last executing test programs:

1.735680978s ago: executing program 1 (id=1926):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c0000100002800500090004000000040013000800040000050000"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140041000000000000000700000000000400749059bf7a4b080a3b6dc473517e874785341b0e943d214bdd893c407a31b11255a10b1f0300"/73], 0x14}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000)=r7, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000000000000100000d0a0000950cae5bd04d072234843495568300040000001700000000615f00"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

1.43325909s ago: executing program 1 (id=1932):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf250900000038000380080001"], 0x4c}}, 0x48040)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0xffffffff}, 0x1c)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000"], 0xfdef)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x100, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x1, 0x2, 0xffffff82, 0x1, 0x3, 0xffffffe2, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x60}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="1f000000000000000000a18842dbc78a82a8270a867a0f50b88b3bd45602f350b27102c8513f543d3f99c34fc00206689ad9f0129edacc13cfe42f49b8c3b84dd37a7ffc5556f9dbfe262f12f63e3ffd376789bc45945fa6c06e4c35b6922cd7581d2d448fbf5be825a11fc11c0e9eab103c47976828f22554c75654025ab8d173e89939698df15880ab5bcf35349ff8b983ac84d1e22e92adbbdb918301018729023488b6b174ae8aaebda8c25338d432562097117370dcd7e743f9547dcbf50a7fd01d409636549d5c2e"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0xffca, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}]}, 0x88}}, 0x20000000)

1.158539236s ago: executing program 1 (id=1937):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000780)="8a715ae592c4567230ce457c2e0c52a4a8a6dae3fc847c863dc0557fe65bc876", 0x20}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'fo\x00', 0x14, 0x0, 0x807f}, 0x2c)
socket(0x10, 0x3, 0x6)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x5a, 0xfffffffc, 0x0, 0xffe, 0x6, 0x3}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490)
socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000010101020000a552872b40a7560400000000000000000007060012400002000008001a407a720000"], 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xff, 0x8, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x7fffffff, 0x7, 0x32, 0x1000}, {0x6, 0xfffff001, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x4, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xfffffffc, 0x8}, {0x48a3, 0x3ff, 0x9, 0x5, 0x3, 0x8}, {0x4, 0x220000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0x7ff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x0, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x9, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb82, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x2, 0x8, 0x401, 0x5, 0xffff15fb, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x762, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x2, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x0, 0x3}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0xfffffff9, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x6, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7b, 0x5, 0x8, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x6, 0xb5, 0x7, 0x1cec, 0x8}, {0x4, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0x10}, {0xfffffff9, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x2, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x1000008, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x80008c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x1, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x2000007f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61e, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x6, 0x10000}, {0x57b, 0x2, 0x20007, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x3, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x3}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c7f843cc2e6f8eb101300000005000000beca3bd8f7aae20300003f0000000b02000000002e615f005f5901fc3c03f8ff"], &(0x7f0000000340)=""/39, 0x29, 0x27, 0x1, 0x0, 0x10000, @value=r8}, 0x28)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r10}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000183000000000001000000000000"], 0x14}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000001000000000000010000020500000800040000000000050006003ee811eed99f8a0000000008000300010000008b94f4e6c45e5ac698027369bf2542fc6e10f211cdd7ca062962f65d3225196477f79cad767d6487a80241ada7581775ac06000609b29d100000000000"], 0x34}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000500050000005f3bc55c81efe74e8668944053d3a9750000"], 0x2c}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r11, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="20002dbd7000fbdbdf2503010000050005000200000014000100000000000000000000000000000000000500050000000000080002006a0e00000500060083000000f11665976aab0711c096c7bcdb3d7eaf13398439dc162273737e1dc83475d59a6f00"/115], 0x48}}, 0x880)

1.028228046s ago: executing program 1 (id=1940):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c080035", @ANYRES16=r5, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r7=>0x0) (async)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000200)=<r13=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r14=>0x0) (async)
r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r17 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r17, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002200000000000000000000008000100ac1414bb080003"], 0x2c}}, 0x8800) (async)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=<r19=>0x0)
sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r18, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r19], 0x1c}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r20=>0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x5c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044001}, 0x1)
r21 = socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r21, 0x8933, &(0x7f0000000040))

857.210273ms ago: executing program 1 (id=1941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c00010000000800000000000100000004000000100001800c00108004000b800400e3000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e00)={0x14, 0x3b, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xfff2}, {0xd, 0xb}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1ff, 0x9, 0x2, 0x7ff, 0x401, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfffb, 0xfffffffc, 0x2, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x6c, 0x4, 0x6]}}, {{0x1c, 0x1, {0x15, 0x0, 0x9, 0x1, 0x0, 0x200, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0xe, 0x9c0, 0x6, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x3, 0x0, 0x4, 0x8]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x10, 0x3, 0x6)
r10 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25030000000c00050005000000000000000a000a006e6574656d0000000c0005000b000000000000000c00050001000000000000000c000400060000000000000005000ae9f27012d2c8503271616c574400000000000c00040051f676ffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="1e7c0d88a7d9053cc3dc8f859f8571bf1818faac6968e58a8a0fcc0ed3ffa05768edd68243fe4095f350979429da2d61fb6767d0fc93747f03138497379a667ebc", 0x41}, {&(0x7f0000000380)="b0c31eeae3efb1fc02e656b4bf56f961e839298e9e47d155189cdfb2ce2e7e6ba8168c2060a9add2c9fda249b1f6f6c82b2f6a70304289152d302bf64c6f7d9958d33edbfcbcb148b2a0", 0x4a}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x358}, 0x240000d0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)

789.327067ms ago: executing program 0 (id=1943):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x4, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
socket$inet(0x2, 0x2, 0x63b)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x24, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)

659.778948ms ago: executing program 0 (id=1944):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x640ce0c0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)
close(r3)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}]}, 0x88}}, 0x20000000)

529.673938ms ago: executing program 0 (id=1945):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000611e280000000000d4000000100000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200), 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet(0x2, 0x800, 0x1)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xa, 0x9}, {0xffe0}, {0xc, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18934}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40400d0}, 0x200008c2)
socket(0x1, 0x8, 0xffffffff)
sendto$inet(r1, &(0x7f0000000240)="2b91d902ca4e4c46d3670b3c8f76906bc9b4a55ad4bc539982da2d8313facd1642050876d17e4a81c781f7568601f9b969ea7c3e9d6c24d2b403901756adac63a66d", 0x42, 0x44, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

418.614683ms ago: executing program 2 (id=1946):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0}) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]]}, 0x3c}}, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) (async)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

350.394371ms ago: executing program 2 (id=1947):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6}]}, 0x34}}, 0x20000000)
getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

349.40318ms ago: executing program 0 (id=1948):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_RCVMTU(r4, 0x11, 0xd, 0x0, &(0x7f0000001c80)) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000038c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x4}, @TCA_BPF_ACT={0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r5, 0x404, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)

220.150292ms ago: executing program 2 (id=1949):
r0 = socket(0x8, 0x6, 0x9)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3, 0x3, 0xc, 0x100, 0x1ff}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

219.358221ms ago: executing program 0 (id=1950):
r0 = socket(0x11, 0x800000003, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x1c, 0x4, 0x41, 0x0, 0x1, 0x1, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000300001f0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

212.689387ms ago: executing program 2 (id=1951):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
close(r0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
accept(r4, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0x8, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4)

150.167936ms ago: executing program 0 (id=1952):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r3, 0xff08, 0x0)
write$cgroup_devices(r3, &(0x7f00000002c0)={'b', ' *:* ', 'rm\x00'}, 0x9) (async)
write$cgroup_devices(r3, &(0x7f00000002c0)={'b', ' *:* ', 'rm\x00'}, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, 0x0, 0x0) (async)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, 0x0, 0x0)
sendmsg(r1, 0x0, 0x4000040)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x2f) (async)
ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) (async)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8)
close(r7)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x2, 0x8, 0x5, 0xa, 0xf, 0x9, 0x2, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x3, 0x6, 0x6, 0x3, 0x9, 0xe4c, 0x9, 0x4, 0x1, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000)

149.56943ms ago: executing program 2 (id=1953):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f7}], 0x2}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
close(0x4) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xec, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xd, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x3, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0xe14, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffe3f2}, {0xc, 0x4, 0xffffffffffff0001}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2800000000000000}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x8000}]}]}}}]}, 0x11c}}, 0x0)

70.014029ms ago: executing program 2 (id=1954):
r0 = socket(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000)=0xfffffffd, 0x4)
recvfrom(r3, 0x0, 0x0, 0x1, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="9022ffff85b71143b7fd38", 0xb}], 0x1}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000738000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x0, 0x0}, &(0x7f00000064c0)=0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

