last executing test programs:

43.2019403s ago: executing program 2 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000d00000000000000000000000000001004000000000000000000000402000000000000002e00d821ce3612033425c6ebafdb01b6d45fb8d84127e0d8ac4ab1e0bc2e727f66edaacc7f977d10ff27c3274b4a9e6357044fe19a4af23d94973208dfea227b6b56bdca01fca920455a5a"], 0x0, 0x5a}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xa, 0x5, 0x4}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
r14 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r14, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f59d9"], 0x68}, 0x24000810)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r10, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

43.069838035s ago: executing program 2 (id=452):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x8000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0}) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async)
shutdown(r4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r6, 0x3d}, 0x8) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040e8"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)

42.96332218s ago: executing program 2 (id=453):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010)
r3 = socket$inet(0x2, 0x2, 0xfffffffc)
r4 = socket$caif_stream(0x25, 0x1, 0x3)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x8, 0x7, {{0x6, 0x4, 0x2, 0x13, 0x18, 0x66, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ssrr={0x89, 0x3, 0xd9}]}}}}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c)
sendto$inet6(r7, &(0x7f0000000240)="8000647d03000000", 0x8, 0x24000810, &(0x7f0000000200)={0xa, 0x6e1d, 0x6, @mcast1, 0xfffffffd}, 0x1c)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r10 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000880)=@ethtool_stats={0x11}})
write$tun(r8, 0x0, 0xfce)
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0)
socket(0x25, 0x80000, 0x4)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

42.732129435s ago: executing program 2 (id=455):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @multicast})

42.731786135s ago: executing program 2 (id=456):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000001c00170000000000000000000000000000000000000000000000000058001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000b74a27a4f44bd05db8f139a0"], 0x1ac}}, 0x0)

42.653927196s ago: executing program 2 (id=457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60) (async)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async)
syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/uts\x00') (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000023c0)=r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r11, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r13=>0x0}}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000002040)=""/77, 0x4d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f00000020c0), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000340)={0x0, 0x3f, &(0x7f0000002140)={&(0x7f0000001ec0)=ANY=[@ANYRES32=r12, @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001d4bf270ccc4cf0a682ac2673b8832554b7230bb60b4388b8f5c17f5f1f6e5310ad429a54c9e281fe9baca2b541ebefd6de74d0b95058b9780ca5e2d1011cf5352dcdb0699ace0bd10618ff1367"], 0x4c}}, 0x40004) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

27.654034583s ago: executing program 32 (id=457):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x2}, {0x1}, 0x2}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x4}, 0x2, 0xff}], 0x60) (async)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c001580050001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async)
syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/uts\x00') (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000023c0)=r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r11, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r13=>0x0}}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000002040)=""/77, 0x4d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f00000020c0), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000340)={0x0, 0x3f, &(0x7f0000002140)={&(0x7f0000001ec0)=ANY=[@ANYRES32=r12, @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001d4bf270ccc4cf0a682ac2673b8832554b7230bb60b4388b8f5c17f5f1f6e5310ad429a54c9e281fe9baca2b541ebefd6de74d0b95058b9780ca5e2d1011cf5352dcdb0699ace0bd10618ff1367"], 0x4c}}, 0x40004) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

1.321849982s ago: executing program 1 (id=893):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x25, 0x5, 0x0)
connect$bt_l2cap(r5, 0x0, 0x0) (async)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
unshare(0x22020600) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="282000b44300992f000058877e03f137dc1e7bb371d27c8fc15fe3b8ab304cf8dc94", @ANYRES16=r9, @ANYBLOB="00032dbd7000fddbdf252d00000006000600010000000c0005000201aaaaaaaaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async)
r10 = socket$inet6(0xa, 0x80002, 0x88) (async)
pipe(&(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r11)
socket$nl_route(0x10, 0x3, 0x0) (async)
splice(r11, 0x0, r12, 0x0, 0x10500, 0x0)
setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r2, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}})

1.233649665s ago: executing program 1 (id=895):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000940)="7637c012c479692fb8ce6ae17f61d2447e", 0x11)
socket(0xb5c95d330483c14, 0xa, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0x1}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4095, 0x1f}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/214}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32}], 0x0, &(0x7f00000009c0)=""/126}}], 0x40000000000024a, 0x40002002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e80)={'gre0\x00', <r9=>0x0, 0x7800, 0x7, 0x7, 0x7, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x68, 0x0, 0xa1, 0x2f, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000001f00)={@empty, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81, 0xa, 0x8, 0xd00, 0xd2, 0x2c80014, r9})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r4)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r6, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x5, 0x8, 0x8, 0x1, 0x8, 0x5]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb, 0x67}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r10, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

1.22742145s ago: executing program 0 (id=896):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000003c0)="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", 0x11b)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8, [0x7145, 0x4], 0x3}, 0x10)

1.227006919s ago: executing program 0 (id=897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080004000000000004001200080005"], 0x48}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003"], 0x7c}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)

1.073657097s ago: executing program 1 (id=898):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x607, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000700800014000780080011400000000005001500010000000500010006000000050001000700000005000400000400000900020073797a320000000013000300686173683a6e04000000666163650000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1.012363298s ago: executing program 1 (id=899):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={<r7=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)

619.617405ms ago: executing program 0 (id=901):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x2000}, 0x90) (async)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x2) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=<r7=>r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket(0x1, 0x803, 0x0) (rerun: 32)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=<r11=>r10], 0x54}}, 0x0) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r12], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_emit_ethernet(0x5a, &(0x7f0000000580)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x800000}]}, @generic={0x7, 0xd, "064d291a00000000d05c49"}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2000}}}}}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r16, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c030c0091b6b331b491c6484757a324", @ANYRES16=r16, @ANYBLOB="000427bd7000fcdbdf250e00000028000180080003000300000008000100", @ANYRESHEX=r11, @ANYRESHEX=r7, @ANYRES32=r6, @ANYBLOB="5c00018008000300010000001400020064766d7270300000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="1400020070696d36726567310000000000000000080003000000000008000100", @ANYRES32=r13, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="040002801400018008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="60000180140002007663616e300000000000000000000000080003000000000008000100", @ANYRES32=r13, @ANYBLOB="14000200776731000000000000000000000000001400020068737230000000000000000000000000080003000000000008000100", @ANYRES32=r13, @ANYBLOB="20020280000104002e9a0cb1c071f6a2e2e0360aa277cbf9bbffda1a698e35b21b0a1d22d603c1cbc2bb95cc6682942a2bf5540fdf441a727c316cae470e5bf03100437b8e718c6b607b4771a0cb05b669dfc4e8ddd3378dd39e46d62c05d127c4b105ec3a3cae57b3fdc2d441c00b49a0ffb0e2414cf1a71202f9085af5d168164a901264f2681d10bc8e4ffffbf47ae21923df5023fe47aaa18e19bf5afc6dbeeceefda8cd137984b3a2e0c6bf979a58c5ab39c359f5f57ccf4c5ee451d90a1169f4e659e355fbe5c58c0c5dbd937adf5560ae4a60cb2c20a7d9d7a2328373bd7370fa98b6c6c7ea3ab85c29befd1f1d4a3ae16aa79b059f35084228372bd41fbda8930800020005000000040001007d0004007d516c5e84f134c6ca564180b5778285b89f2d0654d8da2f5ac4a75c5c7cea46aba429c0880f2df8f08d962ee6837d9aae58ef6e2f40e9ce95457912a01f807980ee380ea9ef0a8111f143a981e8c3da9ef324cd0b0ab4115151c83a7b416398093c53c3b11c633da92d1bf72e794fbc354a7cea8a4f95f2bc000000080002000f00000004000100840004006c680f0242b20d3c27725c0c07dfd0f9b2d7fa14dd089086e0ece4a01bd075be5ebdcfd3607d372cbc66fbdee240f67c4f6fb3dc441a8725ada309ffb5e1843a1bc0e49e73b3ce05fede505c4cf2abd0e62b48d615d34934c16ed211bb631931eac8c8bdb94c5645dc20c8880b95e32009305e85e82d639de6f771a0c0d90f48"], 0x33c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async)
sendmsg$nl_route(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="1011935784800000140003006e657464657673696d30150004000000200016801c00018029d40c80140001007fffff11b2ab6598f9ffffff81000000", @ANYBLOB="f1a81d9a2d51088efe3fbf29366ddad010fe370cfbc39b4cfd7c703ea54d1c0d97cff01a2635a25debd484c91860f2d136a088b95c0693f7b3ef27167706a39746d2a8494c6e583cdaa3ab52608b45cd543c87ef70765ea1aa8df7567324bbbcda12bda53fdbc85ddc02f1ccca6a876509b18b1baecde0da9ebd2b454ecc72bfc195e613f3732bb0cb2d8111eb25d9f3c2434758fa22b09151bd3a49881ae73ad546ef80570059e3d2b9a2737152aa1e023e70b6fd8c736db1c78b7d3e93fd92aa"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x1) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB], 0x3c}}, 0x0)
connect$rose(r9, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)

