa7c35e6930f5649a9f39ae89c54d73582aeece822ad9914257a851790d35c543cc0979d0664c85433c79c64a2ed5bb43f89c0c6fe6be3c58230bac312451e9bab2815d718cde893b6e4e7f7c622c0564d1aa17520a224220038101271a9d2529d7426a1ea73d323ccc785706c196d8124ec0b4318bc3e49f09d8518c0fab1d5c759fce6768906c2d89ca3a242ac40e18410491785526fc396c1cd381006ee6b6dd9adaa166c59423384e0a42d3353d4f92784d1ef9bec57163225a9d433d2bb6566f"}, {0xdd, 0x5b, "746035c1bee042c8a08815a5b8e467cdf559833505a0298f33ca82ce8b2bfbb6996d93e7968f54e9659fe804271676006c10c7ced508e071682fe34a6fa0ffb35789888a1fe66374c9216818be952e5e8bf288d0fbed48b7d3b84c"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x40, 0x7f, [@mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x401, 0xa7}}, @supported_rates={0x1, 0x4, [{0x6c}, {0x30, 0x1}, {0x0, 0x1}, {0xb, 0x1}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ibss={0x6, 0x2, 0x7b}, @prep={0x83, 0x1f, {{}, 0x1, 0x3, @device_b, 0x6, @void, 0x8, 0x3, @broadcast, 0x3}}]}, @NL80211_ATTR_IE={0x1ea, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x5, @device_a, 0xdf22, @value, 0x9, 0x4}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xed, {0x2, 0xd0, 0xd8, "137eee5270144627b2dc8d895c443af3fee756779d194e3156d49e7c9c5426cf9bbd38aa109f237a5a0415a8410066c3a4d10c68ec9fad4a37bba43eb274252fbf511e777c07e4dd7cabfe29942f2ff86c5c5f89a0fa17a41bfb08ddd308ce4799e2d1c50546805ba6370c2b93c67fcd3a1e25a2b07373e8102b93e879731b38d4c0eb3ebaa39009de0da0ac799af6323e91ed4c7f589deefb52ad79f9bc390d79f6d09f064673d432d008889be829c2900b3956e4956233f7409ef2e592f42e5f15d8960b5cc9499ab46c99646fe26433469ad750210645d3fd920f9964a7148c72c967b197253c7b4a"}}, @tim={0x5, 0x24, {0xff, 0x29, 0x5, "077c3d47bfea1efe8b2efb13b4f84c97496fa12cc0f2e3e96a6c23eb49aa5dde45"}}, @sec_chan_ofs={0x3e, 0x1}, @fast_bss_trans={0x37, 0x86, {0x0, 0x5, "285c0deb50b0f82f99e13fcc673702df", "5a277b47b9db21ab6c7d621ef53dc6b7d5f7d75be3d4d93700e004cabdbf62c2", "b49bb0b011aee39f6d28f134e782e6f9db7c47ed6c6e06e1347438e7fc1d6994", [{0x4, 0xf, "e8e45a3cd8aad4e9021cfb66dd9b9a"}, {0x3}, {0x2, 0x2, "09b9"}, {0x4, 0x15, "c6e8fd45eed85e69ab4220338310cf5f0672db7113"}, {0x2, 0x4, "1b2891f6"}]}}, @rann={0x7e, 0x15, {{0x0, 0x77}, 0x4, 0x4, @device_b, 0x5, 0x2, 0x3}}]}, @NL80211_ATTR_BEACON_HEAD={0xf7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_b, @initial, {0x3, 0x7}}, 0x4, @random=0x3, 0x8001, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x7, [{0x6c}, {0x60}, {0x30}, {0x18, 0x1}, {0x48}, {0x5, 0x1}, {0x18, 0x1}]}, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0x9}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x61}}, @val={0x76, 0x6, {0x9, 0x0, 0x34, 0xff}}, [{0xdd, 0xa4, "ba4778501abf37fee906df40687d25e8794b9e87b2787bea0007f1d3aab999df5d165ae9f971d3a5b6b0f54d4d448dc11deadfe9d1006664add5948d02d7c9f76272016ae36ea44d678acf4f69b18618759537503e75ad24c8bc2a1444d501d1ca88cb39287d06980b51560e2f73ff6fe71b8faf8a730d09b90783179380929db15f1bf0047742d0252532e0356e5ab91927263e2736e084cd0f1012a5ca0379f65d65bb"}]}}, @NL80211_ATTR_IE={0x53, 0x2a, [@gcr_ga={0xbd, 0x6}, @preq={0x82, 0x2b, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x52, 0x81, @broadcast, 0x1, @value=@device_b, 0x81c2, 0x0, 0x1, [{{0x0, 0x0, 0x1}, @device_a, 0xf5}]}}, @tim={0x5, 0x18, {0x8, 0xe2, 0x8, "0f880a47e221fa98854f3f39170526d748708b8288"}}]}]}, 0x104c}, 0x1, 0x0, 0x0, 0xe57aedaaae47fead}, 0x4040854)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000002e40)={0x3b, @multicast2, 0x4e20, 0x0, 'none\x00', 0x2e, 0x34bf3f1f, 0x3f}, 0x2c)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000002e80)={0x1, @bcast, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @default, 0x5, 0x0, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002f40), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000003080)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x90, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5bc5}, {0xc, 0x90, 0xfffffffffffeffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xffffffff00000000}, {0xc, 0x90, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1e8719567c79d431}, 0x400c015)
bpf$TOKEN_CREATE(0x24, &(0x7f00000030c0)={0x0, r0}, 0x8)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003140), r0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000003280)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003240)={&(0x7f0000003180)={0xb0, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd06}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd159}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8851)
unshare(0x10000000)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000032c0)={<r10=>0x0, 0xfffffda7}, &(0x7f0000003300)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000003340)={r10, @in={{0x2, 0x4e22, @local}}, 0xff, 0x7, 0x5, 0x9, 0xa0, 0x4, 0x5}, 0x9c)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000003400)=0x6, 0x4)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008044}, 0x4004010)

409.68463ms ago: executing program 1 (id=1805):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0)
close(r1)
readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x2000080)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
tee(r3, r7, 0x100000af5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)
close(r6)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r9, 0x80108906, 0x0)
close(r4)
r10 = socket$kcm(0x10, 0x2, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}}, 0x8004)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e1406f1ffffff000e000a000f00000002800000121fef9f3d", 0x31}, {&(0x7f00000000c0)="96f2823d7a702a998d73a3d3e5f1eac03a0ed2181372099f282fcf1ceeff64b2d4509f137e24a6bcf808fe4697d022b4a97674ea756d3725", 0x38}], 0x2}, 0x20000011)

119.617484ms ago: executing program 1 (id=1806):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000000)={'some', 0x20, 0x200, 0x20, 0x3}, 0x2f)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c40)={'wpan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf252500000008002c00ce885f69529db2470e00000000000000", @ANYRES32=r2, @ANYBLOB="05002b0002000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000044)

1.408345ms ago: executing program 1 (id=1807):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffffffffffffffef, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 2 (id=1808):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_msfilter(r7, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r10, 0x1}, &(0x7f0000000100)=0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r11=>r1, 0x8, 0x9, 0x3ff})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x104, r13, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2fb}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaae}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4805}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x405c2226}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x21}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x60004040)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r15=>0x0})
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x80000010}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(r16, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000040000020f00000005002e000100000008000300", @ANYRES32=r15, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

kernel console output (not intermixed with test programs):

of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.676747][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.681588][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.683896][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.692551][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.768497][ T5851] hsr_slave_0: entered promiscuous mode
[   54.771235][ T5851] hsr_slave_1: entered promiscuous mode
[   54.773292][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   54.775182][ T5851] Cannot create hsr debugfs directory
[   54.836578][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.843453][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.851329][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.866476][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.914292][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.926013][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.946963][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.956577][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.012227][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.021228][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.026291][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.034720][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.083704][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.113190][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   55.124089][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.126524][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.138481][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.141710][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.157904][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.202413][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.214962][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.217927][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.245631][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.248574][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.281915][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.313441][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   55.325467][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.327738][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.369741][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.372228][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.424540][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.433677][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.475893][ T5844] veth0_vlan: entered promiscuous mode
[   55.485319][ T5844] veth1_vlan: entered promiscuous mode
[   55.496421][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.537544][ T5844] veth0_macvtap: entered promiscuous mode
[   55.552938][ T5844] veth1_macvtap: entered promiscuous mode
[   55.572905][ T5849] veth0_vlan: entered promiscuous mode
[   55.588324][ T5849] veth1_vlan: entered promiscuous mode
[   55.592488][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.598103][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.607363][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.630699][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.646734][ T5849] veth0_macvtap: entered promiscuous mode
[   55.650748][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.653688][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.656825][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.676112][ T5849] veth1_macvtap: entered promiscuous mode
[   55.679256][ T5851] veth0_vlan: entered promiscuous mode
[   55.701376][ T5851] veth1_vlan: entered promiscuous mode
[   55.710634][ T5235] Bluetooth: hci0: command tx timeout
[   55.712745][   T54] Bluetooth: hci1: command tx timeout
[   55.725781][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.740766][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.742137][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.746328][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.766993][ T5886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.771529][ T5886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.783478][ T5886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.786844][ T5886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.792083][   T54] Bluetooth: hci2: command tx timeout
[   55.802672][ T5851] veth0_macvtap: entered promiscuous mode
[   55.808080][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.817390][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.820037][ T5851] veth1_macvtap: entered promiscuous mode
[   55.852786][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.855583][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.863585][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.885568][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.900611][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.911050][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.916093][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.921013][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.932651][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.935552][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.943496][ T5908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.946319][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.013200][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.016035][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.031557][ T5911] netlink: 'syz.1.2': attribute type 4 has an invalid length.
[   56.040665][ T5911] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.053670][ T5911] : renamed from bond0 (while UP)
[   56.061107][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.068096][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.157948][ T5920] bridge_slave_0: left allmulticast mode
[   56.161074][ T5920] bridge_slave_0: left promiscuous mode
[   56.163519][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.172954][ T5920] bridge_slave_1: left allmulticast mode
[   56.187336][ T5920] bridge_slave_1: left promiscuous mode
[   56.189542][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.215309][ T5920] bond0: (slave bond_slave_0): Releasing backup interface
[   56.225974][ T5920] bond0: (slave bond_slave_1): Releasing backup interface
[   56.234315][ T5920] team0: Port device team_slave_0 removed
[   56.238450][ T5920] team0: Port device team_slave_1 removed
[   56.242459][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.245310][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.248670][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.251531][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.275989][ T5928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.283204][    C1] Illegal XDP return value 16128 on prog  (id 3) dev lo, expect packet loss!
[   56.292256][ T5920] syz.0.5 (5920) used greatest stack depth: 19896 bytes left
[   56.303248][ T5933] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   56.305910][ T5933] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.342932][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.348678][ T5933] openvswitch: netlink: Flow actions attr not present in new flow.
[   56.483538][ T5931] Zero length message leads to an empty skb
[   56.515270][ T5944] netlink: 'syz.1.9': attribute type 4 has an invalid length.
[   56.518243][ T5944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9'.
[   56.822008][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.855839][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.866604][ T5980] IPVS: set_ctl: invalid protocol: 212 224.0.0.1:20003
[   57.005631][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.014621][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.020860][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.366129][ T6007] netlink: 'syz.0.21': attribute type 23 has an invalid length.
[   57.402262][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'.
[   57.413343][ T6009] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   57.496730][ T6019] netlink: 'syz.2.24': attribute type 7 has an invalid length.
[   57.505819][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.614140][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'.
[   57.687704][ T6040] netlink: 'syz.2.27': attribute type 12 has an invalid length.
[   57.747484][ T6038] batman_adv: batadv0: Adding interface: dummy0
[   57.755743][ T6038] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.768344][ T6038] batman_adv: batadv0: Interface activated: dummy0
[   57.790287][   T54] Bluetooth: hci1: command tx timeout
[   57.791523][ T5235] Bluetooth: hci0: command tx timeout
[   57.870307][ T5235] Bluetooth: hci2: command tx timeout
[   57.874409][ T6053] netlink: 'syz.0.30': attribute type 3 has an invalid length.
[   57.918176][ T6053] syz_tun: entered allmulticast mode
[   57.945401][ T6053] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET)
[   57.965715][ T6053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.002647][ T6052] syz_tun: left allmulticast mode
[   58.075099][ T5741] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[   58.332167][ T6077] netlink: 'syz.1.29': attribute type 16 has an invalid length.
[   58.335330][ T6077] netlink: 'syz.1.29': attribute type 5 has an invalid length.
