last executing test programs:

1.889681516s ago: executing program 2 (id=1070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1170}}, 0x40)

1.88871833s ago: executing program 2 (id=1072):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x60}}, 0x24000880)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000b00)={'gre0\x00', <r7=>0x0, 0x700, 0x8080, 0x94f1, 0x101, {{0x24, 0x4, 0x1, 0x22, 0x90, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x1a, [@empty, @private=0xa010100, @local, @remote, @local, @remote]}, @timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0x3, [{@empty}, {@rand_addr=0x64010101, 0x1ff}]}, @timestamp={0x44, 0xc, 0xf3, 0x0, 0xa, [0xa, 0x5f6]}, @lsrr={0x83, 0x17, 0x3e, [@remote, @rand_addr=0x64010101, @private=0xa010100, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x6}, @end, @generic={0x88, 0xe, "4712ed0a3a66764cf2159c63"}, @rr={0x7, 0xf, 0xf8, [@empty, @loopback, @private=0xa010102]}, @end]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', <r8=>0x0, 0x7, 0x10, 0x8, 0x2, {{0x2d, 0x4, 0x2, 0x0, 0xb4, 0x65, 0x0, 0x1, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x26, 0x3, [{0x2, 0xa, "db4a8033040f4bc3"}, {0x2, 0x7, "1d1167d918"}, {0x6, 0xf, "70474ac1f39e4a849d6ddb91fc"}]}, @ssrr={0x89, 0x17, 0x10, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @cipso={0x86, 0x63, 0x1, [{0x5, 0x4, 'CA'}, {0x1, 0xf, "03e380dcd7122cd1488277d714"}, {0x2, 0x6, "b2dcee95"}, {0xca6e47770589a7c0, 0x10, "e4a37ec6079a7120be50ece1cb72"}, {0x2, 0xa, "d89f7778450184bc"}, {0x2, 0xb, "51c59567967c9ea355"}, {0x6, 0x2}, {0x2, 0x12, "5a3065e4d0a96964539f13bf283f1de3"}, {0x6, 0xb, "d72b4d4055aab34052"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x8, 0x1, 0x1e, {{0x23, 0x4, 0x0, 0x8, 0x8c, 0x66, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x72, 0x0, 0x6, [0x5, 0xff, 0x0, 0x7, 0x80000000]}, @timestamp_addr={0x44, 0x44, 0x86, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x12}, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x1a000000}, {@broadcast}, {@rand_addr=0x64010101, 0x3ff}, {@empty, 0x6}, {@local, 0x1}, {@empty, 0xe}]}, @cipso={0x86, 0x18, 0x1, [{0x7, 0x6, "6f1f3720"}, {0x5, 0xc, "fd42f0579cf763f3c30a"}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2d, 0xe, 0x16, 0x401, 0x10, @private2, @empty, 0x7, 0x7, 0x1ff, 0x4}})
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r10=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="9a0f00"/20, @ANYRES32=r10], 0x50)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x118, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000480)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

1.538820853s ago: executing program 2 (id=1074):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='cubic', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000801000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060101000000deff000000020000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
r10 = socket$netlink(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01008800000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

925.781318ms ago: executing program 2 (id=1082):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100ea0000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000004000680ab709bdb3ff3ff1c7110f8d362aa04a8beee4782d6fb27e0ed18c3ae0c8b20aecedd027031d899dfb61763daf67291d506247a7b3fd18cb277c7b1185fea2da4f88f18bf7346ca36badc5e"], 0x98}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x9b, 0x11, &(0x7f0000000200)="8d597f4b52c4bfd3739c2df7591a53dfaf32cba9f54e7d4d9a8b14b519051a84483d90a75073b94ecb6e5bd1d1ed90fd5b7b870420b67c24e67c7bdbe97edcee4e3fbfe2df5bd8a5075477a6f525c455f60eff8b4d047b2876337369a20638bbd8d2fff45bdc0aa67b4b94c5493c6b491cee1a46f1d79a28962d76438f6d778c79d21f7619eb9088a5e23a54247a57f88ca5c9e1a3de4ce4fde8a7", &(0x7f0000000000)=""/17, 0x7, 0x0, 0x5, 0x8f, &(0x7f0000000040)="1ec91f0480", &(0x7f0000000580)="bdf040419350b924c1e97c4ece04f5eb09d4793d02e05f1bdb9729cd7cbf3a0e8f7703c9937d9d63148796a5de1b2560836021aa93d495d9643479bb6d766f98f7c648d0f87e43d07dad4eda6fba0287d85cec75b5466cd56203c2cb431a0052b584772a7496891b9547f475e1a6d8dca495e2097693e5f153a235291e886ca7a746159a9f9c1211ee93b67015301a", 0x4, 0x0, 0x6}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc8}}, 0x0)

867.371545ms ago: executing program 2 (id=1084):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000500)="0c520438d6dcfbd78dde87af41463d2e8e584ae62d42b7dd55c4fa25cfe7b433bf67c0875521660a2ed1ac8cb90d478ce7dff623b3", 0x35)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f00000002c0)="570f68ea6860448eb085bb88f1211e72c74fcbdb5f07050943b9b46ff8f360453afb0817496e4e74565c1237", &(0x7f0000001740)=""/190}, 0x20)
syz_init_net_socket$ax25(0x3, 0x2, 0xc9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)="8ec6b1ee58ca706c1650eb9a56cb55897a498e6841bedf1145bb9b3a049dc5f35a05b9fc944a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9ee4b5604686bd73df8ade2e4b", &(0x7f0000000740)=""/4096}, 0x20)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xe, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r5 = socket$inet6(0x2d, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x11d, 0x20, 0x0, 0x0)
r6 = socket(0x15, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f00000000c0))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0)

627.924805ms ago: executing program 2 (id=1088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r5, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000306010300000000000000000500ec0405000100070000000900020073797a32000000000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

569.877026ms ago: executing program 0 (id=1090):
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000001640)="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", 0x2dc}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a", 0xba}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)

568.69956ms ago: executing program 0 (id=1091):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000200001002abd7000fcdbdf250a00141c050000050f0000001400020000000000000000000000ffffac1414aa050016001d0000000c001400", @ANYRES32], 0x44}}, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000001540)=""/4109, &(0x7f00000001c0)=0x100d)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0xb6, 0x5a}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) (async, rerun: 64)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) (rerun: 64)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x40)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'sit0\x00', 0x8000}) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
r6 = accept4(r5, 0x0, 0x0, 0x800)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000013c0)={0x1f, 0x0, @any, 0x1, 0x1}, 0xe) (async)
recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000004400018014000180080001000000000008000200ac1414bb2c00018014000300fe00000114000400fe8000000000000000000000000000aa3c0000800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08001540000000030400068000"/160], 0xa0}}, 0x40001) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f0000001380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x200448d4)

429.899826ms ago: executing program 0 (id=1092):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x1, 0xfffffffe}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x26020480)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="2f0000000000000004000000", @ANYRES32, @ANYBLOB="2638f2790b69565629b1d635977c00575b8a2dbcb092e993e5e3fa12ed4463ed8553620f71b58b9b6c7ef4b95f96f3ccf6b051c17614921b103dca3d47550b61290af502a433417037b923e397fccc4340bd79e1e685d827806d44f40f4cc7", @ANYRES64=0x0], 0x20)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4010)

369.146025ms ago: executing program 0 (id=1093):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r2 = socket$qrtr(0x2a, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xa, 0x0, 0x0, 0x1, 0x8000}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040)) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x0, 0x0)
getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0d7e91d1de91d6fe9e200a0a8ebcb55da6ba11d68813364b3d6997d1cd8b0492b6213bc64c1138685a3cc8855599af0a9076a69bd23147a308002beded23ef475e86c98de60fb06ba08c60abf56a0d2df01479e446b657de382136e6f253edf8a795c96de73f30e7c0ceaf2b144bb413818cac0494fada4f9a0ee8d3c764f025290b56a5"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, 0x688}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800617839857257804888d48f0000", @ANYRES16=r1, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

367.516913ms ago: executing program 0 (id=1094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r4, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socket$key(0xf, 0x3, 0x2) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x1, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newae={0x64, 0x1e, 0xa15, 0x70bd2b, 0x25dfdbff, {{@in6=@empty, 0x4d2, 0xa, 0xf0}, @in6=@private2, 0x10}, [@lifetime_val={0x24, 0x9, {0x4, 0x5, 0x0, 0x1ff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0)
openat$cgroup_devices(r9, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r1, 0x0, r6, 0x0, 0x47, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}}, 0x0)

