last executing test programs:

952.203278ms ago: executing program 0 (id=800):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
unshare(0x22020600)
r2 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r6, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r6, 0x1)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001801040751ff00c5"], 0x24e2)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r10=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000380)={r10, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r8, 0x0, 0x47, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

859.236181ms ago: executing program 0 (id=804):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r7=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r7, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r8, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv6_getaddrlabel={0x44, 0x4a, 0x800, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x4}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0xff6e, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x48804)

772.347995ms ago: executing program 1 (id=806):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000c80)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000cc0))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="94040000", @ANYRES16=r2, @ANYBLOB="00042cbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040062aa000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="a00102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000f000781cea0000000000302ad00000038000100270001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010400003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100000001006d6f64650000000000000000000000000000000000000000000000000000000000000300050000000000040072616e646f6d000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0f000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000d00030003000000080004000700000008000100", @ANYRES32=r3, @ANYBLOB="400002803c000100000001006d6f64650000000000000000000000000000000000000000000000000000000000000300050000000000040072616e646f6d0000"], 0x494}, 0x1, 0x0, 0x0, 0x44000}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4800028044000100240001006d6f6465000008000000000000000000000000000000000000000000000000000500030005020000110004"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97706b23b6a31f9f75fdcb"}})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000180)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r8 = accept4(r0, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x6ce9, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711001000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
close(0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14ef00003c00070100000000feffff9197982fbe2d30b9345f17656f75fb81135110dd5b944155cf67c58d2adb6d81ee74ecb51ed2b3f29be3b6e57476c0dd1daf41cdcc9e8816965ccaae5c648fe0019201fad06c94555b7978a2ba0510e81412c1b11f54ee9927613417b0ca0f20b9605e6c9c6ed2f2f1462813235e6b544f6b9fad18e27cbf39d2698de40e8107339f87b2a9ecdf5b42c1dfa932e49357564c98f6a89b96a78885da8836a304f98585d63f3fbd55f64f5e4d5868ca2388f5110d15a5b5fb2ca69aabed30d8f9453b2fa4ac2db35ded3f"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

691.238754ms ago: executing program 1 (id=807):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000040)={0x0, 0x2d, ""/45})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)={0x9, 0x0, [{0xd000, 0xa5, &(0x7f0000000080)=""/165}, {0x3000, 0x7a, &(0x7f0000000140)=""/122}, {0x6000, 0xd8, &(0x7f00000001c0)=""/216}, {0x80a0000, 0x25, &(0x7f00000002c0)=""/37}, {0x3000, 0xdc, &(0x7f0000000300)=""/220}, {0x2, 0x1000, &(0x7f0000000400)=""/4096}, {0x1, 0x5c, &(0x7f0000001400)=""/92}, {0x4, 0x3e, &(0x7f0000001480)=""/62}, {0xffff1000, 0xb9, &(0x7f00000014c0)=""/185}]})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000016c0)={0x0, 0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002840)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@ptr={0x6, 0x0, 0x0, 0x2, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @fwd={0xa}, @enum64={0x5, 0x4, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x0, 0x6}, {0x4, 0x7fffffff, 0xd005}, {0x3, 0x9, 0x1}, {0x2, 0x7, 0x9}]}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000001800)=""/4096, 0x7c, 0x1000, 0x1, 0x1, 0x10000, @value=r1}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002880)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000028c0)={0x3, [0x0, 0x0, <r3=>0x0]}, &(0x7f0000002900)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002980)={r3, 0x1c, &(0x7f0000002940)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1}]}, &(0x7f00000029c0)=0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000002b00)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002b40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in=@rand_addr=0x64010101, 0x4e22, 0x8, 0x4e23, 0x6, 0x2, 0x80, 0x20, 0x3b, 0x0, r4}, {0x800, 0x2, 0x200, 0x5, 0xd, 0x0, 0x100, 0xfffffffffffffffa}, {0x100000000, 0x2, 0x81, 0xffffffffffffffff}, 0x0, 0x6e6bbc, 0x2}, {{@in=@remote, 0x4d4, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3505, 0x4, 0x1, 0x3, 0x100, 0x8, 0x9}}, 0xe8)
sendmsg$key(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002c40)={0x2, 0x4, 0x4, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4c805)
r5 = accept$inet6(r2, &(0x7f0000002d00)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002d40)=0x1c)
recvfrom$inet6(r5, &(0x7f0000002d80)=""/135, 0x87, 0x10000, &(0x7f0000002e40)={0xa, 0x4e23, 0x3ff, @private0, 0x1}, 0x1c)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000002e80)={0x200, {0x13, 0x80, 0x6, 0x1, 0x2}})
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x10, 0x3fb, 0x1, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044811}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000002fc0)={0x0, 'netpci0\x00', {0x4}, 0x1})
accept4$llc(r2, &(0x7f0000003000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003040)=0x10, 0x80800)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000030c0), r2)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000032c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003280)={&(0x7f0000003100)={0x178, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x391}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd77}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfff, @remote, 0x200}}}}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10000080}, 0x80)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000003300)={0x4, [0x8, 0x4, 0x4, 0x7ff]}, &(0x7f0000003340)=0xc)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), r2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x70, r8, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "38b9d4a59435e90985114e86c71e79abc4a119766513f596"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x48004)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000003500)=0x7, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000003540)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1}})
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000003580)={'ah\x00'}, &(0x7f00000035c0)=0x1e)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