[   58.337452][ T6078] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   58.958748][ T6086] lo speed is unknown, defaulting to 1000
[   58.961000][ T6086] lo speed is unknown, defaulting to 1000
[   58.964000][ T6086] lo speed is unknown, defaulting to 1000
[   58.975587][ T6081] lo speed is unknown, defaulting to 1000
[   58.982633][ T6086] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.994313][ T6086] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   59.044247][ T6086] lo speed is unknown, defaulting to 1000
[   59.054340][ T6086] lo speed is unknown, defaulting to 1000
[   59.063544][ T6086] lo speed is unknown, defaulting to 1000
[   59.110134][ T6086] lo speed is unknown, defaulting to 1000
[   59.539518][ T6119] vlan2: entered promiscuous mode
[   59.542606][ T6119] team0: entered promiscuous mode
[   59.552925][ T6119] team_slave_0: entered promiscuous mode
[   59.554990][ T6119] team_slave_1: entered promiscuous mode
[   59.577096][ T6121] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   59.595377][ T6121] bond1: entered promiscuous mode
[   59.597528][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.713919][ T6132] bridge0: port 1(ipvlan2) entered blocking state
[   59.716202][ T6132] bridge0: port 1(ipvlan2) entered disabled state
[   59.718464][ T6132] ipvlan2: entered allmulticast mode
[   59.720429][ T6132] bridge0: entered allmulticast mode
[   59.723245][ T6132] ipvlan2: left allmulticast mode
[   59.724876][ T6132] bridge0: left allmulticast mode
[   59.733188][ T6134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.870551][ T5235] Bluetooth: hci1: command tx timeout
[   59.870602][   T54] Bluetooth: hci0: command tx timeout
[   59.950117][   T54] Bluetooth: hci2: command tx timeout
[   59.994373][ T6149] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.051631][ T6153] tipc: Started in network mode
[   60.053851][ T6153] tipc: Node identity 02a606663ae6, cluster identity 4711
[   60.058592][ T6153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.077325][ T6153] syzkaller0: entered promiscuous mode
[   60.080632][ T6153] syzkaller0: entered allmulticast mode
[   60.115260][ T6153] tipc: Resetting bearer <eth:syzkaller0>
[   60.124566][ T6152] tipc: Resetting bearer <eth:syzkaller0>
[   60.134404][ T6152] tipc: Disabling bearer <eth:syzkaller0>
[   61.053440][ T6200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.081536][ T6199] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.297698][ T6224] __nla_validate_parse: 10 callbacks suppressed
[   61.297708][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.304173][ T6224] netlink: 9 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.308116][ T6224] 0: renamed from hsr0 (while UP)
[   61.313144][ T6224] 0: entered allmulticast mode
[   61.314816][ T6224] hsr_slave_0: entered allmulticast mode
[   61.316637][ T6224] hsr_slave_1: entered allmulticast mode
[   61.318961][ T6224] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   61.326020][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.950283][   T54] Bluetooth: hci0: command tx timeout
[   61.952079][   T54] Bluetooth: hci1: command tx timeout
[   62.006437][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.031253][ T5235] Bluetooth: hci2: command tx timeout
[   62.037876][ T6247] netlink: 'syz.1.77': attribute type 12 has an invalid length.
[   62.040538][ T6247] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.77'.
[   62.127589][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.166416][ T6256] netlink: 76 bytes leftover after parsing attributes in process `syz.2.80'.
[   62.194260][ T6256] netlink: 208 bytes leftover after parsing attributes in process `syz.2.80'.
[   62.198038][ T6256] netlink: 208 bytes leftover after parsing attributes in process `syz.2.80'.
[   62.241764][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'.
[   62.328445][ T6271] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   62.338140][ T6271] netlink: 148 bytes leftover after parsing attributes in process `syz.1.86'.
[   62.382130][ T6271] bridge_slave_1: left allmulticast mode
[   62.384086][ T6271] bridge_slave_1: left promiscuous mode
[   62.386032][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.393088][ T6271] bridge_slave_0: left allmulticast mode
[   62.395388][ T6271] bridge_slave_0: left promiscuous mode
[   62.397733][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.636780][ T6289] netlink: 'syz.2.92': attribute type 9 has an invalid length.
[   62.923621][ T6317] syzkaller0: entered promiscuous mode
[   62.926681][ T6317] syzkaller0: entered allmulticast mode
[   63.340822][ T6351] tipc: Started in network mode
[   63.342458][ T6351] tipc: Node identity 1ae64a7112e1, cluster identity 4711
[   63.346115][ T6351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.452418][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.455436][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.564578][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.579176][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.765397][ T6348] tipc: Disabling bearer <eth:syzkaller0>
[   63.794739][ T5741] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.798429][ T5741] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.809262][ T5741] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.813573][ T5741] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.847411][ T6373] syzkaller1: entered promiscuous mode
[   63.849263][ T6373] syzkaller1: entered allmulticast mode
[   63.936601][ T6378] batman_adv: batadv0: Interface deactivated: dummy0
[   63.939376][ T6378] batman_adv: batadv0: Removing interface: dummy0
[   64.243922][ T6387] Bluetooth: MGMT ver 1.23
[   64.767490][ T6401] netlink: 'syz.1.117': attribute type 16 has an invalid length.
[   64.770237][ T6401] netlink: 'syz.1.117': attribute type 17 has an invalid length.
[   64.779997][ T6401] 8021q: adding VLAN 0 to HW filter on device 
[   64.783836][ T6401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.789017][   T10] lo speed is unknown, defaulting to 1000
[   65.297915][ T6413] ip6gre1: entered allmulticast mode
[   65.584460][ T6434] lo speed is unknown, defaulting to 1000
[   65.626414][ T6434] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[   65.654120][ T6434] netlink: 'syz.1.128': attribute type 6 has an invalid length.
[   65.792022][ T6440] lo speed is unknown, defaulting to 1000
[   65.881501][ T6444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.927820][ T6444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.014127][ T6444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.084573][ T6444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.160525][ T5886] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.174111][ T5886] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.186607][ T5886] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.196715][ T5886] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.335031][ T6463] __nla_validate_parse: 15 callbacks suppressed
[   66.335045][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.2.136'.
[   66.400484][ T6468] netlink: 'syz.1.139': attribute type 13 has an invalid length.
[   66.403840][ T6468] netlink: 'syz.1.139': attribute type 17 has an invalid length.
[   66.512816][ T6468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.558653][ T6473] lo speed is unknown, defaulting to 1000
[   66.686342][ T6483] tipc: Started in network mode
[   66.688414][ T6483] tipc: Node identity e0000001, cluster identity 4711
[   66.692495][ T6483] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   66.695998][ T6487] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   66.699033][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'.
[   66.710941][ T6483] nbd: couldn't find device at index 536870912
[   66.713794][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.787024][ T6492] trusted_key: syz.0.146 sent an empty control message without MSG_MORE.
[   66.856389][ T6499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.859119][ T6499] IPv6: NLM_F_CREATE should be set when creating new route
[   66.866291][ T6499] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.895692][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[   66.922920][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'.
[   67.003298][ T6508] bond0: option mode: unable to set because the bond device has slaves
[   67.102699][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'.
[   67.262977][ T6521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.156'.
[   67.285812][ T6521] lo speed is unknown, defaulting to 1000
[   67.741794][ T6525] syzkaller1: entered promiscuous mode
[   67.744304][ T6525] syzkaller1: entered allmulticast mode
[   67.875290][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.159'.
[   67.879203][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.159'.
[   67.958036][ T6538] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   67.962872][ T6538] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   68.107162][ T6550] vlan2: entered promiscuous mode
[   68.109792][ T6550] bond0: entered promiscuous mode
[   68.114034][ T6550] vlan2: entered allmulticast mode
[   68.115829][ T6550] bond0: entered allmulticast mode
[   68.147293][ T6555] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   68.153986][ T6555] warning: `syz.0.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.163890][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'.
[   68.216331][ T6556] netlink: 'syz.0.164': attribute type 10 has an invalid length.
[   68.219595][ T6556] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   68.222976][ T6556] bond0: (slave wlan1): refused to change device type
[   68.982535][   T24] cfg80211: failed to load regulatory.db
[   69.109498][ T6570] macvlan2: entered promiscuous mode
[   69.111662][ T6570] macvlan2: entered allmulticast mode
[   69.114569][ T6570] bond1: (slave macvlan2): Opening slave failed
[   69.330617][ T6576] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   69.789243][ T6595] netlink: 'syz.0.177': attribute type 10 has an invalid length.
[   70.247137][ T6616] netlink: 'syz.2.184': attribute type 13 has an invalid length.
[   70.333091][ T6625] netlink: 'syz.1.186': attribute type 4 has an invalid length.
[   70.605582][ T6641] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   70.605606][ T6113] IPVS: starting estimator thread 0...
[   70.710107][ T6643] IPVS: using max 44 ests per chain, 105600 per kthread
[   70.760021][ T6646] ieee802154 phy0 wpan0: encryption failed: -22
[   71.003343][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.007120][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.154257][ T6662] netlink: 'syz.0.196': attribute type 4 has an invalid length.
[   71.165273][ T6662] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   71.236259][ T6669] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   71.248474][ T6669] bond2: entered promiscuous mode
[   71.250740][ T6669] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.258163][ T6669] batadv0: entered promiscuous mode
[   71.260042][ T6669] batadv0: entered allmulticast mode
[   71.262858][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.266263][ T6669] bond2: (slave batadv0): making interface the new active one
[   71.269322][ T6669] bond2: (slave batadv0): Enslaving as an active interface with an up link
[   71.372270][ T6669] __nla_validate_parse: 61 callbacks suppressed
[   71.372280][ T6669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.198'.
[   71.455779][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'.
[   71.601384][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'.
[   71.676625][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   71.699679][ T6715] netlink: 76 bytes leftover after parsing attributes in process `syz.1.212'.
[   71.895939][ T6735] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   71.907076][ T6735] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   72.101329][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   72.153262][ T6758] netlink: 'syz.1.219': attribute type 4 has an invalid length.
[   72.156394][ T6758] netlink: 152 bytes leftover after parsing attributes in process `syz.1.219'.
[   72.219244][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'.
[   72.236972][ T6767] batadv1: entered promiscuous mode
[   72.410717][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[   72.415497][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   72.419257][ T6782] netlink: 'syz.1.223': attribute type 12 has an invalid length.
[   72.444274][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   72.453961][  T792] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   72.466789][ T6764] udevd[6764]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory
[   72.472968][ T6782] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   72.476104][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.490067][ T6764] udevd[6764]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory
[   72.510148][ T5235] Bluetooth: hci2: command tx timeout
[   72.912264][ T6837] lo speed is unknown, defaulting to 1000
[   73.023911][ T6847] bond2: (slave batadv0): Releasing active interface
[   73.067003][ T6849] validate_nla: 1 callbacks suppressed
[   73.067012][ T6849] netlink: 'syz.2.234': attribute type 2 has an invalid length.
[   73.075010][ T6849] netlink: 'syz.2.234': attribute type 2 has an invalid length.
[   73.390952][ T6878] netlink: 'syz.1.246': attribute type 13 has an invalid length.
[   73.394870][ T6878] netlink: 'syz.1.246': attribute type 17 has an invalid length.
[   73.404632][ T6878] 8021q: adding VLAN 0 to HW filter on device 
[   73.414694][ T6878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.488112][ T6878] lo speed is unknown, defaulting to 1000
[   73.498909][ T6889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.504456][ T6889] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   73.543112][ T6889] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.911364][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.923376][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.948157][ T6902] 0: left allmulticast mode
[   73.949761][ T6902] hsr_slave_0: left allmulticast mode
[   73.960283][ T6902] hsr_slave_1: left allmulticast mode
[   74.054084][   T51] lo speed is unknown, defaulting to 1000
[   74.056757][   T51] syz1: Port: 1 Link DOWN
[   74.067893][ T5860] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.073036][ T5860] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.077020][ T5860] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.104087][ T5860] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.107828][ T6925] netlink: 'syz.0.255': attribute type 1 has an invalid length.
[   74.218648][ T6938] syzkaller0: entered promiscuous mode
[   74.222911][ T6938] syzkaller0: entered allmulticast mode
[   74.318388][ T6949] netlink: 'syz.2.260': attribute type 3 has an invalid length.
[   74.340592][ T6949] netlink: 'syz.2.260': attribute type 13 has an invalid length.
[   74.482834][ T6966] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   74.546896][ T6974] pim6reg1: entered promiscuous mode
[   74.548825][ T6974] pim6reg1: entered allmulticast mode
[   74.719488][ T6974] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.723590][ T6974] team0: Port device bond2 added
[   74.849476][ T6996] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   74.879231][ T6996] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.144773][ T7022] netlink: 'syz.2.271': attribute type 16 has an invalid length.
[   75.158647][ T7022] IPv6: NLM_F_REPLACE set, but no existing node found!
[   76.182995][ T7064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.186441][ T7064] syzkaller0: entered promiscuous mode
[   76.188721][ T7064] syzkaller0: entered allmulticast mode
[   76.208043][ T7064] tipc: Resetting bearer <eth:syzkaller0>
[   76.486944][ T7076] __nla_validate_parse: 24 callbacks suppressed
[   76.486958][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   76.494158][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'.
[   76.613874][ T7078] net veth1_virt_wifi : renamed from virt_wifi0
[   76.794150][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'.
[   76.875591][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.291'.
[   76.950713][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   77.013263][ T7063] tipc: Resetting bearer <eth:syzkaller0>
[   77.026685][ T7063] tipc: Disabling bearer <eth:syzkaller0>
[   77.050818][ T7107] ieee802154 phy0 wpan0: encryption failed: -22
[   77.141919][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.145322][ T7114] ieee802154 phy0 wpan0: encryption failed: -22
[   77.150784][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'.
[   77.218318][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[   77.425216][ T7138] openvswitch: netlink: IP tunnel dst address not specified
[   77.539587][ T7147] syzkaller1: entered promiscuous mode
[   77.545057][ T7147] syzkaller1: entered allmulticast mode
[   77.558814][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'.
[   77.574178][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[   77.582859][ T7147] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   77.586218][ T7147] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   77.591617][ T7147] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.605052][ T7149] bridge2: the hash_elasticity option has been deprecated and is always 16
[   77.712632][ T7152] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[   77.868373][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.317'.