308.624794ms ago: executing program 1 (id=1095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = accept4(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x800)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000180)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1})
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0xfd, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20008840}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

255.936597ms ago: executing program 1 (id=1096):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0x11, 0x9, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x7, &(0x7f00000008c0))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce4163"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x4, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x8000, 0xfffffffa, 0x510f, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @private=0xa010100}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000700)={0x0, @vsock={0x28, 0x0, 0x2711, @host}, @l2={0x1f, 0x9, @any, 0x7, 0x2}, @llc={0x1a, 0x205, 0x0, 0xf9, 0x2, 0xa0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x3, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)='caif0\x00', 0xa3, 0xa602, 0x1ff})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x20044085)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r3)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "0813f3", 0x9, 0xff, 0x0, @mcast1, @mcast2, [@fragment={0x84, 0x0, 0xc, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x4)

254.523196ms ago: executing program 0 (id=1097):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @alu={0x7, 0x1, 0x7, 0xb, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @alu={0x7, 0x1, 0x7, 0xb, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket(0x10, 0x80003, 0x0) (async)
socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@delsa={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in6=@remote, 0x4d3, 0xa, 0x32}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x34}}, 0x40) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@delsa={0x34, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in6=@remote, 0x4d3, 0xa, 0x32}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x34}}, 0x40)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000840)={r9, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

139.287634ms ago: executing program 1 (id=1098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv6_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756575650000001c0002800600034011020000060002400009000006000140000b00000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)

138.664505ms ago: executing program 1 (id=1099):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team0\x00', 0x7f, 0x32, 0xfff})
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x2, 0x1, 0x773c}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info})
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@deltaction={0xf0, 0x31, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0xf0}}, 0x24000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$bt_l2cap(r2, &(0x7f0000000640)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xdb, 0x2}, 0xe)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000600))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)

59.51909ms ago: executing program 1 (id=1100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="1303000100008000e3ff0100413a9a0b09000d"], 0x14}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="c50b28d79ef4459923607df3de81b2aa56ca463388966624248c2ebde814d3b0ab275b9a66456436cab693d92b245a12c27f85b8420a4dd662541cdd60ab20b4e9982b193fe1a1aada42c2b4ef3fd137a10a36d43d765a3c8042192bc5d056d07cfe298637fad8d841b95bd45b3dab4712b52026cc7b0e8f5eff4670716f5f1825680dd482eda1f92a30f6632982437e1f03977879a333d2529c421bad73c3019aa1f8672024f0579b3552ec3ec83e8f"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff0000000000000200000908000340fff5000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0)