559.990974ms ago: executing program 3 (id=903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xb8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x84)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000dc0)={0x1508, 0x0, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x5}, 0xe8, 0xc, 0x9a, 0x9, 0x13, 'syz0\x00', "85d9e8efc606fe69580b6f7adfffa62d11dc04276c79f850215d46b468bb20d0", "da4a023780a7ce84034962b301027f83a06a80015de8b9b9adcdb867ecb928e3", [{0x5, 0xc03, {0x0, 0xffffffff}}, {0x7, 0xc6, {0x2, 0x8000}}, {0x8, 0xffff, {0x2, 0x2}}, {0x2, 0x0, {0x0, 0x400006}}, {0x7208, 0x1, {0x2, 0x10001}}, {0x40, 0xfffc, {0x0, 0x800}}, {0xe2e, 0x262, {0x1, 0x5}}, {0x4, 0x1000, {0x3, 0x2}}, {0x3c30, 0x10, {0x0, 0xfffffffe}}, {0x40, 0x2, {0x1, 0x8}}, {0x3, 0x1ff, {0x3, 0x2e}}, {0x4, 0x9, {0x1, 0x9}}, {0x7, 0x8, {0x3, 0x1}}, {0x4, 0x4, {0x1, 0x7ff}}, {0x7, 0x1, {0x0, 0x9}}, {0xe, 0xfff8, {0x2, 0x1}}, {0x80, 0x22}, {0x4, 0x1000, {0x2}}, {0x1, 0x9, {0x2}}, {0x7f, 0x9, {0x0, 0x1}}, {0x2, 0x8, {0x1, 0x9}}, {0xff, 0x2, {0x3, 0x1dfad57}}, {0x4, 0x1, {0x0, 0x1}}, {0x4, 0x3, {0x2, 0x14}}, {0x8, 0x0, {0x3, 0x9}}, {0x3, 0x4, {0x1, 0x8}}, {0x0, 0x0, {0x2, 0x4}}, {0x4, 0x81, {0x3, 0x60}}, {0x7ff, 0x7fff, {0x2, 0x5264}}, {0x8, 0x9f38, {0x3, 0x9}}, {0xe, 0x9, {0x0, 0x80000001}}, {0xd8, 0x4, {0x0, 0xceba}}, {0x7, 0x3ff, {0x1, 0x2}}, {0x3, 0x3, {0x2, 0x7}}, {0x8000, 0x96, {0x2, 0x9db4}}, {0x5720, 0x5, {0x2, 0x4}}, {0xfffb, 0x9b4, {0x2, 0x4}}, {0x4, 0x579, {0x3, 0x7}}, {0x2, 0x6, {0x1, 0x8}}, {0x6, 0x0, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x13}, 0x7, 0x7, 0x0, 0xe, 0x14, 'syz0\x00', "d967d852946ea7c0ea122fcaf46627bb3faed9d3d92bd15146c4a39958da5f35", "b568d7cc79b33b3cc719f16cc1cb50147c0a93bda7fb4353eb7bd9ea0fb842dd", [{0xfff5, 0x3, {0x1}}, {0x0, 0x5, {0x1, 0x9}}, {0x400, 0x9, {0x3, 0xe}}, {0x9c98, 0x7, {0x3, 0x6}}, {0x4, 0x3, {0x2, 0x6}}, {0x5, 0x100, {0x0, 0x8}}, {0x600c, 0x4, {0x3, 0x2}}, {0x498, 0x0, {0x2, 0x3c}}, {0xffff, 0x8, {0x3, 0x30c9}}, {0x1, 0x6, {0x2, 0x6}}, {0xb, 0x6, {0x0, 0x9}}, {0x8, 0x8786, {0x2, 0x6}}, {0x3, 0x3ff, {0x0, 0x9}}, {0x9, 0x2, {0x0, 0x8}}, {0x81, 0x8, {0x1, 0x8}}, {0xffd3, 0xfff8, {0x2, 0x1}}, {0x8, 0x90, {0x2, 0x6a7}}, {0x9, 0x7, {0x3, 0x4d58}}, {0xfff, 0x7, {0x2, 0x3}}, {0xb4c, 0x2, {0x0, 0x1}}, {0x7, 0xfff2, {0x0, 0x1}}, {0x5, 0x8, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x7}}, {0x3, 0x8000, {0x1}}, {0x6, 0x617d}, {0x1, 0x6, {0x0, 0xfff}}, {0x7f, 0x7, {0x0, 0x7}}, {0xb, 0x0, {0x1, 0x1}}, {0x6, 0x81, {0x3, 0x94}}, {0x1, 0x6, {0x0, 0x4}}, {0xfff9, 0xfdc5, {0x1, 0xffffffff}}, {0xc00, 0x8, {0x1, 0x8001}}, {0x0, 0x1, {0xabb8f254f1002317, 0xfffffccc}}, {0x2, 0x7, {0x3, 0x5}}, {0x1, 0x2, {0x2}}, {0x3, 0x6, {0x3, 0x8}}, {0x100, 0xe6b, {0x3, 0x7d}}, {0x8, 0xc, {0x3, 0x3}}, {0x80, 0x2, {0x0, 0xa1}}, {0x6f7, 0x5, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x7, 0x8, 0x5, 0x7, 0x7, 'syz0\x00', "4bb35a5e44d30b090240f44ebdc63bdeda44a3716a6703c852a9568d884d93b9", "b141e3ce9336e7463db0fbbe9a8f66dc16bae1ed62467c0160b7cec4dc863fa0", [{0x0, 0xa8c, {0x0, 0x4}}, {0x1, 0x9, {0x1, 0xa4}}, {0x4, 0x2, {0x0, 0x5}}, {0x2, 0x3, {0x2, 0x7fffffff}}, {0x5, 0xe2, {0x3, 0x6}}, {0x7f, 0x4, {0x2, 0x100}}, {0x0, 0x10, {0x3, 0x3}}, {0xd9e, 0x6, {0x1, 0x6}}, {0x9, 0xffff, {0x2, 0xd70e}}, {0xf001, 0x10, {0x2, 0x2}}, {0x7, 0x8000, {0x2, 0x100}}, {0x5, 0x1, {0xb3cc8769389bcdd9, 0x5330}}, {0x3, 0x7, {0x2}}, {0x2, 0xfffc, {0x0, 0xfffffffb}}, {0x3, 0x4, {0x3, 0xe}}, {0x1, 0xf0d8, {0x0, 0x2}}, {0x1, 0x0, {0x3, 0x8}}, {0x9, 0xe, {0x1, 0x5f}}, {0xb, 0x65, {0x3, 0x7f}}, {0x7, 0x3, {0x3, 0x208}}, {0x6, 0x5, {0x1}}, {0x4, 0x8001, {0x0, 0x5}}, {0x2, 0x101, {0x1}}, {0x68, 0x40, {0x0, 0x9}}, {0x1, 0x3ff, {0x1}}, {0x401, 0x61ec, {0x2, 0x7}}, {0x2, 0x7fff, {0x0, 0xb719}}, {0x3, 0x8, {0x0, 0x2}}, {0xfff, 0x81, {0x0, 0x6}}, {0x1000, 0x9, {0x1, 0xd}}, {0xce, 0x40, {0x1, 0x5}}, {0x3, 0x8, {0x0, 0x62a}}, {0x7, 0x5, {0x2, 0x100}}, {0x9, 0x8, {0x1, 0x8}}, {0x9, 0xff, {0x3, 0xfe}}, {0x101, 0x4, {0x3, 0x262e}}, {0x9, 0x101, {0x0, 0x8}}, {0x6, 0x70, {0x0, 0x67dee477}}, {0xc, 0x8, {0x1, 0x7}}, {0x4, 0x3, {0x1, 0x53880190}}]}}}, {{0x254, 0x1, {{0x3, 0x3ff}, 0x8, 0x0, 0x7, 0x1, 0x9, 'syz1\x00', "5d595acafecf9b9c7f55794953145175c56f011ea2bfb43ea2cd5b504af8c15e", "47ebd5f511a10ebad6c96a1e1b6a82867cee1a111558416e165af2e141453fdd", [{0x400, 0x98, {0x0, 0x2}}, {0x1c0, 0x6, {0x3, 0x4}}, {0xfff, 0x2, {0x2, 0x80}}, {0x2, 0x8f1, {0x3, 0x1}}, {0x27e, 0x3, {0x3}}, {0x3, 0x5, {0x1, 0x1}}, {0x7, 0x8, {0x1, 0x5}}, {0x5, 0x1, {0x3, 0x4}}, {0x6, 0x4, {0x3, 0x8001}}, {0xce, 0x6, {0x3, 0xf39}}, {0x5, 0x10, {0x0, 0x8001}}, {0x8, 0x4, {0x1, 0xe55}}, {0x8001, 0xeb, {0x1, 0x7fff}}, {0xfff9, 0x4, {0x2, 0x3}}, {0x8a, 0x400, {0x1, 0x3}}, {0x57, 0x83, {0x0, 0xffff8000}}, {0xfff, 0x6, {0x0, 0x6}}, {0x5, 0x8b54, {0x1, 0x2}}, {0xfffc, 0xfffc, {0x0, 0x9}}, {0x101, 0x2, {0x0, 0x9}}, {0xfffa, 0x1000, {0x3, 0x22f}}, {0xd78, 0x4, {0x1, 0x6}}, {0xdc, 0x5, {0x1, 0x855f}}, {0xfffd, 0x400, {0x0, 0x8}}, {0x8, 0x10, {0x1}}, {0x7ff, 0x2, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0x40}}, {0x2, 0x0, {0x0, 0x7fffffff}}, {0x3ff, 0x1, {0x0, 0x5}}, {0xfffd, 0x8000, {0x1, 0x99f}}, {0x9, 0x63, {0x3, 0x4}}, {0x1c, 0x4, {0x3, 0x2}}, {0x624b, 0x2}, {0x100, 0x3, {0x2, 0x2}}, {0x2, 0x7, {0x3, 0xffff}}, {0x6, 0x8, {0x1, 0x3}}, {0x7fff, 0x6, {0x0, 0x1}}, {0x400, 0xe54, {0x3, 0x3}}, {0x3, 0x5, {0x2, 0x2}}, {0x2, 0x9, {0x0, 0x7fff}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffffe}, 0x1, 0x7, 0x10f0, 0xe05, 0x23, 'syz1\x00', "d9771d721ad0a3b51f35fc9b95b6790c4645cbf37c4df4ee7ed7d413a3a1cd2c", "9b84ebdcb88d5af31b84b17d227008ee0c1ddd83dcdc3e833b7a20018f6358a2", [{0x6a48, 0x8000, {0x2, 0x1000}}, {0x3, 0x8, {0x3, 0x10001}}, {0x49, 0x7, {0x2, 0x3}}, {0x6, 0xe467, {0x3, 0x7}}, {0x948, 0x3, {0x1, 0x3}}, {0xf, 0x1, {0x0, 0x2}}, {0xfffb, 0x9d9, {0x0, 0xfff}}, {0xfffc, 0x8, {0x2, 0x1}}, {0x2, 0xd, {0x0, 0x4}}, {0x28c, 0x101, {0x3, 0x3}}, {0x8, 0x7f}, {0x7, 0xdae, {0x642c01ca63b235a6, 0xffffffff}}, {0x7, 0x7c, {0x0, 0x1800}}, {0x7, 0x2, {0x3}}, {0x3ff, 0x1, {0x0, 0xfffffff9}}, {0x101, 0x6, {0x1, 0x703d4eec}}, {0x8, 0x5f3, {0x1, 0x6}}, {0x81, 0x3c1, {0x0, 0xc}}, {0x2, 0x97, {0x1, 0x5}}, {0x2, 0x5, {0x0, 0xd31}}, {0x4000, 0x5, {0x1, 0x80}}, {0x0, 0x100, {0x1, 0x8}}, {0x401, 0x7f, {0x2, 0x6}}, {0x3, 0x6180, {0x1, 0x3}}, {0x10, 0x100, {0x0, 0x3}}, {0x7, 0x4, {0x3, 0x7}}, {0xc3, 0x0, {0x0, 0x1}}, {0x2c, 0x81, {0x0, 0xe1}}, {0x8, 0x1, {0x2, 0x400}}, {0x9, 0x10, {0x0, 0x8}}, {0x0, 0x8001, {0x3, 0x3}}, {0x9, 0x0, {0x2, 0x8}}, {0x5, 0x0, {0x0, 0xffff}}, {0x5, 0x2, {0x1, 0x1}}, {0x81, 0xff, {0x0, 0x5}}, {0x9b78, 0x5, {0x0, 0x1}}, {0x3, 0x81, {0x3, 0x7}}, {0x1, 0x8, {0x0, 0x9}}, {0x8, 0xfff8, {0x1, 0x3}}, {0xa, 0xff, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0xde, 0xfa, 0x9eb, 0x8, 0xf, 'syz1\x00', "1f3d649e3c418190d6bc12e0d8ede398d8191a5894b002b12d828825e90dd9fe", "37c5dc8316602a7a3732af9e55e20a23fb5b4e638428c57a5420b0d2181c8f88", [{0x9, 0xf}, {0x1, 0x10, {0x0, 0x7a}}, {0x9, 0x4, {0x3, 0x6f9}}, {0xfff1, 0xa, {0x2}}, {0xa, 0x8, {0x3}}, {0x7fff, 0x40, {0x3, 0x392}}, {0x7, 0x9, {0x0, 0xc0}}, {0x0, 0xe, {0x3, 0x3ff}}, {0x3, 0xed, {0x1, 0x6a5712e8}}, {0x6f, 0x40, {0x0, 0x8}}, {0xb, 0x2, {0x2, 0x4000}}, {0x3ff, 0x9, {0x0, 0x3}}, {0x5, 0x7fff, {0x0, 0x41e8}}, {0x1, 0x1, {0x0, 0x10}}, {0xa06, 0x7fe, {0x0, 0x5}}, {0x9e, 0xe, {0x3, 0x100}}, {0xfff9, 0x9, {0x3, 0x8}}, {0x3, 0x100, {0x3, 0x3}}, {0x4, 0x84f, {0x0, 0x13}}, {0x6, 0x8, {0x3, 0x80}}, {0xfff, 0x10, {0x2}}, {0xf273, 0x8, {0x2, 0x5}}, {0x3, 0x2, {0x2, 0x6}}, {0x8, 0x7, {0x6, 0x9}}, {0xbe1, 0xa, {0x2, 0x7}}, {0x70fa, 0x1, {0x3, 0x5c}}, {0x7, 0xe, {0x2, 0xfffffff7}}, {0x100, 0x4, {0x1, 0x9}}, {0xbc37, 0x0, {0x1, 0x627}}, {0x9, 0x1249, {0x1, 0xf}}, {0x6, 0x9, {0x3}}, {0x3, 0x1, {0x2, 0x5}}, {0x5, 0x1, {0x2, 0x400}}, {0x3d26, 0x9, {0x3, 0x6}}, {0x7, 0xeae8, {0x0, 0x8}}, {0x5d12, 0x82, {0x3, 0x6}}, {0x423, 0xdd, {0x1, 0x63d63c81}}, {0x3, 0x4, {0x3, 0x5}}, {0xfffa, 0x1a0, {0x0, 0xa627}}, {0x76, 0xff, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x555}, 0x4, 0x40, 0xf, 0x10, 0x9, 'syz0\x00', "f6923c77778127c74d9f697bf678d72042e84ee619469117c6a627cd5ecab3e4", "c755ee0115c18cd35506d9ffd36b64aa62dde8a44cd13287c4503fc2ef84fd95", [{0x4, 0x48b2, {0x1, 0x9}}, {0x9, 0x40, {0x0, 0x6}}, {0xe902, 0x0, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0x8}}, {0x4, 0x2, {0x1, 0x5}}, {0x800, 0x7fff, {0x1, 0x2}}, {0xa, 0x0, {0x2, 0x1ff}}, {0x4, 0x8, {0x2, 0x5}}, {0x6, 0xfffc, {0x3, 0x6}}, {0x9, 0x5, {0x0, 0x1}}, {0x400, 0x5, {0x2, 0x80000000}}, {0x7ff, 0x10, {0x3, 0x8}}, {0x891, 0x4, {0x1, 0x7fff}}, {0x1, 0x200, {0x0, 0x9d}}, {0x4, 0x8, {0x3, 0x4}}, {0x9, 0x19, {0x2, 0x306}}, {0x3, 0x4, {0x3, 0x3}}, {0xbd81, 0x7, {0x3, 0x3}}, {0x3ff, 0x5, {0x2, 0x7fff}}, {0x8001, 0x4, {0x3, 0x7}}, {0x4, 0x6, {0x3, 0x3}}, {0x1, 0xb, {0x2, 0x7fff}}, {0x1, 0x1b, {0x3, 0x7}}, {0x8, 0x9, {0x2, 0x4}}, {0xd, 0x4, {0x3, 0x10001}}, {0xbbb, 0x10, {0x2, 0x75}}, {0x0, 0x9, {0x3, 0x3}}, {0xa243, 0x80, {0x1, 0x9}}, {0xb, 0x100, {0x0, 0x9}}, {0x6, 0x6, {0x2, 0x5a4}}, {0x0, 0x100, {0x2, 0x80000001}}, {0x32, 0xd8, {0x1, 0x10}}, {0x5, 0x8, {0x1, 0x3}}, {0x0, 0x1, {0x3, 0xd5}}, {0x4ab, 0x9, {0x3, 0x3ff}}, {0x2, 0x3}, {0xffff, 0x100, {0x3, 0x4}}, {0xd384, 0x3, {0x2, 0x1}}, {0x401, 0x6, {0x0, 0x10}}, {0x101, 0x2, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x9, 0x3, 0x528a, 0x9, 0x7, 'syz0\x00', "16a92a5574b321e227f81c8bc333b4ac87eeefbe3e608b8e1daf6535fe50712c", "a63f738f4cda43cc41f4e55154e517a89980e2afccb51e8b42dbbabb219eab05", [{0x7, 0x487, {0x2, 0x97ee}}, {0x25, 0xc4b, {0x2, 0xd04}}, {0x1800, 0x9, {0x2, 0x1}}, {0x7, 0x40, {0x2, 0x2}}, {0x4, 0x5, {0x0, 0x6}}, {0x1, 0x200, {0x2}}, {0xff7f, 0x5, {0x2, 0x2}}, {0x5, 0x1, {0x1}}, {0x8, 0x8, {0x3, 0x10001}}, {0x200, 0x8, {0x3, 0x401}}, {0x2, 0x4, {0x1, 0xe}}, {0x8, 0x2e7a, {0x2, 0xfff}}, {0xe55, 0x4, {0x0, 0x8}}, {0x4c6, 0x40, {0x3, 0x4}}, {0xf, 0xc9, {0x0, 0x10}}, {0x8, 0xe5, {0x1, 0xff}}, {0x4, 0x9, {0x1, 0x9}}, {0xfe00, 0x6, {0x0, 0x9}}, {0x9, 0x1, {0x2, 0x60}}, {0x6, 0x0, {0x2, 0x1}}, {0x5f, 0x2, {0x3, 0x5}}, {0xc90, 0x5, {0x3, 0x7}}, {0x800, 0x58, {0x0, 0x4}}, {0x9, 0x5, {0x3, 0x4}}, {0xe, 0x1, {0x2, 0x4}}, {0x3, 0x346, {0x2, 0x8}}, {0x7, 0x6, {0x3, 0xc5600000}}, {0xfffd, 0x3, {0x2, 0xfffffffd}}, {0x800, 0x1, {0x2, 0x6c}}, {0x3, 0x4, {0x2, 0x3}}, {0x1, 0x0, {0x3, 0x8}}, {0x40, 0x772, {0x1, 0x9}}, {0xa, 0x4b, {0x3, 0x6d1}}, {0x4, 0x1, {0x1, 0x9}}, {0xe, 0x7, {0x1, 0x3}}, {0x400, 0x101, {0x1, 0x5}}, {0x3, 0x8000, {0x0, 0x9}}, {0x7, 0x80b, {0x0, 0x5}}, {0x5, 0x8000, {0x1, 0xf3}}, {0x3, 0x3, {0x0, 0xffff}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x81, 0x10, 0x9, 0xdc8f, 0x1e, 'syz1\x00', "9a3f4490353f528a58a870aba5aef49cd9bd243926e094bbcd8391b0a9c871f9", "fc813420ca425d25ee8b430e67e87d60cf5417e7907ee51e7787022d6b58d37b", [{0x4a3a, 0x2, {0x2, 0xb}}, {0x0, 0x2, {0x2, 0x600000}}, {0x3, 0x8371, {0x2, 0x200}}, {0xc, 0x2, {0x0, 0xd}}, {0xc, 0x10, {0x0, 0x1}}, {0x4, 0x77e4, {0x3, 0x8}}, {0x6, 0x1, {0x0, 0x14c}}, {0x62, 0x2, {0x2}}, {0xffff, 0x401, {0x0, 0x4}}, {0x0, 0x2, {0x1, 0xb}}, {0x1, 0x401, {0x3, 0x7}}, {0x0, 0x7, {0x3, 0x101}}, {0x80, 0x6, {0x3, 0x8000}}, {0x5, 0x200, {0x3, 0x3}}, {0x13d, 0x0, {0x1, 0x7}}, {0x1, 0xb95, {0x1, 0x6}}, {0xc016, 0xe, {0x0, 0x3}}, {0x3, 0x6, {0x3, 0x3}}, {0x0, 0x9, {0x1, 0x10001}}, {0x4, 0x7, {0x1}}, {0x10, 0xff, {0x1, 0x4}}, {0x1ff, 0x7, {0x3, 0x1}}, {0x347, 0x0, {0x2, 0xd}}, {0x0, 0x7, {0x2, 0x6}}, {0x10, 0x6, {0x2, 0x4}}, {0x7f, 0x2d, {0x1, 0x8001}}, {0xff01, 0x2a39, {0x0, 0x5}}, {0xfff5, 0x2, {0x3, 0x3}}, {0x0, 0x1ff, {0x2, 0x51e}}, {0x1, 0x9, {0x3, 0x6}}, {0x9, 0xd, {0x1, 0x2}}, {0xfff, 0x5, {0x2, 0x9}}, {0xffff, 0x9, {0x1, 0x6}}, {0x2, 0x0, {0x1, 0x9}}, {0x8, 0x4, {0x2, 0x8}}, {0x0, 0x6, {0x0, 0xd1a}}, {0x3, 0x1, {0x1, 0x40}}, {0xef4f, 0xfffb, {0x0, 0x7}}, {0x8001, 0x4, {0x2}}, {0x800, 0x6, {0x0, 0x2}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x5}, 0x4000081)