0s ago: executing program 1 (id=1955):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="05"], 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308fd906b771ab5030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb8)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x5, 0x4, 0x709, 0x2, 0xe1})
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xec1f, 0x40024}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f0000000040)={0x1, @bcast, @bpq0, 0x14e4, 'syz1\x00', @bcast, 0x0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]})
r10 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50188' (ED25519) to the list of known hosts.
syzkaller login: [   56.692229][ T5795] cgroup: Unknown subsys name 'net'
[   56.848110][ T5795] cgroup: Unknown subsys name 'cpuset'
[   56.851992][ T5795] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.744762][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.758579][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.761702][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.764521][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.768237][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.771960][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.833900][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.838992][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.841706][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.849882][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.853313][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.856534][ T5220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.859441][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.862638][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.866286][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.896451][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.096315][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   64.278731][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.282313][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.285716][ T5829] bridge_slave_0: entered allmulticast mode
[   64.289687][ T5829] bridge_slave_0: entered promiscuous mode
[   64.306050][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.308775][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.311657][ T5829] bridge_slave_1: entered allmulticast mode
[   64.326411][ T5829] bridge_slave_1: entered promiscuous mode
[   64.330400][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.383321][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.396329][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   64.407663][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.486311][ T5829] team0: Port device team_slave_0 added
[   64.529858][ T5829] team0: Port device team_slave_1 added
[   64.587439][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.590352][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.593304][ T5836] bridge_slave_0: entered allmulticast mode
[   64.598239][ T5836] bridge_slave_0: entered promiscuous mode
[   64.617562][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.619886][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.622414][ T5833] bridge_slave_0: entered allmulticast mode
[   64.627669][ T5833] bridge_slave_0: entered promiscuous mode
[   64.632373][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.635834][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.638815][ T5833] bridge_slave_1: entered allmulticast mode
[   64.642755][ T5833] bridge_slave_1: entered promiscuous mode
[   64.646415][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.649454][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.652513][ T5836] bridge_slave_1: entered allmulticast mode
[   64.658870][ T5836] bridge_slave_1: entered promiscuous mode
[   64.677882][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.680663][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.690784][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.724823][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.728981][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.731686][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.741754][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.762473][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.767790][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.780838][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.845336][ T5836] team0: Port device team_slave_0 added
[   64.877675][ T5836] team0: Port device team_slave_1 added
[   64.883016][ T5833] team0: Port device team_slave_0 added
[   64.892429][ T5829] hsr_slave_0: entered promiscuous mode
[   64.897352][ T5829] hsr_slave_1: entered promiscuous mode
[   64.912380][ T5833] team0: Port device team_slave_1 added
[   64.942915][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.947510][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.957563][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.985372][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.988122][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.998316][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.010293][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.012484][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.021093][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.027241][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.029521][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.037619][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.168946][ T5833] hsr_slave_0: entered promiscuous mode
[   65.171240][ T5833] hsr_slave_1: entered promiscuous mode
[   65.173334][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.176013][ T5833] Cannot create hsr debugfs directory
[   65.191826][ T5836] hsr_slave_0: entered promiscuous mode
[   65.194382][ T5836] hsr_slave_1: entered promiscuous mode
[   65.197344][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.199658][ T5836] Cannot create hsr debugfs directory
[   65.406007][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.413822][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.419807][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.439230][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.503034][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.517413][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.523607][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.538294][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.581184][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.591708][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.596722][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.602771][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.680042][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.699798][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.729659][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   65.739248][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.755081][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.757754][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.769206][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.772105][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.777912][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.780209][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.792750][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.795073][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.855441][ T5838] Bluetooth: hci0: command tx timeout
[   65.871617][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.902393][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.925791][ T5838] Bluetooth: hci1: command tx timeout
[   65.928508][ T5838] Bluetooth: hci2: command tx timeout
[   65.929920][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.943278][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.946214][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.962970][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.965788][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.050367][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.133104][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.161671][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.203275][ T5829] veth0_vlan: entered promiscuous mode
[   66.217151][ T5829] veth1_vlan: entered promiscuous mode
[   66.232120][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.244415][ T5833] veth0_vlan: entered promiscuous mode
[   66.269002][ T5833] veth1_vlan: entered promiscuous mode
[   66.284490][ T5829] veth0_macvtap: entered promiscuous mode
[   66.296128][ T5829] veth1_macvtap: entered promiscuous mode
[   66.321680][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.326983][ T5836] veth0_vlan: entered promiscuous mode
[   66.334073][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.342479][ T5833] veth0_macvtap: entered promiscuous mode
[   66.353536][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.358156][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.361365][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.365724][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.371577][ T5833] veth1_macvtap: entered promiscuous mode
[   66.377009][ T5836] veth1_vlan: entered promiscuous mode
[   66.414002][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.430419][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.434220][ T5836] veth0_macvtap: entered promiscuous mode
[   66.448912][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.451578][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.454306][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.461329][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.468587][ T5836] veth1_macvtap: entered promiscuous mode
[   66.517520][ T1911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.525626][ T1911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.536704][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.555020][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.580000][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.585728][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.588550][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.591840][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.616663][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.620878][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.677058][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.685670][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.720464][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.730442][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.734466][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.785701][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.788865][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.893505][ T5901] Cannot find add_set index 0 as target
[   67.024073][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.027019][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.244226][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.262095][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.551369][ T5941] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   67.572437][ T5944] xt_TCPMSS: Only works on TCP SYN packets
[   67.648465][ T5947] Cannot find set identified by id 0 to match
[   67.722578][ T5952] Zero length message leads to an empty skb
[   67.740274][ T5952] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.925108][   T54] Bluetooth: hci0: command tx timeout
[   68.009227][   T54] Bluetooth: hci2: command tx timeout
[   68.011431][   T54] Bluetooth: hci1: command tx timeout
[   68.120928][ T5962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.170471][ T5964] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.489683][ T5976] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   68.509087][ T5976] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   68.731999][ T5999] netlink: 236 bytes leftover after parsing attributes in process `syz.2.18'.
[   68.820212][ T6006] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   68.848430][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'.
[   68.899811][ T6014] netlink: 'syz.2.25': attribute type 2 has an invalid length.
[   69.066455][ T6023] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET)
[   69.113372][ T6029] netlink: 'syz.1.30': attribute type 2 has an invalid length.
[   69.242373][ T6034] netlink: 164 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.397873][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   69.619929][ T6042] netlink: 'syz.2.34': attribute type 2 has an invalid length.
[   69.790728][ T6051] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.889110][ T6055] netlink: 'syz.0.38': attribute type 2 has an invalid length.
[   70.005041][ T5838] Bluetooth: hci0: command tx timeout
[   70.084765][ T5838] Bluetooth: hci1: command tx timeout
[   70.087696][ T5838] Bluetooth: hci2: command tx timeout
[   70.891537][ T6083] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[   70.940884][ T6086] netlink: 'syz.2.44': attribute type 2 has an invalid length.
[   71.220912][ T6102] netlink: 'syz.1.51': attribute type 2 has an invalid length.
[   71.310530][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.313320][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.948136][ T6134] netlink: 88 bytes leftover after parsing attributes in process `syz.1.60'.
[   72.084972][ T5838] Bluetooth: hci0: command tx timeout
[   72.166120][ T5838] Bluetooth: hci2: command tx timeout
[   72.167964][   T54] Bluetooth: hci1: command tx timeout
[   72.247672][ T6141] delete_channel: no stack
[   72.338713][ T6160] __nla_validate_parse: 3 callbacks suppressed
[   72.338723][ T6160] netlink: 164 bytes leftover after parsing attributes in process `syz.2.70'.
[   72.358177][ T6162] netlink: 236 bytes leftover after parsing attributes in process `syz.1.71'.
[   72.607710][ T6178] validate_nla: 5 callbacks suppressed
[   72.607745][ T6178] netlink: 'syz.0.77': attribute type 2 has an invalid length.
[   72.737434][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   73.304268][ T6191] syzkaller1: entered promiscuous mode
[   73.308161][ T6191] syzkaller1: entered allmulticast mode
[   73.315617][ T6191] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   73.374915][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.1.81'.
[   73.387611][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   73.400071][ T6201] netlink: 'syz.2.84': attribute type 2 has an invalid length.
[   73.598347][ T6212] veth0: entered promiscuous mode
[   73.986261][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030a36000: rx timeout, send abort
[   74.406738][ T6211] veth0: left promiscuous mode
[   74.489968][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030a36000: abort rx timeout. Force session deactivation
[   74.612014][ T6232] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.691381][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'.
[   74.699188][ T6237] netlink: 3 bytes leftover after parsing attributes in process `syz.2.93'.