0s ago: executing program 1 (id=1101):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa20000000000000702000000feffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x100, 0x8, 0x8, 0xe, 0x10, 0xc, 0x2}}]}}]}, 0x148}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
epoll_create1(0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
close(r7)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={<r9=>0x0, 0x1000, 0x4, [0x18, 0x100, 0x0, 0x1]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, [0x9, 0x7ff, 0xe, 0xdfa, 0x9, 0x3, 0xc, 0x2a8d, 0x3522, 0x52, 0xfffffffffffffff9, 0x200, 0x2, 0xcb, 0xe]}, &(0x7f00000005c0)=0x100)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000006000000000a"], 0x64}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63262' (ED25519) to the list of known hosts.
syzkaller login: [   57.274287][ T5834] cgroup: Unknown subsys name 'net'
[   57.373404][ T5834] cgroup: Unknown subsys name 'cpuset'
[   57.380199][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.540106][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.047970][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.052428][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.056081][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.060960][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.061841][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.064614][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.072821][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.076697][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.079571][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.083191][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.088209][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.095586][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.103313][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.107954][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.123496][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.413510][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.434950][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.615853][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   65.634825][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.639415][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.642108][ T5852] bridge_slave_0: entered allmulticast mode
[   65.645135][ T5852] bridge_slave_0: entered promiscuous mode
[   65.665185][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.669047][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.672255][ T5855] bridge_slave_0: entered allmulticast mode
[   65.676441][ T5855] bridge_slave_0: entered promiscuous mode
[   65.683237][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.685707][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.688903][ T5855] bridge_slave_1: entered allmulticast mode
[   65.693004][ T5855] bridge_slave_1: entered promiscuous mode
[   65.697086][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.700262][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.702853][ T5852] bridge_slave_1: entered allmulticast mode
[   65.706558][ T5852] bridge_slave_1: entered promiscuous mode
[   65.776257][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.789722][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.797739][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.808629][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.876246][ T5852] team0: Port device team_slave_0 added
[   65.896037][ T5855] team0: Port device team_slave_0 added
[   65.899933][ T5852] team0: Port device team_slave_1 added
[   65.902376][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.905041][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.908594][ T5851] bridge_slave_0: entered allmulticast mode
[   65.911820][ T5851] bridge_slave_0: entered promiscuous mode
[   65.916884][ T5855] team0: Port device team_slave_1 added
[   65.935661][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.938565][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.942106][ T5851] bridge_slave_1: entered allmulticast mode
[   65.945913][ T5851] bridge_slave_1: entered promiscuous mode
[   66.011256][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.016503][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.019945][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.031381][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.038222][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.040925][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.051560][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.058585][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.061686][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.072148][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.080262][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.084611][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.087883][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.097420][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.133323][ T5851] team0: Port device team_slave_0 added
[   66.161919][ T5851] team0: Port device team_slave_1 added
[   66.189677][ T5852] hsr_slave_0: entered promiscuous mode
[   66.192654][ T5852] hsr_slave_1: entered promiscuous mode
[   66.222891][ T5855] hsr_slave_0: entered promiscuous mode
[   66.225820][ T5855] hsr_slave_1: entered promiscuous mode
[   66.229049][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   66.231964][ T5855] Cannot create hsr debugfs directory
[   66.235262][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.238282][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.248745][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.264133][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.267127][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.278367][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.388045][ T5851] hsr_slave_0: entered promiscuous mode
[   66.391441][ T5851] hsr_slave_1: entered promiscuous mode
[   66.394607][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   66.397589][ T5851] Cannot create hsr debugfs directory
[   66.643203][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.665829][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.686054][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.699635][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.734361][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.752023][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.778833][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.794328][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.835951][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.844824][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.851834][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.859559][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.980425][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.009757][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.024571][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.027584][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.041814][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.048457][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.050967][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.089460][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.094738][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.102918][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.105362][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.129937][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.132252][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.141712][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.158475][ T5235] Bluetooth: hci0: command tx timeout
[   67.168318][ T5235] Bluetooth: hci2: command tx timeout
[   67.170431][   T54] Bluetooth: hci1: command tx timeout
[   67.180324][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   67.194281][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.196797][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.210950][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.213593][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.315555][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.370736][ T5852] veth0_vlan: entered promiscuous mode
[   67.394095][ T5852] veth1_vlan: entered promiscuous mode
[   67.421306][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.442884][ T5852] veth0_macvtap: entered promiscuous mode
[   67.449036][ T5852] veth1_macvtap: entered promiscuous mode
[   67.475770][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.493889][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.516319][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.522511][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.530128][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.537086][ T5855] veth0_vlan: entered promiscuous mode
[   67.542499][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.559891][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.573681][ T5855] veth1_vlan: entered promiscuous mode
[   67.649395][ T5851] veth0_vlan: entered promiscuous mode
[   67.655960][ T5855] veth0_macvtap: entered promiscuous mode
[   67.666142][ T5855] veth1_macvtap: entered promiscuous mode
[   67.672745][ T5851] veth1_vlan: entered promiscuous mode
[   67.678519][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.681117][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.720488][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.734155][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.736918][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.741234][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.762558][ T5851] veth0_macvtap: entered promiscuous mode
[   67.774294][ T5720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.782361][ T5720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.785542][ T5720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.792432][ T5851] veth1_macvtap: entered promiscuous mode
[   67.802898][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.812515][ T5720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.855386][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.884452][ T5920] Zero length message leads to an empty skb
[   67.894928][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.926452][ T5920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.941026][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.944862][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.958704][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.961458][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.967889][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.985015][ T5920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.995513][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.026629][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.035187][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.059189][ T5920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.146415][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.153916][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.180303][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.183926][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.195867][ T5923] tun0: tun_chr_ioctl cmd 2148045848
[   68.310352][ T5925] Bluetooth: MGMT ver 1.23
[   68.313155][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.434707][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'.
[   68.444093][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   68.528959][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'.
[   68.624083][ T5934] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6'.
[   68.665268][ T5936] netlink: 732 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.668729][ T5936] netlink: 732 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.951244][ T5951] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.226481][ T5920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.238673][   T54] Bluetooth: hci1: command tx timeout