462.49934ms ago: executing program 0 (id=904):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

455.961566ms ago: executing program 3 (id=905):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x60, 0x28, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9, 0x1}, {0xfff2}, {0xf, 0xfff2}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0xc, 0xeb}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc}}, @TCA_RATE={0x6, 0x5, {0x67, 0xc}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x60}}, 0x2400c000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x40801)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000800)
r7 = socket$netlink(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000480)=0x158fe29b, 0x4)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpeername$netlink(r8, &(0x7f00000004c0), &(0x7f0000000500)=0xc)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/144, &(0x7f0000000600)=0x90)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40004)
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r9)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x10008001)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r9)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000900)={'wpan4\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r12, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008890}, 0x20000844)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40))
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000a80)=@int=0x4, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000bc0)={0x7fffffff, {{0xa, 0x4e22, 0x6ff, @private2, 0x1}}}, 0x88)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041000}, 0x4004090)
ioctl$F2FS_IOC_SET_PIN_FILE(r14, 0x4004f50d, &(0x7f0000000d80)=0x1)

333.565698ms ago: executing program 0 (id=906):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x4c, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x9, @empty, 0x200}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x2b, 0x1, 0x0)
listen(r4, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
listen(r4, 0x80c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {}, {0x2}, {0x6}]})
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000436cd2e5e0002000030"], 0x1c}}, 0x8080)

333.131207ms ago: executing program 3 (id=907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x4005)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

242.991601ms ago: executing program 0 (id=908):
r0 = socket$netlink(0x10, 0x3, 0xc)
socket(0x2a, 0xa, 0xa2)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x0)
pipe(&(0x7f00000009c0)={<r2=>0xffffffffffffffff})
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x43ca10337ab2e290, r1}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r2, 0xffffffffffffffff, 0xb, 0xd, 0xffffffffffffffff, @void, @value=r3}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x1, 'vxcan1\x00', {}, 0xa9d})
getsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x24044080)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)

171.719608ms ago: executing program 3 (id=909):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10e, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001580)={'wpan0\x00'})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="35d97c1ae8626f6ac5b8a3242cda853d91a8e6e11b6b5205dab41732fd56329ae3a72298d2a833fc576bac62e433f00028ee39922ea1b714a1fb202e4b7fd4f4eb2c36241507c0022fe9425a082fabffa217d417aeed49cd742d82020dc578c39f9e9e3089133c27ed214277a7d20b33acbdb0283105f237355427d59bb55902d70a89aa170940cac669ea4402902e026fb4401948812faf317d21087d0bf5dee25c3b2cda12f0e3f8779bbb72963d0afe444282", @ANYBLOB], 0xb}, 0x1, 0x0, 0x0, 0x8814}, 0x94801)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000e00), 0x12)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095", @ANYBLOB="c5b75dc62f8899a1a6d1c99083e1c782e68eacda490428da870a8cd940ea2a2dfc2be4c2cd3379bc1daad676f52d17aaf556f038a999de7957690a7261e4ef5b28d1d869ccd0987eafd61771775742c5ac24b3490aa48e07e8155ec23c97f7c7edac1bdc9a9423304632aecbee2249b2482016316ef5e56e2ecd0c63d066e2a2ec87331f73d53673d50d978b511583e4e85f6378668091295bce362a65fccf847d079ae019426882752661484eb5e80b55540f4119db6a729ec2f9", @ANYRES16=r4, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000380)=0x8)
sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

113.396061ms ago: executing program 3 (id=910):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

112.706374ms ago: executing program 1 (id=911):
r0 = socket(0x9, 0x1, 0x0)
setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000040)=0xf9a, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000018001c00128009000100626f6e64000000000c0002800800040006e7009e"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)

10.988452ms ago: executing program 1 (id=912):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xc}], 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4888}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