[   77.884691][ T7167] veth0: entered promiscuous mode
[   77.898905][ T7167] veth0 (unregistering): left promiscuous mode
[   77.906125][ T7169] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   77.931686][ T7170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.934430][ T7170] syzkaller0: entered promiscuous mode
[   77.936305][ T7170] syzkaller0: entered allmulticast mode
[   77.948177][ T7170] tipc: Resetting bearer <eth:syzkaller0>
[   78.194999][ T7201] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   78.245051][ T7206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.276283][ T7203] lo speed is unknown, defaulting to 1000
[   78.692935][ T7164] tipc: Resetting bearer <eth:syzkaller0>
[   78.701816][ T7164] tipc: Disabling bearer <eth:syzkaller0>
[   79.177305][ T7224] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   79.206878][ T7226] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   79.248591][ T7228] validate_nla: 4 callbacks suppressed
[   79.248603][ T7228] netlink: 'syz.2.333': attribute type 2 has an invalid length.
[   80.381197][ T7258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.384291][ T7258] syzkaller0: entered promiscuous mode
[   80.386334][ T7258] syzkaller0: entered allmulticast mode
[   80.433064][ T7258] tipc: Resetting bearer <eth:syzkaller0>
[   80.452057][ T7264] tipc: Resetting bearer <eth:syzkaller0>
[   80.463978][ T7264] tipc: Disabling bearer <eth:syzkaller0>
[   80.598042][ T7269] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   80.603709][ T7269] netlink: 'syz.0.345': attribute type 3 has an invalid length.
[   80.606669][ T7269] NCSI netlink: No device for ifindex 246
[   80.610139][ T7269] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   80.722887][ T7276] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   80.726635][ T7279] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   80.979335][ T7306] netlink: 'syz.2.355': attribute type 7 has an invalid length.
[   81.798378][ T7369] pimreg3: entered allmulticast mode
[   81.836024][ T7373] netlink: 'syz.1.360': attribute type 10 has an invalid length.
[   81.838941][ T7373] veth0_vlan: left promiscuous mode
[   81.842678][ T7373] veth0_vlan: entered promiscuous mode
[   81.846127][ T7373] team0: Device veth0_vlan failed to register rx_handler
[   82.049429][ T7386] __nla_validate_parse: 12 callbacks suppressed
[   82.049440][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   82.058842][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.364'.
[   82.247964][ T7399] netlink: 'syz.2.368': attribute type 13 has an invalid length.
[   82.251910][ T7399] netlink: 'syz.2.368': attribute type 17 has an invalid length.
[   82.296057][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.302417][ T7399] 8021q: adding VLAN 0 to HW filter on device team0
[   82.309675][ T7399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.329352][ T7400] lo speed is unknown, defaulting to 1000
[   82.503360][ T7405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.370'.
[   82.507424][ T7405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.370'.
[   82.517157][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   82.694651][ T7411] ipvlan2: entered promiscuous mode
[   82.697855][ T7411] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   82.712189][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   82.866965][ T7424] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   82.870700][ T7424] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   82.947241][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'.
[   83.086984][ T7438] netlink: 'syz.1.382': attribute type 4 has an invalid length.
[   83.098578][ T7438] netlink: 'syz.1.382': attribute type 4 has an invalid length.
[   83.115004][ T6912] lo speed is unknown, defaulting to 1000
[   83.118487][ T6912] syz1: Port: 1 Link ACTIVE
[   83.200085][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'.
[   83.207874][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'.
[   83.215104][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.385'.
[   84.146710][ T7475] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   84.155350][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.174870][ T7475] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.261582][ T7479] validate_nla: 1 callbacks suppressed
[   84.261597][ T7479] netlink: 'syz.2.390': attribute type 4 has an invalid length.
[   84.283811][ T7479] : renamed from bond0 (while UP)
[   84.290485][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.325849][ T7489] lo speed is unknown, defaulting to 1000
[   84.844048][ T7525] netlink: 'syz.0.401': attribute type 4 has an invalid length.
[   84.846792][ T7525] wlan1: mtu less than device minimum
[   84.898688][ T7528] lo speed is unknown, defaulting to 1000
[   85.021466][ T7541] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   85.188074][ T7553] netlink: 'syz.0.409': attribute type 1 has an invalid length.
[   85.194541][ T7554] batadv2: entered promiscuous mode
[   85.196518][ T7554] batadv2: entered allmulticast mode
[   85.205858][ T7555] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   85.233986][ T7557] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   85.582197][ T7579] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   85.595960][ T7579] bond5: entered promiscuous mode
[   85.597850][ T7579] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.629300][ T7579] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.632549][ T7579] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[   85.636511][ T7579] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   85.645046][ T7579] bond5: (slave wireguard0): making interface the new active one
[   85.648273][ T7579] wireguard0: entered promiscuous mode
[   85.658834][ T7579] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[   85.766313][ T7579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.768764][ T7579] IPv6: NLM_F_CREATE should be set when creating new route
[   85.771597][ T7579] IPv6: NLM_F_CREATE should be set when creating new route
[   85.775037][ T7579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.810753][ T7592] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073491447809)
[   85.922159][ T7603] chnl_net:caif_netlink_parms(): no params data found
[   85.990300][ T7603] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   86.020003][ T7614] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   86.972651][ T7643] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   87.019209][ T7645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.072236][ T7653] __nla_validate_parse: 10 callbacks suppressed
[   87.072246][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'.
[   87.103857][ T7645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.113577][ T7648] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003
[   87.153752][ T7645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.230773][ T7645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.243205][ T7660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.245923][ T7660] syzkaller0: entered promiscuous mode
[   87.247844][ T7660] syzkaller0: entered allmulticast mode
[   87.258916][ T7660] tipc: Resetting bearer <eth:syzkaller0>
[   87.261779][ T7659] tipc: Resetting bearer <eth:syzkaller0>
[   87.269007][ T7659] tipc: Disabling bearer <eth:syzkaller0>
[   87.296843][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.311684][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.314473][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.329993][ T5886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.362033][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'.
[   87.427979][ T7671] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96
[   87.636103][ T7689] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   87.731661][ T7695] netlink: 'syz.0.444': attribute type 4 has an invalid length.
[   87.734996][ T7695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.444'.
[   87.738796][ T7695] wlan1: mtu less than device minimum
[   87.777540][ T7697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.785888][ T7697] syzkaller0: entered promiscuous mode
[   87.788052][ T7697] syzkaller0: entered allmulticast mode
[   87.798789][ T7697] sch_fq: defrate 257 ignored.
[   87.803511][ T7697] tipc: Resetting bearer <eth:syzkaller0>
[   87.809030][ T7696] tipc: Resetting bearer <eth:syzkaller0>
[   87.820916][ T7696] tipc: Disabling bearer <eth:syzkaller0>
[   88.111469][ T7699] lo speed is unknown, defaulting to 1000
[   88.164162][ T7699] netlink: 'syz.2.446': attribute type 10 has an invalid length.
[   88.197912][ T7703] netlink: 80 bytes leftover after parsing attributes in process `syz.2.447'.
[   88.202185][ T7703] netlink: 80 bytes leftover after parsing attributes in process `syz.2.447'.
[   88.341824][ T7703] lo: entered promiscuous mode
[   88.343490][ T7703] lo: entered allmulticast mode
[   88.393822][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   88.545482][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[   88.548827][ T7730] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   88.552425][ T7730] netlink: 'syz.2.451': attribute type 2 has an invalid length.
[   88.556797][ T7732] netlink: 'syz.1.452': attribute type 13 has an invalid length.
[   88.724844][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'.
[   88.841477][ T7768] syzkaller1: entered promiscuous mode
[   88.843327][ T7768] syzkaller1: entered allmulticast mode
[   88.977452][ T7777] bond1: entered promiscuous mode
[   88.981022][ T7777] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.986653][ T7777] netlink: 3 bytes leftover after parsing attributes in process `syz.1.467'.
[   88.997028][ T7777] batadv1: entered promiscuous mode
[   88.999306][ T7777] batadv1: entered allmulticast mode
[   89.002939][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv1
[   89.009424][ T7777] bond1: (slave batadv1): making interface the new active one
[   89.013981][ T7777] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   89.021762][ T7781] tap0: tun_chr_ioctl cmd 1074025677
[   89.024070][ T7781] tap0: linktype set to 776
[   89.026447][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[   89.084290][ T7777] team_slave_0: left promiscuous mode
[   89.087827][ T7777] team0 (unregistering): Port device team_slave_0 removed
[   89.091493][ T7777] team_slave_1: left promiscuous mode
[   89.095002][ T7777] team0 (unregistering): Port device team_slave_1 removed
[   89.168525][ T7786] xfrm1: entered promiscuous mode
[   89.171635][ T7786] xfrm1: entered allmulticast mode
[   89.176316][ T7786] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   89.252278][   T33] audit: type=1800 audit(1754979150.739:2): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.472" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=764 res=0 errno=0
[   89.295454][ T7799] validate_nla: 5 callbacks suppressed
[   89.295466][ T7799] netlink: 'syz.1.474': attribute type 5 has an invalid length.
[   89.494451][ T7819] bond0: entered promiscuous mode
[   89.496132][ T7819] bond0: entered allmulticast mode
[   89.498049][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.765916][ T7837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   89.854970][ T7841] lo speed is unknown, defaulting to 1000
[   90.659339][ T7851] netlink: 'syz.0.486': attribute type 2 has an invalid length.
[   90.766888][ T7854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.774914][ T7863] syzkaller0: entered promiscuous mode
[   90.777334][ T7863] syzkaller0: entered allmulticast mode
[   90.805535][ T7863] tipc: Resetting bearer <eth:syzkaller0>
[   90.825895][ T7863] tipc: Disabling bearer <eth:syzkaller0>
[   91.269332][ T7894] netlink: 'syz.2.502': attribute type 10 has an invalid length.
[   91.291333][ T7894] 8021q: adding VLAN 0 to HW filter on device team0
[   91.306746][ T7894] : (slave team0): Enslaving as an active interface with an up link
[   91.331965][ T7894] syz.2.502 (7894) used greatest stack depth: 19224 bytes left
[   91.347112][ T7907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.349777][ T7907] syzkaller0: entered promiscuous mode
[   91.355610][ T7907] syzkaller0: entered allmulticast mode
[   91.360240][ T7907] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   91.378487][ T7907] tipc: Resetting bearer <eth:syzkaller0>
[   91.381397][ T7906] tipc: Resetting bearer <eth:syzkaller0>
[   91.393543][ T7906] tipc: Disabling bearer <eth:syzkaller0>
[   91.576696][ T7936] netlink: 'syz.1.512': attribute type 13 has an invalid length.
[   91.579352][ T7936] netlink: 'syz.1.512': attribute type 17 has an invalid length.
[   91.595895][ T7936] 8021q: adding VLAN 0 to HW filter on device 
[   91.602940][ T7936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.637370][ T7930] lo speed is unknown, defaulting to 1000
[   91.744620][ T7951] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[   91.831108][ T7956] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   92.664735][ T7973] __nla_validate_parse: 18 callbacks suppressed
[   92.664751][ T7973] netlink: 168 bytes leftover after parsing attributes in process `syz.1.525'.
[   92.729243][ T7976] dvmrp8: entered allmulticast mode
[   92.826001][ T7974] dvmrp8: left allmulticast mode
[   92.922339][ T7984] team0: entered promiscuous mode
[   92.925941][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[   92.999545][ T7984] team0 (unregistering): left promiscuous mode
[   93.028445][ T7986] lo: left promiscuous mode
[   93.033046][ T7986] lo: left allmulticast mode
[   93.092784][ T7986] bond0: left promiscuous mode
[   93.094925][ T7986] bond0: left allmulticast mode
[   93.261829][ T7999] dvmrp8: entered allmulticast mode
[   93.337863][ T7993] dvmrp8: left allmulticast mode
[   93.372086][ T8009] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   93.375755][ T8009] macsec0: entered promiscuous mode
[   93.377856][ T8009] macsec0: entered allmulticast mode
[   93.385580][ T8009] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   93.403646][ T8009] macsec1: entered promiscuous mode
[   93.409254][ T8009] macsec1: entered allmulticast mode
[   93.439459][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'.
[   93.528155][ T8022] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   93.727403][ T8033] syzkaller1: entered promiscuous mode
[   93.729489][ T8033] syzkaller1: entered allmulticast mode
[   94.326047][ T8058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.542'.
[   94.360188][ T8065] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.543'.
[   94.434990][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   94.469344][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'.
[   94.474453][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'.
[   94.600349][ T8084] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   94.608060][ T8085] netlink: 'syz.1.549': attribute type 4 has an invalid length.
[   94.693977][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'.
[   94.831275][  T793] lo speed is unknown, defaulting to 1000
[   94.839914][  T793] syz1: Port: 1 Link DOWN
[   94.892627][ T8096] netlink: 'syz.1.553': attribute type 12 has an invalid length.
[   94.895144][ T8096] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.553'.
[   95.069462][ T8117] lo speed is unknown, defaulting to 1000
[   95.161804][ T8121] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[   95.246307][ T8126] netlink: 'syz.2.562': attribute type 2 has an invalid length.
[   95.354618][ T8129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.357528][ T8129] syzkaller0: entered promiscuous mode
[   95.359489][ T8129] syzkaller0: entered allmulticast mode
[   95.379448][ T8129] tipc: Resetting bearer <eth:syzkaller0>
[   95.383731][ T8128] tipc: Resetting bearer <eth:syzkaller0>
[   95.392195][ T8128] tipc: Disabling bearer <eth:syzkaller0>
[   96.287404][ T8170] netlink: 'syz.1.574': attribute type 21 has an invalid length.
[   96.291935][ T8170] netlink: 'syz.1.574': attribute type 22 has an invalid length.
[   96.294588][ T8170] netlink: 'syz.1.574': attribute type 23 has an invalid length.
[   96.332861][ T8172] ieee802154 phy0 wpan0: encryption failed: -22
[   96.381529][ T8176] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[   96.411863][ T8176] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.548897][ T8184] netlink: 'syz.0.583': attribute type 16 has an invalid length.