[   75.046162][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'.
[   75.053134][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'.
[   75.101084][ T6263] trusted_key: syz.1.104 sent an empty control message without MSG_MORE.
[   75.185012][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   75.573404][ T6321] netlink: 'syz.2.121': attribute type 2 has an invalid length.
[   75.692925][ T6331] netlink: 'syz.1.124': attribute type 2 has an invalid length.
[   75.802996][ T6342] syzkaller0: entered promiscuous mode
[   75.806703][ T6342] syzkaller0: entered allmulticast mode
[   75.842736][ T6342] nbd: must specify at least one socket
[   76.060340][ T6352] openvswitch: netlink: IP tunnel dst address not specified
[   76.088221][ T6359] IPv6: NLM_F_REPLACE set, but no existing node found!
[   76.381234][ T6374] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.387334][ T6374] xt_TPROXY: Can be used only with -p tcp or -p udp
[   76.445890][ T6380] pim6reg1: entered promiscuous mode
[   76.448089][ T6380] pim6reg1: entered allmulticast mode
[   76.947279][   T33] audit: type=1800 audit(1753207529.929:2): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="memory.events" dev="tmpfs" ino=292 res=0 errno=0
[   77.121921][ T6433] netlink: 'syz.0.157': attribute type 2 has an invalid length.
[   77.134312][ T6433] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   77.142026][ T6442] netlink: 'syz.0.157': attribute type 2 has an invalid length.
[   77.146396][ T6442] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   77.162308][ T6444] bond0: Unable to set down delay as MII monitoring is disabled
[   77.174478][ T6444] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   77.244033][ T6444] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   77.472558][ T6461] __nla_validate_parse: 22 callbacks suppressed
[   77.472581][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'.
[   78.446847][ T6485] IPv6: NLM_F_REPLACE set, but no existing node found!
[   78.752786][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.870831][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'.
[   78.885753][ T6512] openvswitch: netlink: Flow key attr not present in new flow.
[   79.220245][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   79.522412][ T6547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.924876][ T6580] netlink: 'syz.1.197': attribute type 2 has an invalid length.
[   80.150697][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'.
[   80.163235][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[   80.173467][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'.
[   80.180687][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'.
[   80.372153][ T6596] netlink: 'syz.2.200': attribute type 7 has an invalid length.
[   80.378626][ T6597] netlink: 'syz.2.200': attribute type 7 has an invalid length.
[   80.442030][ T6599] netlink: 'syz.2.201': attribute type 2 has an invalid length.
[   80.873562][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'.
[   81.010213][ T6610] wg1: entered promiscuous mode
[   81.014098][ T6610] wg1: entered allmulticast mode
[   81.562239][ T6625] netlink: 'syz.0.209': attribute type 2 has an invalid length.
[   81.885838][ T6640] netlink: 'syz.2.212': attribute type 2 has an invalid length.
[   82.520154][ T6658] netlink: 'syz.1.217': attribute type 2 has an invalid length.
[   82.699935][ T6675] netlink: 236 bytes leftover after parsing attributes in process `syz.1.219'.
[   82.725031][ T6677] netlink: 'syz.0.220': attribute type 2 has an invalid length.
[   82.816344][ T6683] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   83.113821][ T6703] x_tables: duplicate underflow at hook 2
[   83.130197][ T6703] x_tables: duplicate underflow at hook 2
[   83.171329][ T6705] ieee802154 phy0 wpan0: encryption failed: -22
[   83.243805][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'.
[   83.285660][ T6712] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   83.299947][ T6713] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   83.321922][ T6716] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[   83.600385][ T6730] sock: sock_set_timeout: `syz.1.234' (pid 6730) tries to set negative timeout
[   83.665028][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'.
[   83.670910][ T6738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'.
[   83.683536][ T6737] netlink: 52 bytes leftover after parsing attributes in process `syz.1.236'.
[   83.841423][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   84.993441][ T6797] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   85.289209][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   85.343845][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.402667][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   85.412129][ T6816] bridge0: port 3(syz_tun) entered blocking state
[   85.417837][ T6816] bridge0: port 3(syz_tun) entered disabled state
[   85.421769][ T6816] syz_tun: entered allmulticast mode
[   85.428962][ T6816] syz_tun: entered promiscuous mode
[   85.432434][ T6816] bridge0: port 3(syz_tun) entered blocking state
[   85.435284][ T6816] bridge0: port 3(syz_tun) entered listening state
[   85.776872][ T6829] validate_nla: 3 callbacks suppressed
[   85.776915][ T6829] netlink: 'syz.0.262': attribute type 4 has an invalid length.
[   85.782106][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[   85.820063][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   86.489271][ T6880] netlink: 'syz.0.282': attribute type 2 has an invalid length.
[   86.492404][ T6881] netlink: 'syz.0.282': attribute type 2 has an invalid length.
[   86.646648][   T47] cfg80211: failed to load regulatory.db
[   86.775303][ T6913] netlink: 'syz.0.290': attribute type 3 has an invalid length.
[   86.786771][ T6915] netlink: 'syz.0.290': attribute type 3 has an invalid length.
[   87.069077][   T47] IPVS: starting estimator thread 0...
[   87.074058][ T6943] netlink: 'syz.2.299': attribute type 2 has an invalid length.
[   87.174980][ T6944] IPVS: using max 38 ests per chain, 91200 per kthread
[   87.709767][ T7005] __nla_validate_parse: 10 callbacks suppressed
[   87.709779][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'.
[   87.799290][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[   87.939647][ T7027] netlink: 164 bytes leftover after parsing attributes in process `syz.2.324'.
[   87.990564][ T7035] netlink: 'syz.2.326': attribute type 2 has an invalid length.
[   88.110448][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'.
[   88.189101][ T7047] netlink: 'syz.1.328': attribute type 3 has an invalid length.
[   88.191583][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'.
[   88.232730][ T7050] openvswitch: netlink: Key type 9784 is out of range max 32
[   88.246592][ T7050] openvswitch: netlink: Key type 9784 is out of range max 32
[   88.401453][ T7062] syzkaller0: entered promiscuous mode
[   88.403550][ T7062] syzkaller0: entered allmulticast mode
[   88.413995][ T7062] netlink: 164 bytes leftover after parsing attributes in process `syz.2.333'.
[   89.852640][ T7092] IPv6: addrconf: prefix option has invalid lifetime
[   89.900454][ T7092] IPv6: addrconf: prefix option has invalid lifetime
[   90.018957][ T7107] netlink: 'syz.1.348': attribute type 2 has an invalid length.
[   90.202164][ T7124] netlink: 236 bytes leftover after parsing attributes in process `syz.2.354'.
[   90.335010][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'.
[   90.492353][ T7138] netlink: 236 bytes leftover after parsing attributes in process `syz.2.359'.
[   90.568087][ T7140] netlink: 'syz.2.360': attribute type 2 has an invalid length.
[   90.623502][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'.
[   90.904471][ T7153] netlink: 'syz.1.362': attribute type 2 has an invalid length.
[   91.049897][ T7163] netlink: 'syz.0.365': attribute type 2 has an invalid length.
[   91.053975][ T7164] netlink: 'syz.0.365': attribute type 2 has an invalid length.
[   91.110620][ T7166] netlink: 'syz.1.366': attribute type 4 has an invalid length.
[   91.447941][ T7188] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   91.451081][ T7188] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   91.458253][ T7188] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   91.465132][ T7188] block nbd0: shutting down sockets
[   91.800378][ T7219] tc_dump_action: action bad kind
[   92.189585][ T7244] tc_dump_action: action bad kind
[   92.210935][ T7247] ieee802154 phy0 wpan0: encryption failed: -22
[   92.280721][ T7253] syz_tun: entered promiscuous mode
[   92.284078][ T7253] batadv_slave_0: entered promiscuous mode
[   92.289784][ T7253] hsr1: entered allmulticast mode
[   92.291829][ T7253] syz_tun: entered allmulticast mode
[   92.293899][ T7253] batadv_slave_0: entered allmulticast mode
[   92.495317][ T7276] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   92.499202][ T7277] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   92.718366][ T7297] __nla_validate_parse: 10 callbacks suppressed
[   92.718382][ T7297] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.404'.
[   92.727659][ T7297] netlink: 236 bytes leftover after parsing attributes in process `syz.2.404'.
[   92.743024][   T10] IPVS: starting estimator thread 0...
[   92.766357][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.406'.
[   92.834753][ T7302] IPVS: using max 35 ests per chain, 84000 per kthread
[   92.847825][ T7313] netlink: 'syz.0.411': attribute type 2 has an invalid length.
[   92.909966][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'.
[   92.934526][ T7315] 8021q: VLANs not supported on ip6_vti0
[   93.013872][ T7329] netlink: 236 bytes leftover after parsing attributes in process `syz.2.414'.
[   93.120773][ T7338] netlink: 236 bytes leftover after parsing attributes in process `syz.2.417'.
[   93.171379][ T7340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'.
[   93.240761][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'.
[   93.352924][ T7355] No such timeout policy "syz1"
[   93.368176][ T7355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'.
[   93.379672][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'.
[   93.796702][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.830011][ T7375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.337515][ T7412] veth3: entered promiscuous mode
[   94.610725][ T7438] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   94.672420][ T7445] veth1_to_bridge: entered promiscuous mode
[   94.674394][ T7445] veth1_to_bridge: entered allmulticast mode
[   96.474024][ T7497] tipc: Started in network mode
[   96.476582][ T7497] tipc: Node identity 0ab486107e8c, cluster identity 4711
[   96.479580][ T7497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.485032][ T7498] syzkaller0: entered promiscuous mode
[   96.499566][ T7498] syzkaller0: entered allmulticast mode
[   96.515549][ T7501] tipc: Resetting bearer <eth:syzkaller0>
[   96.529325][ T7486] tipc: Resetting bearer <eth:syzkaller0>
[   96.548145][ T7486] tipc: Disabling bearer <eth:syzkaller0>
[   96.731114][ T7519] validate_nla: 28 callbacks suppressed
[   96.731125][ T7519] netlink: 'syz.0.471': attribute type 4 has an invalid length.
[   96.736144][ T7519] netlink: 'syz.0.471': attribute type 2 has an invalid length.
[   96.797001][ T7524] gretap1: entered promiscuous mode
[   96.848852][ T7529] netlink: 'syz.0.475': attribute type 2 has an invalid length.
[   96.924106][ T7534] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004
[   97.292053][ T7551] netlink: 'syz.1.482': attribute type 2 has an invalid length.
[   97.741478][ T7561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.854914][ T7568] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   98.022023][ T7579] netlink: 'syz.2.489': attribute type 2 has an invalid length.
[   98.200159][ T7591] netlink: 'syz.1.490': attribute type 2 has an invalid length.
[   98.289463][ T7597] __nla_validate_parse: 82 callbacks suppressed
[   98.289480][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[   98.299589][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[   98.459974][ T7605] netlink: 5 bytes leftover after parsing attributes in process `syz.0.494'.
[   98.462873][ T7605] netlink: 5 bytes leftover after parsing attributes in process `syz.0.494'.
[   98.469899][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'.
[   98.568889][ T7607] netlink: 'syz.0.495': attribute type 2 has an invalid length.
[   99.284941][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'.
[   99.289637][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'.
[   99.292717][ T7631] netlink: 'syz.2.502': attribute type 4 has an invalid length.
[   99.303386][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'.
[   99.320954][ T7634] netlink: 'syz.1.503': attribute type 2 has an invalid length.
[   99.362751][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[   99.371120][ T7636] netlink: 236 bytes leftover after parsing attributes in process `syz.2.504'.
[   99.657964][ T7653] netlink: 'syz.1.509': attribute type 2 has an invalid length.
[   99.925029][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  100.089772][   T24] IPVS: starting estimator thread 0...
[  100.100203][ T7698] pim6reg1: entered promiscuous mode
[  100.102003][ T7698] pim6reg1: entered allmulticast mode
[  100.175210][ T7704] IPVS: using max 37 ests per chain, 88800 per kthread
[  100.726174][    C0] bridge0: port 3(syz_tun) entered learning state
[  101.980116][ T7786] x_tables: unsorted underflow at hook 4
[  102.256648][ T7800] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  102.261347][ T7800] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  102.554524][ T7822] validate_nla: 4 callbacks suppressed
[  102.554542][ T7822] netlink: 'syz.0.555': attribute type 2 has an invalid length.
[  103.183516][ T7845] macsec1: entered promiscuous mode
[  103.188656][ T7845] macsec1: entered allmulticast mode
[  103.216377][ T7852] bridge_slave_1: left allmulticast mode
[  103.218772][ T7852] bridge_slave_1: left promiscuous mode
[  103.223169][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.241668][ T7852] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  103.594487][ T7878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.603011][ T7878] __nla_validate_parse: 16 callbacks suppressed
[  103.603027][ T7878] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.573'.
[  103.610396][ T7878] netlink: 164 bytes leftover after parsing attributes in process `syz.0.573'.
[  103.620294][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  103.631203][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  103.638382][ T7882] ieee802154 phy1 wpan1: encryption failed: -22
[  103.775307][ T7894] netlink: 'syz.0.579': attribute type 2 has an invalid length.
[  103.922079][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'.
[  103.931132][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'.
[  103.937249][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'.
[  103.945328][ T7908] 8021q: VLANs not supported on ip_vti0