630.280106ms ago: executing program 0 (id=809):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r5}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, 0x0, 0x4040004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r8, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7)

627.286612ms ago: executing program 0 (id=810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe29, &(0x7f0000000980)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x44056)

623.720437ms ago: executing program 1 (id=811):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r7, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)
setsockopt$inet6_tcp_int(r4, 0x11a, 0x19, 0x0, 0x0)

560.596276ms ago: executing program 0 (id=813):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="2080000000000000"], 0x8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r7, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) (async)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES16=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4) (async)
unshare(0x62040200) (async)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0xc, 0x0, 0x0) (async)
bind$inet(r11, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f0000000280)=[{0x1a1, 0x3, 0x6, 0x7}, {0x3, 0x2, 0x6, 0x8}, {0xc14c, 0xdb, 0x8, 0xc30a}, {0x4, 0xf, 0x1, 0x63}, {0xfffa, 0x81, 0x3, 0x3ff}]}, 0x10)

480.970023ms ago: executing program 2 (id=815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xffff54ad, 0x0, 0xfd8, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2000c010)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x40}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
r2 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket(0x2a, 0x802, 0x0)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0xe, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="911098000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

479.597206ms ago: executing program 0 (id=816):
pipe(&(0x7f0000000300))
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0x1a0, 0x24, 0x5820a61ca228659, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0xf, 0x9, 0x0, 0xa9, 0x3, 0x3}}, {0xa, 0x2, [0x9ddb, 0x7, 0x2a9c]}}, {{0x1c, 0x1, {0x5, 0xaa, 0x2, 0x4, 0x2, 0x6, 0xffffff0d, 0x7}}, {0x12, 0x2, [0x9, 0x6, 0x7, 0x2, 0x3ff, 0x48, 0xffff]}}, {{0x1c, 0x1, {0xef, 0xd, 0x400, 0x6, 0x2, 0xfffffffb, 0x8, 0x3}}, {0xa, 0x2, [0x5, 0x1000, 0x36de]}}, {{0x1c, 0x1, {0x8d, 0x4, 0x38, 0x2, 0x1, 0x0, 0xb, 0x3}}, {0xa, 0x2, [0xfff7, 0x7, 0x9]}}, {{0x1c, 0x1, {0x3, 0x8, 0x0, 0x40, 0x2, 0x100, 0x80000000, 0x3}}, {0xa, 0x2, [0x7ff, 0x6, 0x40]}}, {{0x1c, 0x1, {0x3, 0x9, 0x4, 0x5, 0x1, 0xe, 0x3, 0x2}}, {0x8, 0x2, [0x7ffc, 0xd]}}, {{0x1c, 0x1, {0x6, 0x9a, 0x8a, 0xd6d0, 0x1, 0x40b, 0x7ff, 0x5}}, {0xe, 0x2, [0x81, 0x3, 0x5, 0x3, 0x6]}}, {{0x1c, 0x1, {0x7, 0x5, 0x9, 0x5, 0x2, 0xfffffffc, 0x7, 0x4}}, {0xc, 0x2, [0x2, 0x7fff, 0x2, 0x4]}}, {{0x1c, 0x1, {0x2, 0x6, 0x8001, 0x2c, 0x0, 0x2, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0xb, 0x0, 0x8000]}}]}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x1a0}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0x0, 0xf}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40000d5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, 0x0, 0x40845)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5)
socket(0x10, 0x80003, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed22"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
unshare(0x2a020400)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28)