0s ago: executing program 3 (id=913):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000002030300000000000000000002000001fc000540bd0f22ce0800047163bc4000cf742f2676124ac4beddcb72c7ca"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x4010)
r9 = getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r11, 0x72b}, 0x14}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r11, 0x72b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r4, &(0x7f00000006c0)=r9, 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38004' (ED25519) to the list of known hosts.
syzkaller login: [   49.152880][ T5827] cgroup: Unknown subsys name 'net'
[   49.262504][ T5827] cgroup: Unknown subsys name 'cpuset'
[   49.267827][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.830586][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.709212][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.713439][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.719129][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.723307][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.726839][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.747390][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.750611][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.753604][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.757046][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.760008][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.797379][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.800928][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.804614][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.810139][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.813566][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.026000][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.106195][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.168984][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   55.179817][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.182275][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.184869][ T5851] bridge_slave_0: entered allmulticast mode
[   55.187588][ T5851] bridge_slave_0: entered promiscuous mode
[   55.223350][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.226274][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.228676][ T5851] bridge_slave_1: entered allmulticast mode
[   55.232479][ T5851] bridge_slave_1: entered promiscuous mode
[   55.307586][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.310526][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.313048][ T5847] bridge_slave_0: entered allmulticast mode
[   55.316240][ T5847] bridge_slave_0: entered promiscuous mode
[   55.342019][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.345015][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.348005][ T5847] bridge_slave_1: entered allmulticast mode
[   55.351162][ T5847] bridge_slave_1: entered promiscuous mode
[   55.376584][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.389081][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.394700][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.399155][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.429128][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.431727][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.434116][ T5856] bridge_slave_0: entered allmulticast mode
[   55.437462][ T5856] bridge_slave_0: entered promiscuous mode
[   55.440975][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.443363][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.445830][ T5856] bridge_slave_1: entered allmulticast mode
[   55.448631][ T5856] bridge_slave_1: entered promiscuous mode
[   55.484252][ T5851] team0: Port device team_slave_0 added
[   55.488783][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.494078][ T5847] team0: Port device team_slave_0 added
[   55.498788][ T5851] team0: Port device team_slave_1 added
[   55.502562][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.506873][ T5847] team0: Port device team_slave_1 added
[   55.560124][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.562595][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.571683][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.577023][ T5856] team0: Port device team_slave_0 added
[   55.581381][ T5856] team0: Port device team_slave_1 added
[   55.583882][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.586355][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.595770][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.600295][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.602642][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.611327][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.623551][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.626295][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.636338][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.656199][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.658469][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.667310][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.672834][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.675743][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.686179][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.729276][ T5847] hsr_slave_0: entered promiscuous mode
[   55.734243][ T5847] hsr_slave_1: entered promiscuous mode
[   55.770697][ T5851] hsr_slave_0: entered promiscuous mode
[   55.772942][ T5851] hsr_slave_1: entered promiscuous mode
[   55.775281][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.777160][ T5851] Cannot create hsr debugfs directory
[   55.790160][ T5856] hsr_slave_0: entered promiscuous mode
[   55.792836][ T5856] hsr_slave_1: entered promiscuous mode
[   55.795170][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   55.797094][ T5856] Cannot create hsr debugfs directory
[   56.107926][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.116596][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.131051][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.141402][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.167818][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.173873][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.178751][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.183190][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.233529][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.243896][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.250520][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.255879][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.345364][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.366877][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.378897][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.393966][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.401686][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.404551][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.411877][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   56.423755][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.426822][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.432868][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.435890][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.454843][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.457560][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.468071][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.503540][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.506568][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.515734][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.518673][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.687872][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.711842][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.728311][ T5856] veth0_vlan: entered promiscuous mode
[   56.738105][ T5856] veth1_vlan: entered promiscuous mode
[   56.747945][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.750767][ T5850] Bluetooth: hci0: command tx timeout
[   56.793466][ T5851] veth0_vlan: entered promiscuous mode
[   56.807522][ T5856] veth0_macvtap: entered promiscuous mode
[   56.814957][ T5856] veth1_macvtap: entered promiscuous mode
[   56.822537][ T5851] veth1_vlan: entered promiscuous mode
[   56.832627][ T5850] Bluetooth: hci1: command tx timeout
[   56.836258][ T5847] veth0_vlan: entered promiscuous mode
[   56.846377][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.860532][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.869255][ T5847] veth1_vlan: entered promiscuous mode
[   56.876666][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.881777][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.886295][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.894623][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.910338][ T5850] Bluetooth: hci2: command tx timeout
[   56.924587][ T5851] veth0_macvtap: entered promiscuous mode
[   56.942765][ T5851] veth1_macvtap: entered promiscuous mode
[   56.961864][ T5847] veth0_macvtap: entered promiscuous mode
[   56.968711][ T5847] veth1_macvtap: entered promiscuous mode
[   56.993817][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.002330][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.005132][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.005734][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.024978][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.038597][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.044422][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.057597][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.065061][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.077342][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.077668][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.082784][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.093368][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.102822][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.105786][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.109007][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.155420][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.156955][  T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.166933][  T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.221809][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.224373][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.227640][  T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.233497][  T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.275056][ T5915] veth0: mtu less than device minimum
[   57.277662][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.282936][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.336173][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.341369][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.431977][ T5883] IPVS: starting estimator thread 0...
[   57.520373][ T5932] IPVS: using max 48 ests per chain, 115200 per kthread
[   57.582709][ T5941] netlink: 'syz.0.6': attribute type 2 has an invalid length.
[   57.588015][ T5941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6'.
[   57.677628][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.773584][ T5955] Zero length message leads to an empty skb
[   57.775629][ T5956] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   57.783533][ T5956] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.787240][ T5956] netlink: 105 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.799117][ T5957] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   57.808510][ T5957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.813527][ T5957] netlink: 105 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.890438][ T5964] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14'.
[   57.911737][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.009341][ T5962] dvmrp0: entered allmulticast mode
[   58.113324][ T5978] smc: net device bond0 applied user defined pnetid SYZ2
[   58.189199][ T5989] syzkaller0: entered promiscuous mode
[   58.194479][ T5989] syzkaller0: entered allmulticast mode
[   58.469956][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.475275][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.478974][ T6003] bond0 (unregistering): Released all slaves
[   58.493951][ T6007] veth1_to_bridge: entered promiscuous mode
[   58.496245][ T6007] veth1_to_bridge: entered allmulticast mode
[   58.502146][ T6007] netlink: 'syz.2.27': attribute type 3 has an invalid length.
[   58.549816][ T6009] tipc: Started in network mode
[   58.553111][ T6009] tipc: Node identity fa6a6b928263, cluster identity 4711
[   58.556751][ T6010] netlink: 'syz.2.28': attribute type 8 has an invalid length.
[   58.561095][ T6009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.565428][ T6011] syzkaller0: entered promiscuous mode
[   58.567747][ T6011] syzkaller0: entered allmulticast mode
[   58.575497][ T6008] tipc: Resetting bearer <eth:syzkaller0>
[   58.587289][ T6008] tipc: Disabling bearer <eth:syzkaller0>
[   58.840071][ T5850] Bluetooth: hci0: command tx timeout
[   58.919567][ T5850] Bluetooth: hci1: command tx timeout
[   58.999683][ T5850] Bluetooth: hci2: command tx timeout
[   59.055647][ T6014] netlink: 'syz.0.29': attribute type 5 has an invalid length.
[   59.058625][ T6013] netlink: 'syz.0.29': attribute type 5 has an invalid length.
[   59.235315][ T6020] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET)
[   59.375610][ T6022] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.944867][ T6043] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   59.989596][ T6043] hsr_slave_0 (unregistering): left promiscuous mode
[   60.020355][ T6045] netlink: 'syz.1.36': attribute type 3 has an invalid length.
[   60.070800][ T6047] can: request_module (can-proto-3) failed.
[   60.173120][ T6066] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   60.211199][ T6066] vlan0: entered allmulticast mode
[   60.213010][ T6066] veth1: entered allmulticast mode
[   60.221183][ T6069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.223787][ T6069] syzkaller0: entered promiscuous mode
[   60.225694][ T6069] syzkaller0: entered allmulticast mode
[   60.242320][ T6069] tipc: Resetting bearer <eth:syzkaller0>
[   60.295571][ T6067] tipc: Resetting bearer <eth:syzkaller0>
[   60.337149][ T6067] tipc: Disabling bearer <eth:syzkaller0>
[   60.443568][ T6087] tipc: Started in network mode
[   60.445275][ T6087] tipc: Node identity 3a16e8728abd, cluster identity 4711
[   60.448227][ T6087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.452136][ T6087] syzkaller0: entered promiscuous mode
[   60.454402][ T6087] syzkaller0: entered allmulticast mode
[   60.459052][ T6087] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   60.472900][ T6087] tipc: Resetting bearer <eth:syzkaller0>
[   60.476371][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[   60.483004][ T6086] tipc: Disabling bearer <eth:syzkaller0>
[   60.654241][ T6096] gtp0: entered promiscuous mode
[   60.656049][ T6096] gtp0: entered allmulticast mode
[   60.663181][ T6096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.665840][ T6096] syzkaller0: entered promiscuous mode
[   60.668021][ T6096] syzkaller0: entered allmulticast mode
[   60.704131][ T6095] tipc: Resetting bearer <eth:syzkaller0>
[   60.729912][ T6095] tipc: Disabling bearer <eth:syzkaller0>
[   60.742541][ T6104] tipc: Invalid UDP bearer configuration
[   60.742566][ T6104] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.773609][ T6106] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[   60.780173][ T6107] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[   60.836031][ T6114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.853384][ T6116] tipc: Disabling bearer <eth:syzkaller0>
[   60.860893][ T6120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.865664][ T6119] tipc: Resetting bearer <eth:syzkaller0>
[   60.873313][ T6118] tipc: Disabling bearer <eth:syzkaller0>
[   60.910285][ T5850] Bluetooth: hci0: command tx timeout
[   60.990990][ T5850] Bluetooth: hci1: command tx timeout
[   61.069517][ T5850] Bluetooth: hci2: command tx timeout
[   61.369194][ T6138] trusted_key: syz.1.62 sent an empty control message without MSG_MORE.
[   61.395355][ T6136] netem: change failed
[   61.562820][ T6141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.665939][ T6141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.751363][ T6141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.807708][ T6141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.912670][ T5884] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.928522][ T5884] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.945837][ T5884] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.958715][ T5884] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.087427][ T6156] warning: `syz.1.67' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.166554][ T6158] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   62.219341][ T6161] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.685916][ T6167] syzkaller0: entered promiscuous mode
[   62.687803][ T6167] syzkaller0: entered allmulticast mode
[   62.886194][ T6172] openvswitch: netlink: IP tunnel dst address not specified
[   62.945015][ T6174] validate_nla: 3 callbacks suppressed
[   62.945025][ T6174] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   62.954183][ T6174] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.989553][ T5850] Bluetooth: hci0: command tx timeout
[   63.069674][ T5850] Bluetooth: hci1: command tx timeout
[   63.094333][ T6179] dvmrp8: entered allmulticast mode
[   63.104644][ T6179] dvmrp8: left allmulticast mode
[   63.149565][ T5850] Bluetooth: hci2: command tx timeout
[   63.159522][ T6180] netlink: 'syz.2.75': attribute type 23 has an invalid length.
[   63.342460][ T6189] __nla_validate_parse: 29 callbacks suppressed
[   63.342476][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   63.596026][ T6214] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   63.747414][ T6221] netlink: 830 bytes leftover after parsing attributes in process `syz.0.86'.
[   63.892765][ T6225] pim6reg1: entered promiscuous mode
[   63.895104][ T6225] pim6reg1: entered allmulticast mode
[   64.010295][ T6225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.88'.
[   64.045671][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.050662][ T6225] team0: Port device bond1 added
[   64.136527][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.141060][ T6229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.197449][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.202482][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.208236][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.212335][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.293455][ T6233] netlink: 68 bytes leftover after parsing attributes in process `syz.2.91'.
[   64.332691][ T6238] !: renamed from dummy0 (while UP)
[   64.352691][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   64.746254][ T6259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.751652][ T6259] syzkaller0: entered promiscuous mode
[   64.759475][ T6259] syzkaller0: entered allmulticast mode
[   64.828796][ T6267] tipc: Resetting bearer <eth:syzkaller0>
[   64.845963][ T6258] tipc: Resetting bearer <eth:syzkaller0>
[   64.863554][ T6258] tipc: Disabling bearer <eth:syzkaller0>
[   64.966449][ T6273] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   64.972487][ T6273] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   65.076869][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'.
[   65.121794][ T6285] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.127524][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   65.569150][ T6333] ip6gre1: entered allmulticast mode
[   65.630357][ T6336] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   65.785052][ T6353] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   65.812637][ T6353] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.716538][ T6408] netlink: 'syz.2.122': attribute type 64 has an invalid length.
[   66.722334][ T6410] netlink: 'syz.0.121': attribute type 10 has an invalid length.
[   66.733148][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.737169][ T6410] team0: Port device bond0 added
[   66.886881][ T6435] Bluetooth: MGMT ver 1.23
[   67.062604][ T6450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.354323][ T6450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.468609][ T6450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.588421][ T6476] netlink: 'syz.1.136': attribute type 2 has an invalid length.
[   67.602428][ T6450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.619213][ T6477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.633800][ T6476] k*: entered promiscuous mode
[   67.681371][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.690266][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.697995][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.725511][ T5678] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.091306][ T6519] gretap1: entered promiscuous mode
[   68.122810][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.126989][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.130921][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.183088][ T6527] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   68.189747][ T6527] netlink: 'syz.2.149': attribute type 4 has an invalid length.
[   68.200388][ T6527] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   68.204295][ T6527] netlink: 'syz.2.149': attribute type 4 has an invalid length.
[   68.273065][ T5913] vxcan1 speed is unknown, defaulting to 1000
[   68.289631][ T6525] infiniband syz2: set active
[   68.291823][ T6525] infiniband syz2: added vxcan1
[   68.324793][ T6535] team0: Port device bond0 removed
[   68.340744][ T6535] bridge_slave_0: left allmulticast mode
[   68.343195][ T6535] bridge_slave_0: left promiscuous mode
[   68.346409][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.367338][ T6525] RDS/IB: syz2: added
[   68.376989][ T6535] bridge_slave_1: left allmulticast mode
[   68.377365][ T6525] smc: adding ib device syz2 with port count 1
[   68.379142][ T6535] bridge_slave_1: left promiscuous mode