[  104.056272][ T7919] batman_adv: batadv0: Adding interface: gretap1
[  104.059255][ T7919] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.070358][ T7919] batman_adv: batadv0: Interface activated: gretap1
[  104.095060][ T7917] ieee802154 phy1 wpan1: encryption failed: -22
[  104.101824][ T7917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.584'.
[  104.141678][ T7917] netlink: 104 bytes leftover after parsing attributes in process `syz.1.584'.
[  104.148290][ T7917] netlink: 268 bytes leftover after parsing attributes in process `syz.1.584'.
[  104.587311][ T7947] netlink: 'syz.1.594': attribute type 2 has an invalid length.
[  105.589260][ T8016] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  105.634267][ T8016] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.658107][ T8019] bond1: (slave geneve2): making interface the new active one
[  105.668298][ T8019] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  105.702831][ T8016] bond1: entered promiscuous mode
[  105.705724][ T8016] geneve2: entered promiscuous mode
[  105.740138][ T8022] netlink: 'syz.2.611': attribute type 20 has an invalid length.
[  106.523820][ T8072] netlink: 'syz.0.625': attribute type 2 has an invalid length.
[  106.628540][ T8076] xt_TCPMSS: Only works on TCP SYN packets
[  107.119186][ T8098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  107.412117][ T8113] netlink: 'syz.1.637': attribute type 29 has an invalid length.
[  107.426893][ T8113] netlink: 'syz.1.637': attribute type 1 has an invalid length.
[  107.429983][ T8113] netlink: 'syz.1.637': attribute type 3 has an invalid length.
[  107.553472][ T8127] netlink: 'syz.2.642': attribute type 9 has an invalid length.
[  107.702711][ T8138] xt_CT: No such helper "syz0"
[  108.338467][ T8189] netlink: 'syz.2.658': attribute type 13 has an invalid length.
[  108.341838][ T8189] netlink: 'syz.2.658': attribute type 17 has an invalid length.
[  108.412300][ T8189] gretap0: refused to change device tx_queue_len
[  108.433550][ T8189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  108.484759][ T8192] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  108.492640][ T8192] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  108.517343][ T8189] can: request_module (can-proto-0) failed.
[  108.940935][ T8219] __nla_validate_parse: 17 callbacks suppressed
[  108.940954][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[  108.967060][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[  109.120958][ T8219] netlink: 'syz.2.667': attribute type 2 has an invalid length.
[  109.326841][ T8224] netlink: 'syz.2.668': attribute type 2 has an invalid length.
[  109.488411][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[  109.502705][ T8232] syzkaller1: entered promiscuous mode
[  109.506906][ T8232] syzkaller1: entered allmulticast mode
[  109.991136][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  110.034002][ T8262] netlink: 'syz.2.679': attribute type 2 has an invalid length.
[  110.076573][ T8265] netlink: 'syz.1.680': attribute type 2 has an invalid length.
[  110.241253][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[  110.287745][ T8279] netlink: 'syz.2.683': attribute type 2 has an invalid length.
[  110.770762][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  110.783735][ T8311] netlink: 164 bytes leftover after parsing attributes in process `syz.2.691'.
[  111.050647][ T8333] sctp: [Deprecated]: syz.0.697 (pid 8333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.050647][ T8333] Use struct sctp_sack_info instead
[  111.118271][ T8335] tipc: New replicast peer: 255.255.255.255
[  111.121068][ T8335] tipc: Enabled bearer <udp:syz2>, priority 26
[  111.209627][ T8346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.702'.
[  111.424063][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  111.436886][ T8358] IPv6: NLM_F_REPLACE set, but no existing node found!
[  111.568964][ T8366] netlink: 'syz.1.709': attribute type 2 has an invalid length.
[  111.579430][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'.
[  111.582896][ T8371] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  111.586344][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.840134][ T8386] veth0: entered promiscuous mode
[  111.842470][ T8386] vlan2: entered promiscuous mode
[  112.172550][ T8401] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.235841][   T47] tipc: Node number set to 1949861392
[  112.455068][ T8420] netlink: 'syz.2.724': attribute type 2 has an invalid length.
[  112.658729][ T8434] ksmbd: Unknown IPC event: 3, ignore.
[  112.666190][ T8434] netlink: 'syz.2.727': attribute type 23 has an invalid length.
[  113.691449][ T8523] validate_nla: 1 callbacks suppressed
[  113.691461][ T8523] netlink: 'syz.0.755': attribute type 2 has an invalid length.
[  113.977991][ T8529] __nla_validate_parse: 7 callbacks suppressed
[  113.978009][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  114.069796][ T8543] netlink: 'syz.2.761': attribute type 2 has an invalid length.
[  114.184061][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  114.342421][ T8557] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[  114.347350][ T8556] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[  114.350330][ T8556] netlink: 'syz.1.764': attribute type 3 has an invalid length.
[  114.353488][ T8556] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[  114.359175][ T8556] netlink: 204 bytes leftover after parsing attributes in process `syz.1.764'.
[  114.362661][ T8556] NCSI netlink: No device for ifindex 0
[  114.556263][ T8569] Cannot find del_set index 4 as target
[  114.631495][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  114.698453][ T8586] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  114.760625][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.776'.
[  114.798246][ T8594] ip6t_REJECT: ECHOREPLY is not supported
[  115.472360][ T8655] netlink: 236 bytes leftover after parsing attributes in process `syz.1.791'.
[  115.696748][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'.
[  115.820141][ T8682] netlink: 164 bytes leftover after parsing attributes in process `syz.1.801'.
[  116.026858][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'.
[  116.037290][ T8691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.039593][ T8691] IPv6: NLM_F_CREATE should be set when creating new route
[  116.041877][ T8691] IPv6: NLM_F_CREATE should be set when creating new route
[  116.085349][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  116.088016][    C0] bridge0: topology change detected, propagating
[  117.470141][ T8750] bridge0: port 3(syz_tun) entered disabled state
[  117.479112][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.481623][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.586970][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.601484][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.728923][ T8750] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.732369][ T8750] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.739533][ T8750] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.742273][ T8750] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.749364][ T8753] netlink: 'syz.1.824': attribute type 12 has an invalid length.
[  117.839106][ T8767] xt_time: invalid argument - start or stop time greater than 23:59:59
[  118.039280][ T8785] netlink: 'syz.2.832': attribute type 2 has an invalid length.
[  118.222462][ T8802] netlink: 'syz.1.837': attribute type 2 has an invalid length.
[  118.416761][ T8820] delete_channel: no stack
[  118.526928][ T8829] netlink: 'syz.0.841': attribute type 1 has an invalid length.
[  118.628082][ T8843] netlink: 'syz.2.846': attribute type 2 has an invalid length.
[  119.144387][ T8905] __nla_validate_parse: 13 callbacks suppressed
[  119.144404][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'.
[  119.157971][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'.
[  119.787775][ T8935] ip6tnl1: entered promiscuous mode
[  119.790640][ T8935] ip6tnl1: entered allmulticast mode
[  119.856301][ T8937] netlink: 'syz.0.873': attribute type 2 has an invalid length.
[  119.957821][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  119.962463][ T8942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.874'.
[  120.126342][ T8952] netlink: 48 bytes leftover after parsing attributes in process `syz.0.879'.
[  120.143293][ T8957] netlink: 'syz.1.880': attribute type 2 has an invalid length.
[  120.156646][ T8958] netlink: 'syz.2.881': attribute type 25 has an invalid length.
[  120.403193][ T8980] netlink: 'syz.2.886': attribute type 1 has an invalid length.
[  120.435137][ T8980] netlink: 'syz.2.886': attribute type 2 has an invalid length.
[  120.437935][ T8980] netlink: 'syz.2.886': attribute type 8 has an invalid length.
[  120.442098][ T8980] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.886'.
[  120.445404][ T8980] netlink: 'syz.2.886': attribute type 1 has an invalid length.
[  120.447871][ T8980] netlink: 'syz.2.886': attribute type 2 has an invalid length.
[  120.450689][ T8980] netlink: 'syz.2.886': attribute type 8 has an invalid length.
[  120.453872][ T8980] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.886'.
[  120.462286][ T8983] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  120.618250][ T8994] netlink: 164 bytes leftover after parsing attributes in process `syz.2.889'.
[  120.833444][ T9010] netlink: 164 bytes leftover after parsing attributes in process `syz.0.893'.
[  121.063398][ T9024] netlink: 'syz.1.899': attribute type 32 has an invalid length.
[  121.068681][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  121.082741][ T9024] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  121.103913][ T9024] raw_sendmsg: syz.1.899 forgot to set AF_INET. Fix it!
[  121.530480][ T9062] team0 (unregistering): Port device team_slave_0 removed
[  121.539210][ T9062] team0 (unregistering): Port device team_slave_1 removed
[  122.359596][ T9091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.100760][ T9162] xt_addrtype: ipv6 does not support BROADCAST matching
[  123.354238][ T9182] veth0_to_bond: entered allmulticast mode
[  123.778720][ T9206] wg1: entered promiscuous mode
[  123.780309][ T9206] wg1: entered allmulticast mode
[  124.027065][ T9208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.084414][ T9208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.261558][ T9224] __nla_validate_parse: 13 callbacks suppressed
[  124.261574][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'.
[  124.268616][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'.
[  124.346644][ T9224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.950'.
[  124.654541][ T9208] syz.2.946 (9208) used greatest stack depth: 19136 bytes left
[  124.668703][ T9238] x_tables: duplicate underflow at hook 2
[  124.823760][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.955'.
[  124.987739][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'.
[  124.994821][ T9255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'.
[  125.109338][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'.
[  125.112927][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'.
[  125.116781][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'.
[  125.120351][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.957'.
[  125.563241][ T9291] No such timeout policy "syz0"
[  125.688964][ T9296] : renamed from batadv_slave_1 (while UP)
[  126.352419][ T9351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.451964][ T9355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.471873][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.538361][ T9342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.795825][ T9390] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.799573][ T9390] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.803005][ T9390] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.806816][ T9390] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.813500][ T9390] vxlan0: entered promiscuous mode
[  126.824179][ T9390] vxlan0: entered allmulticast mode
[  127.166810][ T9416] block nbd0: server does not support multiple connections per device.
[  127.172019][ T9416] block nbd0: shutting down sockets
[  127.320874][ T9426] validate_nla: 6 callbacks suppressed
[  127.320889][ T9426] netlink: 'syz.0.997': attribute type 4 has an invalid length.
[  127.347948][ T9426] netlink: 'syz.0.997': attribute type 4 has an invalid length.
[  127.926289][ T9460] x_tables: duplicate underflow at hook 2
[  127.992650][ T9478] netlink: 'syz.0.1011': attribute type 2 has an invalid length.
[  128.008044][ T9477] netlink: 'syz.1.1012': attribute type 2 has an invalid length.
[  129.700143][ T9551] netlink: 'syz.1.1031': attribute type 2 has an invalid length.
[  130.080091][ T9558] wireguard0: entered promiscuous mode
[  130.082184][ T9558] wireguard0: entered allmulticast mode
[  130.197168][ T9561] __nla_validate_parse: 17 callbacks suppressed
[  130.197179][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1034'.
[  130.473000][ T9583] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1038'.
[  130.480808][ T9583] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1038'.
[  130.526989][ T9585] netlink: 'syz.2.1039': attribute type 21 has an invalid length.
[  130.530688][ T9585] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1039'.
[  130.537202][ T9585] netlink: 'syz.2.1039': attribute type 5 has an invalid length.
[  130.540652][ T9585] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1039'.
[  130.660559][ T9597] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  130.820758][ T9601] pim6reg: entered allmulticast mode
[  130.824323][ T9601] pim6reg: left allmulticast mode
[  130.905788][ T9607] vxcan1: entered allmulticast mode
[  130.908882][ T9607] vxcan1: left allmulticast mode
[  131.132726][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'.
[  131.291924][ T9632] vlan2: entered promiscuous mode
[  131.293990][ T9632] bridge0: entered promiscuous mode
[  131.313913][ T9635] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1053'.
[  131.631204][ T9656] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  131.692937][ T9664] netlink: 'syz.1.1061': attribute type 2 has an invalid length.
[  131.732195][ T9666] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  131.739407][ T9666] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  132.449209][ T9698] sctp: [Deprecated]: syz.0.1069 (pid 9698) Use of int in max_burst socket option.
[  132.449209][ T9698] Use struct sctp_assoc_value instead
[  132.729164][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.748916][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'.
[  132.793915][ T9713] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.148417][ T9729] Bluetooth: MGMT ver 1.23
[  133.214758][ T9733] netlink: 'syz.0.1081': attribute type 21 has an invalid length.
[  133.294406][ T9735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1082'.
[  133.731426][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'.