[   69.238760][ T5235] Bluetooth: hci2: command tx timeout
[   69.240894][   T54] Bluetooth: hci0: command tx timeout
[   69.303832][ T5966] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17'.
[   69.516949][ T5977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.573035][ T5981] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[   69.936139][ T5987] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   70.407703][ T5977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.654425][ T5977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.710985][ T5977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.769513][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.786005][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.805711][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.816312][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.889078][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.892777][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.910484][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.950394][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'.
[   70.950966][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.955303][ T5998] netlink: 'syz.1.26': attribute type 12 has an invalid length.
[   70.962142][ T5998] netlink: 'syz.1.26': attribute type 14 has an invalid length.
[   70.986271][ T5998] netlink: 92 bytes leftover after parsing attributes in process `syz.1.26'.
[   71.204060][ T6013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.243348][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.246477][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.267048][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[   71.318154][   T54] Bluetooth: hci0: command tx timeout
[   71.327593][ T5856] Bluetooth: hci1: command tx timeout
[   71.329096][   T54] Bluetooth: hci2: command tx timeout
[   72.770806][ T6057] veth1_macvtap: left promiscuous mode
[   72.772987][ T6057] macsec0: entered promiscuous mode
[   72.774977][ T6057] macsec0: entered allmulticast mode
[   72.790995][ T6057] veth1_macvtap: entered promiscuous mode
[   72.793712][ T6057] veth1_macvtap: entered allmulticast mode
[   72.801391][ T6057] macsec0: left promiscuous mode
[   72.804954][ T6057] macsec0: left allmulticast mode
[   72.806684][ T6057] veth1_macvtap: left allmulticast mode
[   72.933332][ T6077] delete_channel: no stack
[   73.070544][ T6090] netlink: 'syz.2.50': attribute type 2 has an invalid length.
[   73.372086][ T6054] IPVS: starting estimator thread 0...
[   73.397693][   T54] Bluetooth: hci2: command tx timeout
[   73.400097][   T54] Bluetooth: hci1: command tx timeout
[   73.402448][   T54] Bluetooth: hci0: command tx timeout
[   73.448554][ T6131] __nla_validate_parse: 27 callbacks suppressed
[   73.448566][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   73.467382][ T6125] IPVS: using max 63 ests per chain, 151200 per kthread
[   73.490933][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.493537][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[   73.493900][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.503688][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.506865][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.510404][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.521547][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'.
[   73.670941][ T6150] netlink: 'syz.0.66': attribute type 29 has an invalid length.
[   73.678257][ T6150] netlink: 'syz.0.66': attribute type 29 has an invalid length.
[   73.683645][ T6150] netlink: 500 bytes leftover after parsing attributes in process `syz.0.66'.
[   73.875917][ T6171] netlink: 56 bytes leftover after parsing attributes in process `syz.0.73'.
[   74.072815][ T6195] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   74.177052][ T6202] : renamed from veth0_to_bond (while UP)
[   74.179695][ T6205] netlink: 'syz.1.81': attribute type 13 has an invalid length.
[   74.182417][ T6205] netlink: 'syz.1.81': attribute type 17 has an invalid length.
[   74.252121][ T6205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.425803][ T6224] erspan0: entered promiscuous mode
[   74.437000][ T6224] erspan0: left promiscuous mode
[   74.593260][ T6242] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   74.611067][ T6243] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.867090][ T6269] netlink: 'syz.1.101': attribute type 6 has an invalid length.
[   74.870794][ T6269] netlink: 'syz.1.101': attribute type 5 has an invalid length.
[   74.971563][ T6284] netlink: 'syz.0.105': attribute type 3 has an invalid length.
[   76.082116][ T6311] netlink: 'syz.1.112': attribute type 16 has an invalid length.
[   76.853434][ T6315] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20003
[   77.352579][ T6318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.947600][ T6359] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.204426][    T9] IPVS: starting estimator thread 0...
[   78.227550][ T6380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.291287][ T6381] IPVS: using max 61 ests per chain, 146400 per kthread
[   78.353039][ T6390] netlink: 'syz.2.135': attribute type 6 has an invalid length.
[   78.377751][ T6390] netlink: 'syz.2.135': attribute type 6 has an invalid length.
[   78.425974][ T6396] Bluetooth: MGMT ver 1.23
[   78.471370][ T6400] __nla_validate_parse: 30 callbacks suppressed
[   78.471380][ T6400] netlink: 308 bytes leftover after parsing attributes in process `syz.1.140'.
[   78.572600][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'.
[   78.661074][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   78.665652][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   78.756314][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.802927][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.806341][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'.
[   78.889362][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[   79.056208][ T6472] openvswitch: netlink: Tunnel attr 1 has unexpected len 1 expected 4
[   79.061874][ T6472] netlink: 34 bytes leftover after parsing attributes in process `syz.1.159'.
[   79.229583][ T6489] tipc: Failed to obtain node identity
[   79.231648][ T6489] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[   79.253557][ T6474] bridge_slave_0: left allmulticast mode
[   79.255873][ T6474] bridge_slave_0: left promiscuous mode
[   79.263199][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.272406][ T6474] bridge_slave_1: left allmulticast mode
[   79.274750][ T6474] bridge_slave_1: left promiscuous mode
[   79.275683][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[   79.276860][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.296567][ T6474] bond0: (slave bond_slave_0): Releasing backup interface
[   79.309034][ T6474] bond0: (slave bond_slave_1): Releasing backup interface
[   79.328218][ T6474] team0: Port device team_slave_0 removed
[   79.341205][ T6474] team0: Port device team_slave_1 removed
[   79.346314][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.351114][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.355941][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.359014][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.364181][ T6474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.034074][ T6544] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[   80.210880][ T6551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.216214][ T6551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.220783][ T6551] bond0 (unregistering): Released all slaves
[   80.352855][ T6567] syz.2.185 (6567) used greatest stack depth: 19432 bytes left
[   80.413954][ T6569] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   80.528141][ T5856] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   80.531906][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[   81.542268][   T24] cfg80211: failed to load regulatory.db
[   81.833692][ T6602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.904358][ T6617] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   82.063928][  T794] IPVS: starting estimator thread 0...
[   82.148597][ T6628] IPVS: using max 43 ests per chain, 103200 per kthread
[   82.207765][ T6637] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.294451][ T6637] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.371779][ T6637] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.428093][ T6637] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.527437][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.552810][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.573570][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.584105][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.670518][ T6672] geneve2: entered promiscuous mode
[   82.879108][ T6692] xt_l2tp: v2 tid > 0xffff: 37482740
[   82.892474][ T6688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.695215][ T6705] __nla_validate_parse: 53 callbacks suppressed
[   83.695227][ T6705] netlink: 64 bytes leftover after parsing attributes in process `syz.0.226'.
[   83.731412][ T6702] netlink: 'syz.1.225': attribute type 3 has an invalid length.
[   83.734170][ T6702] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.225'.
[   83.737118][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[   83.744049][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[   83.751532][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   83.814062][ T6713] netlink: 56 bytes leftover after parsing attributes in process `syz.1.228'.
[   83.885390][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'.
[   84.027852][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'.
[   84.033640][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'.
[   84.126417][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'.
[   84.472318][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   85.299415][ T6760] netlink: 'syz.0.243': attribute type 2 has an invalid length.
[   85.525715][ T6778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.575956][ T6781] geneve2: entered promiscuous mode
[   85.939847][ T6831] @: renamed from veth0_vlan (while UP)
[   86.110160][ T6850] netlink: 'syz.0.271': attribute type 3 has an invalid length.
[   86.118590][ T6844] veth0: entered promiscuous mode
[   86.120733][ T6847] batadv_slave_0: entered promiscuous mode
[   86.135945][ T6844] dvmrp8: entered allmulticast mode
[   86.176363][ T6843] batadv_slave_0: left promiscuous mode
[   86.192658][ T6843] veth0: left promiscuous mode
[   86.207041][ T6855] syzkaller1: entered promiscuous mode
[   86.211471][ T6855] syzkaller1: entered allmulticast mode
[   86.272285][ T6863] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.332728][ T6863] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.393915][ T6863] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.465963][ T6863] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.497062][ T6871] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[   86.602059][ T5720] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.633239][ T5720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.636887][ T5720] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.638442][ T6882] netlink: 'syz.0.281': attribute type 2 has an invalid length.
[   86.658410][ T5720] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.914565][ T6899] netlink: 'syz.1.288': attribute type 4 has an invalid length.
[   86.948680][ T6899] block nbd0: not configured, cannot reconfigure
[   86.968434][ T6902] batman_adv: batadv0: Adding interface: dummy0
[   86.971376][ T6902] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.981090][ T6902] batman_adv: batadv0: Interface activated: dummy0
[   86.994317][ T6902] batadv0: mtu less than device minimum