[   96.551918][ T8184] netlink: 'syz.0.583': attribute type 17 has an invalid length.
[   96.654838][ T8186] IPv6: NLM_F_REPLACE set, but no existing node found!
[   96.812152][ T8184] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   96.819003][ T5860] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.824256][ T5860] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.827011][ T5860] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.832406][ T5860] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.184786][ T8194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.187581][ T8194] syzkaller0: entered promiscuous mode
[   97.189528][ T8194] syzkaller0: entered allmulticast mode
[   97.201661][ T8193] tipc: Resetting bearer <eth:syzkaller0>
[   97.213350][ T8193] tipc: Disabling bearer <eth:syzkaller0>
[   97.315553][ T8200] macvtap1: entered promiscuous mode
[   97.317938][ T8200] dummy0: entered promiscuous mode
[   97.330172][ T8200] macvtap1: entered allmulticast mode
[   97.332459][ T8200] dummy0: entered allmulticast mode
[   97.370885][ T8200] dummy0: left allmulticast mode
[   97.372596][ T8200] dummy0: left promiscuous mode
[   97.479028][ T8211] bond0: (slave wlan1): Releasing backup interface
[   97.488671][ T8211] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   97.495595][ T8211] bond4: (slave ip6gretap1): Removing an active aggregator
[   97.502328][ T8211] bond4: (slave ip6gretap1): Releasing backup interface
[   97.507285][ T8211] bond5: (slave wireguard0): Releasing backup interface
[   97.509559][ T8211] wireguard0: left promiscuous mode
[   97.517067][ T8211] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   97.519298][ T8211] bond0: (slave wlan1): refused to change device type
[   97.525960][ T8211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.529082][ T8211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.224026][ T8241] __nla_validate_parse: 28 callbacks suppressed
[   98.224039][ T8241] netlink: 248 bytes leftover after parsing attributes in process `syz.1.601'.
[   98.384586][ T8255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.387461][ T8255] syzkaller0: entered promiscuous mode
[   98.390544][ T8255] syzkaller0: entered allmulticast mode
[   98.428188][ T8255] tipc: Resetting bearer <eth:syzkaller0>
[   98.434792][ T8254] tipc: Resetting bearer <eth:syzkaller0>
[   98.447691][ T8254] tipc: Disabling bearer <eth:syzkaller0>
[   98.511033][ T8264] netlink: 144 bytes leftover after parsing attributes in process `syz.2.607'.
[   98.605684][ T8268] gretap1: entered promiscuous mode
[   98.651646][ T8279] netlink: 496 bytes leftover after parsing attributes in process `syz.1.611'.
[   98.692625][ T8284] batman_adv: batadv0: Adding interface: gretap2
[   98.695141][ T8284] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.704961][ T8284] batman_adv: batadv0: Interface activated: gretap2
[   99.315895][ T8327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.624'.
[   99.418627][ T8333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'.
[   99.422631][ T8332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.625'.
[   99.445982][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[   99.508015][ T8342] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   99.554372][ T8347] ip6tnl0: entered allmulticast mode
[   99.627566][ T8347] 8021q: adding VLAN 0 to HW filter on device 
[   99.636363][ T8347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.643339][    T9] lo speed is unknown, defaulting to 1000
[   99.645788][    T9] syz1: Port: 1 Link ACTIVE
[   99.647922][ T8346] ip6tnl0: left allmulticast mode
[   99.694818][ T8351] netlink: 168 bytes leftover after parsing attributes in process `syz.1.630'.
[   99.703837][ T8351] ieee802154 phy0 wpan0: encryption failed: -22
[   99.834636][ T8360] validate_nla: 5 callbacks suppressed
[   99.834650][ T8360] netlink: 'syz.0.634': attribute type 10 has an invalid length.
[   99.858405][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'.
[  100.055318][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  100.060180][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.065707][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.072476][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.078480][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.085774][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.093127][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.098773][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.104819][ T8376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.153654][ T8383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.156489][ T8383] syzkaller0: entered promiscuous mode
[  100.158456][ T8383] syzkaller0: entered allmulticast mode
[  100.172454][ T8383] tipc: Resetting bearer <eth:syzkaller0>
[  100.198788][ T8387] syzkaller0: entered promiscuous mode
[  100.205794][ T8387] syzkaller0: entered allmulticast mode
[  100.209695][ T8386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.229532][ T8386] tipc: Resetting bearer <eth:syzkaller0>
[  100.233355][ T8387] syzkaller0: left allmulticast mode
[  100.237394][ T8382] tipc: Resetting bearer <eth:syzkaller0>
[  100.251899][ T8382] tipc: Disabling bearer <eth:syzkaller0>
[  100.274703][ T8384] tipc: Resetting bearer <eth:syzkaller0>
[  100.283150][ T8384] tipc: Disabling bearer <eth:syzkaller0>
[  100.350018][ T8395] netlink: 'syz.1.642': attribute type 4 has an invalid length.
[  100.513152][ T8416] rdma_op ffff88801bf871f0 conn xmit_rdma 0000000000000000
[  100.540404][ T8414] netlink: 'syz.2.649': attribute type 4 has an invalid length.
[  100.838372][ T8455] ip6gre1: entered allmulticast mode
[  100.897631][ T8458] netlink: 'syz.0.658': attribute type 13 has an invalid length.
[  100.909201][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.919998][ T8458] netlink: 'syz.0.658': attribute type 13 has an invalid length.
[  100.923251][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.928774][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.940623][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.966007][ T8459] netlink: 'syz.2.660': attribute type 4 has an invalid length.
[  101.054984][ T8465] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.202461][ T8462] delete_channel: no stack
[  101.433560][ T5860] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  102.425395][ T8519] tipc: New replicast peer: 255.255.255.255
[  102.428675][ T8519] tipc: Enabled bearer <udp:syz2>, priority 10
[  102.441564][ T8519] tipc: Disabling bearer <udp:syz2>
[  103.297839][ T8537] __nla_validate_parse: 77 callbacks suppressed
[  103.297848][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  103.343313][ T8540] netlink: 248 bytes leftover after parsing attributes in process `syz.2.683'.
[  103.411422][ T8546] netlink: 72 bytes leftover after parsing attributes in process `syz.0.685'.
[  103.415241][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'.
[  103.419236][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'.
[  103.506453][ T8552] lo speed is unknown, defaulting to 1000
[  103.686771][ T8566] netlink: 'syz.1.691': attribute type 10 has an invalid length.
[  103.694211][ T8568] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  103.702961][ T8566] netlink: 'syz.1.691': attribute type 10 has an invalid length.
[  103.721787][ T8566] : (slave dummy0): Enslaving as an active interface with an up link
[  103.863987][ T8575] lo speed is unknown, defaulting to 1000
[  104.539093][ T8593] dvmrp8: entered allmulticast mode
[  104.565306][ T8592] dvmrp8: left allmulticast mode
[  104.623776][ T8601] tap0: tun_chr_ioctl cmd 1074025680
[  104.626387][ T8601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.629112][ T8601] D: renamed from syzkaller0
[  104.632942][ T8601] tipc: Disabling bearer <eth:syzkaller0>
[  104.689476][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.701'.
[  104.805135][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'.
[  104.835930][ T8607] ip6tnl0: entered allmulticast mode
[  104.844609][ T8607] net_ratelimit: 28 callbacks suppressed
[  104.844617][ T8607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.859088][ T8605] ip6tnl0: left allmulticast mode
[  105.039435][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'.
[  105.202539][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.708'.
[  105.301824][   T33] audit: type=1107 audit(1754979166.779:3): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  106.348095][ T8645] netlink: 224 bytes leftover after parsing attributes in process `syz.1.715'.
[  106.442825][ T8649] lo speed is unknown, defaulting to 1000
[  106.481923][ T8651] netlink: 'syz.0.717': attribute type 13 has an invalid length.
[  106.544197][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.557111][ T8651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.571767][ T8653] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  106.653783][ T8659] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  106.919034][ T8675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.924331][ T8675] syzkaller0: entered promiscuous mode
[  106.926157][ T8675] syzkaller0: entered allmulticast mode
[  106.937239][ T8674] tipc: Resetting bearer <eth:syzkaller0>
[  106.956028][ T8674] tipc: Disabling bearer <eth:syzkaller0>
[  107.026231][ T8685] ieee802154 phy0 wpan0: encryption failed: -22
[  107.068370][ T8685] bond1: left promiscuous mode
[  107.071473][ T8685] vlan2: left promiscuous mode
[  107.073085][ T8685] bond0: left promiscuous mode
[  107.074768][ T8685] bond2: left promiscuous mode
[  107.076357][ T8685] batadv0: left promiscuous mode
[  107.078011][ T8685] bond5: left promiscuous mode
[  107.079925][ T8685] macsec0: left promiscuous mode
[  107.081651][ T8685] macsec1: left promiscuous mode
[  107.088087][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.092233][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.101507][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.105202][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.480799][ T8729] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.691355][ T8749] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  107.723644][ T8751] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  107.902002][ T8763] netlink: 'syz.1.753': attribute type 7 has an invalid length.
[  108.151772][ T8773] netlink: 'syz.0.757': attribute type 1 has an invalid length.
[  108.166174][ T8773] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.179195][ T8773] bond7: (slave bridge2): making interface the new active one
[  108.183602][ T8773] bond7: (slave bridge2): Enslaving as an active interface with an up link
[  108.203881][ T8773] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  108.789713][ T8794] __nla_validate_parse: 8 callbacks suppressed
[  108.789723][ T8794] netlink: 216 bytes leftover after parsing attributes in process `syz.2.763'.
[  108.869220][ T8800] netlink: 'syz.2.766': attribute type 1 has an invalid length.
[  108.895393][ T8802] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  108.900325][ T8803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.767'.
[  108.904373][ T8802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.767'.
[  108.988811][ T8807] ipvlan2: left promiscuous mode
[  108.991717][ T8807] bond1: left promiscuous mode
[  108.993479][ T8807] batadv1: left promiscuous mode
[  108.995150][ T8807] batadv1: left allmulticast mode
[  108.997050][ T8807] xfrm1: left promiscuous mode
[  108.998672][ T8807] xfrm1: left allmulticast mode
[  109.005334][ T8807] gretap1: left promiscuous mode
[  109.007128][ T8807] batman_adv: batadv0: Interface deactivated: gretap2
[  109.015348][ T5906] lo speed is unknown, defaulting to 1000
[  109.017293][ T5906] syz1: Port: 1 Link DOWN
[  109.085805][ T8813] netlink: 'syz.2.770': attribute type 4 has an invalid length.
[  109.088396][ T8813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.770'.
[  109.129574][ T8817] netlink: 'syz.2.772': attribute type 4 has an invalid length.
[  109.134960][ T8817] netlink: 'syz.2.772': attribute type 4 has an invalid length.
[  109.193393][ T8819] bond7: (slave bridge2): Releasing active interface
[  109.202498][ T8821] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  109.317039][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'.
[  109.326847][ T8836] bridge4: the hash_elasticity option has been deprecated and is always 16
[  109.333675][ T8838] netlink: 'syz.0.780': attribute type 12 has an invalid length.
[  109.385772][ T8846] netlink: 96 bytes leftover after parsing attributes in process `syz.2.783'.
[  109.435382][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'.
[  109.502543][ T8856] netlink: 'syz.2.787': attribute type 4 has an invalid length.
[  109.505269][ T8856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.787'.
[  109.586990][ T8865] netlink: 224 bytes leftover after parsing attributes in process `syz.0.790'.
[  109.609288][ T8867] netlink: 140 bytes leftover after parsing attributes in process `syz.2.791'.
[  109.656669][ T8874] lo speed is unknown, defaulting to 1000
[  110.088059][ T8894] syzkaller0: entered promiscuous mode
[  110.090376][ T8894] syzkaller0: entered allmulticast mode
[  110.265296][ T8897] openvswitch: netlink: Flow key attr not present in new flow.
[  110.548921][ T8902] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  110.551787][  T792] IPVS: starting estimator thread 0...
[  110.640171][ T8904] IPVS: using max 77 ests per chain, 184800 per kthread
[  111.470396][ T8927] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  111.658394][ T8944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.661862][ T8944] syzkaller0: entered promiscuous mode
[  111.663892][ T8944] syzkaller0: entered allmulticast mode
[  111.669772][ T8944] tipc: Resetting bearer <eth:syzkaller0>
[  111.677990][ T8943] tipc: Resetting bearer <eth:syzkaller0>
[  111.687643][ T8943] tipc: Disabling bearer <eth:syzkaller0>
[  111.861961][ T8952] validate_nla: 1 callbacks suppressed
[  111.861973][ T8952] netlink: 'syz.0.819': attribute type 9 has an invalid length.
[  111.882273][ T8952] macvlan2: entered promiscuous mode
[  111.884493][ T8952] hsr0: entered promiscuous mode
[  111.886715][ T8952] macvlan2: entered allmulticast mode
[  111.889115][ T8952] hsr0: entered allmulticast mode
[  111.891493][ T8952] hsr_slave_0: entered allmulticast mode
[  111.893799][ T8952] hsr_slave_1: entered allmulticast mode
[  111.898843][    T9] IPVS: starting estimator thread 0...
[  111.949611][ T8957] netlink: 'syz.0.821': attribute type 28 has an invalid length.
[  111.990447][ T8953] IPVS: using max 48 ests per chain, 115200 per kthread
[  112.137129][ T8968] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  112.308537][ T8979] netlink: 'syz.0.829': attribute type 30 has an invalid length.
[  112.311386][ T8979] : renamed from bond0
[  112.315339][ T8981] openvswitch: netlink: Tunnel attr 10 has unexpected len 3 expected 2
[  112.492547][ T8993] netlink: 'syz.2.833': attribute type 4 has an invalid length.