476.759707ms ago: executing program 1 (id=817):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x42002, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000440))
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) (async, rerun: 64)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc) (rerun: 32)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r7, 0x0, 0x47, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

317.592479ms ago: executing program 1 (id=818):
close(0xffffffffffffffff) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x40000000015, 0x5, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
socket$inet(0x2, 0x3, 0x8) (async, rerun: 32)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, &(0x7f0000000040), 0x0}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRESDEC=0x0, @ANYRESDEC=r6, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

316.557423ms ago: executing program 2 (id=819):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x20000000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r1, 0x2d322000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002d00010000000000000000007cb1aca315108f90defe468068450b724a6670843e03c92fd46507021ff1def86fc61f3ae8ba3713c5567c54d06ba75d251f8bf5a089699652eb8526003e0d2a6116e2e4220000a264c0fe51e1e346619684041dea0a49f384acda399d22b97818dfa598ee8a6b13e193532be412386bc984c9dc585c868607d21341423b4746a46ff3808032400304c879d8f444fb40d06d78b7df9438837a81a23aafbd5ea3ded67166f5bb9d05cc1ccc6a0ae106cc4c31f7b7430e419f58b0585ed9b575b0e213534b135d39bf35b1e8dc883c00118037003e80b1a8a62c50b38cc28b52cd6ccee92637ae9c42b3d82a5dd7ddf75d66e51dcb20890aed1f89f74d1db45e13a3ee44d7d5e89c5146"], 0x110}, {&(0x7f00000001c0)={0xa8, 0x26, 0x20, 0x70bd29, 0x25dfdbfc, "", [@generic="9504577f8f64ee690b01266d871084bdd343fb1324b153f1aa4b72a99f3e1e2483df50a5fa24b902a48353e5ac3946cbf049bdc2965a81d154fa538de4c6e5fbb6d077da43483701477198b04986060cdfad96bc4b86b74decc1f86eeedf928cfb63b3765c193b4a7c084b094ba26a0344330332bb18b08619f1e77dbb877f06a06a55ad31c085cb65090a21c7c2c12132fa5f4915c90b"]}, 0xa8}, {&(0x7f0000000280)={0xb4, 0x32, 0x2, 0x70bd27, 0x25dfdbfd, "", [@generic="6e2560a23149f855b89658792f1f1d648e0e03cea06edb018b1dd63c8c1c8e89682ed4eb0c2957e95c9ddd235379d6afc51debedd094e174163ab2fdc44b45dcac912d192201bd0c8dfd2aed49f7e02059b4e9d717ad6a9285306bba363ab07035de451e93ac4c76484d51e4ae7036774b0b3716b25cbe4252e8050f97d5195de1ecf840fc4a8421ad4f3d23e4796adc244ce0d49b98644d36578b", @typed={0x5, 0x134, 0x0, 0x0, @str='\x00'}]}, 0xb4}, {&(0x7f0000000340)={0x10, 0x3f, 0x10, 0x70bd28, 0x25dfdbfd}, 0x10}, {&(0x7f0000001880)={0x764, 0x1f, 0x2, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xf0, 0x0, 0x0, @fd=r0}, @generic, @nested={0x1cf, 0x9f, 0x0, 0x1, [@generic="169efe0ec83a99f8eb0cc0b18d5e88d558b8c741169cf1a89b2e5632fee69ef37bd9fef255211b3a53af7685285b5eeb700f3d83525e3de17269983f04b0580eed868c795dabc36065c6a96af08279ce962d85979473515c8086881c8887cc7494e343b2844d0561fd18a5534a54eeb4763c36b3049941adb6b832af7d85713071372a11ea56211cdf9766f4b79138c120953ebe7084f3986cfdccaf3b3d9c3b472843d1f5231c0be4cc4298157c0dc1e8f3313a5dac8dd22dfe4a1185a5b4d0e4d800710864355d9168e5bebc", @typed={0x8, 0x119, 0x0, 0x0, @uid=r3}, @nested={0x4, 