[   86.997009][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.001199][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.005432][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.009877][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.014916][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.019766][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.024624][ T6902] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.228890][ T6919] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000
[   87.453523][ T6928] batman_adv: batadv0: Interface deactivated: dummy0
[   87.456368][ T6928] batman_adv: batadv0: Removing interface: dummy0
[   87.463181][ T6928] bridge_slave_0: left allmulticast mode
[   87.465472][ T6928] bridge_slave_0: left promiscuous mode
[   87.469778][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.477383][ T6928] bridge_slave_1: left allmulticast mode
[   87.480026][ T6928] bridge_slave_1: left promiscuous mode
[   87.482497][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.503799][ T6928] bond0: (slave bond_slave_0): Releasing backup interface
[   87.532605][ T6928] bond0: (slave bond_slave_1): Releasing backup interface
[   87.580059][ T6928] team0: Port device team_slave_0 removed
[   87.602659][ T6928] team0: Port device team_slave_1 removed
[   87.606957][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.611322][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.615482][ T6928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.619023][ T6928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.963598][ T6957] tipc: Started in network mode
[   87.965505][ T6957] tipc: Node identity 5219254d03b4, cluster identity 4711
[   87.969657][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.973035][ T6957] syzkaller0: entered promiscuous mode
[   87.974955][ T6957] syzkaller0: entered allmulticast mode
[   87.992576][ T6956] tipc: Resetting bearer <eth:syzkaller0>
[   88.004646][ T6956] tipc: Disabling bearer <eth:syzkaller0>
[   88.737066][ T6997] __nla_validate_parse: 57 callbacks suppressed
[   88.737081][ T6997] netlink: 1 bytes leftover after parsing attributes in process `syz.0.314'.
[   89.470303][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.316'.
[   89.716252][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[   89.773923][ T7029] netlink: 'syz.1.326': attribute type 13 has an invalid length.
[   89.815190][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.327'.
[   89.845190][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.848409][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.872782][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.329'.
[   89.876026][ T7037] netlink: 43 bytes leftover after parsing attributes in process `syz.2.329'.
[   89.880050][ T7037] netlink: 'syz.2.329': attribute type 5 has an invalid length.
[   89.883723][ T7037] netlink: 43 bytes leftover after parsing attributes in process `syz.2.329'.
[   90.021959][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.036307][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.224785][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.229369][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.238443][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.246392][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.328433][ T7051] netlink: 'syz.1.332': attribute type 3 has an invalid length.
[   90.331803][ T7051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.332'.
[   90.467975][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'.
[   90.694870][ T7068] delete_channel: no stack
[   90.810396][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.339'.
[   91.318791][ T7096] delete_channel: no stack
[   92.067426][ T7141] tipc: Invalid UDP bearer configuration
[   92.067477][ T7141] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   92.500604][ T7151] nft_compat: unsupported protocol 0
[   92.595442][ T7155] !: renamed from dummy0
[   92.750064][ T7165] Illegal XDP return value 4294967294 on prog  (id 84) dev N/A, expect packet loss!
[   93.332839][ T7214] sctp: [Deprecated]: syz.1.382 (pid 7214) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.332839][ T7214] Use struct sctp_sack_info instead
[   93.478980][ T7220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   93.789377][ T7252] __nla_validate_parse: 20 callbacks suppressed
[   93.789388][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'.
[   93.931273][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   94.057306][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.396'.
[   94.244772][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.401'.
[   94.361750][ T7296] netlink: 168 bytes leftover after parsing attributes in process `syz.2.405'.
[   94.438266][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[   94.553424][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.408'.
[   94.638362][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'.
[   94.838854][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[   94.896649][ T7318] netlink: 'syz.2.411': attribute type 3 has an invalid length.
[   94.903274][ T7318] netlink: 56 bytes leftover after parsing attributes in process `syz.2.411'.
[   94.906977][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'.
[   95.195362][ T7328] net_ratelimit: 14 callbacks suppressed
[   95.195393][ T7328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   95.358093][ T7343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.417'.
[   95.466068][ T7345] dvmrp8: left allmulticast mode
[   95.838855][ T7360] dummy0: entered allmulticast mode
[   96.383094][ T7403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.396194][ T7403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.406492][ T7405] netlink: 'syz.1.436': attribute type 3 has an invalid length.
[   96.410812][ T7403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.422445][ T7403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.551308][ T7359] dummy0: left allmulticast mode
[   97.050262][ T7448] openvswitch: netlink: Flow actions attr not present in new flow.
[   98.121088][ T7506] sctp: [Deprecated]: syz.1.465 (pid 7506) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.121088][ T7506] Use struct sctp_sack_info instead
[   98.420859][ T7546] batadv_slave_1: entered promiscuous mode
[   98.444856][ T7546] batadv_slave_1: left promiscuous mode
[   98.520074][ T7557] netlink: 'syz.1.479': attribute type 16 has an invalid length.
[   98.522708][ T7557] netlink: 'syz.1.479': attribute type 3 has an invalid length.
[   98.747762][ T7589] tc_dump_action: action bad kind
[   98.880226][ T7603] Set syz0 is full, maxelem 0 reached
[   98.880349][ T7601] __nla_validate_parse: 22 callbacks suppressed
[   98.880365][ T7601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.492'.
[   98.932932][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'.
[   98.940268][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'.
[   99.029273][ T7619] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.040146][ T7619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   99.211159][ T7627] sctp: [Deprecated]: syz.1.498 (pid 7627) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.211159][ T7627] Use struct sctp_sack_info instead
[   99.250803][ T7637] IPv6: Can't replace route, no match found
[   99.406085][ T7653] netlink: 232 bytes leftover after parsing attributes in process `syz.1.508'.
[   99.463424][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'.
[   99.545881][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'.
[   99.583633][ T7668] netlink: 'syz.1.511': attribute type 7 has an invalid length.
[   99.815369][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   99.820986][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[   99.874867][ T7691] netlink: 56 bytes leftover after parsing attributes in process `syz.1.517'.
[   99.879023][ T7691] Set syz0 is full, maxelem 0 reached
[   99.979617][ T7700] netlink: 104 bytes leftover after parsing attributes in process `syz.1.521'.
[   99.984743][ T7699] vlan2: entered promiscuous mode
[   99.986586][ T7699] macvtap0: entered promiscuous mode
[  100.156197][ T7711] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  100.674785][ T7736] netlink: 'syz.0.530': attribute type 64 has an invalid length.
[  100.683339][ T7736] syz_tun: entered allmulticast mode
[  100.692232][ T7736] pimreg: entered allmulticast mode
[  100.700592][ T7735] syz_tun: left allmulticast mode
[  100.739342][ T7740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.743231][ T7740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.813396][ T7743] bridge_slave_0: entered promiscuous mode
[  100.821688][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.411198][ T7753] netlink: 'syz.1.536': attribute type 1 has an invalid length.
[  101.588242][ T7740] syz.0.531 (7740) used greatest stack depth: 19272 bytes left
[  101.694782][ T7775] tun0: tun_chr_ioctl cmd 1074025675
[  101.696641][ T7775] tun0: persist enabled
[  101.698607][ T7775] tun0: tun_chr_ioctl cmd 1074025675
[  101.700370][ T7775] tun0: persist enabled
[  101.722571][ T7770] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  101.950385][ T7786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.551865][ T7796] xt_l2tp: missing protocol rule (udp|l2tpip)
[  102.586386][ T7803] netlink: 'syz.2.551': attribute type 2 has an invalid length.
[  102.662864][ T7808] pimreg3: entered allmulticast mode
[  102.708953][ T7817] syzkaller1: entered promiscuous mode
[  102.712556][ T7817] syzkaller1: entered allmulticast mode
[  102.778690][ T7826] netlink: 'syz.0.559': attribute type 1 has an invalid length.
[  102.781478][ T7826] netlink: 'syz.0.559': attribute type 2 has an invalid length.
[  102.940919][ T7841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  102.965878][ T7844] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[  102.968951][ T7844] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[  103.016672][ T7851] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001
[  103.034755][ T7851] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[  103.037758][ T7851] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[  103.041272][ T7851] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[  103.042218][ T7853] Set syz0 is full, maxelem 0 reached
[  103.143988][ T7859] syzkaller0: entered promiscuous mode
[  103.146455][ T7859] syzkaller0: entered allmulticast mode
[  103.988151][ T7887] __nla_validate_parse: 27 callbacks suppressed
[  103.988167][ T7887] netlink: 92 bytes leftover after parsing attributes in process `syz.1.581'.
[  104.080928][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[  104.090688][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[  104.116650][ T7900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.585'.
[  104.129173][ T7901] netlink: 72 bytes leftover after parsing attributes in process `syz.0.585'.
[  104.134217][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[  104.196626][ T7898] netlink: 88 bytes leftover after parsing attributes in process `syz.2.584'.
[  104.243784][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'.
[  104.344020][ T7932] bridge0: entered allmulticast mode
[  104.351686][ T7932] pim6reg: entered allmulticast mode
[  104.355772][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'.
[  104.360778][ T7932] bridge_slave_1: left allmulticast mode
[  104.362957][ T7932] bridge_slave_1: left promiscuous mode
[  104.365274][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.373534][ T7932] bridge_slave_0: left allmulticast mode
[  104.381465][ T7932] bridge_slave_0: left promiscuous mode
[  104.383468][ T7932] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.394551][ T7932] bridge0 (unregistering): left allmulticast mode
[  104.407158][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  105.145636][ T7975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  105.433824][ T8000] team0: Cannot enslave team device to itself