[  134.052646][ T9798] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  134.278221][ T9816] netlink: 'syz.2.1107': attribute type 2 has an invalid length.
[  134.582186][ T9839] bond1: entered promiscuous mode
[  134.584198][ T9839] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.661395][ T9839] bond1 (unregistering): Released all slaves
[  135.592564][ T9875] __nla_validate_parse: 8 callbacks suppressed
[  135.592583][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'.
[  135.951437][ T9887] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  135.965046][ T9887] macsec1: entered promiscuous mode
[  135.973792][ T9887] macsec1: entered allmulticast mode
[  135.976233][ T9887] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  136.052431][ T9887] netlink: 'syz.2.1126': attribute type 4 has an invalid length.
[  136.055989][ T9887] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1126'.
[  136.188160][ T9900] netlink: 'syz.1.1131': attribute type 2 has an invalid length.
[  136.668933][ T9926] netlink: 'syz.2.1135': attribute type 2 has an invalid length.
[  136.902583][ T9937] netlink: 'syz.2.1136': attribute type 2 has an invalid length.
[  137.029582][ T9944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.060261][ T9946] netlink: 'syz.1.1138': attribute type 12 has an invalid length.
[  137.131524][ T9955] netlink: 'syz.0.1140': attribute type 1 has an invalid length.
[  137.138078][ T9955] netlink: 'syz.0.1140': attribute type 3 has an invalid length.
[  137.140996][ T9955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1140'.
[  137.144325][ T9955] NCSI netlink: No device for ifindex 246
[  137.150224][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'.
[  137.153793][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'.
[  137.158247][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  137.165665][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'.
[  137.174029][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1137'.
[  137.232258][ T9959] netlink: 'syz.0.1142': attribute type 2 has an invalid length.
[  137.254303][ T9963] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1137'.
[  137.312663][ T9967] syz_tun: left allmulticast mode
[  137.320008][ T9967] syz_tun: left promiscuous mode
[  137.322729][ T9967] bridge0: port 3(syz_tun) entered disabled state
[  137.349044][ T9967] bridge_slave_0: left allmulticast mode
[  137.351263][ T9967] bridge_slave_0: left promiscuous mode
[  137.353813][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.355127][ T9969] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  137.362132][ T9967] bridge_slave_1: left allmulticast mode
[  137.367303][ T9967] bridge_slave_1: left promiscuous mode
[  137.369941][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.378726][ T9967] bond0: (slave bond_slave_0): Releasing backup interface
[  137.383968][ T9967] bond0: (slave bond_slave_1): Releasing backup interface
[  137.393703][ T9967] team0: Failed to send options change via netlink (err -105)
[  137.399527][ T9967] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  137.404087][ T9967] team0: Port device team_slave_0 removed
[  137.408719][ T9967] team0: Failed to send options change via netlink (err -105)
[  137.411939][ T9967] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  137.416859][ T9967] team0: Port device team_slave_1 removed
[  137.419492][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.423584][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.428994][ T9967] bond1: (slave geneve2): Releasing active interface
[  137.431189][ T9967] geneve2: left promiscuous mode
[  137.457150][ T9970] team0: Failed to send options change via netlink (err -105)
[  137.465177][ T9970] team0: Mode changed to "activebackup"
[  138.019994][T10001] bridge_slave_0: left allmulticast mode
[  138.034143][T10001] bridge_slave_0: left promiscuous mode
[  138.038690][T10001] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.050094][T10001] bridge_slave_1: left allmulticast mode
[  138.052339][T10001] bridge_slave_1: left promiscuous mode
[  138.068756][T10001] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.083902][T10001] bond0: (slave bond_slave_0): Releasing backup interface
[  138.096515][T10001] bond0: (slave bond_slave_1): Releasing backup interface
[  138.104123][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.110619][T10001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.116106][T10001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.119002][T10001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.128974][T10001] batman_adv: batadv0: Interface deactivated: gretap1
[  138.131244][T10001] batman_adv: batadv0: Removing interface: gretap1
[  138.250988][T10015] xt_l2tp: invalid flags combination: 4
[  138.583522][T10039] validate_nla: 3 callbacks suppressed
[  138.583538][T10039] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  138.602783][T10038] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1164'.
[  138.787985][T10051] netlink: 'syz.2.1167': attribute type 12 has an invalid length.
[  139.070145][T10061] syz_tun: entered allmulticast mode
[  139.115961][T10060] syz_tun: left allmulticast mode
[  139.121760][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.508202][T10096] netlink: 'syz.1.1182': attribute type 2 has an invalid length.
[  140.069291][T10146] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  140.080341][T10146] macvlan2: entered promiscuous mode
[  140.082465][T10146] macvlan2: entered allmulticast mode
[  140.084900][T10146] bond1: (slave macvlan2): Error -98 calling set_mac_address
[  140.569688][T10197] netlink: 'syz.0.1204': attribute type 2 has an invalid length.
[  140.580800][T10198] netlink: 'syz.1.1205': attribute type 25 has an invalid length.
[  140.590716][T10202] netlink: 'syz.2.1206': attribute type 2 has an invalid length.
[  140.642136][T10208] __nla_validate_parse: 6 callbacks suppressed
[  140.642151][T10208] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1207'.
[  140.899359][T10223] netlink: 'syz.1.1209': attribute type 2 has an invalid length.
[  141.031994][T10231] netlink: 'syz.1.1211': attribute type 2 has an invalid length.
[  141.531740][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'.
[  141.537459][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'.
[  141.590496][T10250] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  141.593700][T10251] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  141.782382][T10264] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1219'.
[  142.779610][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  142.783427][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  142.879368][T10300] tipc: Started in network mode
[  142.881386][T10300] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  142.910614][T10300] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  143.204351][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'.
[  143.207382][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  143.305216][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'.
[  143.668923][T10354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1240'.
[  144.034295][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1241'.
[  145.025777][T10427] xt_CT: You must specify a L4 protocol and not use inversions on it
[  145.302530][T10442] validate_nla: 37 callbacks suppressed
[  145.302553][T10442] netlink: 'syz.1.1270': attribute type 2 has an invalid length.
[  145.499303][T10459] netlink: 'syz.0.1273': attribute type 6 has an invalid length.
[  145.731525][T10475] ipt_REJECT: ECHOREPLY no longer supported.
[  145.852577][T10475] batadv_slave_1: entered promiscuous mode
[  145.917619][T10479] __nla_validate_parse: 5 callbacks suppressed
[  145.917632][T10479] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1280'.
[  145.931108][T10473] batadv_slave_1: left promiscuous mode
[  146.209487][T10523] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1293'.
[  146.328307][T10523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.335653][T10523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.341025][T10523] bond0 (unregistering): Released all slaves
[  146.359238][T10526] veth1_macvtap: left promiscuous mode
[  146.361128][T10526] macsec0: entered promiscuous mode
[  146.380829][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'.
[  146.959988][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'.
[  147.192072][T10551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'.
[  147.204969][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'.
[  147.598890][T10570] netlink: 'syz.2.1301': attribute type 2 has an invalid length.
[  147.820415][T10579] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1302'.
[  148.021988][T10597] netlink: 'syz.0.1307': attribute type 2 has an invalid length.
[  148.146774][T10607] syz_tun: entered allmulticast mode
[  148.246506][T10618] netlink: 'syz.1.1312': attribute type 10 has an invalid length.
[  148.246631][T10619] netlink: 'syz.1.1312': attribute type 10 has an invalid length.
[  148.285541][T10621] netlink: 'syz.0.1313': attribute type 29 has an invalid length.
[  148.312375][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'.
[  148.318893][T10621] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1313'.
[  148.365809][T10623] netlink: 'syz.1.1314': attribute type 2 has an invalid length.
[  148.506988][T10634] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1317'.
[  148.514788][T10634] ieee802154 phy1 wpan1: encryption failed: -22
[  148.519625][T10634] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  148.589124][T10637] Bluetooth: MGMT ver 1.23
[  148.604774][T10641] netlink: 'syz.0.1319': attribute type 2 has an invalid length.
[  148.741803][T10650] netlink: 'syz.0.1322': attribute type 3 has an invalid length.
[  149.297448][T10665] x_tables: duplicate underflow at hook 2
[  149.811024][T10676] 0: renamed from hsr0 (while UP)
[  149.819681][T10676] 0: entered allmulticast mode
[  149.821765][T10676] hsr_slave_0: entered allmulticast mode
[  149.824317][T10676] hsr_slave_1: entered allmulticast mode
[  149.824814][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  149.831596][T10676] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  150.061371][T10690] bond0: entered promiscuous mode
[  150.063438][T10690] bond0: entered allmulticast mode
[  150.066260][T10690] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.698822][T10707] validate_nla: 2 callbacks suppressed
[  150.698835][T10707] netlink: 'syz.1.1334': attribute type 2 has an invalid length.
[  151.082927][T10733] __nla_validate_parse: 10 callbacks suppressed
[  151.082942][T10733] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1340'.
[  151.107310][T10738] netlink: 'syz.2.1342': attribute type 12 has an invalid length.
[  151.330349][T10749] x_tables: duplicate underflow at hook 3
[  151.441286][T10760] netlink: 'syz.2.1347': attribute type 2 has an invalid length.
[  151.690658][T10776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1351'.
[  151.930622][T10810] netlink: 'syz.0.1359': attribute type 2 has an invalid length.
[  151.938740][T10812] netlink: 'syz.2.1360': attribute type 2 has an invalid length.
[  152.213661][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1363'.
[  152.299957][T10850] netlink: 'syz.0.1365': attribute type 1 has an invalid length.
[  152.302702][T10850] netlink: 'syz.0.1365': attribute type 2 has an invalid length.
[  152.424334][T10860] netlink: 'syz.1.1370': attribute type 2 has an invalid length.
[  152.758912][T10876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.763053][T10876] syzkaller0: entered promiscuous mode
[  152.766282][T10876] syzkaller0: entered allmulticast mode
[  152.783991][T10875] tipc: Resetting bearer <eth:syzkaller0>
[  152.799461][T10875] tipc: Disabling bearer <eth:syzkaller0>
[  153.032443][T10898] syzkaller1: entered promiscuous mode
[  153.035646][T10898] syzkaller1: entered allmulticast mode
[  153.090542][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'.
[  153.094219][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'.
[  153.180520][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1382'.
[  153.348145][T10917] netlink: 'syz.1.1385': attribute type 1 has an invalid length.
[  153.351574][T10917] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1385'.
[  153.602681][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'.
[  153.765352][T10951] netlink: 'syz.2.1389': attribute type 21 has an invalid length.
[  153.780774][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1389'.
[  153.803867][T10952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'.
[  154.020360][T10952] bond0 (unregistering): Released all slaves
[  154.640582][T10993] openvswitch: netlink: Key 14 has unexpected len 2 expected 28
[  155.255241][T11005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.370762][T11005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.477889][T11005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.548003][T11005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.660122][T11005] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.668176][T11005] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.676933][T11005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.684955][T11005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.826579][T11036] syz.1.1415: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  155.835450][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.1.1415 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  155.835473][T11036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.835482][T11036] Call Trace:
[  155.835489][T11036]  <TASK>
[  155.835518][T11036]  dump_stack_lvl+0x189/0x250
[  155.835553][T11036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.835572][T11036]  ? __pfx__printk+0x10/0x10
[  155.835590][T11036]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  155.835606][T11036]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  155.835625][T11036]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  155.835645][T11036]  warn_alloc+0x214/0x310
[  155.835659][T11036]  ? stack_depot_save_flags+0x40/0x900
[  155.835675][T11036]  ? __pfx_warn_alloc+0x10/0x10
[  155.835689][T11036]  ? kasan_save_track+0x4f/0x80
[  155.835708][T11036]  ? xskq_create+0x56/0x170
[  155.835721][T11036]  ? xsk_init_queue+0xb0/0x110
[  155.835733][T11036]  ? xsk_setsockopt+0x43f/0x710
[  155.835753][T11036]  ? do_sock_setsockopt+0x17c/0x1b0
[  155.835771][T11036]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  155.835790][T11036]  ? do_syscall_64+0xfa/0x3b0
[  155.835806][T11036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.835827][T11036]  __vmalloc_node_range_noprof+0x125/0x12f0
[  155.835871][T11036]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  155.835902][T11036]  ? __kasan_kmalloc+0x93/0xb0
[  155.835923][T11036]  vmalloc_user_noprof+0xad/0xf0
[  155.835944][T11036]  ? xskq_create+0xbf/0x170
[  155.835959][T11036]  xskq_create+0xbf/0x170
[  155.835973][T11036]  xsk_init_queue+0xb0/0x110
[  155.835988][T11036]  xsk_setsockopt+0x43f/0x710