0xb}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="6b77f219feecb3352d0cd65562b661e3931c71786499655c5be5fa7c5e5f9a49ef482923910b61568d8695b4981df6d29ee6ccbf1b8ca77b694364c0ea133fe546a0ce9d3ee08b555d5bb1c8c00675e83964cccd50a5d9193927e9648efd41abcc3d576b337000fa59693c96faca7a6db1a5c6274f2c1bd317743e0716e945a05498c3fc5e3c2568ed9b23d214b318c1887c34bedda2cc5e98d3a56800bced6da29f970d32ce9e712e5d66bb8e151ea0188a0b2051fb2de4f730445b5c56abbf14bbe42618ec5d9dbcdcd85ec88421762d55aa1febd9a8668c442c760721"]}, @nested={0x3e6, 0x150, 0x0, 0x1, [@generic="13efd844bd28d3e010d7da570bc80d0c178ec80aa9382570a2aad70e051e88e7e2d12a562fa3cb1d1652a3f48edfb91c1d4b1bced089531b955c73e7a69f", @nested={0x4, 0xf6}, @generic="6a49cffe5bc8781387ccde55dc2842647b97c6293e387d9ee33dc83b6d191c82596cfc59c090fb9f6ed445247e5baf2dae72f2ef2a7b2beee946fa93896a190ef47533682eeb1ce5b4c1611c4c4fab8b064326b1c25974262713bd3002010f94335573279d2fbf7778274e269eaf5f1b9bf4c6583cfd730e4aee2928b396b99a120612a01840db1b7f9d30305e6aa6eae15a3367f85ff5975976cdee93a39d5d8e0ff307ea481ea53d55c5bc9ed77c1269872283ebe78c1513eab618920ec11dbad143383334360be329896a6bf68ce49b3ffefa486ac41b9a37a88337f5475ea8f2dd1efaef46", @generic="988989da99d5c6f01dca16d41a13c559502bd73bfba29e4e9e558ff2ccd61dbf15e8927ea963c982d4e8907ebe450259c369480d3fb97a73979d79f5d45b0a5b30e1395acc52b0664252bc76f1de338a45be8918c10b88946c6e4e8a1674de32701e2595cc709b7a0ae7004ce2ef849a8e2037d9f727f44aa8e79cd6995a6dc8e15a6fe28d64f18f073ce8a4a5a8b0ddf41c7743887955c3de2ae6393e1fda8745955b2496b3f47b42a89be3ba49cd256458808a86790155983a7de1a596ecf239c94ccfc9064b2933c61b9d60e02dba8a839941a4dbaa3c2c8b83a7d4f9b7b381c44a61ac334c", @generic="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", @typed={0x14, 0x61, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="3a5eb8503fa263d274549e9314615204cb0e347cb84c366ffafd44ae723981e2f40e8cb58406244f12f99a308ef175ec87858e077b5e4d6382822bcf327176745600cbe3129e8aae3a1daffeec854df5406c8bd74ac43ae10097bdb52953518e409cb8f66ec652a8112437b0279162c4b1fe593533891b581900e8b49c4f882af7507dc499b9394a77600453a1040e46b88d5409e46fbf61c37fcc38778933b8e55558ecddf3747fd7c8173da941de154c1340a53ebec1779dc2b48b8a3932"]}, @generic="bc86065ad6f34064cbe5ce05340fe4be76a64d0a984f79899f520ad6650fa3312d4d75948a05921e58c0558d64fa39749b83c6b6fc98596cbb73b202ae9b7ba2c6168fa72d753659f1b8ef3b7d065334faeb30f8d8ad1f1e9adb545a6349b25e5de2236133c7907e3b3fcc0c27d4a853e5e6520a9d7d347132cc2028b31011af5058041603477630dfa4c38c8eff922c6575", @nested={0xfe, 0x11f, 0x0, 0x1, [@nested={0x4, 0xd0}, @generic="39a27a2c9edf2144df3f349038e903bc03dbcdb914c138f6417f2eacd042687bcad8915a602c79a0c15da59acf968021d46b9d8896184a5ed50e8abbe6a36a9625550984cb2b45888b4084ce1205ea400942820af045e9631fb918620c374659f8dd2c7beb178e0ad8439f89a62f2564ae3da12b6db4bdfea1a638c92997711d30bf57f940da35a0c4995b9d0aec31276e9b53fa27ba2c8e887e2f1e7fa4e17d327a22277ff7661d362a21312581adc2d583bbfd998ba4841c6b85de2f4dc17044f94ab2d8beb9afb649ff14d1495258036240915a81152704ad11b14b738fafb313f59d3efdfe8c05f00af1dbbf16d2168e", @nested={0x4, 0x116}]}]}, 0x764}], 0x5}, 0x300)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000001480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