[  107.154965][ T8012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.303641][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.316616][ T8030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.320562][ T8030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.329905][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.201265][ T8063] validate_nla: 10 callbacks suppressed
[  108.201323][ T8063] netlink: 'syz.1.633': attribute type 4 has an invalid length.
[  108.223040][ T8063] tipc: Started in network mode
[  108.225328][ T8063] tipc: Node identity 5e5b1c674254, cluster identity 4711
[  108.230340][ T8063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.236819][ T8063] syzkaller0: entered promiscuous mode
[  108.240134][ T8063] syzkaller0: entered allmulticast mode
[  108.256542][ T8063] tipc: Resetting bearer <eth:syzkaller0>
[  108.259825][ T8063] block nbd0: not configured, cannot reconfigure
[  108.266173][ T8062] tipc: Resetting bearer <eth:syzkaller0>
[  108.289776][ T8062] tipc: Disabling bearer <eth:syzkaller0>
[  108.618520][ T8088] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  108.874956][ T8112] netlink: 'syz.1.645': attribute type 10 has an invalid length.
[  108.911908][ T8112] batman_adv: batadv0: Adding interface: virt_wifi0
[  108.915006][ T8112] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.924795][ T8112] batman_adv: batadv0: Interface activated: virt_wifi0
[  109.217979][ T8139] __nla_validate_parse: 21 callbacks suppressed
[  109.217995][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'.
[  109.318700][ T8145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.653'.
[  109.334350][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'.
[  109.502749][ T8152] delete_channel: no stack
[  110.442508][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  110.445911][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'.
[  110.449198][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'.
[  112.441624][ T8165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.552155][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.665'.
[  112.638811][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.666'.
[  112.642117][ T8196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.666'.
[  112.653908][ T8196] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  112.756844][ T8205] netlink: 36 bytes leftover after parsing attributes in process `syz.2.669'.
[  112.977808][ T8227] netlink: 'syz.0.676': attribute type 29 has an invalid length.
[  112.981900][ T8227] netlink: 'syz.0.676': attribute type 29 has an invalid length.
[  113.349852][ T8256] tipc: Started in network mode
[  113.351747][ T8256] tipc: Node identity 4, cluster identity 4711
[  113.355213][ T8256] tipc: Node number set to 4
[  113.363802][ T8256] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  113.794002][ T8303] netlink: 'syz.1.693': attribute type 13 has an invalid length.
[  113.847514][ T8307] batadv_slave_1: entered promiscuous mode
[  113.871102][ T8305] batadv_slave_1: left promiscuous mode
[  113.904132][ T8310] Set syz0 is full, maxelem 0 reached
[  114.013999][ T8326] lo speed is unknown, defaulting to 1000
[  114.017443][ T8326] lo speed is unknown, defaulting to 1000
[  114.021694][ T8326] lo speed is unknown, defaulting to 1000
[  114.032082][ T8326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  114.078938][ T8333] syzkaller0: left promiscuous mode
[  114.081950][ T8333] geneve2: left promiscuous mode
[  114.085333][ T8326] lo speed is unknown, defaulting to 1000
[  114.090298][ T8326] lo speed is unknown, defaulting to 1000
[  114.093689][ T8333] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  114.100617][ T8326] lo speed is unknown, defaulting to 1000
[  114.266760][ T8348] __nla_validate_parse: 23 callbacks suppressed
[  114.266779][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'.
[  114.273479][ T8348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.704'.
[  114.898935][ T8354] lo speed is unknown, defaulting to 1000
[  114.960825][ T8360] netlink: 'syz.1.708': attribute type 11 has an invalid length.
[  115.025786][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.707'.
[  115.045675][ T8365] lo speed is unknown, defaulting to 1000
[  115.333913][ T8379] syzkaller1: entered promiscuous mode
[  115.335759][ T8379] syzkaller1: entered allmulticast mode
[  115.408948][ T8377] delete_channel: no stack
[  115.474089][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[  115.515179][ T8390] netlink: 144 bytes leftover after parsing attributes in process `syz.0.714'.
[  115.515186][ T8391] netlink: 144 bytes leftover after parsing attributes in process `syz.0.714'.
[  115.763811][ T8419] netlink: 68 bytes leftover after parsing attributes in process `syz.2.725'.
[  115.903234][ T8425] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004
[  115.948968][ T8427] netlink: 300 bytes leftover after parsing attributes in process `syz.2.729'.
[  116.053785][ T8430] ip6gretap1: entered promiscuous mode
[  116.084986][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'.
[  116.209855][ T8444] bridge0: entered allmulticast mode
[  116.212529][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[  116.225521][ T8444] bridge0 (unregistering): left allmulticast mode
[  116.238494][ T8446] sctp: [Deprecated]: syz.1.736 (pid 8446) Use of int in max_burst socket option.
[  116.238494][ T8446] Use struct sctp_assoc_value instead
[  116.247138][ T8448] sctp: [Deprecated]: syz.1.736 (pid 8448) Use of int in max_burst socket option.
[  116.247138][ T8448] Use struct sctp_assoc_value instead
[  116.734097][ T8484] netlink: 'syz.0.746': attribute type 4 has an invalid length.
[  116.737407][ T8485] netlink: 'syz.0.746': attribute type 4 has an invalid length.
[  116.744598][ T8485] netlink: 'syz.0.746': attribute type 4 has an invalid length.
[  116.750436][ T8484] netlink: 'syz.0.746': attribute type 4 has an invalid length.
[  116.762905][    T9] lo speed is unknown, defaulting to 1000
[  116.766932][    T9] syz1: Port: 1 Link ACTIVE
[  116.782393][ T8487] netlink: 'syz.2.747': attribute type 13 has an invalid length.
[  116.899670][ T8499] netlink: 'syz.0.751': attribute type 6 has an invalid length.
[  116.936578][ T8502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.949301][ T8502] syzkaller0: entered promiscuous mode
[  116.951500][ T8502] tipc: Resetting bearer <eth:syzkaller0>
[  116.970532][ T8502] tipc: Resetting bearer <eth:syzkaller0>
[  117.415394][ T8533] geneve3: entered promiscuous mode
[  117.418019][ T8533] geneve3: entered allmulticast mode
[  117.458929][ T8543] syzkaller0: left promiscuous mode
[  117.460701][ T8543] syzkaller0: left allmulticast mode
[  117.462773][ T8543] tipc: Resetting bearer <eth:syzkaller0>
[  117.482557][ T8545] netlink: 'syz.1.765': attribute type 6 has an invalid length.
[  117.975413][ T8634] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  118.357350][ T5856] Bluetooth: hci2: command 0x0401 tx timeout
[  119.102924][ T8692] validate_nla: 6 callbacks suppressed
[  119.102938][ T8692] netlink: 'syz.0.797': attribute type 4 has an invalid length.
[  119.182471][ T8701] netlink: 'syz.2.800': attribute type 3 has an invalid length.
[  119.322779][ T8707] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  119.376560][ T8713] __nla_validate_parse: 46 callbacks suppressed
[  119.376579][ T8713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.804'.
[  119.490440][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  119.502957][ T8721] gtp0: entered promiscuous mode
[  119.504998][ T8721] gtp0: entered allmulticast mode
[  119.509107][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'.
[  119.596086][ T8724] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  119.740175][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.810'.
[  120.057842][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'.
[  120.277098][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'.
[  120.366520][ T8744] lo speed is unknown, defaulting to 1000
[  120.666107][ T8760] netlink: 'syz.2.819': attribute type 2 has an invalid length.
[  120.820039][ T8768] netlink: 'syz.0.821': attribute type 16 has an invalid length.
[  120.830518][ T8765] netlink: 'syz.2.820': attribute type 3 has an invalid length.
[  120.834184][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  121.068589][ T8774] netlink: 6 bytes leftover after parsing attributes in process `syz.2.822'.
[  121.072536][ T8774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.820404][ T8776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.824'.
[  121.959371][ T8793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.825'.
[  121.987836][ T8728] Set syz1 is full, maxelem 65536 reached
[  121.998302][ T8791] Set syz0 is full, maxelem 0 reached
[  122.094095][ T8805] netlink: 'syz.1.830': attribute type 3 has an invalid length.
[  122.096646][ T8805] netlink: 'syz.1.830': attribute type 1 has an invalid length.
[  122.132783][ T8808] ieee802154 phy0 wpan0: encryption failed: -22
[  122.173838][ T8808] tap0: tun_chr_ioctl cmd 1074025681
[  122.232173][ T8815] netlink: 'syz.0.832': attribute type 5 has an invalid length.
[  123.168012][ T8827] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  123.349649][ T8833] netlink: 'syz.2.839': attribute type 10 has an invalid length.
[  123.360339][ T8833] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.550060][ T8879] netlink: 'syz.1.853': attribute type 5 has an invalid length.
[  124.552677][ T8879] netlink: 'syz.1.853': attribute type 5 has an invalid length.
[  125.453492][ T8906] __nla_validate_parse: 12 callbacks suppressed
[  125.453504][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'.
[  125.584644][ T8912] pimreg: left allmulticast mode
[  125.640559][ T8912] rdma_rxe: rxe_newlink: failed to add lo
[  126.683442][ T8937] netlink: 88 bytes leftover after parsing attributes in process `syz.0.869'.
[  126.733416][ T8940] lo speed is unknown, defaulting to 1000
[  126.841311][ T8949] netlink: 'syz.0.871': attribute type 10 has an invalid length.
[  126.851796][ T8949] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.045847][ T8957] Bluetooth: MGMT ver 1.23
[  127.048185][ T8957] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  127.053661][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'.
[  127.055058][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.874'.
[  127.071897][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'.
[  127.133622][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[  127.243120][ T8972] ip6gre0: entered allmulticast mode
[  127.371186][ T8982] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.883'.
[  127.376480][ T8982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.883'.
[  127.456985][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'.
[  127.656156][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'.
[  128.221063][ T9031] trusted_key: syz.2.896 sent an empty control message without MSG_MORE.
[  128.254537][ T9031] bridge3: entered promiscuous mode
[  128.256903][ T9031] bridge3: entered allmulticast mode
[  128.529878][ T9035] nftables ruleset with unbound set
[  128.582804][ T9037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.170715][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.805526][ T9110] netlink: 'syz.0.919': attribute type 2 has an invalid length.
[  129.808946][ T9110] netlink: 'syz.0.919': attribute type 2 has an invalid length.
[  130.479825][ T9144] __nla_validate_parse: 13 callbacks suppressed
[  130.479839][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'.
[  130.516729][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'.
[  130.539087][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'.
[  130.543037][ T9144] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  130.686547][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'.
[  130.730858][ T9162] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000