[  155.836008][T11036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.836065][T11036]  ? __fget_files+0x2a/0x420
[  155.836102][T11036]  ? aa_sock_opt_perm+0x74/0x110
[  155.836123][T11036]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  155.836140][T11036]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.836162][T11036]  do_sock_setsockopt+0x17c/0x1b0
[  155.836186][T11036]  __x64_sys_setsockopt+0x13f/0x1b0
[  155.836211][T11036]  do_syscall_64+0xfa/0x3b0
[  155.836226][T11036]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.836240][T11036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.836253][T11036]  ? exc_page_fault+0x9f/0xf0
[  155.836267][T11036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.836281][T11036] RIP: 0033:0x7f3f65f8e9a9
[  155.836293][T11036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.836310][T11036] RSP: 002b:00007f3f66e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  155.836327][T11036] RAX: ffffffffffffffda RBX: 00007f3f661b5fa0 RCX: 00007f3f65f8e9a9
[  155.836340][T11036] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  155.836348][T11036] RBP: 00007f3f66010d69 R08: 0000000000000004 R09: 0000000000000000
[  155.836358][T11036] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.836366][T11036] R13: 0000000000000000 R14: 00007f3f661b5fa0 R15: 00007ffc42dbf8f8
[  155.836388][T11036]  </TASK>
[  155.836508][T11036] Mem-Info:
[  155.967509][T11036] active_anon:11963 inactive_anon:0 isolated_anon:0
[  155.967509][T11036]  active_file:1161 inactive_file:38244 isolated_file:0
[  155.967509][T11036]  unevictable:1768 dirty:116 writeback:0
[  155.967509][T11036]  slab_reclaimable:9302 slab_unreclaimable:117597
[  155.967509][T11036]  mapped:18083 shmem:2436 pagetables:945
[  155.967509][T11036]  sec_pagetables:0 bounce:0
[  155.967509][T11036]  kernel_misc_reclaimable:0
[  155.967509][T11036]  free:226252 free_pcp:18770 free_cma:0
[  155.985536][T11036] Node 0 active_anon:23404kB inactive_anon:0kB active_file:2888kB inactive_file:20988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39160kB dirty:364kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5780kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.998494][T11036] Node 1 active_anon:24448kB inactive_anon:0kB active_file:1756kB inactive_file:131988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33172kB dirty:100kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5712kB pagetables:1712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  156.011978][T11036] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.023828][T11036] lowmem_reserve[]: 0 812 812 812 812
[  156.026886][T11036] Node 0 DMA32 free:355112kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23404kB inactive_anon:0kB active_file:2888kB inactive_file:20988kB unevictable:3536kB writepending:364kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:34672kB local_pcp:19888kB free_cma:0kB
[  156.042328][T11036] lowmem_reserve[]: 0 0 0 0 0
[  156.044267][T11036] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  156.055980][T11036] lowmem_reserve[]: 0 0 854 854 854
[  156.057865][T11036] Node 1 Normal free:75916kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24448kB inactive_anon:0kB active_file:1756kB inactive_file:131988kB unevictable:3536kB writepending:100kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41032kB local_pcp:20752kB free_cma:0kB
[  156.068586][T11036] lowmem_reserve[]: 0 0 0 0 0
[  156.070138][T11036] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.075059][T11036] Node 0 DMA32: 848*4kB (UM) 351*8kB (UME) 105*16kB (UME) 191*32kB (UME) 113*64kB (UME) 88*128kB (UME) 36*256kB (UM) 52*512kB (UME) 38*1024kB (UME) 13*2048kB (UME) 54*4096kB (UM) = 355048kB
[  156.080757][T11036] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  156.087479][T11036] Node 1 Normal: 25*4kB (UME) 615*8kB (UME) 453*16kB (UE) 309*32kB (UE) 188*64kB (UME) 58*128kB (UE) 18*256kB (UME) 2*512kB (UM) 2*1024kB (U) 7*2048kB (U) 3*4096kB (U) = 75916kB
[  156.092794][T11036] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.096094][T11036] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  156.098896][T11036] 41841 total pagecache pages
[  156.100722][T11036] 0 pages in swap cache
[  156.102182][T11036] Free swap  = 124996kB
[  156.103671][T11036] Total swap = 124996kB
[  156.105882][T11036] 786301 pages RAM
[  156.107397][T11036] 0 pages HighMem/MovableOnly
[  156.109031][T11036] 241058 pages reserved
[  156.110473][T11036] 0 pages cma reserved
[  156.359219][T11066] __nla_validate_parse: 3 callbacks suppressed
[  156.359234][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'.
[  156.384931][T11068] validate_nla: 2 callbacks suppressed
[  156.384950][T11068] netlink: 'syz.2.1425': attribute type 2 has an invalid length.
[  156.422040][T11073] netlink: 'syz.0.1427': attribute type 2 has an invalid length.
[  156.492787][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1428'.
[  156.630850][T11068] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1425'.
[  156.682970][T11105] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1430'.
[  156.688901][T11104] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  156.692355][T11104] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1433'.
[  156.709053][T11104] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1433'.
[  156.804295][T11105] "syz.1.1430" (11105) uses obsolete ecb(arc4) skcipher
[  157.282504][T11126] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1440'.
[  157.479618][T11139] syzkaller0: entered promiscuous mode
[  157.481858][T11139] syzkaller0: entered allmulticast mode
[  157.684388][T11148] netlink: 'syz.2.1445': attribute type 2 has an invalid length.
[  158.636319][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'.
[  159.028400][T11209] bridge3: entered promiscuous mode
[  159.030700][T11209] bridge3: entered allmulticast mode
[  159.039618][T11209] team0: Port device bridge3 added
[  159.234137][T11230] netlink: 'syz.1.1463': attribute type 2 has an invalid length.
[  159.260216][T11232] pim6reg: entered allmulticast mode
[  159.264042][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1461'.
[  159.268504][T11232] pim6reg: left allmulticast mode
[  159.299394][T11228] xt_CT: No such helper "pptp"
[  159.315044][T11228] --map-set only usable from mangle table
[  159.500700][T11248] x_tables: duplicate underflow at hook 2
[  159.749625][T11262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.753398][T11262] syzkaller0: entered promiscuous mode
[  159.757769][T11262] syzkaller0: entered allmulticast mode
[  159.769304][T11262] tipc: Resetting bearer <eth:syzkaller0>
[  159.790744][T11264] netlink: 'syz.2.1468': attribute type 2 has an invalid length.
[  159.853771][T11261] tipc: Resetting bearer <eth:syzkaller0>
[  159.876600][T11261] tipc: Disabling bearer <eth:syzkaller0>
[  160.392033][T11287] netlink: 'syz.1.1473': attribute type 2 has an invalid length.
[  160.509273][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'.
[  161.443561][T11353] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  161.447001][T11353] __nla_validate_parse: 2 callbacks suppressed
[  161.447017][T11353] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1488'.
[  161.452423][T11353] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  161.459911][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'.
[  161.519856][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'.
[  161.607751][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.252472][T11358] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1492'.
[  162.547042][T11394] netlink: 'syz.2.1501': attribute type 2 has an invalid length.
[  162.834152][T11416] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1506'.
[  162.884794][T11419] netlink: 'syz.2.1507': attribute type 2 has an invalid length.
[  162.901431][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'.
[  162.919944][T11421] xt_TPROXY: Can be used only with -p tcp or -p udp
[  163.511173][T11448] netlink: 'syz.0.1513': attribute type 2 has an invalid length.
[  164.000190][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'.
[  164.089652][T11496] macsec1: entered allmulticast mode
[  164.091572][T11496] macsec0: entered allmulticast mode
[  164.348947][T11513] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  164.364725][T11513] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  164.411010][T11515] netlink: 'syz.0.1527': attribute type 2 has an invalid length.
[  164.703303][T11527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1528'.
[  164.764095][T11535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.110809][T11564] netlink: 'syz.2.1536': attribute type 2 has an invalid length.
[  165.149335][T11566] netlink: 'syz.1.1537': attribute type 2 has an invalid length.
[  165.157590][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'.
[  165.441477][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'.
[  165.614964][T11600] sch_fq: defrate 6 ignored.
[  165.908643][T11620] netlink: 'syz.0.1551': attribute type 2 has an invalid length.
[  166.102552][T11632] netlink: 'syz.2.1555': attribute type 2 has an invalid length.
[  166.837945][T11664] bridge2: entered allmulticast mode
[  166.988687][T11669] __nla_validate_parse: 3 callbacks suppressed
[  166.988702][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  167.124064][T11679] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1565'.
[  167.231711][T11689] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1568'.
[  167.236577][T11689] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1568'.
[  167.271360][T11692] xt_ecn: cannot match TCP bits for non-tcp packets
[  167.486678][T11710] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1574'.
[  167.491568][T11714] validate_nla: 2 callbacks suppressed
[  167.491584][T11714] netlink: 'syz.2.1575': attribute type 2 has an invalid length.
[  167.692199][T11730] netlink: 'syz.0.1578': attribute type 2 has an invalid length.
[  168.281586][T11735] batman_adv: batadv0: Adding interface: dummy0
[  168.288316][T11735] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.302036][T11735] batman_adv: batadv0: Interface activated: dummy0
[  168.427656][T11748] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1580'.
[  168.508414][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'.
[  168.715367][T11761] bridge0: port 1(gretap0) entered blocking state
[  168.719061][T11761] bridge0: port 1(gretap0) entered disabled state
[  168.721739][T11761] gretap0: entered allmulticast mode
[  168.729368][T11761] gretap0: entered promiscuous mode
[  168.732530][T11761] bridge0: port 1(gretap0) entered blocking state
[  168.735102][T11761] bridge0: port 1(gretap0) entered forwarding state
[  168.931410][T11786] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1592'.
[  168.983229][T11789] netlink: 'syz.1.1594': attribute type 2 has an invalid length.
[  168.987458][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'.
[  168.991718][T11790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'.
[  169.067370][T11800] x_tables: duplicate underflow at hook 3
[  169.083410][T11800] syzkaller1: entered promiscuous mode
[  169.086355][T11800] syzkaller1: entered allmulticast mode
[  169.190978][T11808] syzkaller1: entered promiscuous mode
[  169.197619][T11808] syzkaller1: entered allmulticast mode
[  169.640621][T11853] tipc: Invalid UDP bearer configuration
[  169.640652][T11853] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  170.497191][T11907] delete_channel: no stack
[  171.891498][T12014] netlink: 'syz.0.1657': attribute type 2 has an invalid length.
[  171.940207][T12022] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  172.398392][T12057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  172.589841][T12061] netlink: 'syz.1.1667': attribute type 2 has an invalid length.
[  172.870093][T12068] __nla_validate_parse: 29 callbacks suppressed
[  172.870107][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'.
[  173.028465][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  173.114975][T12075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1672'.
[  173.140616][T12075] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  173.182834][T12078] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1673'.
[  173.189856][T12078] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1673'.
[  173.262053][T12080] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  173.687727][T12103] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1679'.
[  173.718324][T12105] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1680'.
[  173.722669][T12105] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1680'.
[  173.851627][T12112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1683'.
[  173.913866][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'.
[  174.130377][T12137] openvswitch: netlink: IPv4 tun info is not correct
[  174.472045][T12173] netlink: 'syz.1.1694': attribute type 39 has an invalid length.
[  175.264523][T12229] xt_cgroup: invalid path, errno=-2
[  175.603056][T12243] syzkaller1: entered promiscuous mode
[  175.605572][T12243] syzkaller1: entered allmulticast mode
[  175.696614][T12249] veth0: entered promiscuous mode
[  175.750448][T12248] veth0: left promiscuous mode
[  175.754047][T12254] Cannot find add_set index 0 as target
[  175.808058][T12257] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.842949][T12260] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  175.861995][T12260] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  176.222396][T12288] netlink: 'syz.1.1725': attribute type 2 has an invalid length.
[  176.226281][T12287] netlink: 'syz.1.1725': attribute type 2 has an invalid length.
[  176.538429][T12316] netlink: 'syz.0.1730': attribute type 2 has an invalid length.
[  176.598991][T12322] netlink: 'syz.1.1731': attribute type 1 has an invalid length.
[  176.949391][T12349] tun0: tun_chr_ioctl cmd 1074025677
[  176.951591][T12349] tun0: linktype set to 804
[  177.612360][T12371] netlink: 'syz.1.1748': attribute type 2 has an invalid length.
[  177.691843][T12380] Cannot find add_set index 0 as target
[  177.794517][T12386] openvswitch: netlink: IPv4 tun info is not correct
[  177.949933][T12392] __nla_validate_parse: 9 callbacks suppressed
[  177.949949][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  178.119614][T12407] xt_hashlimit: size too large, truncated to 1048576
[  178.126331][T12409] netlink: 'syz.1.1758': attribute type 2 has an invalid length.
[  178.180592][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'.
[  178.371564][T12423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1762'.
[  178.400001][T12423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1762'.
[  178.562552][T12433] netlink: 'syz.0.1765': attribute type 12 has an invalid length.
[  178.565571][T12433] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1765'.
[  178.717726][T12448] gretap0: left allmulticast mode
[  178.719429][T12448] gretap0: left promiscuous mode
[  178.721134][T12448] bridge0: port 1(gretap0) entered disabled state
[  178.813883][T12448] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  178.842332][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'.