309.539959ms ago: executing program 2 (id=820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x40, 0x4a, 0x4, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x8, 0x0, r1, 0x9e}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8001)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth0_macvtap\x00', 0x10)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r0, 0xfdfc6000)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_j1939(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r3, 0x1, {0x2, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000000300)={&(0x7f0000000200)="dd12d1ad29be18ddaaec2e382045b4aa4855acff2b1bc2de9f95884345138ced1affe025c3a3e1cad51927c2db15f0b4b9d460ed8907c4421dd08191f472cc4697a82bdf8e9835735a3bb66061f62b70553a27b98cf59c3ef9ec67bd8d8085675ca43547cd32ddce406d69f1b82a649004034681cdb80bdacf6dd3cdebbc38f212b0590c061a24ce9a3fa7a2561daf7e6358784953ccca6bc859eded5620cd8b335b2924dd28e049e868d23b531bb7e343c824080bae05fa61d9f9b7a004f664cbac348e33826ade56fe038bb4cd884049a40ec5580ee0dc6ab1f30bce1115447c7ae32c1d8a286937786f0d", 0xec}, 0x1, 0x0, 0x0, 0x40008090}, 0x44)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x4, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x9, @loopback, 0xab33}, @in6={0xa, 0x4e21, 0x48, @mcast2, 0x6}], 0x38)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000003c0)={0xe7}, 0x4)
pipe(&(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r8, 0x700, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xe4c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x5}, {0xb, 0x1}, {0xda, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
getsockname(r0, &(0x7f0000000580)=@nfc_llcp, &(0x7f0000000600)=0x80)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000640)={0x3}, 0x4)
write(r4, &(0x7f0000000680)="27b2ec0dfd43d6a3725445bc90cff2a288421b78cb68d44facccff4f6b593e35844cbb30d8ca2c17a246a9dc88b95acb336f9c8eead2da511aaf0a93d9c4e38c8e30868d38a7ce1e61d6a2806ef98b4423f0339afd9e1afc503d38866f9368d911f42190948940311dda16799c47963f683b41e51f7d633c8f2f1403ccf976ab25827576b5125742b977f2222c1c778041d98dff0e8b1b87687348b36e71a590f471125bb3d1335e17a3fb5ed06348b2fe7a1a90870658b2628523da5176a75851a71450f400b9c654094de9ad41a11e7c9601bca41446f5012a0f1389b65ff43d", 0xe1)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r6)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4088080}, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r8, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd1, 0x5a}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8030)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x400c005)
setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000b40), 0x4)
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}}, 0x20000004)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xec, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x710}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x18616c28}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000c0}, 0x40014)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x62)