[   68.379697][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.386267][ T6525] smc:    ib device syz2 port 1 has pnetid 
[   68.398387][ T6535] bond0: (slave bond_slave_0): Releasing backup interface
[   68.406352][ T6535] bond0: (slave bond_slave_1): Releasing backup interface
[   68.416461][ T6535] team0: Port device team_slave_0 removed
[   68.422745][ T6535] team0: Port device team_slave_1 removed
[   68.425166][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.427779][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.435937][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.438468][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.452770][ T6535] team0: Port device bond1 removed
[   68.457867][ T5829] vxcan1 speed is unknown, defaulting to 1000
[   68.461868][ T6540] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   68.465109][ T6540] __nla_validate_parse: 17 callbacks suppressed
[   68.465120][ T6540] netlink: 184 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.473088][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.475078][ T6540] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   68.479920][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   68.695696][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.864984][ T6547] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.156'.
[   68.871028][ T6525] vxcan1 speed is unknown, defaulting to 1000
[   68.935316][ T6547] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   69.057569][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'.
[   69.071624][ T6561] gtp0: entered promiscuous mode
[   69.086596][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   69.093749][ T6554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.159'.
[   69.125307][ T6564] bridge0: entered allmulticast mode
[   69.175335][ T6567] netlink: 256 bytes leftover after parsing attributes in process `syz.0.163'.
[   69.179091][ T6567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.163'.
[   69.185086][ T6568] tipc: Enabled bearer <udp:syz2>, priority 10
[   69.187813][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.163'.
[   69.191895][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'.
[   69.325371][ T6586] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   69.326688][ T6587] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   69.388643][ T6591] lo speed is unknown, defaulting to 1000
[   69.393255][ T6591] lo speed is unknown, defaulting to 1000
[   69.395760][ T6591] lo speed is unknown, defaulting to 1000
[   69.399945][ T6591] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.407781][ T6591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.464004][ T6591] lo speed is unknown, defaulting to 1000
[   69.468206][ T6591] lo speed is unknown, defaulting to 1000
[   69.475360][ T6598] vxcan1 speed is unknown, defaulting to 1000
[   69.475547][ T6591] lo speed is unknown, defaulting to 1000
[   69.485299][ T6591] lo speed is unknown, defaulting to 1000
[   69.840321][ T6612] vxcan1 speed is unknown, defaulting to 1000
[   69.870922][ T6598] netlink: 'syz.0.173': attribute type 13 has an invalid length.
[   69.874185][ T6598] netlink: 'syz.0.173': attribute type 17 has an invalid length.
[   69.931831][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.935536][ T6598] 8021q: adding VLAN 0 to HW filter on device team0
[   69.939755][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.956135][ T6618] openvswitch: netlink: IPv4 tun info is not correct
[   70.121109][ T6612] lo speed is unknown, defaulting to 1000
[   70.180700][ T6635] netlink: 'syz.0.180': attribute type 2 has an invalid length.
[   70.183965][ T6635] netlink: 'syz.0.180': attribute type 8 has an invalid length.
[   70.200648][  T794] tipc: Node number set to 2013883282
[   70.308539][ T6643] syz2: rxe_newlink: already configured on vxcan1
[   71.067394][ T6669] syzkaller1: entered promiscuous mode
[   71.070360][ T6669] syzkaller1: entered allmulticast mode
[   71.215975][ T6680] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   71.234315][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.433185][ T6693] gretap0: entered promiscuous mode
[   71.435663][ T6693] vlan2: entered promiscuous mode
[   71.852829][ T6724] 8021q: VLANs not supported on dvmrp0
[   71.857575][ T6722] 8021q: VLANs not supported on dvmrp0
[   71.884444][ T6731] veth1_to_bond: entered allmulticast mode
[   71.892498][ T6725] can: request_module (can-proto-0) failed.
[   71.900169][ T6725] openvswitch: netlink: IP tunnel dst address not specified
[   71.929285][ T6731] veth1_to_bond (unregistering): left allmulticast mode
[   72.018307][ T6741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.249839][ T6763] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.459064][ T6779] 0X: renamed from caif0
[   72.483015][ T6779] 0X: entered allmulticast mode
[   72.485310][ T6779] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   72.577329][ T6792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   72.880112][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.884594][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.893338][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.903938][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.908164][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.940919][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.945180][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.948990][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.965908][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.970920][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.975584][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.979343][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.983901][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.990073][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.993892][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   72.997581][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.001397][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.005553][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.010250][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.014566][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.019931][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.025090][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.029898][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.034202][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.038530][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.043006][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.047365][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.051827][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.055870][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.060564][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.064737][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.068863][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.073817][   T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   73.724030][ T6840] __nla_validate_parse: 49 callbacks suppressed
[   73.724047][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[   73.763081][ T6840] validate_nla: 4 callbacks suppressed
[   73.763090][ T6840] netlink: 'syz.2.225': attribute type 21 has an invalid length.
[   73.768222][ T6840] netlink: 128 bytes leftover after parsing attributes in process `syz.2.225'.
[   73.774048][ T6840] netlink: 3 bytes leftover after parsing attributes in process `syz.2.225'.
[   73.785508][ T6842] netlink: 'syz.1.226': attribute type 58 has an invalid length.
[   73.788248][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'.
[   73.799826][ T6840] vlan2: entered promiscuous mode
[   73.802061][ T6840] bond0: entered promiscuous mode
[   73.804222][ T6840] bond_slave_0: entered promiscuous mode
[   73.806796][ T6840] bond_slave_1: entered promiscuous mode
[   73.812193][ T6840] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   73.860170][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   73.874172][ T6848] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   73.874607][ T5884] bond0: (slave bond_slave_0): interface is now down
[   73.899100][ T5884] bond0: (slave bond_slave_1): interface is now down
[   73.902304][ T5884] bond0: (slave wlan1): interface is now down
[   73.911571][ T5884] bond0: now running without any active interface!
[   73.932667][ T6850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'.
[   73.936437][ T6850] netlink: 'syz.0.231': attribute type 32 has an invalid length.
[   73.946780][ T6850] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   73.973133][ T6852] tipc: Started in network mode
[   73.975192][ T6852] tipc: Node identity 2ebe0689006, cluster identity 4711
[   73.978142][ T6852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.983185][ T6852] syzkaller0: entered promiscuous mode
[   73.985814][ T6852] syzkaller0: entered allmulticast mode
[   73.990880][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   74.007292][ T6852] tipc: Resetting bearer <eth:syzkaller0>
[   74.022717][ T6851] tipc: Resetting bearer <eth:syzkaller0>
[   74.035111][ T6851] tipc: Disabling bearer <eth:syzkaller0>
[   74.103723][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'.
[   74.107693][ T6868] netlink: 256 bytes leftover after parsing attributes in process `syz.2.235'.
[   74.115478][ T6868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.235'.
[   74.123606][ T6869] dvmrp0: left allmulticast mode
[   74.227739][ T6888] netlink: 'syz.2.240': attribute type 83 has an invalid length.
[   74.328371][ T6903] IPVS: length: 220 != 8
[   74.516368][ T6924] syz_tun: entered promiscuous mode
[   74.520239][ T6924] batadv_slave_0: entered promiscuous mode
[   74.523655][ T6924] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   74.530295][ T6924] hsr1: entered allmulticast mode
[   74.532398][ T6924] syz_tun: entered allmulticast mode
[   74.534671][ T6924] batadv_slave_0: entered allmulticast mode
[   74.538850][ T6929] netlink: 'syz.2.251': attribute type 2 has an invalid length.
[   74.551913][ T6929] k*]: entered promiscuous mode
[   74.566498][ T6929] 0X: left allmulticast mode
[   74.568523][ T6929] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   74.574412][ T5829] lo speed is unknown, defaulting to 1000
[   74.582772][ T6929] veth0_to_team: entered promiscuous mode
[   74.584847][ T6929] veth0_to_team: entered allmulticast mode
[   74.593813][ T6929] Illegal XDP return value 16128 on prog  (id 42) dev syz_tun, expect packet loss!
[   74.691623][ T6934] syzkaller0: entered promiscuous mode
[   74.693901][ T6934] syzkaller0: entered allmulticast mode
[   74.740333][ T6944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.613922][ T6947] vxcan1 speed is unknown, defaulting to 1000
[   75.853876][ T6947] lo speed is unknown, defaulting to 1000
[   75.862142][ T6975] netlink: 'syz.0.264': attribute type 10 has an invalid length.
[   75.889082][ T6975] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   75.977114][ T6984] vlan0: entered promiscuous mode
[   75.979192][ T6984] batadv0: entered promiscuous mode
[   76.015074][ T6988] netlink: 'syz.2.268': attribute type 1 has an invalid length.
[   76.030505][ T6989] netlink: 'syz.2.268': attribute type 1 has an invalid length.
[   76.336777][ T7013] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.372814][ T7015] erspan0: entered promiscuous mode
[   76.376049][ T7015] erspan0: left promiscuous mode
[   76.405764][ T7017] netlink: 'syz.0.276': attribute type 2 has an invalid length.
[   76.480901][ T7019] gretap1: left promiscuous mode
[   76.494754][ T7019] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   76.553878][ T7023] netlink: 'syz.0.278': attribute type 1 has an invalid length.
[   76.596721][ T7023] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.628113][ T7024] gretap2: entered promiscuous mode
[   76.634580][ T7024] bond3: (slave gretap2): making interface the new active one
[   76.638237][ T7024] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   76.656886][ T7023] macvlan0: entered promiscuous mode
[   76.658880][ T7023] macvlan0: entered allmulticast mode
[   76.662292][ T7023] bond3: entered promiscuous mode
[   76.664733][ T7023] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   76.667440][ T7023] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   76.673402][ T7023] bond3: left promiscuous mode
[   76.685557][ T7028] batman_adv: batadv0: Adding interface: dummy0
[   76.687937][ T7028] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.697398][ T7028] batman_adv: batadv0: Interface activated: dummy0
[   76.706831][ T7028] batadv0: mtu less than device minimum
[   76.709206][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.713647][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.717562][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.722091][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.726268][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.730537][ T7028] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.750457][ T7028] batman_adv: batadv0: Adding interface: ip6gretap1
[   76.752726][ T7028] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.762718][ T7028] batman_adv: batadv0: Interface activated: ip6gretap1
[   76.815592][ T7032] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[   76.879275][ T7034] bond0: (slave gretap0): Opening slave failed
[   77.121532][ T7045] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.126049][ T7045] bond1: (slave bond2): Enslaving as an active interface with an up link
[   77.134154][ T7045] bond1 (unregistering): (slave bond2): Releasing backup interface
[   77.142001][ T7045] bond1 (unregistering): Released all slaves
[   77.403062][ T7060] vxcan1 speed is unknown, defaulting to 1000
[   77.618087][ T7060] lo speed is unknown, defaulting to 1000
[   77.793538][ T7038] delete_channel: no stack
[   77.845031][ T7093] 8021q: VLANs not supported on ip6_vti0
[   78.468372][ T7141] k*]: entered promiscuous mode
[   78.492812][ T7143] syzkaller0: entered allmulticast mode
[   78.496322][ T7141] veth0_to_team: entered promiscuous mode
[   78.503368][ T7141] veth0_to_team: entered allmulticast mode
[   78.806250][ T7169] __nla_validate_parse: 17 callbacks suppressed
[   78.806262][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'.
[   78.874439][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[   79.010867][ T7182] syzkaller0: entered promiscuous mode
[   79.012733][ T7182] syzkaller0: entered allmulticast mode
[   79.056055][ T7185] validate_nla: 1 callbacks suppressed
[   79.056066][ T7185] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[   79.061288][ T7185] netlink: 224 bytes leftover after parsing attributes in process `syz.0.307'.
[   79.916814][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'.
[   79.957728][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'.
[   79.963972][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   79.977678][ T7202] pim6reg: entered allmulticast mode
[   79.982492][ T7202] pim6reg: left allmulticast mode
[   80.083659][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[   80.095528][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[   80.100125][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.314'.
[   80.206080][ T7217] net_ratelimit: 37 callbacks suppressed
[   80.206094][ T7217] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   80.299686][ T7219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.318'.
[   80.322879][ T7221] bond4: entered promiscuous mode
[   80.325127][ T7221] bond4: entered allmulticast mode
[   80.330903][ T7221] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.464912][ T7238] bridge0: entered promiscuous mode
[   80.467016][ T7238] macsec1: entered promiscuous mode
[   80.481625][ T7238] bridge_slave_0: left allmulticast mode
[   80.484113][ T7238] bridge_slave_0: left promiscuous mode
[   80.486826][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.491985][ T7240] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004
[   80.496533][ T7238] bridge_slave_1: left allmulticast mode
[   80.498853][ T7238] bridge_slave_1: left promiscuous mode
[   80.503659][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.512426][ T7238] bond0: (slave bond_slave_0): Releasing backup interface
[   80.517966][ T7238] bond_slave_0: left promiscuous mode
[   80.528420][ T7238] bond0: (slave bond_slave_1): Releasing backup interface
[   80.534068][ T7238] bond_slave_1: left promiscuous mode
[   80.544887][ T7238] team0: Port device team_slave_0 removed
[   80.553432][ T7238] team0: Port device team_slave_1 removed
[   80.556319][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.559560][ T7238] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.562921][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.565981][ T7238] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.591552][ T7238] bond0: (slave wlan1): Releasing backup interface
[   80.596277][ T7238] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[   80.616211][   T10] vxcan1 speed is unknown, defaulting to 1000
[   80.698055][ T7247] syzkaller1: entered allmulticast mode
[   80.702846][ T7233] syzkaller1: left allmulticast mode
[   80.753415][ T7233] "syz.0.323" (7233) uses obsolete ecb(arc4) skcipher
[   80.892239][ T7259] unsupported nlmsg_type 40
[   80.996569][ T7266] ip6tnl3: entered promiscuous mode
[   81.027648][ T7268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.055300][ T7268] tipc: Disabling bearer <eth:syzkaller0>
[   81.374680][ T7299] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   81.466737][ T7302] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   81.493670][    T9] cfg80211: failed to load regulatory.db
[   81.767416][ T7307] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[   81.793863][ T7307] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.813501][ T7307] bond1: (slave veth5): Enslaving as an active interface with a down link
[   81.824052][ T7307] gretap1: entered promiscuous mode
[   81.883213][ T7314] netlink: 'syz.0.346': attribute type 3 has an invalid length.
[   81.974982][ T7320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.048590][ T7325] netlink: 'syz.2.349': attribute type 6 has an invalid length.
[   82.058185][ T7325] netlink: 'syz.2.349': attribute type 12 has an invalid length.
[   82.411118][ T7331] netlink: 'syz.1.351': attribute type 4 has an invalid length.
[   82.411124][ T7332] netlink: 'syz.1.351': attribute type 4 has an invalid length.
[   82.417730][ T7332] netlink: 'syz.1.351': attribute type 4 has an invalid length.
[   82.418446][ T7335] netlink: 'syz.1.351': attribute type 4 has an invalid length.
[   82.824890][ T7348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[   82.834184][ T7348] gretap3: entered promiscuous mode
[   82.991375][ T7364] bond3: (slave gretap2): Releasing active interface
[   83.085254][ T7369] pim6reg1: entered promiscuous mode
[   83.086038][ T7371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.087394][ T7369] pim6reg1: entered allmulticast mode
[   83.091664][ T7371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.191700][ T7372] vlan3: entered promiscuous mode
[   83.193984][ T7372] macvtap0: entered promiscuous mode
[   83.225421][ T7374] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.231062][ T7374] team0: Port device bond5 added
[   83.873162][ T7390] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20000
[   83.929110][ T7392] __nla_validate_parse: 26 callbacks suppressed
[   83.929120][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   84.028203][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'.
[   84.075993][ T7409] netlink: zone id is out of range
[   84.077982][ T7409] netlink: zone id is out of range
[   84.081970][ T7409] netlink: zone id is out of range
[   84.085146][ T7409] netlink: zone id is out of range
[   84.087495][ T7409] netlink: zone id is out of range
[   84.092509][ T7409] netlink: zone id is out of range
[   84.095074][ T7409] netlink: zone id is out of range
[   84.097328][ T7409] netlink: zone id is out of range
[   84.101560][ T7409] netlink: zone id is out of range
[   84.137818][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.152648][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.263278][  T794] IPVS: starting estimator thread 0...
[   84.306590][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'.
[   84.350030][ T7432] IPVS: using max 57 ests per chain, 136800 per kthread
[   84.359282][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'.
[   84.363084][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'.
[   84.392465][ T7453] validate_nla: 4 callbacks suppressed
[   84.392478][ T7453] netlink: 'syz.2.384': attribute type 10 has an invalid length.
[   84.404210][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   84.455882][ T7459] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[   84.497727][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[   84.938144][ T7478] netlink: 'syz.0.390': attribute type 2 has an invalid length.
[   84.943072][ T7478] netlink: 'syz.0.390': attribute type 2 has an invalid length.
[   84.946413][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'.
[   85.055366][ T7482] vlan0: entered promiscuous mode
[   85.057551][ T7482] macvtap0: entered promiscuous mode
[   85.143078][ T7491] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[   85.146242][ T7492] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   85.184018][ T7491] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.188884][ T7491] bond3: (slave bond4): making interface the new active one
[   85.194235][ T7491] bond3: (slave bond4): Enslaving as an active interface with an up link
[   85.198396][ T7491] bridge0: Device is already in use.
[   85.269044][ T7505] bridge0: left allmulticast mode
[   85.338367][ T7509] raw_sendmsg: syz.2.399 forgot to set AF_INET. Fix it!
[   85.443609][ T7513] syz_tun: entered allmulticast mode
[   85.499602][ T7521] siw: device registration error -23
[   85.574933][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.578956][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.599314][ T7521] batman_adv: batadv0: Interface deactivated: dummy0
[   85.631653][ T7521] net_ratelimit: 26 callbacks suppressed