[  112.506618][ T8995] netlink: 'syz.0.835': attribute type 1 has an invalid length.
[  112.552380][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.618311][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.624008][ T8995] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  112.631148][ T8995] bond0: (slave vcan0): Error -95 calling set_mac_address
[  112.646765][ T8998] gretap1: entered promiscuous mode
[  112.652243][ T8998] bond0: (slave gretap1): making interface the new active one
[  112.656091][ T8998] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  112.675251][ T9001] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  113.095253][ T9041] netlink: 'syz.1.847': attribute type 1 has an invalid length.
[  113.191255][ T9047] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  113.224873][ T9049] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  113.512838][ T9058] openvswitch: netlink: Duplicate or invalid key (type 0).
[  113.515988][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.523749][ T9058] openvswitch: netlink: Duplicate or invalid key (type 0).
[  113.526918][ T9058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.849704][ T9071] __nla_validate_parse: 20 callbacks suppressed
[  113.849719][ T9071] netlink: 80 bytes leftover after parsing attributes in process `syz.2.857'.
[  113.858028][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.857'.
[  114.029678][ T9081] netlink: 248 bytes leftover after parsing attributes in process `syz.0.859'.
[  114.032980][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.859'.
[  114.038848][ T9081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.859'.
[  114.056876][ T9081] 8021q: adding VLAN 0 to HW filter on device 
[  114.141517][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'.
[  114.505610][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'.
[  114.526368][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'.
[  114.579711][ T9092] : (slave dummy0): Releasing backup interface
[  114.590555][ T9092] : (slave bond_slave_0): Releasing backup interface
[  114.596020][ T9092] : (slave bond_slave_1): Releasing backup interface
[  114.606849][ T9092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.610856][ T9092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.615305][ T9092] bond1: (slave batadv1): Releasing active interface
[  114.619412][ T9092] batman_adv: batadv0: Removing interface: gretap2
[  114.641220][ T9092] netlink: 'syz.1.863': attribute type 10 has an invalid length.
[  114.644335][ T9092] : (slave wlan1): Error -22 calling dev_set_mtu
[  114.689671][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.866'.
[  114.735671][ T9102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.738519][ T9102] syzkaller0: entered promiscuous mode
[  114.742250][ T9102] syzkaller0: entered allmulticast mode
[  114.753796][ T9102] tipc: Resetting bearer <eth:syzkaller0>
[  114.779460][ T9102] tipc: Resetting bearer <eth:syzkaller0>
[  114.788726][ T9102] tipc: Disabling bearer <eth:syzkaller0>
[  114.824765][ T9102] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.867'.
[  115.825841][ T9133] netlink: 'syz.2.876': attribute type 1 has an invalid length.
[  115.923959][ T9146] siw: device registration error -23
[  115.985225][ T9154] netlink: 'syz.2.882': attribute type 4 has an invalid length.
[  116.038773][ T9162] netlink: 'syz.2.885': attribute type 4 has an invalid length.
[  116.046149][ T9162] net_ratelimit: 2 callbacks suppressed
[  116.046159][ T9162] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  116.093794][ T9166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.127041][ T9160] lo speed is unknown, defaulting to 1000
[  116.328608][ T9179] macvlan0: entered allmulticast mode
[  116.330860][ T9179] veth1_vlan: entered allmulticast mode
[  116.937633][ T9193] validate_nla: 2 callbacks suppressed
[  116.937643][ T9193] netlink: 'syz.1.896': attribute type 9 has an invalid length.
[  116.943062][ T9193] sctp: [Deprecated]: syz.1.896 (pid 9193) Use of int in maxseg socket option.
[  116.943062][ T9193] Use struct sctp_assoc_value instead
[  117.390560][ T9200] veth1_to_bond: entered allmulticast mode
[  117.448453][ T9200] veth1_to_bond (unregistering): left allmulticast mode
[  117.488601][ T9208] 8021q: adding VLAN 0 to HW filter on device bond8
[  117.649711][ T9228] Unsupported xt match
[  117.649721][ T9228] unable to load match
[  117.887241][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.966954][ T9256] netlink: 'syz.2.914': attribute type 4 has an invalid length.
[  118.965563][ T9314] __nla_validate_parse: 25 callbacks suppressed
[  118.965577][ T9314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.933'.
[  118.981063][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'.
[  119.084823][ T9322] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.089498][ T9321] IPVS: stopping backup sync thread 9322 ...
[  119.110266][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  119.113336][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'.
[  119.130171][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'.
[  119.392741][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.413675][ T9348] netlink: 'syz.0.946': attribute type 4 has an invalid length.
[  119.416297][ T9348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.946'.
[  119.448404][ T9350] netlink: 'syz.0.947': attribute type 11 has an invalid length.
[  119.453641][ T9346] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.456362][ T9351] tipc: Failed to remove unknown binding: 66,1,1/0:1382750992/1382750994
[  119.467464][ T9346] tipc: Failed to remove unknown binding: 66,1,1/0:1382750992/1382750994
[  119.474212][ T9346] tipc: Failed to remove unknown binding: 66,1,1/0:1382750992/1382750994
[  119.482811][ T9346] netlink: 788 bytes leftover after parsing attributes in process `syz.2.944'.
[  119.613289][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.948'.
[  119.764131][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'.
[  119.794080][ T9380] vlan4: entered promiscuous mode
[  119.795688][ T9380] bridge0: entered promiscuous mode
[  119.824407][ T9380] netlink: 19 bytes leftover after parsing attributes in process `syz.2.957'.
[  119.875670][ T9389] ieee802154 phy0 wpan0: encryption failed: -22
[  120.399370][ T9423] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.617306][ T9434] netlink: 'syz.0.971': attribute type 9 has an invalid length.
[  120.627305][ T9434] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.854520][ T9444] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002
[  120.954191][   T55] block nbd0: Receive control failed (result -32)
[  121.087701][ T9460] netlink: 'syz.0.979': attribute type 4 has an invalid length.
[  121.150346][ T9463] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  121.155306][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.158576][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.485667][ T7970] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.499981][ T7970] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.503581][ T7970] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.506651][ T7970] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.545571][ T9491] netlink: 'syz.2.987': attribute type 4 has an invalid length.
[  121.638493][ T9502] tun0: tun_chr_ioctl cmd 2148553947
[  121.660353][ T9502] lo speed is unknown, defaulting to 1000
[  121.696571][ T9504] tun0: tun_chr_ioctl cmd 35111
[  121.809666][ T9511] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  121.971996][ T9515] netlink: 'syz.0.996': attribute type 4 has an invalid length.
[  122.143093][ T7970] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  122.233268][ T9535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.236613][ T9535] syzkaller0: entered promiscuous mode
[  122.238829][ T9535] syzkaller0: entered allmulticast mode
[  122.256795][ T9535] tipc: Resetting bearer <eth:syzkaller0>
[  122.266215][ T9534] tipc: Resetting bearer <eth:syzkaller0>
[  122.277489][ T9534] tipc: Disabling bearer <eth:syzkaller0>
[  122.579537][ T9537] infiniband syz2: set down
[  122.582966][ T9537] infiniband syz2: added syzkaller0
[  122.586363][ T9559] netlink: 'syz.2.1008': attribute type 10 has an invalid length.
[  122.643833][ T9537] RDS/IB: syz2: added
[  122.646260][ T9537] smc: adding ib device syz2 with port count 1
[  122.659410][ T9537] smc:    ib device syz2 port 1 has pnetid 
[  123.016840][ T9598] IPVS: stopping backup sync thread 9599 ...
[  123.022821][ T9599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  123.162713][ T9612] netlink: 'syz.2.1021': attribute type 10 has an invalid length.
[  123.166235][ T9612] wlan1: mtu less than device minimum
[  123.168994][ T9612] : (slave wlan1): Error -22 calling dev_set_mtu
[  123.250527][ T9619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  123.270754][ T9619] netlink: 'syz.1.1022': attribute type 2 has an invalid length.
[  123.404613][ T1089] smc: removing ib device syz2
[  123.405226][ T9616] lo speed is unknown, defaulting to 1000
[  124.072774][ T9626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.075638][ T9626] syzkaller0: entered promiscuous mode
[  124.077587][ T9626] syzkaller0: entered allmulticast mode
[  124.081252][ T9626] __nla_validate_parse: 22 callbacks suppressed
[  124.081260][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1025'.
[  124.093861][ T9626] tipc: Resetting bearer <eth:syzkaller0>
[  124.097357][ T9625] tipc: Resetting bearer <eth:syzkaller0>
[  124.107770][ T9625] tipc: Disabling bearer <eth:syzkaller0>
[  124.114228][ T9630] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1027'.
[  124.318813][ T9644] lo speed is unknown, defaulting to 1000
[  124.389772][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'.
[  124.398398][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1035'.
[  124.452868][ T9652] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  124.516865][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'.
[  124.997246][ T9662] netlink: 'syz.1.1037': attribute type 11 has an invalid length.
[  125.037205][ T9666] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  125.085665][ T9668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.089138][ T9668] syzkaller0: entered promiscuous mode
[  125.091116][ T9668] syzkaller0: entered allmulticast mode
[  125.105460][ T9668] tipc: Resetting bearer <eth:syzkaller0>
[  125.109629][ T9667] tipc: Resetting bearer <eth:syzkaller0>
[  125.120768][ T9667] tipc: Disabling bearer <eth:syzkaller0>
[  125.188343][ T9670] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  125.316078][ T9676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1042'.
[  125.486924][ T9681] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1044'.
[  125.504325][ T9681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1044'.
[  125.564445][ T9687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.567867][ T9687] syzkaller0: entered promiscuous mode
[  125.570822][ T9687] syzkaller0: entered allmulticast mode
[  125.593377][ T9687] tipc: Resetting bearer <eth:syzkaller0>
[  125.660426][ T9691] netlink: 'syz.2.1047': attribute type 13 has an invalid length.
[  125.663198][ T9691] netlink: 'syz.2.1047': attribute type 17 has an invalid length.
[  125.677995][ T9691] 8021q: adding VLAN 0 to HW filter on device 
[  125.684291][ T9691] 8021q: adding VLAN 0 to HW filter on device team0
[  125.709125][ T9691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.733121][ T9691] lo speed is unknown, defaulting to 1000
[  126.321295][ T5906] tipc: Node number set to 943720038
[  126.386031][ T9686] tipc: Resetting bearer <eth:syzkaller0>
[  126.397378][ T9686] tipc: Disabling bearer <eth:syzkaller0>
[  126.429054][ T9695] netlink: 'syz.1.1048': attribute type 4 has an invalid length.
[  126.433538][ T9695] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1048'.
[  126.492685][ T9703] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  126.496199][ T9701] IPVS: stopping backup sync thread 9703 ...
[  126.506958][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'.
[  127.080725][ T9736] sctp: [Deprecated]: syz.2.1061 (pid 9736) Use of int in max_burst socket option.
[  127.080725][ T9736] Use struct sctp_assoc_value instead
[  127.674909][ T9741] ip6erspan0: entered allmulticast mode
[  127.706145][   T33] audit: type=1800 audit(1754979189.189:4): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1063" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1847 res=0 errno=0
[  127.857701][ T9757] lo speed is unknown, defaulting to 1000
[  127.916084][ T9759] lo speed is unknown, defaulting to 1000
[  128.117968][ T9770] netlink: 'syz.2.1071': attribute type 1 has an invalid length.
[  128.144558][ T9770] 8021q: adding VLAN 0 to HW filter on device bond5
[  128.173300][ T9770] 8021q: adding VLAN 0 to HW filter on device bond5
[  128.176453][ T9770] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  128.183633][ T9770] bond5: (slave vcan1): Error -95 calling set_mac_address
[  128.227831][ T9777] gretap1: entered promiscuous mode
[  128.232957][ T9777] bond5: (slave gretap1): making interface the new active one
[  128.237598][ T9777] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  128.253278][ T9776] lo speed is unknown, defaulting to 1000
[  128.399252][ T9787] netlink: 'syz.0.1077': attribute type 4 has an invalid length.
[  128.715020][ T9803] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  128.802729][ T9815] pim6reg: entered allmulticast mode
[  128.806273][ T9815] pim6reg: left allmulticast mode
[  128.901223][ T9820] netlink: 'syz.1.1086': attribute type 10 has an invalid length.
[  128.904280][ T9820] wlan1: mtu less than device minimum
[  128.906101][ T9820] : (slave wlan1): Error -22 calling dev_set_mtu
[  129.395051][ T9854] netlink: set zone limit has 8 unknown bytes
[  129.765306][ T9871] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.768903][ T9871] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.783030][ T9871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.790795][ T9871] syzkaller0: entered promiscuous mode
[  129.793049][ T9871] syzkaller0: entered allmulticast mode
[  129.809729][ T9871] sch_fq: defrate 257 ignored.
[  129.891885][ T9874] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  129.899241][ T9874] ip6gre1: left allmulticast mode
[  129.906938][ T9874] vlan2: left allmulticast mode
[  129.908915][ T9874] : left allmulticast mode
[  129.913168][ T9874] batadv0: left allmulticast mode
[  129.917120][ T9874] macsec0: left allmulticast mode
[  129.919312][ T9874] macsec1: left allmulticast mode
[  129.931954][ T9874] hsr0: left allmulticast mode
[  129.933991][ T9874] hsr_slave_0: left allmulticast mode
[  129.936246][ T9874] hsr_slave_1: left allmulticast mode
[  129.938437][ T9874] hsr0: left promiscuous mode
[  129.943396][ T9874] macvlan2: left promiscuous mode
[  129.945541][ T9874] macvlan2: left allmulticast mode
[  129.950524][ T9874] gretap1: left promiscuous mode
[  129.967899][ T9870] tipc: Resetting bearer <eth:syzkaller0>
[  129.987420][ T9870] tipc: Disabling bearer <eth:syzkaller0>
[  129.995397][ T5741] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.998898][ T5741] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.002313][ T5741] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.009103][ T5741] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.069220][ T9881] netlink: 'syz.0.1105': attribute type 25 has an invalid length.