251.171241ms ago: executing program 1 (id=821):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84) (async)
socket$inet6_sctp(0xa, 0x4, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
write$cgroup_int(r8, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000740)=""/4096, &(0x7f0000000000)=0x1000)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, 0x15, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800)

169.515582ms ago: executing program 2 (id=822):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r0 = socket(0x2, 0x80805, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000304000020000000000000000000", @ANYRESHEX=r2, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r2, @ANYBLOB="080046ef2be400"/16, @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01, 0x0, 0x20000044}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r6, 0x2, 0x5, 0x6, 0x10, 0x9}, &(0x7f0000000280)=0x14) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) (async)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800}, 0x50) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)

152.604746ms ago: executing program 2 (id=823):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f0000000f40)={{0x6, @rose, 0xfffffffc}, [@default, @bcast, @null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xffffffffffffff83}, 0x40050)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r9=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000380)={r9, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r7, 0x0, 0x47, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r10, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

0s ago: executing program 2 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30501' (ED25519) to the list of known hosts.
syzkaller login: [   48.573108][ T5776] cgroup: Unknown subsys name 'net'
[   48.721275][ T5776] cgroup: Unknown subsys name 'cpuset'
[   48.725377][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.261360][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.999421][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.002450][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.006958][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.007122][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.013981][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.016994][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.020166][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.021374][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.026156][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.031124][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.036344][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.043301][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.048156][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.054717][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.061252][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.316295][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   54.380337][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   54.414983][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   54.446087][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.449303][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.451854][ T5841] bridge_slave_0: entered allmulticast mode
[   54.454799][ T5841] bridge_slave_0: entered promiscuous mode
[   54.459311][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.461706][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.464642][ T5841] bridge_slave_1: entered allmulticast mode
[   54.468787][ T5841] bridge_slave_1: entered promiscuous mode
[   54.524064][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.546443][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.559346][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.562444][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.565444][ T5850] bridge_slave_0: entered allmulticast mode
[   54.570689][ T5850] bridge_slave_0: entered promiscuous mode
[   54.591175][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.594345][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.597448][ T5850] bridge_slave_1: entered allmulticast mode
[   54.601811][ T5850] bridge_slave_1: entered promiscuous mode
[   54.617220][ T5841] team0: Port device team_slave_0 added
[   54.621097][ T5841] team0: Port device team_slave_1 added
[   54.642443][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.644962][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.647408][ T5842] bridge_slave_0: entered allmulticast mode
[   54.650669][ T5842] bridge_slave_0: entered promiscuous mode
[   54.676282][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.679572][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.682127][ T5842] bridge_slave_1: entered allmulticast mode
[   54.685098][ T5842] bridge_slave_1: entered promiscuous mode
[   54.709321][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.712253][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.724085][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.731350][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.735276][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.738863][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.750384][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.765286][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.777343][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.782303][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.817305][ T5842] team0: Port device team_slave_0 added
[   54.820515][ T5850] team0: Port device team_slave_0 added
[   54.841986][ T5850] team0: Port device team_slave_1 added
[   54.844838][ T5842] team0: Port device team_slave_1 added
[   54.861817][ T5841] hsr_slave_0: entered promiscuous mode
[   54.865919][ T5841] hsr_slave_1: entered promiscuous mode
[   54.898169][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.901175][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.912517][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.918602][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.920973][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.930598][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.935118][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.938967][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.950402][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.956286][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.959078][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.969156][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.049185][ T5850] hsr_slave_0: entered promiscuous mode