[   85.631669][ T7521] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   85.653487][ T7512] syz_tun: left allmulticast mode
[   85.684086][ T7523] vxcan1 speed is unknown, defaulting to 1000
[   85.832957][ T7523] lo speed is unknown, defaulting to 1000
[   86.073976][ T7538] IPv6: sit1: Disabled Multicast RS
[   86.333496][ T7545] netlink: 'syz.0.409': attribute type 9 has an invalid length.
[   86.737184][ T7552] netlink: 'syz.2.410': attribute type 3 has an invalid length.
[   86.846485][ T7554] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[   87.016145][ T7565] C: renamed from team_slave_0
[   87.137513][ T7571] vxcan1 speed is unknown, defaulting to 1000
[   87.213877][ T7585] netlink: 'syz.1.420': attribute type 13 has an invalid length.
[   87.332497][ T7571] lo speed is unknown, defaulting to 1000
[   87.332659][ T7585] vxcan1 speed is unknown, defaulting to 1000
[   87.544119][ T7585] lo speed is unknown, defaulting to 1000
[   87.619709][ T7591] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   87.774933][ T7596] tipc: Invalid UDP bearer configuration
[   87.774976][ T7596] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.841794][ T7598] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.847911][ T7598] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.940867][ T7601] vxcan1 speed is unknown, defaulting to 1000
[   88.101523][ T7601] lo speed is unknown, defaulting to 1000
[   88.101730][ T7600] vxcan1 speed is unknown, defaulting to 1000
[   88.264919][ T7600] lo speed is unknown, defaulting to 1000
[   88.554670][ T7620] vxcan1 speed is unknown, defaulting to 1000
[   88.861991][ T7625] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[   88.904480][ T7620] lo speed is unknown, defaulting to 1000
[   88.959598][   T24] tipc: Node number set to 786302601
[   88.998456][ T7643] netlink: 'syz.0.434': attribute type 13 has an invalid length.
[   89.084450][ T7643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.094878][ T7646] vlan3: entered promiscuous mode
[   89.099339][ T7646] __nla_validate_parse: 17 callbacks suppressed
[   89.099348][ T7646] netlink: 19 bytes leftover after parsing attributes in process `syz.2.435'.
[   89.130778][ T7646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.435'.
[   89.140802][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'.
[   89.181491][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   89.210877][ T7643] vxcan1 speed is unknown, defaulting to 1000
[   89.223288][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.236548][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'.
[   89.265690][ T7654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'.
[   89.446869][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.449977][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.456190][ T7661] 8021q: adding VLAN 0 to HW filter on device team0
[   89.461265][ T7661] batman_adv: batadv0: Interface activated: dummy0
[   89.464054][ T7661] batadv0: mtu less than device minimum
[   89.467363][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.472321][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.477419][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.483077][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.488337][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.493716][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.499133][ T7661] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.526413][ T7643] lo speed is unknown, defaulting to 1000
[   89.566979][ T7668] vxcan1 speed is unknown, defaulting to 1000
[   89.647338][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'.
[   89.661414][ T7672] delete_channel: no stack
[   89.683855][ T7668] lo speed is unknown, defaulting to 1000
[   89.705537][ T7676] netlink: 304 bytes leftover after parsing attributes in process `syz.2.442'.
[   89.797905][ T7686] net veth1_virt_wifi : renamed from virt_wifi0
[   90.088559][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[   90.149138][ T7713] netlink: 168 bytes leftover after parsing attributes in process `syz.1.448'.
[   90.200434][ T7706] xfrm0: entered promiscuous mode
[   90.202860][ T7706] xfrm0: entered allmulticast mode
[   90.247158][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.303265][ T7706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.393188][ T7728] syzkaller1: entered promiscuous mode
[   90.395083][ T7728] syzkaller1: entered allmulticast mode
[   90.616156][ T7744] validate_nla: 4 callbacks suppressed
[   90.616168][ T7744] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   90.910395][    C1] net_ratelimit: 16 callbacks suppressed
[   90.910407][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   91.030638][   T24] IPVS: starting estimator thread 0...
[   91.032953][ T7749] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   91.119912][ T7751] IPVS: using max 48 ests per chain, 115200 per kthread
[   91.151303][ T7755] unknown channel width for channel at 909000KHz?
[   91.154426][ T7755] unknown channel width for channel at 909000KHz?
[   91.223563][ T7758] netlink: 'syz.1.462': attribute type 58 has an invalid length.
[   91.315081][ T7763] netlink: 'syz.0.463': attribute type 10 has an invalid length.
[   91.318453][ T7763] dummy0: entered promiscuous mode
[   91.327635][ T7763] bridge0: port 1(dummy0) entered blocking state
[   91.335766][ T7763] bridge0: port 1(dummy0) entered disabled state
[   91.346663][ T7763] dummy0: entered allmulticast mode
[   91.352492][ T7763] bridge0: port 1(dummy0) entered blocking state
[   91.355052][ T7763] bridge0: port 1(dummy0) entered listening state
[   91.403798][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.609055][ T7796] netlink: 'syz.1.470': attribute type 83 has an invalid length.
[   91.613080][ T7795] netlink: 'syz.1.470': attribute type 83 has an invalid length.
[   91.642146][ T7795] vxcan1 speed is unknown, defaulting to 1000
[   91.748322][ T7795] lo speed is unknown, defaulting to 1000
[   91.748484][ T7796] vxcan1 speed is unknown, defaulting to 1000
[   91.822174][ T7813] macsec1: entered promiscuous mode
[   91.824035][ T7813] team0: entered promiscuous mode
[   91.825760][ T7813] bond5: entered promiscuous mode
[   91.877300][ T7796] lo speed is unknown, defaulting to 1000
[   91.949625][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   91.952714][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   92.037026][ T7835] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.042470][ T7835] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.126993][ T7841] netlink: 'syz.1.478': attribute type 4 has an invalid length.
[   92.362842][ T7852] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   92.884241][ T7869] dummy0: left allmulticast mode
[   92.886140][ T7869] bridge0: port 1(dummy0) entered disabled state
[   92.902300][ T7869] bond5: left promiscuous mode
[   92.905353][ T7869] team0: Port device bond5 removed
[   92.989775][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   93.445875][ T7891] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   93.454820][ T7891] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.601469][ T7895] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.633213][ T7895] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.674990][ T7895] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.752439][ T7895] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.833134][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.855472][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.874143][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.884718][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.946376][ T7901] netlink: 'syz.1.495': attribute type 11 has an invalid length.
[   94.021923][ T7903] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[   94.029638][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   94.096539][ T7905] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[   94.110935][ T7908] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   94.113656][ T7908] __nla_validate_parse: 22 callbacks suppressed
[   94.113664][ T7908] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.498'.
[   94.149931][ T7905] bond6: (slave veth3): Enslaving as an active interface with a down link
[   94.218242][ T7919] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   94.226257][ T7919] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.558658][ T7949] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.604411][ T7949] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.706452][ T7949] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.754959][ T7949] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.069607][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   95.196034][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[   95.483360][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[   95.495259][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[   95.495297][ T5678] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.502522][ T5678] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.506392][ T5678] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.510952][ T5678] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.514387][ T7997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.511'.
[   95.551171][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.611218][ T8000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.512'.
[   96.109546][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   96.654622][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'.
[   96.823821][ T8026] netlink: 364 bytes leftover after parsing attributes in process `syz.0.518'.
[   96.826846][ T8026] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   96.903923][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[   96.950489][ T8035] 8021q: adding VLAN 0 to HW filter on device bond7
[   96.958991][ T8035] 8021q: adding VLAN 0 to HW filter on device macvlan1
[   96.963776][ T8035] bond7: (slave macvlan1): Enslaving as a backup interface with an up link
[   96.977802][ T8035] bond6: (slave veth3): Releasing active interface
[   96.982475][ T8035] bond7: (slave macvlan1): Releasing backup interface
[   97.149609][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   97.888875][ T8049] netlink: 72 bytes leftover after parsing attributes in process `syz.0.523'.
[   97.948907][ T8054] netlink: 'syz.0.525': attribute type 1 has an invalid length.
[   97.953867][ T8054] netlink: 'syz.0.525': attribute type 1 has an invalid length.
[   98.189574][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   98.251425][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.261248][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.268440][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.278155][ T5884] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.474692][   T33] audit: type=1800 audit(1756960302.177:2): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.533" name="blkio.bfq.time_recursive" dev="tmpfs" ino=907 res=0 errno=0
[   98.719821][ T8087] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[   98.742873][ T8087] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.813229][ T8087] bond4 (unregistering): Released all slaves
[   99.229739][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   99.477960][ T8104] netlink: 'syz.1.540': attribute type 12 has an invalid length.
[   99.481322][ T8104] __nla_validate_parse: 7 callbacks suppressed
[   99.481336][ T8104] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.540'.
[   99.767594][ T8111] netlink: 'syz.1.541': attribute type 5 has an invalid length.
[   99.824168][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[   99.827647][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[   99.849564][ T8112] netlink: 'syz.1.541': attribute type 18 has an invalid length.
[   99.871983][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[   99.875805][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  100.188201][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'.
[  100.204249][   T54] Bluetooth: hci2: link tx timeout
[  100.207438][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.214946][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.269663][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.290418][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.297396][ T8121] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  100.304239][ T8121] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  100.308841][   T54] Bluetooth: hci2: link tx timeout
[  100.310980][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.313155][ T8120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.392427][ T8126] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[  100.405702][ T8126] 8021q: adding VLAN 0 to HW filter on device bond8
[  100.416961][ T8126] bond8: (slave geneve3): making interface the new active one
[  100.422600][ T8126] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  100.476372][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'.
[  100.480292][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'.
[  100.487931][ T8132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.549'.
[  100.498654][ T8132] netlink: 'syz.0.549': attribute type 9 has an invalid length.
[  100.502430][ T8132] netlink: 'syz.0.549': attribute type 7 has an invalid length.
[  100.504953][ T8132] netlink: 'syz.0.549': attribute type 8 has an invalid length.
[  100.508177][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.549'.
[  100.514109][ T8132] macvlan1: entered promiscuous mode
[  100.517324][ T8132] macvlan1: left promiscuous mode
[  100.631143][ T8134] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  100.631617][ T8135] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  100.678309][ T8137] bond9: entered promiscuous mode
[  100.680800][ T8137] bond9: entered allmulticast mode
[  100.682942][ T8137] 8021q: adding VLAN 0 to HW filter on device bond9
[  100.740774][ T8144] 8021q: adding VLAN 0 to HW filter on device bond10
[  100.752768][ T8144] 8021q: adding VLAN 0 to HW filter on device bond10
[  100.755185][ T8144] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.759988][ T8144] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  100.807518][ T8145] veth5: entered promiscuous mode
[  100.814128][ T8145] bond10: (slave veth5): Enslaving as an active interface with a down link
[  100.822628][  T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.826749][  T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.310081][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  102.088541][ T8208] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.211464][   T54] Bluetooth: hci2: link tx timeout
[  102.213987][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.273807][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  102.349561][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  102.540959][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.558651][ T8256] netlink: zone id is out of range
[  102.565152][ T8256] netlink: del zone limit has 8 unknown bytes
[  102.669685][ T5850] Bluetooth: hci0: command tx timeout
[  102.717645][ T8264] bond0: entered promiscuous mode
[  102.720459][ T8264] bond0: left promiscuous mode
[  102.905129][ T8271] bond8: (slave geneve3): Releasing active interface
[  102.911803][ T8271] bond10: (slave veth5): Releasing active interface
[  103.028631][ T8273] validate_nla: 7 callbacks suppressed
[  103.028641][ T8273] netlink: 'syz.0.585': attribute type 10 has an invalid length.
[  103.034547][ T8273] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  103.037622][ T8273] bond0: (slave wlan1): refused to change device type
[  103.389750][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  103.621416][ T8284] IPv6: NLM_F_CREATE should be specified when creating new route
[  103.653924][ T8287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.660960][ T8287] syzkaller0: entered promiscuous mode
[  103.662763][ T8287] syzkaller0: entered allmulticast mode
[  103.667681][ T8287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  103.760263][ T8292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.763668][ T8292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.813939][ T8299] erspan0: default FDB implementation only supports local addresses
[  103.854467][ T8304] netlink: 'syz.0.593': attribute type 7 has an invalid length.
[  103.857634][ T8304] netlink: 'syz.0.593': attribute type 8 has an invalid length.
[  103.871647][ T8304] gretap0: entered promiscuous mode
[  103.873956][ T8304] batadv_slave_1: entered promiscuous mode
[  103.876143][ T8304] erspan0: entered promiscuous mode
[  103.953457][ T8306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.957274][ T8306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.023239][ T8306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.027207][ T8306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.087940][ T8306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.094345][ T8306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.168723][ T8306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.174415][ T8306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.238135][ T8308] tipc: Resetting bearer <eth:syzkaller0>
[  104.284890][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.287710][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.300992][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.304735][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.321059][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.323808][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.332317][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.335286][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.439544][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  104.466629][ T8315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.485392][ T8286] tipc: Resetting bearer <eth:syzkaller0>
[  104.499732][ T8286] tipc: Disabling bearer <eth:syzkaller0>
[  104.515509][ T8315] syzkaller0: entered promiscuous mode
[  104.517261][ T8315] syzkaller0: entered allmulticast mode
[  104.546593][ T8315] tipc: Resetting bearer <eth:syzkaller0>
[  104.551748][ T8314] tipc: Resetting bearer <eth:syzkaller0>
[  104.558323][ T8314] tipc: Disabling bearer <eth:syzkaller0>
[  104.617752][ T8323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.621805][ T8323] syzkaller0: entered promiscuous mode
[  104.623667][ T8323] syzkaller0: entered allmulticast mode
[  104.626921][ T8323] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  104.636743][ T8323] tipc: Resetting bearer <eth:syzkaller0>
[  104.645306][ T8322] tipc: Resetting bearer <eth:syzkaller0>
[  104.653697][ T8322] tipc: Disabling bearer <eth:syzkaller0>
[  104.670240][ T8325] can: request_module (can-proto-0) failed.
[  104.674695][ T8325] openvswitch: netlink: IP tunnel dst address not specified
[  104.738443][ T8328] bond0 (unregistering): Released all slaves
[  104.841759][ T8335] netlink: 'syz.1.601': attribute type 10 has an invalid length.
[  104.844428][ T8335] __nla_validate_parse: 88 callbacks suppressed
[  104.844436][ T8335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.601'.
[  104.850425][ T8335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.858176][ T8335] netlink: 172 bytes leftover after parsing attributes in process `syz.1.601'.
[  104.920336][ T8337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  105.026498][ T8346] netlink: 'syz.1.603': attribute type 21 has an invalid length.
[  105.029142][ T8346] netlink: 128 bytes leftover after parsing attributes in process `syz.1.603'.
[  105.032532][ T8346] netlink: 3 bytes leftover after parsing attributes in process `syz.1.603'.
[  105.057633][ T8351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.063395][ T8351] syzkaller0: entered promiscuous mode
[  105.065223][ T8351] syzkaller0: entered allmulticast mode
[  105.078100][ T8351] tipc: Resetting bearer <eth:syzkaller0>
[  105.090289][ T8352] tipc: Resetting bearer <eth:syzkaller0>
[  105.097450][ T8352] tipc: Disabling bearer <eth:syzkaller0>
[  105.562507][ T8373] netlink: 244 bytes leftover after parsing attributes in process `syz.1.610'.
[  105.596504][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'.
[  105.717775][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.616'.
[  105.729460][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'.
[  105.736698][ T8384] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[  105.749826][ T8384] netlink: 'syz.0.616': attribute type 2 has an invalid length.
[  105.800217][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.812589][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.816256][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.827545][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.836070][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.511617][    C1] net_ratelimit: 2 callbacks suppressed
[  106.511628][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  106.616458][ T8387] vxcan1 speed is unknown, defaulting to 1000
[  106.731788][ T8402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.619'.
[  106.788677][ T8406] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.798310][ T8405] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.823841][ T8387] lo speed is unknown, defaulting to 1000
[  106.853016][ T8411] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  106.926244][ T8409] dummy0: left promiscuous mode
[  106.972615][ T8409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.977691][ T8408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.079631][ T8426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'.
[  107.101575][ T8426] veth0_to_bridge: entered promiscuous mode
[  107.114319][ T8426] batman_adv: batadv0: Interface deactivated: dummy0
[  107.116768][ T8426] batman_adv: batadv0: Removing interface: dummy0
[  107.120166][ T8426] bridge_slave_0: left allmulticast mode
[  107.122381][ T8426] bridge_slave_0: left promiscuous mode
[  107.124585][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.128277][ T8426] bridge_slave_1: left allmulticast mode
[  107.131606][ T8426] bridge_slave_1: left promiscuous mode
[  107.134730][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.142222][ T8426] team0: Port device team_slave_0 removed