[  130.075991][ T9882] netlink: 'syz.0.1105': attribute type 25 has an invalid length.
[  130.508923][ T9912] syzkaller1: entered promiscuous mode
[  130.511995][ T9912] syzkaller1: entered allmulticast mode
[  130.680964][ T9914] nbd: illegal input index 268435456
[  130.723610][ T9916] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.784414][ T9921] __nla_validate_parse: 10 callbacks suppressed
[  130.784428][ T9921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'.
[  130.924437][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1117'.
[  130.947727][ T9930] netlink: 'syz.2.1118': attribute type 4 has an invalid length.
[  130.953642][ T9930] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1118'.
[  131.028219][ T9932] netlink: 'syz.0.1119': attribute type 10 has an invalid length.
[  131.155408][ T9946] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  131.273264][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'.
[  131.290506][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1125'.
[  131.306314][ T9951] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1125'.
[  131.344482][ T9955] netlink: 'syz.0.1127': attribute type 4 has an invalid length.
[  131.347830][ T9955] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1127'.
[  131.449528][ T9965] netlink: 'syz.1.1130': attribute type 21 has an invalid length.
[  131.455403][ T9965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1130'.
[  131.530247][ T9972] syzkaller1: entered promiscuous mode
[  131.532751][ T9972] syzkaller1: entered allmulticast mode
[  131.563423][ T9974] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  131.566843][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'.
[  131.571011][ T9974] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  131.628404][ T9976] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1135'.
[  131.784501][ T9991] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  131.788112][ T9991] openvswitch: netlink: Duplicate key (type 0).
[  132.236909][T10010] ieee802154 phy0 wpan0: encryption failed: -22
[  132.394742][T10020] lo speed is unknown, defaulting to 1000
[  132.435225][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.437919][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.610416][T10034] lo speed is unknown, defaulting to 1000
[  132.928458][T10051] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  133.016554][T10060] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000
[  133.137467][T10075] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  133.228086][T10082] validate_nla: 3 callbacks suppressed
[  133.228095][T10082] netlink: 'syz.0.1168': attribute type 4 has an invalid length.
[  133.286312][T10093] : entered promiscuous mode
[  133.347450][T10099] macvlan4: entered promiscuous mode
[  133.349198][T10099] macvlan4: entered allmulticast mode
[  133.353115][T10099] bond10: (slave macvlan4): Opening slave failed
[  134.404864][T10131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.407251][T10131] syzkaller0: entered promiscuous mode
[  134.409206][T10131] syzkaller0: entered allmulticast mode
[  134.414361][T10131] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  134.419558][T10131] tipc: Resetting bearer <eth:syzkaller0>
[  134.423463][T10130] tipc: Resetting bearer <eth:syzkaller0>
[  134.432555][T10130] tipc: Disabling bearer <eth:syzkaller0>
[  134.602596][T10145] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  134.999428][T10181] tun0: tun_chr_ioctl cmd 2148553947
[  135.024986][T10181] lo speed is unknown, defaulting to 1000
[  135.167032][T10181] tun0: tun_chr_ioctl cmd 35108
[  135.524452][ T5741] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  136.438848][T10224] netlink: 'syz.2.1212': attribute type 2 has an invalid length.
[  136.443868][T10224] netlink: 'syz.2.1212': attribute type 1 has an invalid length.
[  136.446974][T10224] __nla_validate_parse: 23 callbacks suppressed
[  136.446986][T10224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1212'.
[  136.513036][T10233] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1214'.
[  136.768199][T10245] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  136.794195][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1219'.
[  136.797825][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1219'.
[  137.044986][T10260] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1224'.
[  137.103527][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1226'.
[  137.165376][T10268] tun0: tun_chr_ioctl cmd 2147767520
[  137.244906][T10271] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  137.371060][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  137.510255][T10285] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  137.518151][T10287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1234'.
[  137.602452][T10291] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  137.606653][T10291] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  138.157840][T10308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.161236][T10308] syzkaller0: entered promiscuous mode
[  138.163060][T10308] syzkaller0: entered allmulticast mode
[  138.170177][T10308] tipc: Resetting bearer <eth:syzkaller0>
[  138.178655][T10307] tipc: Resetting bearer <eth:syzkaller0>
[  138.190346][T10307] tipc: Disabling bearer <eth:syzkaller0>
[  138.277772][T10310] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  138.379484][T10313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'.
[  138.726833][T10333] netlink: 'syz.2.1248': attribute type 4 has an invalid length.
[  138.731264][T10333] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1248'.
[  138.779112][T10335] netlink: zone id is out of range
[  138.783405][T10335] netlink: zone id is out of range
[  138.785469][T10335] netlink: zone id is out of range
[  138.787602][T10335] netlink: zone id is out of range
[  138.789631][T10335] netlink: zone id is out of range
[  138.791756][T10335] netlink: zone id is out of range
[  138.796946][T10335] netlink: 'syz.1.1249': attribute type 83 has an invalid length.
[  139.250630][T10367] dvmrp1: entered allmulticast mode
[  139.264448][T10368] block nbd0: NBD_DISCONNECT
[  139.269305][T10367] dvmrp1: left allmulticast mode
[  139.283607][T10368] block nbd0: Send disconnect failed -32
[  139.294284][T10368] block nbd0: shutting down sockets
[  139.335979][T10370] raw_sendmsg: syz.1.1259 forgot to set AF_INET. Fix it!
[  139.646506][T10397] lo speed is unknown, defaulting to 1000
[  139.766179][T10397] syzkaller1: entered promiscuous mode
[  139.768036][T10397] syzkaller1: entered allmulticast mode
[  139.943565][ T5235] Bluetooth: hci2: link tx timeout
[  139.945461][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.962420][T10413] netlink: 'syz.2.1271': attribute type 12 has an invalid length.
[  140.117628][T10433] vlan4: entered promiscuous mode
[  140.121765][T10433] vlan4: entered allmulticast mode
[  140.123883][T10433] hsr_slave_1: entered allmulticast mode
[  140.195517][T10443] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  140.198996][T10443] netlink: 'syz.2.1279': attribute type 2 has an invalid length.
[  140.499515][T10466] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  140.717814][T10478] netlink: 'syz.1.1291': attribute type 12 has an invalid length.
[  140.781171][T10480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.874083][T10480] syzkaller0: entered promiscuous mode
[  140.876318][T10480] syzkaller0: entered allmulticast mode
[  140.887818][T10487] x9: renamed from bridge_slave_0
[  140.904266][T10480] tipc: Resetting bearer <eth:syzkaller0>
[  140.933069][T10488] tipc: Resetting bearer <eth:syzkaller0>
[  140.951746][T10488] tipc: Disabling bearer <eth:syzkaller0>
[  140.985947][T10493] netlink: 'syz.1.1296': attribute type 3 has an invalid length.
[  140.995010][T10493] ip6tnl0: entered allmulticast mode
[  141.052240][T10492] ip6tnl0: left allmulticast mode
[  141.491512][T10539] __nla_validate_parse: 10 callbacks suppressed
[  141.491527][T10539] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1306'.
[  141.635946][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[  141.726696][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1308'.
[  141.926014][T10562] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  141.931498][T10562] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  141.950221][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  141.998635][T10574] net_ratelimit: 173 callbacks suppressed
[  141.998645][T10574] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  142.037503][T10579] syzkaller0: entered promiscuous mode
[  142.039282][T10579] syzkaller0: entered allmulticast mode
[  142.045180][T10578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.058630][T10578] tipc: Resetting bearer <eth:syzkaller0>
[  142.077351][T10578] tipc: Disabling bearer <eth:syzkaller0>
[  142.199899][T10592] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  142.229778][T10594] syzkaller1: entered promiscuous mode
[  142.234901][T10594] syzkaller1: entered allmulticast mode
[  142.433532][T10609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1327'.
[  142.442997][T10611] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1328'.
[  142.664939][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  142.675109][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'.
[  142.688297][T10634] netlink: 'syz.0.1333': attribute type 10 has an invalid length.
[  142.695868][T10634] : (slave wlan1): refused to change device type
[  142.737207][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'.
[  142.772862][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'.
[  142.777094][T10639] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.974113][T10662] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  143.113898][T10672] delete_channel: no stack
[  143.984733][T10726] netlink: 'syz.1.1356': attribute type 3 has an invalid length.
[  143.989755][T10726] netlink: 'syz.1.1356': attribute type 13 has an invalid length.
[  143.996857][T10726] net veth1_virt_wifi : refused to change device tx_queue_len
[  144.255783][T10730]  (unregistering): Released all slaves
[  144.547049][T10744] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  144.747113][T10761] pim6reg1: entered promiscuous mode
[  144.749446][T10761] pim6reg1: entered allmulticast mode
[  144.846148][T10765] ieee802154 phy0 wpan0: encryption failed: -22
[  145.242956][T10793] lo speed is unknown, defaulting to 1000
[  145.329145][T10807] hsr_slave_1 (unregistering): left promiscuous mode
[  145.482979][T10821] netlink: 'syz.0.1387': attribute type 1 has an invalid length.
[  145.513285][T10821] 8021q: adding VLAN 0 to HW filter on device bond11
[  145.663598][T10828] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.666991][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.670022][T10828] IPv6: NLM_F_CREATE should be set when creating new route
[  145.672971][T10828] IPv6: NLM_F_CREATE should be set when creating new route
[  145.678126][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.696901][T10835] netlink: 'syz.0.1391': attribute type 10 has an invalid length.
[  145.700866][T10836] netlink: 'syz.0.1391': attribute type 13 has an invalid length.
[  145.705399][T10835] : (slave wlan1): refused to change device type
[  145.708715][T10837] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.713372][T10837] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.927118][T10851] ip6tnl2: entered promiscuous mode
[  145.930644][T10851] ip6tnl2: entered allmulticast mode
[  145.989751][T10855] netlink: 'syz.2.1396': attribute type 21 has an invalid length.
[  146.818714][T10855] __nla_validate_parse: 22 callbacks suppressed
[  146.818726][T10855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1396'.
[  146.848313][T10863] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  146.912275][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1401'.
[  146.935888][T10877] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  147.013361][T10892] netlink: 'syz.0.1407': attribute type 4 has an invalid length.
[  147.024765][T10892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1407'.
[  147.143839][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'.
[  147.148464][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'.
[  147.158109][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'.
[  147.209262][T10920] netlink: 'syz.2.1415': attribute type 1 has an invalid length.
[  147.234846][T10920] bond6: entered promiscuous mode
[  147.236731][T10920] 8021q: adding VLAN 0 to HW filter on device bond6
[  147.250293][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'.
[  147.253696][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'.
[  147.262769][T10920] 8021q: adding VLAN 0 to HW filter on device bond6
[  147.265111][T10920] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  147.268771][T10920] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  147.273751][T10920] bond6: (slave wireguard0): making interface the new active one
[  147.276302][T10920] wireguard0: entered promiscuous mode
[  147.278909][T10920] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  147.295761][T10920] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[  147.306590][T10920] bond6: (slave wireguard1): Enslaving as a backup interface with an up link
[  147.404737][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  147.452824][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  147.500837][T10940] netlink: 'syz.2.1422': attribute type 1 has an invalid length.
[  147.527802][T10940] 8021q: adding VLAN 0 to HW filter on device bond7
[  148.263838][T10972] Unsupported ieee802154 address type: 0
[  148.721223][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.725278][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.753898][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.763456][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.767425][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.775256][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.850767][T11017] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  148.866756][T11017] 8021q: adding VLAN 0 to HW filter on device bond8
[  148.879132][T11017] bond8: (slave gretap2): making interface the new active one
[  148.883626][T11017] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  148.894334][T11012] lo speed is unknown, defaulting to 1000
[  148.962718][T11022] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  149.460036][T11050] syzkaller1: entered allmulticast mode
[  149.992516][T11059] nbd: illegal input index -79536640
[  150.118261][T11063] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  150.287448][T11073] netlink: 'syz.0.1463': attribute type 4 has an invalid length.
[  150.349121][T11078] delete_channel: no stack
[  150.416336][T11084] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  150.451399][T11089] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  150.494535][T11089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.502401][ T5906] lo speed is unknown, defaulting to 1000
[  150.505237][T11091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.505285][ T5906] syz1: Port: 1 Link ACTIVE
[  150.527511][T11091] syzkaller0: entered promiscuous mode
[  150.529358][T11091] syzkaller0: entered allmulticast mode
[  150.534517][T11091] tipc: Resetting bearer <eth:syzkaller0>
[  150.540938][T11090] tipc: Resetting bearer <eth:syzkaller0>
[  150.576005][T11094] netlink: 'syz.1.1472': attribute type 4 has an invalid length.
[  151.414377][T11090] tipc: Disabling bearer <eth:syzkaller0>
[  151.456023][T11104] IPVS: set_ctl: invalid protocol: 103 172.30.1.2:20002
[  151.458402][T11104] IPVS: set_ctl: invalid protocol: 103 172.30.1.2:20002
[  151.665903][T11118] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  151.749681][T11122] netlink: 'syz.1.1481': attribute type 1 has an invalid length.
[  151.770672][T11122] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.785350][T11122] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.788572][T11122] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  151.794110][T11122] bond3: (slave vcan1): Error -95 calling set_mac_address
[  151.827819][T11124] __nla_validate_parse: 16 callbacks suppressed
[  151.827832][T11124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1481'.