[  178.852364][T12455] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1769'.
[  178.972113][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1771'.
[  179.112957][T12470] syz_tun (unregistering): left promiscuous mode
[  179.409608][T12498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.614756][T12507] ip6gretap0: entered promiscuous mode
[  179.617492][T12507] vlan3: entered promiscuous mode
[  179.655342][T12511] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1783'.
[  179.660107][T12511] syz_tun: entered promiscuous mode
[  179.663982][T12511] syz_tun: entered allmulticast mode
[  179.896454][T12531] netlink: 'syz.2.1788': attribute type 2 has an invalid length.
[  180.148489][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'.
[  180.360596][T12559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  180.420082][T12564] batadv_slave_1: entered promiscuous mode
[  180.780724][T12580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.783328][T12580] syzkaller0: entered promiscuous mode
[  180.790220][T12580] syzkaller0: entered allmulticast mode
[  180.800458][T12579] tipc: Resetting bearer <eth:syzkaller0>
[  180.816418][T12579] tipc: Disabling bearer <eth:syzkaller0>
[  181.180344][T12621] netlink: 'syz.1.1807': attribute type 1 has an invalid length.
[  181.204166][T12621] smc: adding net device bond0 with user defined pnetid SYZ2
[  181.219368][T12621] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.246953][T12621] bond0: (slave ip6gretap1): making interface the new active one
[  181.251676][T12621] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  181.284362][T12626] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  181.298704][T12621] veth3: entered promiscuous mode
[  181.310724][T12621] bond0: (slave veth3): Enslaving as an active interface with a down link
[  181.322931][T12621] erspan0: entered allmulticast mode
[  181.353628][T12621] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  181.657637][T12638] smc: removing net device bond0 with user defined pnetid SYZ2
[  181.663068][T12638] bond0 (unregistering): (slave ip6gretap1): Releasing active interface
[  181.671307][T12638] bond0 (unregistering): (slave veth3): Releasing active interface
[  181.680433][T12638] bond0 (unregistering): (slave erspan0): Releasing active interface
[  181.691828][T12638] bond0 (unregistering): Released all slaves
[  181.778283][T12655] unknown channel width for channel at 909000KHz?
[  181.781217][T12655] unknown channel width for channel at 909000KHz?
[  181.837747][T12664] netlink: 'syz.0.1815': attribute type 11 has an invalid length.
[  183.159580][T12720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.319131][T12730] __nla_validate_parse: 32 callbacks suppressed
[  183.319146][T12730] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1837'.
[  183.343289][T12732] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1836'.
[  183.433937][T12743] netlink: 'syz.0.1840': attribute type 2 has an invalid length.
[  183.581931][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'.
[  183.641095][T12762] netlink: 'syz.1.1844': attribute type 2 has an invalid length.
[  183.652484][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'.
[  183.671528][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1843'.
[  183.677940][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'.
[  183.690556][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'.
[  183.694525][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'.
[  183.753210][T12769] netlink: 'syz.2.1845': attribute type 2 has an invalid length.
[  184.301514][T12777] netlink: 'syz.0.1846': attribute type 11 has an invalid length.
[  184.415613][T12779] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1847'.
[  184.419842][T12779] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1847'.
[  184.561580][T12786] netlink: 'syz.1.1849': attribute type 4 has an invalid length.
[  184.566021][T12786] netlink: 'syz.1.1849': attribute type 4 has an invalid length.
[  184.958800][T12826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.959845][T12829] netlink: 'syz.1.1862': attribute type 12 has an invalid length.
[  184.966501][T12829] netlink: 'syz.1.1862': attribute type 29 has an invalid length.
[  184.968873][T12829] netlink: 'syz.1.1862': attribute type 2 has an invalid length.
[  185.199556][T12846] netlink: 'syz.2.1868': attribute type 2 has an invalid length.
[  185.203089][T12842] 8021q: VLANs not supported on nlmon0
[  186.007308][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.803868][T12885] syzkaller0: entered promiscuous mode
[  186.807709][T12885] syzkaller0: entered allmulticast mode
[  186.812966][T12883] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  186.826339][T12884] team0: Device ipvlan1 failed to register rx_handler
[  187.891641][T12958] xt_CT: No such helper "snmp"
[  188.239344][T12981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.402185][T12992] __nla_validate_parse: 14 callbacks suppressed
[  188.402206][T12992] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1904'.
[  188.420165][T12992] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1904'.
[  189.077681][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'.
[  189.140337][T13024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1910'.
[  189.251296][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'.
[  189.256720][T13029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.312961][T13034] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1913'.
[  189.319949][T13034] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1913'.
[  189.471397][T13038] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  189.484914][ T5859] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  189.527861][ T1897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.531041][ T1897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.682920][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1921'.
[  189.794443][T13062] Unsupported ieee802154 address type: 0
[  189.805535][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'.
[  190.239256][T13096] tipc: Started in network mode
[  190.241411][T13096] tipc: Node identity 5ed8fb192611, cluster identity 4711
[  190.245657][T13096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.249076][T13096] syzkaller0: entered promiscuous mode
[  190.249293][T13097] validate_nla: 6 callbacks suppressed
[  190.249306][T13097] netlink: 'syz.0.1933': attribute type 83 has an invalid length.
[  190.251265][T13096] syzkaller0: entered allmulticast mode
[  190.270467][T13097] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  190.273581][T13096] tipc: Resetting bearer <eth:syzkaller0>
[  190.276762][T13099] netlink: 'syz.2.1934': attribute type 2 has an invalid length.
[  190.288596][T13093] tipc: Resetting bearer <eth:syzkaller0>
[  190.304337][T13093] tipc: Disabling bearer <eth:syzkaller0>
[  190.572622][T13120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1939'.
[  190.587385][T13120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.591328][T13120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.597910][T13120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.601552][T13120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.605590][T13120] geneve3: entered promiscuous mode
[  190.702050][T13133] netlink: 'syz.1.1941': attribute type 2 has an invalid length.
[  190.992203][T13145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.565478][T13189] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  191.633093][T13194] netlink: 'syz.1.1955': attribute type 8 has an invalid length.
[  191.644668][T13190] 
[  191.645493][T13190] ======================================================
[  191.647592][T13190] WARNING: possible circular locking dependency detected
[  191.649779][T13190] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  191.653697][T13190] ------------------------------------------------------
[  191.656493][T13190] syz.1.1955/13190 is trying to acquire lock:
[  191.658954][T13190] ffffffff8f6746d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0
[  191.662448][T13190] 
[  191.662448][T13190] but task is already holding lock:
[  191.665308][T13190] ffff88810782d370 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[  191.668192][T13190] 
[  191.668192][T13190] which lock already depends on the new lock.
[  191.668192][T13190] 
[  191.671385][T13190] 
[  191.671385][T13190] the existing dependency chain (in reverse order) is:
[  191.674212][T13190] 
[  191.674212][T13190] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  191.676765][T13190]        lock_acquire+0x120/0x360
[  191.678499][T13190]        _raw_spin_lock_bh+0x36/0x50
[  191.680422][T13190]        nr_del_node+0x152/0x8d0
[  191.682064][T13190]        nr_rt_ioctl+0x989/0xd50
[  191.683626][T13190]        sock_do_ioctl+0xdc/0x300
[  191.685151][T13190]        sock_ioctl+0x576/0x790
[  191.686722][T13190]        __se_sys_ioctl+0xfc/0x170
[  191.688345][T13190]        do_syscall_64+0xfa/0x3b0
[  191.689865][T13190]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.691963][T13190] 
[  191.691963][T13190] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  191.694329][T13190]        lock_acquire+0x120/0x360
[  191.695989][T13190]        _raw_spin_lock_bh+0x36/0x50
[  191.697778][T13190]        nr_rt_device_down+0xa9/0x720
[  191.699695][T13190]        nr_device_event+0x137/0x150
[  191.701698][T13190]        notifier_call_chain+0x1b6/0x3e0
[  191.703702][T13190]        __dev_notify_flags+0x18d/0x2e0
[  191.705705][T13190]        netif_change_flags+0xe8/0x1a0
[  191.707604][T13190]        dev_change_flags+0x130/0x260
[  191.709299][T13190]        dev_ioctl+0x7b4/0x1150
[  191.710801][T13190]        sock_do_ioctl+0x22c/0x300
[  191.712508][T13190]        sock_ioctl+0x576/0x790
[  191.714179][T13190]        __se_sys_ioctl+0xfc/0x170
[  191.715982][T13190]        do_syscall_64+0xfa/0x3b0
[  191.717953][T13190]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.720110][T13190] 
[  191.720110][T13190] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  191.722497][T13190]        validate_chain+0xb9b/0x2140
[  191.724300][T13190]        __lock_acquire+0xab9/0xd20
[  191.726220][T13190]        lock_acquire+0x120/0x360
[  191.728098][T13190]        _raw_spin_lock_bh+0x36/0x50
[  191.729834][T13190]        nr_del_node+0x517/0x8d0
[  191.731819][T13190]        nr_rt_ioctl+0x989/0xd50
[  191.733635][T13190]        sock_do_ioctl+0xdc/0x300
[  191.735658][T13190]        sock_ioctl+0x576/0x790
[  191.737606][T13190]        __se_sys_ioctl+0xfc/0x170
[  191.739603][T13190]        do_syscall_64+0xfa/0x3b0
[  191.741636][T13190]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.744188][T13190] 
[  191.744188][T13190] other info that might help us debug this:
[  191.744188][T13190] 
[  191.747915][T13190] Chain exists of:
[  191.747915][T13190]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  191.747915][T13190] 
[  191.753371][T13190]  Possible unsafe locking scenario:
[  191.753371][T13190] 
[  191.756235][T13190]        CPU0                    CPU1
[  191.758334][T13190]        ----                    ----
[  191.760492][T13190]   lock(&nr_node->node_lock);
[  191.762438][T13190]                                lock(nr_node_list_lock);
[  191.765316][T13190]                                lock(&nr_node->node_lock);
[  191.768239][T13190]   lock(nr_neigh_list_lock);
[  191.770196][T13190] 
[  191.770196][T13190]  *** DEADLOCK ***
[  191.770196][T13190] 
[  191.773324][T13190] 2 locks held by syz.1.1955/13190:
[  191.774937][T13190]  #0: ffffffff8f674738 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0
[  191.777910][T13190]  #1: ffff88810782d370 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[  191.780888][T13190] 
[  191.780888][T13190] stack backtrace:
[  191.782972][T13190] CPU: 1 UID: 0 PID: 13190 Comm: syz.1.1955 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  191.782993][T13190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.783003][T13190] Call Trace:
[  191.783015][T13190]  <TASK>
[  191.783027][T13190]  dump_stack_lvl+0x189/0x250
[  191.783054][T13190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.783074][T13190]  ? __pfx__printk+0x10/0x10
[  191.783095][T13190]  ? print_lock_name+0xde/0x100
[  191.783115][T13190]  print_circular_bug+0x2ee/0x310
[  191.783136][T13190]  check_noncircular+0x134/0x160
[  191.783154][T13190]  validate_chain+0xb9b/0x2140
[  191.783178][T13190]  ? irqentry_exit+0x74/0x90
[  191.783193][T13190]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.783208][T13190]  __lock_acquire+0xab9/0xd20
[  191.783220][T13190]  ? nr_del_node+0x517/0x8d0
[  191.783229][T13190]  lock_acquire+0x120/0x360
[  191.783236][T13190]  ? nr_del_node+0x517/0x8d0
[  191.783244][T13190]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  191.783254][T13190]  ? do_raw_spin_unlock+0x4d/0x240
[  191.783266][T13190]  ? nr_neigh_get_dev+0xbd/0x140
[  191.783275][T13190]  ? nr_del_node+0x517/0x8d0
[  191.783286][T13190]  _raw_spin_lock_bh+0x36/0x50
[  191.783306][T13190]  ? nr_del_node+0x517/0x8d0
[  191.783319][T13190]  nr_del_node+0x517/0x8d0
[  191.783337][T13190]  nr_rt_ioctl+0x989/0xd50
[  191.783353][T13190]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  191.783375][T13190]  ? kasan_quarantine_put+0xdd/0x220
[  191.783396][T13190]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  191.783415][T13190]  ? apparmor_capable+0x137/0x1b0
[  191.783429][T13190]  ? capable+0x89/0xe0
[  191.783439][T13190]  ? nr_ioctl+0x1b1/0x3b0
[  191.783458][T13190]  sock_do_ioctl+0xdc/0x300
[  191.783476][T13190]  ? __pfx_sock_do_ioctl+0x10/0x10
[  191.783492][T13190]  ? __lock_acquire+0xab9/0xd20
[  191.783541][T13190]  sock_ioctl+0x576/0x790
[  191.783553][T13190]  ? __pfx_sock_ioctl+0x10/0x10
[  191.783562][T13190]  ? __fget_files+0x2a/0x420
[  191.783570][T13190]  ? __fget_files+0x3a0/0x420
[  191.783578][T13190]  ? __fget_files+0x2a/0x420
[  191.783587][T13190]  ? bpf_lsm_file_ioctl+0x9/0x20
[  191.783603][T13190]  ? __pfx_sock_ioctl+0x10/0x10
[  191.783616][T13190]  __se_sys_ioctl+0xfc/0x170
[  191.783634][T13190]  do_syscall_64+0xfa/0x3b0
[  191.783651][T13190]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.783664][T13190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.783678][T13190]  ? exc_page_fault+0x9f/0xf0
[  191.783692][T13190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.783708][T13190] RIP: 0033:0x7f3f65f8e9a9
[  191.783724][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.783743][T13190] RSP: 002b:00007f3f66e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  191.783754][T13190] RAX: ffffffffffffffda RBX: 00007f3f661b5fa0 RCX: 00007f3f65f8e9a9
[  191.783761][T13190] RDX: 0000200000000040 RSI: 000000000000890c RDI: 000000000000000d
[  191.783766][T13190] RBP: 00007f3f66010d69 R08: 0000000000000000 R09: 0000000000000000
[  191.783771][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.783777][T13190] R13: 0000000000000000 R14: 00007f3f661b5fa0 R15: 00007ffc42dbf8f8
[  191.783787][T13190]  </TASK>