[  107.147620][ T8426] team0: Port device team_slave_1 removed
[  107.150733][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.153379][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.156471][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.159311][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.166421][ T8426] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  107.168732][ T8426] batman_adv: batadv0: Removing interface: ip6gretap1
[  107.172550][ T8426] bond1: (slave ip6gretap2): Releasing backup interface
[  107.180305][ T8387] chnl_net:caif_netlink_parms(): no params data found
[  107.193788][ T8421] veth0_to_bridge: left promiscuous mode
[  107.253303][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.255663][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.258031][ T8387] bridge_slave_0: entered allmulticast mode
[  107.265477][ T8387] bridge_slave_0: entered promiscuous mode
[  107.268991][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.272781][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.275393][ T8387] bridge_slave_1: entered allmulticast mode
[  107.279813][ T8387] bridge_slave_1: entered promiscuous mode
[  107.321326][ T8447] netlink: 'syz.1.630': attribute type 1 has an invalid length.
[  107.333285][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.341426][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.364996][ T8387] team0: Port device team_slave_0 added
[  107.368285][ T8387] team0: Port device team_slave_1 added
[  107.385605][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.388037][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.398770][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.404842][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.407390][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.418651][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.445839][ T8387] hsr_slave_0: entered promiscuous mode
[  107.448848][ T8387] hsr_slave_1: entered promiscuous mode
[  107.452266][ T8387] debugfs: 'hsr0' already exists in 'hsr'
[  107.454996][ T8387] Cannot create hsr debugfs directory
[  107.559830][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  107.618913][ T8457] vxcan1 speed is unknown, defaulting to 1000
[  107.688409][ T8387] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.703464][ T8387] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  107.712757][ T8387] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  107.726583][ T8387] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  107.791540][ T8467] vxcan1 speed is unknown, defaulting to 1000
[  107.793775][ T8457] lo speed is unknown, defaulting to 1000
[  107.803399][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.837680][ T8387] 8021q: adding VLAN 0 to HW filter on device team0
[  107.865778][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.868814][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.870400][ T5850] Bluetooth: hci3: command tx timeout
[  107.879186][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.882243][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.922370][ T8467] lo speed is unknown, defaulting to 1000
[  108.095174][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.196334][ T8387] veth0_vlan: entered promiscuous mode
[  108.204471][ T8387] veth1_vlan: entered promiscuous mode
[  108.462095][ T8387] veth0_macvtap: entered promiscuous mode
[  108.474439][ T8387] veth1_macvtap: entered promiscuous mode
[  108.498418][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.510983][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.521381][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.525113][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.535683][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.538550][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.589790][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.650851][ T6317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.662378][ T6317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.677699][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.683981][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.823503][ T8506] tipc: Started in network mode
[  108.828504][ T8506] tipc: Node identity 82bdc628042e, cluster identity 4711
[  108.837448][ T8506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.845584][ T8506] syzkaller0: entered promiscuous mode
[  108.852027][ T8506] syzkaller0: entered allmulticast mode
[  108.859811][ T8506] netlink: 'syz.3.644': attribute type 1 has an invalid length.
[  108.874261][ T8506] tipc: Resetting bearer <eth:syzkaller0>
[  108.880325][ T8505] tipc: Resetting bearer <eth:syzkaller0>
[  108.898616][ T8505] tipc: Disabling bearer <eth:syzkaller0>
[  108.996040][ T8512] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.999198][ T8512] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.046108][ T8512] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.050137][ T8512] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.105327][ T8512] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.114796][ T8512] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.136604][ T8521] netlink: 'syz.3.649': attribute type 1 has an invalid length.
[  109.139304][ T8521] netlink: 'syz.3.649': attribute type 1 has an invalid length.
[  109.176915][ T8521] netlink: 'syz.3.649': attribute type 1 has an invalid length.
[  109.196164][ T8512] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.200086][ T8512] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.331736][ T8527] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.332207][   T51] IPVS: starting estimator thread 0...
[  109.429928][ T8529] IPVS: using max 80 ests per chain, 192000 per kthread
[  109.531393][ T8534] rdma_rxe: rxe_newlink: failed to add vxcan1
[  109.594128][ T8534] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  109.597414][ T8534] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  109.603039][ T8534] veth1_virt_wifi: entered allmulticast mode
[  109.607362][ T8534] veth1_virt_wifi: left allmulticast mode
[  109.639993][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  109.716387][ T5678] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.721983][ T5678] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.734651][ T5678] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.738968][ T5678] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.756392][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.759998][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.768266][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.774171][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.886295][ T8550] __nla_validate_parse: 79 callbacks suppressed
[  109.886305][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'.
[  109.952051][ T5850] Bluetooth: hci3: command tx timeout
[  109.994239][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.661'.
[  110.018513][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.061000][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.068500][ T8570] bond0: (slave rose0): Enslaving as an active interface with an up link
[  110.075969][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'.
[  110.108887][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'.
[  110.125220][ T8575] batman_adv: batadv0: Adding interface: dummy0
[  110.128020][ T8575] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.137794][ T8575] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  110.153255][ T8576] batman_adv: batadv0: Adding interface: ip6gretap2
[  110.155577][ T8576] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.165078][ T8576] batman_adv: batadv0: Interface activated: ip6gretap2
[  110.221080][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.665'.
[  110.257318][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[  110.261609][ T8580] netlink: 'syz.0.665': attribute type 29 has an invalid length.
[  110.264320][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[  110.488377][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'.
[  110.654738][ T8621] netlink: 'syz.0.673': attribute type 15 has an invalid length.
[  110.679653][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  110.696252][ T8627] netlink: 72 bytes leftover after parsing attributes in process `syz.3.676'.
[  110.841698][ T8635] veth0_to_team: left promiscuous mode
[  110.845854][ T8635] xfrm0: left promiscuous mode
[  110.858606][ T8639] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  110.982452][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.677'.
[  111.152968][ T8665] syzkaller1: entered promiscuous mode
[  111.154937][ T8665] syzkaller1: entered allmulticast mode
[  111.268477][ T8680] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.312994][ T8680] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.423959][ T8680] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.466972][ T8680] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.529271][ T5678] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.538572][ T5678] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.552548][ T8495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.561421][ T5678] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.707062][ T8697] netlink: 'syz.1.696': attribute type 28 has an invalid length.
[  111.710821][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.040360][ T5850] Bluetooth: hci3: command tx timeout
[  112.092409][ T8703] bridge0: entered promiscuous mode
[  112.094573][ T8703] macsec1: entered promiscuous mode
[  112.098387][ T8703] bridge0: left promiscuous mode
[  112.577285][ T8731] netlink: 'syz.1.706': attribute type 2 has an invalid length.
[  112.592007][ T8731] veth0_to_team: entered promiscuous mode
[  112.749539][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  113.256735][ T8761] vxcan1 speed is unknown, defaulting to 1000
[  113.340685][ T8767] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  113.499691][ T8761] lo speed is unknown, defaulting to 1000
[  113.789913][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  113.802445][ T8791] syzkaller0: entered promiscuous mode
[  113.804391][ T8791] syzkaller0: entered allmulticast mode
[  114.119856][   T54] Bluetooth: hci3: command tx timeout
[  114.452088][ T8798] netlink: 'syz.0.724': attribute type 1 has an invalid length.
[  114.829741][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  114.858793][ T8810] vxcan1 speed is unknown, defaulting to 1000
[  115.027961][ T8810] lo speed is unknown, defaulting to 1000
[  115.133713][ T8814] __nla_validate_parse: 21 callbacks suppressed
[  115.133724][ T8814] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.727'.
[  115.193160][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.728'.
[  115.208152][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[  115.416364][ T8825] netlink: 'syz.0.730': attribute type 1 has an invalid length.
[  115.431101][ T8825] bond12: entered promiscuous mode
[  115.433438][ T8825] 8021q: adding VLAN 0 to HW filter on device bond12
[  115.445559][ T8825] 8021q: adding VLAN 0 to HW filter on device bond12
[  115.448025][ T8825] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  115.451599][ T8825] bond12: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  115.456897][ T8825] bond12: (slave vxcan3): making interface the new active one
[  115.459643][ T8825] vxcan3: entered promiscuous mode
[  115.462094][ T8825] bond12: (slave vxcan3): Enslaving as an active interface with an up link
[  115.688934][ T8841] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.693827][ T8841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.706338][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'.
[  115.710204][ T8841] netlink: 'syz.0.737': attribute type 14 has an invalid length.
[  115.713567][ T8841] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11)
[  115.717517][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'.
[  115.721306][ T8841] netlink: 'syz.0.737': attribute type 14 has an invalid length.
[  115.724921][ T8841] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11)
[  115.730627][ T8841] netlink: 'syz.0.737': attribute type 10 has an invalid length.
[  115.733670][ T8841] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  115.736729][ T8841] bond0: (slave wlan1): refused to change device type
[  115.742363][ T8841] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.746214][ T8841] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.860893][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026657000: rx timeout, send abort
[  115.864677][    C0] vcan0: j1939_tp_rxtimer: 0xffff888026655400: rx timeout, send abort
[  115.867649][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026657000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  115.869717][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  115.873134][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026655400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  115.925054][ T8850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.927668][ T8850] syzkaller0: entered promiscuous mode
[  115.930529][ T8850] syzkaller0: entered allmulticast mode
[  115.952598][ T8849] tipc: Resetting bearer <eth:syzkaller0>
[  115.962254][ T8848] netlink: 168 bytes leftover after parsing attributes in process `syz.1.740'.
[  115.962908][ T8849] tipc: Disabling bearer <eth:syzkaller0>
[  116.005872][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[  116.094728][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  116.143958][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.745'.
[  116.747672][ T8876] ieee802154 phy0 wpan0: encryption failed: -22
[  116.910457][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  117.951945][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  118.990704][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  119.129069][ T8879] openvswitch: netlink: IP tunnel dst address not specified
[  119.178641][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[  119.216476][ T8892] batadv_slave_1: entered promiscuous mode
[  119.227569][ T8892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.264180][ T8892] batadv_slave_1 (unregistering): left promiscuous mode
[  119.267066][ T8892] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.294497][ T8894] 0X: renamed from caif0
[  119.300920][ T8894] 0X: entered allmulticast mode
[  119.303080][ T8894] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  119.310860][ T8896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.314062][ T8896] syzkaller0: entered promiscuous mode
[  119.316010][ T8896] syzkaller0: entered allmulticast mode
[  119.328045][ T8895] tipc: Resetting bearer <eth:syzkaller0>
[  119.370735][ T8895] tipc: Disabling bearer <eth:syzkaller0>
[  119.493196][ T8917] netlink: 'syz.3.757': attribute type 7 has an invalid length.
[  119.497272][ T8917] netlink: 'syz.3.757': attribute type 8 has an invalid length.
[  119.520348][ T8919] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.523651][ T8919] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.600647][ T8927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.607751][ T8927] tipc: Resetting bearer <eth:syzkaller0>
[  119.629077][ T8926] tipc: Disabling bearer <eth:syzkaller0>
[  119.782544][ T8942] dvmrp0: entered allmulticast mode
[  119.819853][ T8946] netlink: 'syz.1.765': attribute type 178 has an invalid length.
[  120.029728][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  120.160651][ T8959] __nla_validate_parse: 5 callbacks suppressed
[  120.160665][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'.
[  120.198018][ T8964] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  120.203399][ T8964] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  120.282117][ T8966] vxcan1 speed is unknown, defaulting to 1000
[  120.545607][ T8966] lo speed is unknown, defaulting to 1000
[  120.720334][ T8983] Bluetooth: MGMT ver 1.23
[  120.779290][ T8966] netlink: 'syz.1.771': attribute type 6 has an invalid length.
[  121.069621][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  121.077479][ T9007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.087193][ T9007] syzkaller0: entered promiscuous mode
[  121.090808][ T9007] syzkaller0: entered allmulticast mode
[  121.099142][ T9007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  121.407972][ T9011] netlink: 224 bytes leftover after parsing attributes in process `syz.1.781'.
[  121.672005][ T9014] tipc: Resetting bearer <eth:syzkaller0>
[  121.783844][ T9016] syzkaller0: tun_chr_ioctl cmd 26129
[  121.898445][ T9006] tipc: Resetting bearer <eth:syzkaller0>
[  121.909943][ T9016] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  121.926621][ T9006] tipc: Disabling bearer <eth:syzkaller0>
[  121.938497][ T9016] syzkaller0: tun_net_xmit 76
[  121.952358][ T9016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.996133][ T9015] tipc: Resetting bearer <eth:syzkaller0>
[  122.111183][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  122.935029][ T9015] tipc: Disabling bearer <eth:syzkaller0>
[  123.042799][ T9042] rdma_rxe: rxe_newlink: failed to add vxcan1
[  123.105486][ T9042] bridge0: port 3(hsr_slave_0) entered blocking state
[  123.111463][ T9042] bridge0: port 3(hsr_slave_0) entered disabled state
[  123.114435][ T9042] hsr_slave_0: entered allmulticast mode
[  123.118262][ T9042] hsr_slave_0: left allmulticast mode
[  123.149603][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  124.189846][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  125.229529][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  126.256728][ T9068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.267018][ T9068] syzkaller0: entered promiscuous mode
[  126.269206][ T9068] syzkaller0: entered allmulticast mode
[  126.272043][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  126.293788][ T9068] tipc: Resetting bearer <eth:syzkaller0>
[  126.314544][ T9076] erspan0: entered promiscuous mode
[  126.317437][ T9078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.795'.
[  126.325190][ T9076] erspan0: left promiscuous mode
[  126.344048][ T9067] tipc: Resetting bearer <eth:syzkaller0>
[  126.369852][ T9067] tipc: Disabling bearer <eth:syzkaller0>
[  126.409769][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'.
[  126.480729][ T9084] netlink: 'syz.3.798': attribute type 1 has an invalid length.
[  126.533178][ T9084] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.543186][ T9084] netlink: 'syz.3.798': attribute type 1 has an invalid length.
[  126.546372][ T9084] netlink: 'syz.3.798': attribute type 4 has an invalid length.
[  126.554726][ T9084] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.798'.
[  126.574352][ T9084] netlink: 'syz.3.798': attribute type 1 has an invalid length.
[  126.576768][ T9084] netlink: 'syz.3.798': attribute type 4 has an invalid length.
[  126.582354][ T9084] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.798'.
[  126.587387][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'.
[  126.652803][ T9084] bond1 (unregistering): Released all slaves
[  126.721329][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  126.724283][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  126.890881][ T9105] : renamed from pim6reg1
[  126.902028][ T9105] macvtap1: entered allmulticast mode
[  126.904275][ T9105] veth0_macvtap: entered allmulticast mode
[  127.104982][ T9115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.806'.
[  127.108772][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.806'.
[  127.233071][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'.
[  127.236716][ T9121] tipc: Cannot configure node identity twice
[  127.293308][ T9123] vxcan1 speed is unknown, defaulting to 1000
[  127.319565][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  127.388127][ T9123] lo speed is unknown, defaulting to 1000
[  127.505928][ T9128] netlink: 'syz.3.811': attribute type 19 has an invalid length.
[  127.511185][ T9128] netlink: 'syz.3.811': attribute type 10 has an invalid length.
[  127.514610][ T9128] macvlan1: entered allmulticast mode
[  127.519596][ T9128] veth1_vlan: entered allmulticast mode
[  127.522990][ T9128] team0: Device macvlan1 is up. Set it down before adding it as a team port
[  127.642986][ T9132] netlink: 'syz.3.813': attribute type 10 has an invalid length.
[  127.657587][ T9132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.786893][ T9135] 0X: left allmulticast mode
[  127.805887][ T9135] veth0_to_team: left promiscuous mode
[  127.809069][ T9135] veth0_to_team: left allmulticast mode
[  127.826831][ T9135] xfrm0: left allmulticast mode
[  127.905474][ T9135] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  127.925066][ T9139] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  127.948375][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.954296][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.957651][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.962971][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.009015][ T9156] bridge_slave_0: left allmulticast mode
[  128.011185][ T9156] bridge_slave_0: left promiscuous mode
[  128.016242][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.025272][ T9156] bridge_slave_1: left allmulticast mode
[  128.027548][ T9156] bridge_slave_1: left promiscuous mode
[  128.031253][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.038073][ T9156] bond0: (slave bond_slave_0): Releasing backup interface
[  128.047196][ T9156] bond0: (slave bond_slave_1): Releasing backup interface
[  128.062037][ T9156] team0: Port device team_slave_0 removed
[  128.073057][ T9156] team0: Port device team_slave_1 removed
[  128.076141][ T9156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.079242][ T9156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.092740][ T9156] bond0: (slave wlan1): Releasing backup interface
[  128.265756][ T9167] netlink: 'syz.1.819': attribute type 10 has an invalid length.