[  130.801318][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'.
[  130.815520][ T9174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.937'.
[  130.821916][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.937'.
[  131.638349][ T9189] erspan0: entered promiscuous mode
[  131.643197][ T9189] erspan0: left promiscuous mode
[  132.022631][ T9206] netlink: 84 bytes leftover after parsing attributes in process `syz.0.946'.
[  132.072274][ T9210] netlink: 200 bytes leftover after parsing attributes in process `syz.1.945'.
[  132.143741][ T9214] delete_channel: no stack
[  132.189665][ T9217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.949'.
[  132.303402][ T9227] xt_policy: neither incoming nor outgoing policy selected
[  132.683674][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.723092][ T9240] lo speed is unknown, defaulting to 1000
[  132.818739][ T9244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.958891][ T9251] tipc: Cannot configure node identity twice
[  133.006639][   T13] bond0: (slave wlan1): link status definitely down, disabling slave
[  133.011327][   T13] bond0: now running without any active interface!
[  133.057965][ T9257] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  133.917633][ T9308] lo speed is unknown, defaulting to 1000
[  134.275024][ T9321] lo speed is unknown, defaulting to 1000
[  134.412000][ T9334] syzkaller1: entered promiscuous mode
[  134.414453][ T9334] syzkaller1: entered allmulticast mode
[  134.685131][ T9338] netlink: 'syz.1.984': attribute type 5 has an invalid length.
[  135.741104][ T9367] __nla_validate_parse: 20 callbacks suppressed
[  135.741115][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'.
[  135.746528][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'.
[  135.943108][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'.
[  136.024641][ T9374] lo speed is unknown, defaulting to 1000
[  136.320915][ T9379] netlink: 68 bytes leftover after parsing attributes in process `syz.2.995'.
[  136.395299][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  136.404518][ T9386] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.997'.
[  136.470970][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'.
[  136.486855][ T9393] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[  136.595332][ T9323] Set syz1 is full, maxelem 65536 reached
[  136.637685][ T9401] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  136.640033][ T9401] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  136.652783][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'.
[  136.655714][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1001'.
[  136.772385][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'.
[  136.778276][ T9412] lo speed is unknown, defaulting to 1000
[  136.903233][ T9416] lo speed is unknown, defaulting to 1000
[  137.451917][ T9451] netlink: 'syz.1.1016': attribute type 4 has an invalid length.
[  137.456910][ T9452] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001
[  137.954102][ T9503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.045127][ T9503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.069973][ T9517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.073683][ T9517] syzkaller0: entered promiscuous mode
[  138.075724][ T9517] syzkaller0: entered allmulticast mode
[  138.094193][ T9517] tipc: Resetting bearer <eth:syzkaller0>
[  138.097635][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.100530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.120777][ T9503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.130366][ T9516] tipc: Resetting bearer <eth:syzkaller0>
[  138.144106][ T9516] tipc: Disabling bearer <eth:syzkaller0>
[  138.183848][ T9503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.281134][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.285481][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.300772][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.315146][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.416428][ T9521] tipc: Enabled bearer <eth:team0>, priority 0
[  138.429402][ T9521] veth0_to_bridge: entered allmulticast mode
[  138.736266][ T9548] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[  138.963044][ T9570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.549862][   T24] tipc: Node number set to 470752359
[  139.770116][ T9609] geneve4: entered promiscuous mode
[  140.385336][ T9633] netlink: 'syz.0.1079': attribute type 4 has an invalid length.
[  140.760231][ T9647] __nla_validate_parse: 28 callbacks suppressed
[  140.760252][ T9647] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1083'.
[  140.920524][ T9663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1087'.
[  140.927135][ T9663] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1087'.
[  140.933136][ T9663] netlink: 'syz.0.1087': attribute type 6 has an invalid length.
[  140.935659][ T9663] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1087'.
[  140.981849][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'.
[  141.011335][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'.
[  141.165284][ T9676] tipc: Resetting bearer <eth:syzkaller0>
[  141.244125][ T9680] netlink: 'syz.0.1093': attribute type 10 has an invalid length.
[  141.299122][ T9684] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1094'.
[  141.303352][ T9685] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1094'.
[  141.355831][ T9692] team0: Port device team_slave_0 removed
[  141.362091][ T9692] team0: Port device team_slave_1 removed
[  141.366182][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.369599][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.373224][ T9692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  141.424799][ T9698] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.460896][ T9698] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.472433][ T9702] netlink: 'syz.1.1098': attribute type 9 has an invalid length.
[  141.476034][ T9702] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1098'.
[  141.503605][ T9698] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.551226][ T9698] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.569316][ T9709] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  141.636410][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.638251][ T9713] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1101'.
[  141.644264][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.657720][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.669480][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.675364][ T9697] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.684002][   T13] ==================================================================
[  141.686815][   T13] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  141.689255][   T13] Read of size 8 at addr ffff88810c3ef8b0 by task kworker/u8:1/13
[  141.693481][   T13] 
[  141.694487][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  141.694499][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.694507][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  141.694526][   T13] Call Trace:
[  141.694533][   T13]  <TASK>
[  141.694539][   T13]  dump_stack_lvl+0x189/0x250
[  141.694562][   T13]  ? __kasan_check_byte+0x12/0x40
[  141.694577][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.694586][   T13]  ? lock_release+0x4b/0x3e0
[  141.694601][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.694614][   T13]  print_report+0xca/0x240
[  141.694623][   T13]  ? __mutex_lock+0x147/0x1350
[  141.694632][   T13]  kasan_report+0x118/0x150
[  141.694643][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.694650][   T13]  ? __mutex_lock+0x147/0x1350
[  141.694668][   T13]  __mutex_lock+0x147/0x1350
[  141.694678][   T13]  ? __mutex_lock+0x5bb/0x1350
[  141.694687][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  141.694697][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  141.694707][   T13]  ? __lock_acquire+0xab9/0xd20
[  141.694720][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  141.694731][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  141.694738][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  141.694745][   T13]  process_scheduled_works+0xae1/0x17b0
[  141.694758][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  141.694768][   T13]  worker_thread+0x8a0/0xda0
[  141.694782][   T13]  kthread+0x711/0x8a0
[  141.694793][   T13]  ? __pfx_worker_thread+0x10/0x10
[  141.694800][   T13]  ? __pfx_kthread+0x10/0x10
[  141.694809][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  141.694816][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.694824][   T13]  ? __pfx_kthread+0x10/0x10
[  141.694834][   T13]  ret_from_fork+0x439/0x7d0
[  141.694844][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  141.694852][   T13]  ? __switch_to_asm+0x39/0x70
[  141.694863][   T13]  ? __switch_to_asm+0x33/0x70
[  141.694872][   T13]  ? __pfx_kthread+0x10/0x10
[  141.694882][   T13]  ret_from_fork_asm+0x1a/0x30
[  141.694895][   T13]  </TASK>
[  141.694898][   T13] 
[  141.766372][   T13] Allocated by task 9698:
[  141.767740][   T13]  kasan_save_track+0x3e/0x80
[  141.769312][   T13]  __kasan_kmalloc+0x93/0xb0
[  141.770833][   T13]  __kmalloc_noprof+0x27a/0x4f0
[  141.772380][   T13]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  141.775058][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.776697][   T13]  register_netdevice+0x1608/0x1ae0
[  141.778387][   T13]  nsim_create+0xae8/0xf10
[  141.779794][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  141.781426][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  141.783352][   T13]  nsim_dev_reload_up+0x451/0x780
[  141.785156][   T13]  devlink_reload+0x4ec/0x8d0
[  141.786815][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  141.788478][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  141.790181][   T13]  genl_rcv_msg+0x60e/0x790
[  141.791616][   T13]  netlink_rcv_skb+0x208/0x470
[  141.793239][   T13]  genl_rcv+0x28/0x40
[  141.794555][   T13]  netlink_unicast+0x82f/0x9e0
[  141.796161][   T13]  netlink_sendmsg+0x805/0xb30
[  141.797766][   T13]  __sock_sendmsg+0x21c/0x270
[  141.799354][   T13]  ____sys_sendmsg+0x505/0x830
[  141.800845][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  141.802604][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  141.804172][   T13]  do_syscall_64+0xfa/0x3b0
[  141.805579][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.807409][   T13] 
[  141.808228][   T13] Freed by task 9697:
[  141.809580][   T13]  kasan_save_track+0x3e/0x80
[  141.811271][   T13]  kasan_save_free_info+0x46/0x50
[  141.812856][   T13]  __kasan_slab_free+0x5b/0x80
[  141.814374][   T13]  kfree+0x18e/0x440
[  141.815659][   T13]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  141.817645][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.819362][   T13]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  141.821737][   T13]  unregister_netdevice_queue+0x33c/0x380
[  141.823868][   T13]  nsim_destroy+0x1dd/0x670
[  141.825430][   T13]  __nsim_dev_port_del+0x14d/0x1b0
[  141.827560][   T13]  nsim_dev_reload_destroy+0x288/0x490
[  141.829826][   T13]  nsim_dev_reload_down+0x8a/0xc0
[  141.831895][   T13]  devlink_reload+0x1b6/0x8d0
[  141.833821][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  141.835622][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  141.837384][   T13]  genl_rcv_msg+0x60e/0x790
[  141.838781][   T13]  netlink_rcv_skb+0x208/0x470
[  141.840487][   T13]  genl_rcv+0x28/0x40
[  141.841919][   T13]  netlink_unicast+0x82f/0x9e0
[  141.843898][   T13]  netlink_sendmsg+0x805/0xb30
[  141.845756][   T13]  __sock_sendmsg+0x21c/0x270
[  141.847327][   T13]  ____sys_sendmsg+0x505/0x830
[  141.848839][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  141.850268][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  141.852317][   T13]  do_syscall_64+0xfa/0x3b0