[   55.051626][ T5850] hsr_slave_1: entered promiscuous mode
[   55.054454][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   55.056788][ T5850] Cannot create hsr debugfs directory
[   55.067346][ T5842] hsr_slave_0: entered promiscuous mode
[   55.070576][ T5842] hsr_slave_1: entered promiscuous mode
[   55.073274][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   55.075219][ T5842] Cannot create hsr debugfs directory
[   55.270479][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.298402][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.303059][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.315656][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.349193][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.359357][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.368842][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.379824][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.443810][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.451130][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.462782][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.471620][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.556000][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.590938][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   55.597579][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.610806][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.614043][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.629812][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.632707][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.642851][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.647563][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   55.664983][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.667319][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.684152][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.686518][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.707035][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   55.721699][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.724021][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.739388][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.741760][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.872914][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.922130][ T5842] veth0_vlan: entered promiscuous mode
[   55.931940][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.937683][ T5842] veth1_vlan: entered promiscuous mode
[   55.959783][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.972157][ T5842] veth0_macvtap: entered promiscuous mode
[   55.978940][ T5842] veth1_macvtap: entered promiscuous mode
[   56.003016][ T5841] veth0_vlan: entered promiscuous mode
[   56.019773][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.030689][ T5841] veth1_vlan: entered promiscuous mode
[   56.038420][ T5850] veth0_vlan: entered promiscuous mode
[   56.043136][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.055312][ T5850] veth1_vlan: entered promiscuous mode
[   56.063442][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.071444][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.074470][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.078880][   T54] Bluetooth: hci2: command tx timeout
[   56.078976][ T5849] Bluetooth: hci1: command tx timeout
[   56.081421][   T54] Bluetooth: hci0: command tx timeout
[   56.092744][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.104977][ T5841] veth0_macvtap: entered promiscuous mode
[   56.118479][ T5841] veth1_macvtap: entered promiscuous mode
[   56.131323][ T5850] veth0_macvtap: entered promiscuous mode
[   56.135390][ T5850] veth1_macvtap: entered promiscuous mode
[   56.149802][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.173724][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.194788][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.217444][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.235639][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.236919][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.242833][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.247215][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.254460][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.273357][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.295278][  T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.299962][  T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.314456][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.322673][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.329403][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.333496][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.396240][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.436432][  T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.441775][  T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.459588][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.493438][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.494712][ T5911] Bluetooth: MGMT ver 1.23
[   56.496230][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.498691][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.512827][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.544916][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.547560][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.716030][ T5919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5'.
[   56.765999][ T5919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.832106][ T5919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.842643][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.853295][ T5926] vlan2: entered allmulticast mode
[   56.855241][ T5926] veth1: entered allmulticast mode
[   56.937628][ T5919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.075490][ T5945] Zero length message leads to an empty skb