[  152.129085][T11131] netlink: 'syz.0.1483': attribute type 10 has an invalid length.
[  152.134983][T11131] : (slave wlan1): refused to change device type
[  152.139622][T11131] netlink: 'syz.0.1483': attribute type 12 has an invalid length.
[  152.142776][T11131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1483'.
[  152.145809][T11132] netlink: 'syz.0.1483': attribute type 12 has an invalid length.
[  152.148504][T11132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1483'.
[  152.403031][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'.
[  152.572677][T11144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.576133][T11142] syzkaller0: entered promiscuous mode
[  152.578634][T11142] syzkaller0: entered allmulticast mode
[  152.607498][T11142] tipc: Resetting bearer <eth:syzkaller0>
[  152.619348][T11142] tipc: Disabling bearer <eth:syzkaller0>
[  152.706746][T11148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.717979][T11150] syzkaller0: entered promiscuous mode
[  152.730474][T11150] syzkaller0: entered allmulticast mode
[  152.744163][T11146] tipc: Resetting bearer <eth:syzkaller0>
[  152.755059][T11146] tipc: Disabling bearer <eth:syzkaller0>
[  152.818016][T11156] netlink: 'syz.1.1491': attribute type 1 has an invalid length.
[  152.868888][T11161] netlink: 'syz.2.1493': attribute type 2 has an invalid length.
[  152.880516][T11156] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  152.898250][T11156] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  152.922278][T11156] bond4 (unregistering): Released all slaves
[  152.946189][T11167] ieee802154 phy0 wpan0: encryption failed: -22
[  152.949143][T11167] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1491'.
[  152.974653][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1493'.
[  152.978879][T11161] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1493'.
[  153.031426][T11169] syzkaller0: entered promiscuous mode
[  153.033715][T11169] syzkaller0: entered allmulticast mode
[  153.067549][T11173] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  153.089386][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'.
[  153.093722][T11171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'.
[  153.113766][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'.
[  153.117673][T11175] netlink: 'syz.1.1498': attribute type 7 has an invalid length.
[  153.127506][T11175] gretap0: entered promiscuous mode
[  153.130664][T11175] batadv_slave_1: entered promiscuous mode
[  153.134144][T11175] debugfs: 'hsr0' already exists in 'hsr'
[  153.136592][T11175] Cannot create hsr debugfs directory
[  153.138907][T11175] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.321608][T11185] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  154.331068][T11216] syzkaller0: entered promiscuous mode
[  154.333478][T11216] syzkaller0: entered allmulticast mode
[  155.417956][T11229] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  155.444473][T11231] validate_nla: 2 callbacks suppressed
[  155.444483][T11231] netlink: 'syz.0.1517': attribute type 21 has an invalid length.
[  155.449288][T11231] netlink: 'syz.0.1517': attribute type 1 has an invalid length.
[  155.474694][T11235] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  155.589105][T11243] netlink: 'syz.1.1521': attribute type 4 has an invalid length.
[  155.772332][T11260] netlink: 'syz.1.1524': attribute type 3 has an invalid length.
[  155.844279][T11269] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  155.863779][T11262] lo speed is unknown, defaulting to 1000
[  156.001619][T11281] siw: device registration error -23
[  156.062971][T11286] sit0: entered promiscuous mode
[  156.067420][T11286] netlink: 'syz.1.1534': attribute type 1 has an invalid length.
[  156.197589][T11297] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  156.247174][T11301] netlink: 'syz.2.1538': attribute type 4 has an invalid length.
[  156.392528][T11316] netlink: 'syz.2.1543': attribute type 1 has an invalid length.
[  156.438322][T11323] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  156.442062][T11321] netlink: 'syz.2.1545': attribute type 4 has an invalid length.
[  156.456605][T11323] bond4: entered promiscuous mode
[  156.458306][T11323] bond4: entered allmulticast mode
[  156.460336][T11323] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.466142][T11325] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  156.483820][T11325] bond5: entered promiscuous mode
[  156.485717][T11325] bond5: entered allmulticast mode
[  156.487806][T11325] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.655532][T11342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.658579][T11342] IPv6: NLM_F_CREATE should be set when creating new route
[  156.661612][T11342] IPv6: NLM_F_CREATE should be set when creating new route
[  156.703572][T11344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.712960][T11270] delete_channel: no stack
[  156.774067][T11344] block nbd1: Unsupported socket: shutdown callout must be supported.
[  156.778211][T11344] block nbd1: shutting down sockets
[  156.836982][T11349] __nla_validate_parse: 23 callbacks suppressed
[  156.836991][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'.
[  156.843401][T11349] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.869090][T11347] dvmrp8: entered allmulticast mode
[  156.872080][T11346] dvmrp8: left allmulticast mode
[  157.004026][T11356] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  157.044340][T11355] ip6tnl0: entered allmulticast mode
[  157.046565][T11355] ip6tnl0: left allmulticast mode
[  157.471638][T11382] lo speed is unknown, defaulting to 1000
[  157.666169][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1565'.
[  157.715817][T11402] netlink: 'syz.2.1567': attribute type 1 has an invalid length.
[  157.861389][T11405] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1568'.
[  157.869310][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  157.987295][T11409] netlink: 'syz.0.1570': attribute type 8 has an invalid length.
[  158.069526][T11418] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  158.684292][T11427] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  158.721537][T11429] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  158.875810][T11438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1581'.
[  159.045334][T11457] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  159.057296][T11459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.172118][T11461] dvmrp8: entered allmulticast mode
[  159.179495][T11461] openvswitch: netlink: Flow key attr not present in new flow.
[  159.198798][T11460] dvmrp8: left allmulticast mode
[  159.246653][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'.
[  159.305595][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'.
[  159.446239][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.452396][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.452707][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  159.464839][T11474] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  159.556927][T11476] 8021q: adding VLAN 0 to HW filter on device 
[  159.564997][T11476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.721708][T11491] netlink: 'syz.0.1598': attribute type 11 has an invalid length.
[  159.917142][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'.
[  159.921769][T11512] syzkaller1: entered promiscuous mode
[  159.924365][T11512] syzkaller1: entered allmulticast mode
[  159.946922][T11520] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.949643][T11520] syzkaller0: entered promiscuous mode
[  159.953269][T11520] syzkaller0: entered allmulticast mode
[  159.972744][T11521] tipc: Resetting bearer <eth:syzkaller0>
[  159.991365][T11521] tipc: Disabling bearer <eth:syzkaller0>
[  160.000328][T11464] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.006367][T11464] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  160.019619][T11464] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.021912][T11464] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  160.115936][T11531] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1608'.
[  161.318787][T11596] pim6reg: entered allmulticast mode
[  161.326221][T11596] pim6reg: left allmulticast mode
[  161.486147][T11607] !: renamed from dummy0 (while UP)
[  161.548346][T11607] vlan5: entered promiscuous mode
[  161.568997][T11611] validate_nla: 4 callbacks suppressed
[  161.569007][T11611] netlink: 'syz.0.1632': attribute type 10 has an invalid length.
[  161.583928][T11611] : (slave wlan1): refused to change device type
[  161.633388][T11629] net_ratelimit: 1 callbacks suppressed
[  161.633398][T11629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.672620][T11632] netlink: 'syz.0.1636': attribute type 1 has an invalid length.
[  161.681857][T11638] netlink: 'syz.1.1637': attribute type 21 has an invalid length.
[  161.742472][T11642] lo speed is unknown, defaulting to 1000
[  162.033582][T11687] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  162.744766][T11697] netlink: 'syz.2.1643': attribute type 6 has an invalid length.
[  162.744766][T11699] netlink: 'syz.2.1643': attribute type 6 has an invalid length.
[  162.767987][T11705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.852118][T11711] sit0: left promiscuous mode
[  162.858518][T11711] tipc: Resetting bearer <ib:ip6gre0>
[  162.907293][T11711] ip6erspan0: left allmulticast mode
[  162.924893][T11711] bond4: left promiscuous mode
[  162.926792][T11711] bond4: left allmulticast mode
[  162.933278][T11711] bond5: left promiscuous mode
[  162.935164][T11711] bond5: left allmulticast mode
[  162.939177][ T6912] lo speed is unknown, defaulting to 1000
[  162.941667][ T6912] syz1: Port: 1 Link DOWN
[  163.074997][T11747] __nla_validate_parse: 17 callbacks suppressed
[  163.075008][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'.
[  163.095379][T11747] netlink: 'syz.0.1657': attribute type 1 has an invalid length.
[  163.109971][T11747] bond13 (unregistering): Released all slaves
[  163.204112][T11764] !: renamed from dummy0 (while UP)
[  163.213173][T11764] vlan0: entered promiscuous mode
[  163.214885][T11764] bridge0: entered promiscuous mode
[  163.262992][T11764] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1662'.
[  164.044638][T11776] netlink: 'syz.0.1664': attribute type 1 has an invalid length.
[  164.098988][T11785] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  164.115302][T11785] Bluetooth: hci0: Opcode 0x080f failed: -22
[  164.166463][T11799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.172103][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.179742][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.185199][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.226790][T11803] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1674'.
[  164.229650][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1674'.
[  164.234072][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'.
[  164.290530][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1676'.
[  164.304496][T11813] openvswitch: netlink: Missing key (keys=40, expected=100)
[  164.571713][T11852] netlink: 'syz.1.1685': attribute type 7 has an invalid length.
[  164.574391][T11852] netlink: 'syz.1.1685': attribute type 8 has an invalid length.
[  164.594771][T11842] veth1_vlan: left allmulticast mode
[  165.049245][T11885] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  165.052627][T11885] dummy0: entered promiscuous mode
[  165.056811][T11885] bridge7: port 1(dummy0) entered blocking state
[  165.059675][T11885] bridge7: port 1(dummy0) entered disabled state
[  165.064679][T11885] dummy0: entered allmulticast mode
[  165.181315][T11891] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  165.253689][T11896] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  165.333924][T11900] smc: net device bond0 applied user defined pnetid SYZ2
[  165.338979][T11900] smc: net device bond0 erased user defined pnetid SYZ2
[  166.189973][ T5235] Bluetooth: hci0: command tx timeout
[  166.768931][T11952] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  166.863920][T11966] validate_nla: 1 callbacks suppressed
[  166.863930][T11966] netlink: 'syz.0.1722': attribute type 21 has an invalid length.
[  166.868301][T11966] netlink: 'syz.0.1722': attribute type 22 has an invalid length.
[  166.871081][T11966] netlink: 'syz.0.1722': attribute type 23 has an invalid length.
[  167.637130][T12019] netlink: 'syz.2.1734': attribute type 5 has an invalid length.
[  167.643748][T12019] netlink: 'syz.2.1734': attribute type 5 has an invalid length.
[  167.652154][T12021] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  167.816123][T12033] veth0_to_team: entered promiscuous mode
[  167.818922][T12033] veth0_to_team: entered allmulticast mode
[  167.924571][T12043] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  168.107314][T12057] veth1_vlan: entered allmulticast mode
[  168.112912][T12057] team0: Port device macvlan0 added
[  168.216060][T12065] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  168.252106][T12067] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  168.897476][T12076] netlink: 'syz.0.1754': attribute type 21 has an invalid length.
[  168.900240][T12076] __nla_validate_parse: 23 callbacks suppressed
[  168.900248][T12076] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1754'.
[  168.944946][T12083] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  169.892884][T12102] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  169.897848][T12100] syzkaller1: entered promiscuous mode
[  169.901829][T12100] syzkaller1: entered allmulticast mode
[  170.123532][T12110] tun0: tun_chr_ioctl cmd 2147767520
[  170.138041][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'.
[  170.143423][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'.
[  170.157008][T12113] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1768'.
[  170.162399][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'.
[  170.263476][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  170.268019][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  170.317800][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  170.323138][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'.
[  170.328278][T12128] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  170.331492][T12127] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  170.524110][T12146] lo speed is unknown, defaulting to 1000
[  170.770643][T12163] block nbd1: shutting down sockets
[  170.817685][T12169] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  171.177756][T12175] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1784'.