[  141.854367][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.856794][   T13] 
[  141.857695][   T13] Last potentially related work creation:
[  141.859664][   T13]  kasan_save_stack+0x3e/0x60
[  141.861218][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  141.862908][   T13]  insert_work+0x3d/0x330
[  141.864373][   T13]  __queue_work+0xbaf/0xfb0
[  141.866115][   T13]  queue_work_on+0x181/0x270
[  141.867695][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  141.869535][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  141.871358][   T13]  geneve_offload_rx_ports+0xd7/0x160
[  141.873361][   T13]  geneve_netdevice_event+0x6a/0x80
[  141.875085][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.876849][   T13]  call_netdevice_notifiers+0x88/0xc0
[  141.878464][   T13]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  141.880387][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.882128][   T13]  register_netdevice+0x1608/0x1ae0
[  141.884120][   T13]  nsim_create+0xae8/0xf10
[  141.885633][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  141.887342][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  141.889161][   T13]  nsim_dev_reload_up+0x451/0x780
[  141.891017][   T13]  devlink_reload+0x4ec/0x8d0
[  141.892521][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  141.894457][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  141.896367][   T13]  genl_rcv_msg+0x60e/0x790
[  141.898048][   T13]  netlink_rcv_skb+0x208/0x470
[  141.899819][   T13]  genl_rcv+0x28/0x40
[  141.901275][   T13]  netlink_unicast+0x82f/0x9e0
[  141.902874][   T13]  netlink_sendmsg+0x805/0xb30
[  141.904443][   T13]  __sock_sendmsg+0x21c/0x270
[  141.905970][   T13]  ____sys_sendmsg+0x505/0x830
[  141.907630][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  141.909123][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  141.910656][   T13]  do_syscall_64+0xfa/0x3b0
[  141.912049][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.913991][   T13] 
[  141.914763][   T13] Second to last potentially related work creation:
[  141.916938][   T13]  kasan_save_stack+0x3e/0x60
[  141.918638][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  141.920250][   T13]  insert_work+0x3d/0x330
[  141.921772][   T13]  __queue_work+0xcd2/0xfb0
[  141.923482][   T13]  queue_work_on+0x181/0x270
[  141.925111][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  141.927064][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  141.929212][   T13]  geneve_offload_rx_ports+0xd7/0x160
[  141.930948][   T13]  geneve_netdevice_event+0x6a/0x80
[  141.932794][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.934396][   T13]  call_netdevice_notifiers+0x88/0xc0
[  141.936279][   T13]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  141.938466][   T13]  notifier_call_chain+0x1b6/0x3e0
[  141.940027][   T13]  register_netdevice+0x1608/0x1ae0
[  141.941806][   T13]  nsim_create+0xae8/0xf10
[  141.943475][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  141.945195][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  141.946901][   T13]  nsim_dev_reload_up+0x451/0x780
[  141.948529][   T13]  devlink_reload+0x4ec/0x8d0
[  141.949983][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  141.951643][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  141.953928][   T13]  genl_rcv_msg+0x60e/0x790
[  141.955727][   T13]  netlink_rcv_skb+0x208/0x470
[  141.957580][   T13]  genl_rcv+0x28/0x40
[  141.959205][   T13]  netlink_unicast+0x82f/0x9e0
[  141.960990][   T13]  netlink_sendmsg+0x805/0xb30
[  141.962999][   T13]  __sock_sendmsg+0x21c/0x270
[  141.964648][   T13]  ____sys_sendmsg+0x505/0x830
[  141.966129][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  141.967717][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  141.969213][   T13]  do_syscall_64+0xfa/0x3b0
[  141.970570][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.972636][   T13] 
[  141.973616][   T13] The buggy address belongs to the object at ffff88810c3ef800
[  141.973616][   T13]  which belongs to the cache kmalloc-256 of size 256
[  141.978028][   T13] The buggy address is located 176 bytes inside of
[  141.978028][   T13]  freed 256-byte region [ffff88810c3ef800, ffff88810c3ef900)
[  141.982169][   T13] 
[  141.983077][   T13] The buggy address belongs to the physical page:
[  141.985116][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c3ee
[  141.987773][   T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  141.990576][   T13] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  141.993163][   T13] page_type: f5(slab)
[  141.994509][   T13] raw: 057ff00000000040 ffff88801a441b40 ffffea000421bc80 dead000000000006
[  141.998080][   T13] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  142.001193][   T13] head: 057ff00000000040 ffff88801a441b40 ffffea000421bc80 dead000000000006
[  142.004405][   T13] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  142.007604][   T13] head: 057ff00000000001 ffffea000430fb81 00000000ffffffff 00000000ffffffff
[  142.010890][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  142.014056][   T13] page dumped because: kasan: bad access detected
[  142.016248][   T13] page_owner tracks the page as allocated
[  142.018043][   T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5974, tgid 5973 (syz.2.20), ts 69436756808, free_ts 67879630208
[  142.026329][   T13]  post_alloc_hook+0x240/0x2a0
[  142.028351][   T13]  get_page_from_freelist+0x21e4/0x22c0
[  142.030506][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  142.032287][   T13]  alloc_pages_mpol+0x232/0x4a0
[  142.033816][   T13]  allocate_slab+0x8a/0x370
[  142.035188][   T13]  ___slab_alloc+0xbeb/0x1420
[  142.037020][   T13]  __kmalloc_cache_noprof+0x296/0x3d0
[  142.039183][   T13]  gact_init_net+0x65/0x190
[  142.041186][   T13]  ops_init+0x35c/0x5c0
[  142.043034][   T13]  setup_net+0x10c/0x320
[  142.044862][   T13]  copy_net_ns+0x31b/0x4d0
[  142.046798][   T13]  create_new_namespaces+0x3f3/0x720
[  142.048969][   T13]  unshare_nsproxy_namespaces+0x11c/0x170
[  142.051287][   T13]  ksys_unshare+0x4c8/0x8c0
[  142.053329][   T13]  __x64_sys_unshare+0x38/0x50
[  142.055369][   T13]  do_syscall_64+0xfa/0x3b0
[  142.057306][   T13] page last free pid 5866 tgid 5866 stack trace:
[  142.059842][   T13]  __free_frozen_pages+0xbc4/0xd30
[  142.062067][   T13]  __put_partials+0x156/0x1a0
[  142.064115][   T13]  put_cpu_partial+0x17c/0x250
[  142.066028][   T13]  __slab_free+0x2d5/0x3c0
[  142.067496][   T13]  qlist_free_all+0x97/0x140
[  142.069106][   T13]  kasan_quarantine_reduce+0x148/0x160
[  142.071285][   T13]  __kasan_slab_alloc+0x22/0x80
[  142.073665][   T13]  __kmalloc_noprof+0x224/0x4f0
[  142.075935][   T13]  tomoyo_encode+0x28b/0x550
[  142.078255][   T13]  tomoyo_realpath_from_path+0x58d/0x5d0
[  142.080468][   T13]  tomoyo_check_open_permission+0x1c1/0x3b0
[  142.082970][   T13]  security_file_open+0xb1/0x270
[  142.085226][   T13]  do_dentry_open+0x384/0x13f0
[  142.087347][   T13]  vfs_open+0x3b/0x340
[  142.089135][   T13]  path_openat+0x2ee5/0x3830
[  142.091321][   T13]  do_filp_open+0x1fa/0x410
[  142.093134][   T13] 
[  142.094105][   T13] Memory state around the buggy address:
[  142.096428][   T13]  ffff88810c3ef780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.099677][   T13]  ffff88810c3ef800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.103193][   T13] >ffff88810c3ef880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.106164][   T13]                                      ^
[  142.108437][   T13]  ffff88810c3ef900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.111596][   T13]  ffff88810c3ef980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.114916][   T13] ==================================================================
[  142.145004][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.147980][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  142.151147][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.154350][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  142.156843][   T13] Call Trace:
[  142.157980][   T13]  <TASK>
[  142.158958][   T13]  dump_stack_lvl+0x99/0x250
[  142.160589][   T13]  ? __asan_memcpy+0x40/0x70
[  142.162223][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.163961][   T13]  ? __pfx__printk+0x10/0x10
[  142.165701][   T13]  vpanic+0x281/0x750
[  142.167303][   T13]  ? preempt_schedule+0xae/0xc0
[  142.169287][   T13]  ? __pfx_vpanic+0x10/0x10
[  142.170922][   T13]  ? preempt_schedule_common+0x83/0xd0
[  142.172739][   T13]  ? preempt_schedule+0xae/0xc0
[  142.174360][   T13]  ? __pfx_preempt_schedule+0x10/0x10
[  142.176208][   T13]  panic+0xb9/0xc0
[  142.177451][   T13]  ? __pfx_panic+0x10/0x10
[  142.178931][   T13]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  142.180810][   T13]  ? __mutex_lock+0x147/0x1350
[  142.182296][   T13]  check_panic_on_warn+0x89/0xb0
[  142.183852][   T13]  ? __mutex_lock+0x147/0x1350
[  142.185605][   T13]  end_report+0x78/0x160
[  142.187436][   T13]  kasan_report+0x129/0x150
[  142.189531][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.192150][   T13]  ? __mutex_lock+0x147/0x1350
[  142.194214][   T13]  __mutex_lock+0x147/0x1350
[  142.196106][   T13]  ? __mutex_lock+0x5bb/0x1350
[  142.197749][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  142.199820][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  142.201883][   T13]  ? __lock_acquire+0xab9/0xd20
[  142.204038][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  142.206714][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  142.209356][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  142.211642][   T13]  process_scheduled_works+0xae1/0x17b0
[  142.213778][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  142.216355][   T13]  worker_thread+0x8a0/0xda0
[  142.218394][   T13]  kthread+0x711/0x8a0
[  142.220183][   T13]  ? __pfx_worker_thread+0x10/0x10
[  142.222428][   T13]  ? __pfx_kthread+0x10/0x10
[  142.224486][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.226548][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.228673][   T13]  ? __pfx_kthread+0x10/0x10
[  142.230588][   T13]  ret_from_fork+0x439/0x7d0
[  142.232182][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  142.234126][   T13]  ? __switch_to_asm+0x39/0x70
[  142.236093][   T13]  ? __switch_to_asm+0x33/0x70
[  142.237967][   T13]  ? __pfx_kthread+0x10/0x10
[  142.240193][   T13]  ret_from_fork_asm+0x1a/0x30
[  142.242340][   T13]  </TASK>
[  142.244500][   T13] Kernel Offset: disabled
[  142.246514][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:17:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8b7d9bf7 RCX=35cbdb60f1d61600 RDX=0000000000000000
RSI=ffffffff8b7d9bf7 RDI=1ffffffff339789c RBP=ffffffff84d0b055 RSP=ffffc9000eec7b00
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=0000000000000000 R13=ffffffff99cbc4e0 R14=ffffffff99cbc4e0 R15=0000000000000001
RIP=ffffffff822317d6 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f430da186c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f430da17fc8 CR3=0000000031900000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f430cda7498 00007f430cda7470 XMM03=00007f430cda74a8 00007f430cda74a0
XMM04=00007f430d90d100 00007f430cda7460 XMM05=00007f430cda7478 00007f430cda74c0
XMM06=00007f430cda74b8 00007f430cda74b0 XMM07=00007f430cda74a8 00007f430cda74a0
XMM08=0000000000000000 00007f430cc12f0f XMM09=0000000000000000 00007f430cc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107130
R8 =ffff888107058237 R9 =1ffff11020e0b046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b0290d R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f430d9d5fc8 CR3=0000000034b6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2997812e7b
XMM06=0000000000000000 00007f2997812e75 XMM07=0000000000000000 00007f2997812e89
XMM08=0000000000000000 00007f2997812f0f XMM09=0000000000000000 00007f2997812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