VM DIAGNOSIS:
18:07:24  Registers:
info registers vcpu 0

CPU#0
RAX=bb0729f5eb4aa500 RBX=ffffffff81976a48 RCX=bb0729f5eb4aa500 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc379668000 CR3=00000001118e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=a213a849ce356f8b d423ec0773a8566b XMM03=959166f48f7816dc 6b8242df3fb23cbc
XMM04=0c17ebef954ade1a 274759825dfaa1f8 XMM05=5bde94959166f48f 7816dc6b8242df3f
XMM06=b23cbca213a849ce 356f8bd423ec0773 XMM07=a8566baabd250f75 6539e5afccc11303
XMM08=86bd3e5f0b2d82eb 918f2dc8debbd6a4 XMM09=0000000000000000 00007fc08f211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001464 RDI=0000000000001465 RBP=00000000000003f8 RSP=ffffc900069b70f0
R8 =ffff888020ee0237 R9 =1ffff110041dc046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18cd R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f66e986c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2f6f18 CR3=0000000106d92000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3f66186478 00007f3f66186450 XMM03=00007f3f66186488 00007f3f66186480
XMM04=00007f3f66ced100 00007f3f66186440 XMM05=00007f3f66186458 00007f3f661864a0
XMM06=00007f3f66186498 00007f3f66186490 XMM07=00007f3f66186488 00007f3f66186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3f66011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