[  171.267143][T12179] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  171.395974][T12186] ieee802154 phy1 wpan1: encryption failed: -22
[  171.549139][T12194] sctp: [Deprecated]: syz.0.1790 (pid 12194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.549139][T12194] Use struct sctp_sack_info instead
[  171.851139][T12211] lo speed is unknown, defaulting to 1000
[  171.914011][T12207] nbd0: detected capacity change from 0 to 63
[  171.937751][   T56] block nbd0: Receive control failed (result -32)
[  172.080190][T12236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  172.265242][T12251] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  172.274173][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.1.1803 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  172.274192][T12251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.274200][T12251] Call Trace:
[  172.274206][T12251]  <TASK>
[  172.274212][T12251]  dump_stack_lvl+0x189/0x250
[  172.274235][T12251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.274249][T12251]  ? __pfx__printk+0x10/0x10
[  172.274294][T12251]  ? kernfs_path_from_node+0x2f/0x290
[  172.274309][T12251]  ? kernfs_path_from_node+0x250/0x290
[  172.274320][T12251]  ? kernfs_path_from_node+0x2f/0x290
[  172.274336][T12251]  sysfs_warn_dup+0x8e/0xa0
[  172.274350][T12251]  sysfs_do_create_link_sd+0xc0/0x110
[  172.274365][T12251]  device_add_class_symlinks+0x1cf/0x240
[  172.274389][T12251]  device_add+0x475/0xb50
[  172.274410][T12251]  wiphy_register+0x1ba6/0x28d0
[  172.274439][T12251]  ? __pfx_wiphy_register+0x10/0x10
[  172.274453][T12251]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  172.274480][T12251]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  172.274501][T12251]  ieee80211_register_hw+0x3425/0x4080
[  172.274533][T12251]  ? ieee80211_register_hw+0x1461/0x4080
[  172.274559][T12251]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  172.274581][T12251]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.274601][T12251]  ? __hrtimer_setup+0x187/0x210
[  172.274612][T12251]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  172.274630][T12251]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  172.274665][T12251]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  172.274678][T12251]  ? trace_kmalloc+0x1f/0xd0
[  172.274692][T12251]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  172.274707][T12251]  ? kstrndup+0xbf/0x160
[  172.274728][T12251]  hwsim_new_radio_nl+0xea4/0x1b10
[  172.274743][T12251]  ? __pfx___nla_validate_parse+0x10/0x10
[  172.274768][T12251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  172.274791][T12251]  ? __nla_parse+0x40/0x60
[  172.274810][T12251]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  172.274828][T12251]  genl_family_rcv_msg_doit+0x215/0x300
[  172.274846][T12251]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  172.274867][T12251]  ? bpf_lsm_capable+0x9/0x20
[  172.274881][T12251]  ? security_capable+0x7e/0x2e0
[  172.274902][T12251]  genl_rcv_msg+0x60e/0x790
[  172.274924][T12251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.274935][T12251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  172.274958][T12251]  netlink_rcv_skb+0x208/0x470
[  172.274971][T12251]  ? __lock_acquire+0xab9/0xd20
[  172.274991][T12251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.275002][T12251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.275032][T12251]  ? down_read+0x1ad/0x2e0
[  172.275051][T12251]  genl_rcv+0x28/0x40
[  172.275066][T12251]  netlink_unicast+0x82f/0x9e0
[  172.275088][T12251]  ? __pfx_netlink_unicast+0x10/0x10
[  172.275103][T12251]  ? netlink_sendmsg+0x642/0xb30
[  172.275115][T12251]  ? skb_put+0x11b/0x210
[  172.275135][T12251]  netlink_sendmsg+0x805/0xb30
[  172.275157][T12251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.275175][T12251]  ? aa_sock_msg_perm+0xf1/0x1d0
[  172.275192][T12251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  172.275204][T12251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.275220][T12251]  __sock_sendmsg+0x21c/0x270
[  172.275236][T12251]  ____sys_sendmsg+0x505/0x830
[  172.275258][T12251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.275304][T12251]  ? import_iovec+0x74/0xa0
[  172.275319][T12251]  ___sys_sendmsg+0x21f/0x2a0
[  172.275339][T12251]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.275384][T12251]  ? __fget_files+0x2a/0x420
[  172.275400][T12251]  ? __fget_files+0x3a0/0x420
[  172.275425][T12251]  __x64_sys_sendmsg+0x19b/0x260
[  172.275445][T12251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.275469][T12251]  ? rcu_is_watching+0x15/0xb0
[  172.275486][T12251]  ? do_syscall_64+0xbe/0x3b0
[  172.275505][T12251]  do_syscall_64+0xfa/0x3b0
[  172.275519][T12251]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.275533][T12251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.275544][T12251]  ? exc_page_fault+0x9f/0xf0
[  172.275560][T12251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.275571][T12251] RIP: 0033:0x7f234d58ebe9
[  172.275584][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.275593][T12251] RSP: 002b:00007f234e43f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.275606][T12251] RAX: ffffffffffffffda RBX: 00007f234d7b5fa0 RCX: 00007f234d58ebe9
[  172.275616][T12251] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  172.275623][T12251] RBP: 00007f234d611e19 R08: 0000000000000000 R09: 0000000000000000
[  172.275629][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.275637][T12251] R13: 00007f234d7b6038 R14: 00007f234d7b5fa0 R15: 00007fff7c1bab68
[  172.275657][T12251]  </TASK>
[  172.653084][T12259] syzkaller0: entered promiscuous mode
[  172.655558][T12259] syzkaller0: entered allmulticast mode
[  172.936430][T12268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.939105][T12268] syzkaller0: entered promiscuous mode
[  172.941847][T12268] syzkaller0: entered allmulticast mode
[  172.956321][T12268] tipc: Resetting bearer <eth:syzkaller0>
[  172.965348][T12267] tipc: Resetting bearer <eth:syzkaller0>
[  172.976201][T12267] tipc: Disabling bearer <eth:syzkaller0>
[  173.057066][T12273] 
[  173.058146][T12273] ======================================================
[  173.061016][T12273] WARNING: possible circular locking dependency detected
[  173.063847][T12273] 6.16.0-syzkaller-12063-g37816488247d-dirty #0 Not tainted
[  173.067745][T12273] ------------------------------------------------------
[  173.070415][T12273] syz.1.1809/12273 is trying to acquire lock:
[  173.072393][T12273] ffffffff8f68a158 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  173.075965][T12273] 
[  173.075965][T12273] but task is already holding lock:
[  173.079093][T12273] ffff888026a68670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  173.082180][T12273] 
[  173.082180][T12273] which lock already depends on the new lock.
[  173.082180][T12273] 
[  173.085703][T12273] 
[  173.085703][T12273] the existing dependency chain (in reverse order) is:
[  173.088909][T12273] 
[  173.088909][T12273] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  173.091861][T12273]        lock_acquire+0x120/0x360
[  173.093517][T12273]        _raw_spin_lock_bh+0x36/0x50
[  173.095287][T12273]        nr_rt_device_down+0x12a/0x720
[  173.097106][T12273]        nr_device_event+0x137/0x150
[  173.098875][T12273]        notifier_call_chain+0x1b6/0x3e0
[  173.100896][T12273]        __dev_notify_flags+0x18d/0x2e0
[  173.102985][T12273]        netif_change_flags+0xe8/0x1a0
[  173.105272][T12273]        dev_change_flags+0x130/0x260
[  173.107179][T12273]        dev_ioctl+0x7b4/0x1150
[  173.108928][T12273]        sock_do_ioctl+0x22c/0x300
[  173.110657][T12273]        sock_ioctl+0x576/0x790
[  173.112443][T12273]        __se_sys_ioctl+0xfc/0x170
[  173.114400][T12273]        do_syscall_64+0xfa/0x3b0
[  173.115983][T12273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.118040][T12273] 
[  173.118040][T12273] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  173.120522][T12273]        lock_acquire+0x120/0x360
[  173.122140][T12273]        _raw_spin_lock_bh+0x36/0x50
[  173.123862][T12273]        nr_rt_device_down+0xa9/0x720
[  173.125560][T12273]        nr_device_event+0x137/0x150
[  173.127212][T12273]        notifier_call_chain+0x1b6/0x3e0
[  173.129074][T12273]        __dev_notify_flags+0x18d/0x2e0
[  173.130892][T12273]        netif_change_flags+0xe8/0x1a0
[  173.132710][T12273]        dev_change_flags+0x130/0x260
[  173.134494][T12273]        dev_ioctl+0x7b4/0x1150
[  173.136066][T12273]        sock_do_ioctl+0x22c/0x300
[  173.137729][T12273]        sock_ioctl+0x576/0x790
[  173.139280][T12273]        __se_sys_ioctl+0xfc/0x170
[  173.140855][T12273]        do_syscall_64+0xfa/0x3b0
[  173.142467][T12273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.144661][T12273] 
[  173.144661][T12273] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  173.147173][T12273]        validate_chain+0xb9b/0x2140
[  173.148958][T12273]        __lock_acquire+0xab9/0xd20
[  173.150698][T12273]        lock_acquire+0x120/0x360
[  173.152360][T12273]        _raw_spin_lock_bh+0x36/0x50
[  173.154061][T12273]        nr_rt_ioctl+0x390/0xd50
[  173.155649][T12273]        sock_do_ioctl+0xdc/0x300
[  173.157279][T12273]        sock_ioctl+0x576/0x790
[  173.158809][T12273]        __se_sys_ioctl+0xfc/0x170
[  173.160436][T12273]        do_syscall_64+0xfa/0x3b0
[  173.162021][T12273]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.164035][T12273] 
[  173.164035][T12273] other info that might help us debug this:
[  173.164035][T12273] 
[  173.167740][T12273] Chain exists of:
[  173.167740][T12273]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  173.167740][T12273] 
[  173.171955][T12273]  Possible unsafe locking scenario:
[  173.171955][T12273] 
[  173.174391][T12273]        CPU0                    CPU1
[  173.176145][T12273]        ----                    ----
[  173.177943][T12273]   lock(&nr_node->node_lock);
[  173.179444][T12273]                                lock(nr_node_list_lock);
[  173.181630][T12273]                                lock(&nr_node->node_lock);
[  173.183910][T12273]   lock(nr_neigh_list_lock);
[  173.185412][T12273] 
[  173.185412][T12273]  *** DEADLOCK ***
[  173.185412][T12273] 
[  173.188031][T12273] 2 locks held by syz.1.1809/12273:
[  173.189680][T12273]  #0: ffffffff8f68a1b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  173.192612][T12273]  #1: ffff888026a68670 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  173.195520][T12273] 
[  173.195520][T12273] stack backtrace:
[  173.197432][T12273] CPU: 0 UID: 0 PID: 12273 Comm: syz.1.1809 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  173.197444][T12273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.197450][T12273] Call Trace:
[  173.197454][T12273]  <TASK>
[  173.197459][T12273]  dump_stack_lvl+0x189/0x250
[  173.197471][T12273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.197479][T12273]  ? __pfx__printk+0x10/0x10
[  173.197489][T12273]  ? stack_trace_save+0x9c/0xe0
[  173.197500][T12273]  print_circular_bug+0x2ee/0x310
[  173.197514][T12273]  check_noncircular+0x134/0x160
[  173.197523][T12273]  validate_chain+0xb9b/0x2140
[  173.197533][T12273]  __lock_acquire+0xab9/0xd20
[  173.197544][T12273]  ? nr_rt_ioctl+0x390/0xd50
[  173.197550][T12273]  lock_acquire+0x120/0x360
[  173.197560][T12273]  ? nr_rt_ioctl+0x390/0xd50
[  173.197568][T12273]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  173.197577][T12273]  ? nr_rt_ioctl+0x390/0xd50
[  173.197584][T12273]  _raw_spin_lock_bh+0x36/0x50
[  173.197593][T12273]  ? nr_rt_ioctl+0x390/0xd50
[  173.197599][T12273]  nr_rt_ioctl+0x390/0xd50
[  173.197608][T12273]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  173.197616][T12273]  ? apparmor_capable+0x137/0x1b0
[  173.197625][T12273]  ? capable+0x89/0xe0
[  173.197631][T12273]  ? nr_ioctl+0x1b1/0x3b0
[  173.197642][T12273]  sock_do_ioctl+0xdc/0x300
[  173.197650][T12273]  ? __pfx_sock_do_ioctl+0x10/0x10
[  173.197656][T12273]  ? __lock_acquire+0xab9/0xd20
[  173.197668][T12273]  sock_ioctl+0x576/0x790
[  173.197675][T12273]  ? __pfx_sock_ioctl+0x10/0x10
[  173.197682][T12273]  ? __fget_files+0x2a/0x420
[  173.197692][T12273]  ? __fget_files+0x3a0/0x420
[  173.197701][T12273]  ? __fget_files+0x2a/0x420
[  173.197711][T12273]  ? bpf_lsm_file_ioctl+0x9/0x20
[  173.197721][T12273]  ? __pfx_sock_ioctl+0x10/0x10
[  173.197727][T12273]  __se_sys_ioctl+0xfc/0x170
[  173.197742][T12273]  do_syscall_64+0xfa/0x3b0
[  173.197751][T12273]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.197759][T12273]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.197766][T12273]  ? exc_page_fault+0x9f/0xf0
[  173.197774][T12273]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.197781][T12273] RIP: 0033:0x7f234d58ebe9
[  173.197789][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.197796][T12273] RSP: 002b:00007f234e43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.197805][T12273] RAX: ffffffffffffffda RBX: 00007f234d7b5fa0 RCX: 00007f234d58ebe9
[  173.197811][T12273] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  173.197815][T12273] RBP: 00007f234d611e19 R08: 0000000000000000 R09: 0000000000000000
[  173.197820][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.197825][T12273] R13: 00007f234d7b6038 R14: 00007f234d7b5fa0 R15: 00007fff7c1bab68
[  173.197832][T12273]  </TASK>

VM DIAGNOSIS:
06:13:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001095 RDI=0000000000001096 RBP=00000000000003f8 RSP=ffffc900068ef150
R8 =ffff8880210e8237 R9 =1ffff1100421d046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f0 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f234e43f6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f234e43efc8 CR3=0000000040b20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f234d787498 00007f234d787470 XMM03=00007f234d7874a8 00007f234d7874a0
XMM04=00007f234e2ed100 00007f234d787460 XMM05=00007f234d787478 00007f234d7874c0
XMM06=00007f234d7874b8 00007f234d7874b0 XMM07=00007f234d7874a8 00007f234d7874a0
XMM08=0000000000000000 00007f234d612ee7 XMM09=0000000000000000 00007f234d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1bb959860f4b8500 RBX=ffffffff81968308 RCX=1bb959860f4b8500 RDX=0000000000000001
RSI=ffffffff8be32660 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34930 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32420ff8 CR3=000000010df78000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=90030a02002c9803 03a604002c94030a
XMM02=10002ec003021000 2eb00301a010002d XMM03=5cec01a008002ee0 030010002ed00300
XMM04=84808010002e8004 0100001808060601 XMM05=014084808010002e 8004010000180806
XMM06=06015cec01a00800 2ee0030010002ed0 XMM07=030010002ec00302 10002eb00301a010
XMM08=002d90030a02002c 980303a604002c94 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