[  128.273404][ T9167] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.277302][ T9167] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.349961][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  128.762766][ T9175] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  128.940434][ T9177] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  128.951975][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.959579][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.966636][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.975711][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.983059][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.986472][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.995731][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.998757][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.164543][ T9199] vti0: entered promiscuous mode
[  129.166637][ T9199] vti0: entered allmulticast mode
[  129.399532][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  129.521064][ T9230] geneve4: entered promiscuous mode
[  129.666296][ T9242] sctp: [Deprecated]: syz.0.845 (pid 9242) Use of int in max_burst socket option deprecated.
[  129.666296][ T9242] Use struct sctp_assoc_value instead
[  129.980077][ T9266] sctp: [Deprecated]: syz.0.851 (pid 9266) Use of int in maxseg socket option.
[  129.980077][ T9266] Use struct sctp_assoc_value instead
[  130.397592][ T9300] vxcan1 speed is unknown, defaulting to 1000
[  130.439864][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  130.442848][ T9303] vti1: entered promiscuous mode
[  130.445293][ T9303] vti1: entered allmulticast mode
[  130.492398][ T9307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.595555][ T9315] vlan0: entered promiscuous mode
[  130.628727][ T9300] lo speed is unknown, defaulting to 1000
[  130.677701][ T9320] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  130.746409][ T9327] vlan0: entered promiscuous mode
[  131.192066][ T9340] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  131.371313][ T9348] __nla_validate_parse: 28 callbacks suppressed
[  131.371322][ T9348] netlink: 256 bytes leftover after parsing attributes in process `syz.1.878'.
[  131.479664][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  131.660776][ T9368] validate_nla: 10 callbacks suppressed
[  131.660786][ T9368] netlink: 'syz.3.883': attribute type 1 has an invalid length.
[  131.661685][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.882'.
[  131.755959][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[  131.780022][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'.
[  131.865159][ T9382] ip6gre1: left allmulticast mode
[  131.868079][ T9382] hsr1: left allmulticast mode
[  131.871984][ T9382] syz_tun: left allmulticast mode
[  131.874316][ T9382] batadv_slave_0: left allmulticast mode
[  131.876957][ T9382] gretap2: left promiscuous mode
[  131.880136][ T9382] bond4: left promiscuous mode
[  131.882254][ T9382] bond4: left allmulticast mode
[  131.885195][ T9382] ip6tnl3: left promiscuous mode
[  131.887673][ T9382] gretap3: left promiscuous mode
[  131.895723][ T9382] bond9: left promiscuous mode
[  131.897820][ T9382] bond9: left allmulticast mode
[  131.906086][ T9382] veth5: left promiscuous mode
[  131.916689][ T9382] bond12: left promiscuous mode
[  131.918798][ T9382] vxcan3: left promiscuous mode
[  131.928962][ T9382] vti0: left promiscuous mode
[  131.934765][ T9382] vti0: left allmulticast mode
[  131.944613][ T9382] vti1: left promiscuous mode
[  131.947060][ T9382] vti1: left allmulticast mode
[  131.990374][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  132.046122][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'.
[  132.519856][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  132.656796][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  132.660796][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'.
[  132.669132][ T9436] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[  132.683275][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.718791][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'.
[  132.951640][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'.
[  133.005860][ T9457] bridge0: entered promiscuous mode
[  133.008382][ T9457] vlan2: entered promiscuous mode
[  133.012718][ T9457] bridge0: port 1(vlan2) entered blocking state
[  133.015453][ T9457] bridge0: port 1(vlan2) entered disabled state
[  133.018764][ T9457] vlan2: entered allmulticast mode
[  133.020963][ T9457] bridge0: entered allmulticast mode
[  133.023919][ T9457] vlan2: left allmulticast mode
[  133.025545][ T9457] bridge0: left allmulticast mode
[  133.114428][ T9464] netlink: 'syz.3.909': attribute type 83 has an invalid length.
[  133.203973][ T9468] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  133.208284][ T9468] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  133.336671][ T9473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.397841][ T9473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.464242][ T9473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.541242][ T9473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.549619][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  133.644117][ T8495] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.666796][ T8495] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.670506][ T8495] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.684224][ T5884] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.690648][ T9472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.696385][ T5884] ==================================================================
[  133.699087][ T5884] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  133.701588][ T5884] Read of size 8 at addr ffff88802ddd76b0 by task kworker/u8:4/5884
[  133.705746][ T5884] 
[  133.706819][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  133.706834][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.706842][ T5884] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  133.706859][ T5884] Call Trace:
[  133.706865][ T5884]  <TASK>
[  133.706870][ T5884]  dump_stack_lvl+0x189/0x250
[  133.706885][ T5884]  ? __kasan_check_byte+0x12/0x40
[  133.706901][ T5884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.706914][ T5884]  ? lock_release+0x4b/0x3e0
[  133.706931][ T5884]  ? __virt_addr_valid+0x4a5/0x5c0
[  133.706945][ T5884]  print_report+0xca/0x240
[  133.706957][ T5884]  ? __mutex_lock+0x147/0x1350
[  133.706970][ T5884]  kasan_report+0x118/0x150
[  133.706986][ T5884]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.707001][ T5884]  ? __mutex_lock+0x147/0x1350
[  133.707011][ T5884]  __mutex_lock+0x147/0x1350
[  133.707022][ T5884]  ? __mutex_lock+0x5bb/0x1350
[  133.707035][ T5884]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  133.707046][ T5884]  ? __pfx___mutex_lock+0x10/0x10
[  133.707059][ T5884]  ? __lock_acquire+0xab9/0xd20
[  133.707078][ T5884]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  133.707091][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  133.707101][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  133.707121][ T5884]  process_scheduled_works+0xae1/0x17b0
[  133.707140][ T5884]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.707155][ T5884]  worker_thread+0x8a0/0xda0
[  133.707170][ T5884]  kthread+0x711/0x8a0
[  133.707186][ T5884]  ? __pfx_worker_thread+0x10/0x10
[  133.707197][ T5884]  ? __pfx_kthread+0x10/0x10
[  133.707211][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.707224][ T5884]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.707233][ T5884]  ? __pfx_kthread+0x10/0x10
[  133.707243][ T5884]  ret_from_fork+0x3fc/0x770
[  133.707255][ T5884]  ? __pfx_ret_from_fork+0x10/0x10
[  133.707267][ T5884]  ? __switch_to_asm+0x39/0x70
[  133.707281][ T5884]  ? __switch_to_asm+0x33/0x70
[  133.707294][ T5884]  ? __pfx_kthread+0x10/0x10
[  133.707306][ T5884]  ret_from_fork_asm+0x1a/0x30
[  133.707325][ T5884]  </TASK>
[  133.707330][ T5884] 
[  133.787626][ T5884] Allocated by task 9473:
[  133.789411][ T5884]  kasan_save_track+0x3e/0x80
[  133.791371][ T5884]  __kasan_kmalloc+0x93/0xb0
[  133.793066][ T5884]  __kmalloc_noprof+0x27a/0x4f0
[  133.795075][ T5884]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  133.797611][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.799706][ T5884]  register_netdevice+0x1608/0x1ae0
[  133.801811][ T5884]  nsim_create+0xae8/0xf10
[  133.803621][ T5884]  __nsim_dev_port_add+0x6b6/0xb10
[  133.805708][ T5884]  nsim_dev_port_add_all+0x37/0xf0
[  133.807761][ T5884]  nsim_dev_reload_up+0x451/0x780
[  133.809629][ T5884]  devlink_reload+0x4ec/0x8d0
[  133.811481][ T5884]  devlink_nl_reload_doit+0x9c2/0xd50
[  133.813469][ T5884]  genl_family_rcv_msg_doit+0x215/0x300
[  133.815701][ T5884]  genl_rcv_msg+0x60e/0x790
[  133.817427][ T5884]  netlink_rcv_skb+0x208/0x470
[  133.819237][ T5884]  genl_rcv+0x28/0x40
[  133.820791][ T5884]  netlink_unicast+0x82f/0x9e0
[  133.822625][ T5884]  netlink_sendmsg+0x805/0xb30
[  133.824428][ T5884]  __sock_sendmsg+0x21c/0x270
[  133.826173][ T5884]  ____sys_sendmsg+0x505/0x830
[  133.827959][ T5884]  ___sys_sendmsg+0x21f/0x2a0
[  133.829752][ T5884]  __x64_sys_sendmsg+0x19b/0x260
[  133.831561][ T5884]  do_syscall_64+0xfa/0x3b0
[  133.833946][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.836484][ T5884] 
[  133.837522][ T5884] Freed by task 9472:
[  133.839229][ T5884]  kasan_save_track+0x3e/0x80
[  133.841044][ T5884]  kasan_save_free_info+0x46/0x50
[  133.842651][ T5884]  __kasan_slab_free+0x5b/0x80
[  133.844099][ T5884]  kfree+0x18e/0x440
[  133.845433][ T5884]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  133.847610][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.849618][ T5884]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  133.851760][ T5884]  unregister_netdevice_queue+0x33c/0x380
[  133.853628][ T5884]  nsim_destroy+0x1dd/0x670
[  133.855130][ T5884]  __nsim_dev_port_del+0x14d/0x1b0
[  133.856821][ T5884]  nsim_dev_reload_destroy+0x288/0x490
[  133.858632][ T5884]  nsim_dev_reload_down+0x8a/0xc0
[  133.860294][ T5884]  devlink_reload+0x1b6/0x8d0
[  133.861873][ T5884]  devlink_nl_reload_doit+0x9c2/0xd50
[  133.863661][ T5884]  genl_family_rcv_msg_doit+0x215/0x300
[  133.865473][ T5884]  genl_rcv_msg+0x60e/0x790
[  133.867051][ T5884]  netlink_rcv_skb+0x208/0x470
[  133.868840][ T5884]  genl_rcv+0x28/0x40
[  133.870477][ T5884]  netlink_unicast+0x82f/0x9e0
[  133.872002][ T5884]  netlink_sendmsg+0x805/0xb30
[  133.873543][ T5884]  __sock_sendmsg+0x21c/0x270
[  133.875079][ T5884]  ____sys_sendmsg+0x505/0x830
[  133.876674][ T5884]  ___sys_sendmsg+0x21f/0x2a0
[  133.878216][ T5884]  __x64_sys_sendmsg+0x19b/0x260
[  133.879851][ T5884]  do_syscall_64+0xfa/0x3b0
[  133.881358][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.883301][ T5884] 
[  133.884111][ T5884] Last potentially related work creation:
[  133.886006][ T5884]  kasan_save_stack+0x3e/0x60
[  133.887588][ T5884]  kasan_record_aux_stack+0xbd/0xd0
[  133.889312][ T5884]  insert_work+0x3d/0x330
[  133.890770][ T5884]  __queue_work+0xbaf/0xfb0
[  133.892295][ T5884]  queue_work_on+0x181/0x270
[  133.893890][ T5884]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  133.895806][ T5884]  udp_tunnel_push_rx_port+0x180/0x200
[  133.898113][ T5884]  geneve_offload_rx_ports+0xd7/0x160
[  133.900331][ T5884]  geneve_netdevice_event+0x6a/0x80
[  133.902220][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.903881][ T5884]  call_netdevice_notifiers+0x88/0xc0
[  133.905836][ T5884]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  133.908099][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.910263][ T5884]  register_netdevice+0x1608/0x1ae0
[  133.912648][ T5884]  nsim_create+0xae8/0xf10
[  133.914216][ T5884]  __nsim_dev_port_add+0x6b6/0xb10
[  133.916211][ T5884]  nsim_dev_port_add_all+0x37/0xf0
[  133.918338][ T5884]  nsim_dev_reload_up+0x451/0x780
[  133.920463][ T5884]  devlink_reload+0x4ec/0x8d0
[  133.922388][ T5884]  devlink_nl_reload_doit+0x9c2/0xd50
[  133.924696][ T5884]  genl_family_rcv_msg_doit+0x215/0x300
[  133.927078][ T5884]  genl_rcv_msg+0x60e/0x790
[  133.929027][ T5884]  netlink_rcv_skb+0x208/0x470
[  133.931090][ T5884]  genl_rcv+0x28/0x40
[  133.932663][ T5884]  netlink_unicast+0x82f/0x9e0
[  133.934566][ T5884]  netlink_sendmsg+0x805/0xb30
[  133.936629][ T5884]  __sock_sendmsg+0x21c/0x270
[  133.938668][ T5884]  ____sys_sendmsg+0x505/0x830
[  133.940711][ T5884]  ___sys_sendmsg+0x21f/0x2a0
[  133.942756][ T5884]  __x64_sys_sendmsg+0x19b/0x260
[  133.944793][ T5884]  do_syscall_64+0xfa/0x3b0
[  133.946643][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.949156][ T5884] 
[  133.950200][ T5884] Second to last potentially related work creation:
[  133.952531][ T5884]  kasan_save_stack+0x3e/0x60
[  133.954147][ T5884]  kasan_record_aux_stack+0xbd/0xd0
[  133.956009][ T5884]  insert_work+0x3d/0x330
[  133.957760][ T5884]  __queue_work+0xcd2/0xfb0
[  133.959678][ T5884]  queue_work_on+0x181/0x270
[  133.961610][ T5884]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  133.963946][ T5884]  udp_tunnel_push_rx_port+0x180/0x200
[  133.966166][ T5884]  geneve_offload_rx_ports+0xd7/0x160
[  133.968320][ T5884]  geneve_netdevice_event+0x6a/0x80
[  133.970462][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.972110][ T5884]  call_netdevice_notifiers+0x88/0xc0
[  133.973976][ T5884]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  133.976309][ T5884]  notifier_call_chain+0x1b6/0x3e0
[  133.978524][ T5884]  register_netdevice+0x1608/0x1ae0
[  133.980732][ T5884]  nsim_create+0xae8/0xf10
[  133.982647][ T5884]  __nsim_dev_port_add+0x6b6/0xb10
[  133.984830][ T5884]  nsim_dev_port_add_all+0x37/0xf0
[  133.987023][ T5884]  nsim_dev_reload_up+0x451/0x780
[  133.989153][ T5884]  devlink_reload+0x4ec/0x8d0
[  133.991205][ T5884]  devlink_nl_reload_doit+0x9c2/0xd50
[  133.993508][ T5884]  genl_family_rcv_msg_doit+0x215/0x300
[  133.995810][ T5884]  genl_rcv_msg+0x60e/0x790
[  133.997759][ T5884]  netlink_rcv_skb+0x208/0x470
[  133.999573][ T5884]  genl_rcv+0x28/0x40
[  134.001303][ T5884]  netlink_unicast+0x82f/0x9e0
[  134.003283][ T5884]  netlink_sendmsg+0x805/0xb30
[  134.005258][ T5884]  __sock_sendmsg+0x21c/0x270
[  134.007288][ T5884]  ____sys_sendmsg+0x505/0x830
[  134.009361][ T5884]  ___sys_sendmsg+0x21f/0x2a0
[  134.011400][ T5884]  __x64_sys_sendmsg+0x19b/0x260
[  134.013522][ T5884]  do_syscall_64+0xfa/0x3b0
[  134.015085][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.017084][ T5884] 
[  134.017885][ T5884] The buggy address belongs to the object at ffff88802ddd7600
[  134.017885][ T5884]  which belongs to the cache kmalloc-256 of size 256
[  134.022345][ T5884] The buggy address is located 176 bytes inside of
[  134.022345][ T5884]  freed 256-byte region [ffff88802ddd7600, ffff88802ddd7700)
[  134.026763][ T5884] 
[  134.027777][ T5884] The buggy address belongs to the physical page:
[  134.030403][ T5884] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ddd6
[  134.034016][ T5884] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  134.036969][ T5884] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  134.039492][ T5884] page_type: f5(slab)
[  134.040839][ T5884] raw: 00fff00000000040 ffff88801a441b40 ffffea00007e4e80 dead000000000004
[  134.043961][ T5884] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  134.047246][ T5884] head: 00fff00000000040 ffff88801a441b40 ffffea00007e4e80 dead000000000004
[  134.050913][ T5884] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  134.054569][ T5884] head: 00fff00000000001 ffffea0000b77581 00000000ffffffff 00000000ffffffff
[  134.058225][ T5884] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  134.061798][ T5884] page dumped because: kasan: bad access detected
[  134.064550][ T5884] page_owner tracks the page as allocated
[  134.067014][ T5884] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8098, tgid 8097 (syz.0.538), ts 99344174728, free_ts 72328694491
[  134.075528][ T5884]  post_alloc_hook+0x240/0x2a0
[  134.077612][ T5884]  get_page_from_freelist+0x21e4/0x22c0
[  134.079975][ T5884]  __alloc_frozen_pages_noprof+0x181/0x370
[  134.082280][ T5884]  alloc_pages_mpol+0x232/0x4a0
[  134.084160][ T5884]  allocate_slab+0x8a/0x370
[  134.086059][ T5884]  ___slab_alloc+0xbeb/0x1410
[  134.087867][ T5884]  __kmalloc_noprof+0x305/0x4f0
[  134.089967][ T5884]  iter_file_splice_write+0x1c6/0x10e0
[  134.092281][ T5884]  direct_splice_actor+0x101/0x160
[  134.094343][ T5884]  splice_direct_to_actor+0x5a8/0xcc0
[  134.096278][ T5884]  do_splice_direct+0x181/0x270
[  134.098321][ T5884]  do_sendfile+0x4da/0x7e0
[  134.099814][ T5884]  __se_sys_sendfile64+0x13e/0x190
[  134.101634][ T5884]  do_syscall_64+0xfa/0x3b0
[  134.103289][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.105235][ T5884] page last free pid 6768 tgid 6768 stack trace:
[  134.107318][ T5884]  __free_frozen_pages+0xbc4/0xd30
[  134.109013][ T5884]  __put_partials+0x156/0x1a0
[  134.110568][ T5884]  put_cpu_partial+0x17c/0x250
[  134.112161][ T5884]  __slab_free+0x2d5/0x3c0
[  134.113647][ T5884]  qlist_free_all+0x97/0x140
[  134.115191][ T5884]  kasan_quarantine_reduce+0x148/0x160
[  134.116991][ T5884]  __kasan_slab_alloc+0x22/0x80
[  134.118607][ T5884]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  134.120651][ T5884]  mas_alloc_nodes+0x2e9/0x8e0
[  134.122509][ T5884]  mas_preallocate+0x3ad/0x6f0
[  134.124478][ T5884]  mmap_region+0xf1e/0x20c0
[  134.126363][ T5884]  do_mmap+0xc45/0x10d0
[  134.128081][ T5884]  vm_mmap_pgoff+0x2a6/0x4d0
[  134.129981][ T5884]  do_syscall_64+0xfa/0x3b0
[  134.131844][ T5884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.134234][ T5884] 
[  134.135215][ T5884] Memory state around the buggy address:
[  134.137485][ T5884]  ffff88802ddd7580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  134.140723][ T5884]  ffff88802ddd7600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.143927][ T5884] >ffff88802ddd7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.147170][ T5884]                                      ^
[  134.149429][ T5884]  ffff88802ddd7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  134.152688][ T5884]  ffff88802ddd7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  134.155937][ T5884] ==================================================================
[  134.161227][ T5884] Kernel panic - not syncing: KASAN: panic_on_warn set ...
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  134.163671][ T5884] CPU: 0 UID: 0 PID: 5884 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  134.167024][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.171172][ T5884] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  134.174172][ T5884] Call Trace:
[  134.175350][ T5884]  <TASK>
[  134.176403][ T5884]  dump_stack_lvl+0x99/0x250
[  134.178085][ T5884]  ? __asan_memcpy+0x40/0x70
[  134.179833][ T5884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.181879][ T5884]  ? __pfx__printk+0x10/0x10
[  134.183720][ T5884]  vpanic+0x281/0x750
[  134.185115][ T5884]  ? preempt_schedule+0xae/0xc0
[  134.186772][ T5884]  ? __pfx_vpanic+0x10/0x10
[  134.188388][ T5884]  ? preempt_schedule_common+0x83/0xd0
[  134.190224][ T5884]  ? preempt_schedule+0xae/0xc0
[  134.192157][ T5884]  ? __pfx_preempt_schedule+0x10/0x10
[  134.194022][ T5884]  panic+0xb9/0xc0
[  134.195578][ T5884]  ? __pfx_panic+0x10/0x10
[  134.197437][ T5884]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  134.199775][ T5884]  ? __mutex_lock+0x147/0x1350
[  134.201643][ T5884]  check_panic_on_warn+0x89/0xb0
[  134.203559][ T5884]  ? __mutex_lock+0x147/0x1350
[  134.205497][ T5884]  end_report+0x78/0x160
[  134.207137][ T5884]  kasan_report+0x129/0x150
[  134.208858][ T5884]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.210807][ T5884]  ? __mutex_lock+0x147/0x1350
[  134.212645][ T5884]  __mutex_lock+0x147/0x1350
[  134.214139][ T5884]  ? __mutex_lock+0x5bb/0x1350
[  134.215729][ T5884]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  134.217871][ T5884]  ? __pfx___mutex_lock+0x10/0x10
[  134.219681][ T5884]  ? __lock_acquire+0xab9/0xd20
[  134.221522][ T5884]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  134.223887][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  134.225943][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  134.228104][ T5884]  process_scheduled_works+0xae1/0x17b0
[  134.230332][ T5884]  ? __pfx_process_scheduled_works+0x10/0x10
[  134.232828][ T5884]  worker_thread+0x8a0/0xda0
[  134.234753][ T5884]  kthread+0x711/0x8a0
[  134.236139][ T5884]  ? __pfx_worker_thread+0x10/0x10
[  134.237834][ T5884]  ? __pfx_kthread+0x10/0x10
[  134.239371][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  134.241096][ T5884]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.243041][ T5884]  ? __pfx_kthread+0x10/0x10
[  134.244606][ T5884]  ret_from_fork+0x3fc/0x770
[  134.246138][ T5884]  ? __pfx_ret_from_fork+0x10/0x10
[  134.248031][ T5884]  ? __switch_to_asm+0x39/0x70
[  134.249953][ T5884]  ? __switch_to_asm+0x33/0x70
[  134.251944][ T5884]  ? __pfx_kthread+0x10/0x10
[  134.253856][ T5884]  ret_from_fork_asm+0x1a/0x30
[  134.255784][ T5884]  </TASK>
[  134.257506][ T5884] Kernel Offset: disabled
[  134.258925][ T5884] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:32:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003d9f130
R8 =ffff888020678237 R9 =1ffff110040cf046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8f7 R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000128828000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007f47da997498 00007f47da997470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f47da997478 00007f47da9974c0
XMM06=00007f47da9974b8 00007f47da9974b0 XMM07=00007f47da9974a8 00007f47da9974a0
XMM08=0000000000000000 00007f47da812ee7 XMM09=0000000000000000 00007f47da812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88803818b980 RDX=ffffc90003791000
RSI=000000000007ffff RDI=0000000000000000 RBP=ffffc90007cc7810 RSP=ffffc90007cc7660
R8 =0000000000000000 R9 =ffffffff89d54d17 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=ffff8881242d0668 R13=dffffc0000000000 R14=ffff88803ae88850 R15=ffff88803ae88780
RIP=ffffffff89d527fe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2ef20326c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f47db67cfc8 CR3=000000002d258000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2ef1212e53
XMM06=0000000000000000 00007f2ef1212e4d XMM07=0000000000000000 00007f2ef1212e61
XMM08=0000000000000000 00007f2ef1212ee7 XMM09=0000000000000000 00007f2ef1212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