[   57.156099][ T5947] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   57.317336][ T5962] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[   57.334496][   T33] audit: type=1107 audit(1757440467.050:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   57.428471][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.464016][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.482674][ T5968] syzkaller0: entered promiscuous mode
[   57.484997][ T5968] syzkaller0: entered allmulticast mode
[   57.751516][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'.
[   57.818879][ T5997] netlink: 830 bytes leftover after parsing attributes in process `syz.0.29'.
[   57.822315][ T5998] netlink: 830 bytes leftover after parsing attributes in process `syz.0.29'.
[   57.908417][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   57.921989][ T6002] syzkaller1: tun_chr_ioctl cmd 1074025677
[   57.924566][ T6002] syzkaller1: linktype set to 823
[   58.005418][ T6010] blkio.reset_stats is deprecated
[   58.065594][    C0] Unknown status report in ack skb
[   58.143858][ T6017] sctp: [Deprecated]: syz.2.37 (pid 6017) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.143858][ T6017] Use struct sctp_sack_info instead
[   58.160960][   T54] Bluetooth: hci1: command tx timeout
[   58.161098][ T5919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.163212][   T54] Bluetooth: hci2: command tx timeout
[   58.272348][ T6034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.426531][ T6042] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   58.431102][ T6043] pim6reg1: entered promiscuous mode
[   58.433135][ T6043] pim6reg1: entered allmulticast mode
[   58.460260][ T6046] netlink: zone id is out of range
[   58.462213][ T6046] netlink: zone id is out of range
[   58.464125][ T6046] netlink: zone id is out of range
[   58.465869][ T6046] netlink: zone id is out of range
[   58.467493][ T6046] netlink: zone id is out of range
[   59.500148][ T6110] pimreg: entered allmulticast mode
[   59.903893][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.920648][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.939892][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.964550][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.238656][ T5853] Bluetooth: hci1: command tx timeout
[   60.241655][   T54] Bluetooth: hci2: command tx timeout
[   60.314347][ T6163] netlink: 'syz.2.80': attribute type 7 has an invalid length.
[   60.335279][ T6163] : entered promiscuous mode
[   60.346387][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'.
[   60.384988][ T6167] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.514830][ T6171] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   60.781974][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'.
[   61.073456][ T6198] ip6tnl1: entered promiscuous mode
[   61.075684][ T6198] ip6tnl1: entered allmulticast mode
[   61.391452][ T6210] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   61.396984][ T6211] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   61.731918][ T6232] __nla_validate_parse: 6 callbacks suppressed
[   61.731927][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'.
[   61.739678][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'.
[   61.750692][ T6232] vlan2: entered promiscuous mode
[   61.752626][ T6232] bond0: entered promiscuous mode
[   61.754574][ T6232] bond_slave_0: entered promiscuous mode
[   61.756724][ T6232] bond_slave_1: entered promiscuous mode
[   61.831478][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'.
[   61.983017][ T6251] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   62.045348][ T6251] gretap1: entered promiscuous mode
[   62.318047][ T5853] Bluetooth: hci1: command tx timeout
[   62.321052][   T54] Bluetooth: hci2: command tx timeout
[   62.655508][ T6283] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   62.659717][ T6283] netlink: 'syz.1.122': attribute type 1 has an invalid length.
[   62.930216][ T6300] tipc: Started in network mode
[   62.934053][ T6300] tipc: Node identity def9d35dba7, cluster identity 4711
[   62.937161][ T6300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.942471][ T6298] syzkaller0: entered promiscuous mode
[   62.944887][ T6298] syzkaller0: entered allmulticast mode
[   62.970681][ T6300] tipc: Resetting bearer <eth:syzkaller0>
[   62.983874][ T6295] tipc: Resetting bearer <eth:syzkaller0>
[   63.006007][ T6295] tipc: Disabling bearer <eth:syzkaller0>
[   63.027383][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'.
[   63.033406][ T6302] Unsupported xt match
[   63.033421][ T6302] unable to load match
[   63.054031][ T6302] batadv0: entered promiscuous mode
[   63.059630][ T6302] hsr1: entered allmulticast mode
[   63.061979][ T6302] bond0: entered allmulticast mode
[   63.064336][ T6302] bond_slave_0: entered allmulticast mode
[   63.066837][ T6302] bond_slave_1: entered allmulticast mode
[   63.069974][ T6302] batadv0: entered allmulticast mode
[   63.072743][ T6302] 8021q: adding VLAN 0 to HW filter on device hsr1
[   63.077541][ T6302] batadv0: left promiscuous mode
[   63.218199][ T6304] nbd0: detected capacity change from 0 to 127
[   63.225863][   T55] block nbd0: Receive control failed (result -32)
[   63.229858][ T5844] block nbd0: Send control failed (result -32)
[   63.232919][ T5844] block nbd0: Request send failed, requeueing
[   63.237526][   T25] block nbd0: Dead connection, failed to find a fallback
[   63.242959][   T25] block nbd0: shutting down sockets
[   63.245368][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.249805][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.254907][ T6310] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.131'.
[   63.255514][ T5844] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.263914][ T5844] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.267666][ T5844] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.271625][ T5844] Buffer I/O error on dev nbd0, logical block 2, async page read
[   63.286865][ T5844] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.290949][ T5844] Buffer I/O error on dev nbd0, logical block 3, async page read
[   63.294387][ T5844] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.298302][ T5844] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.306301][ T5844] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.310560][ T5844] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.314272][ T5844] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.319799][ T5844] Buffer I/O error on dev nbd0, logical block 2, async page read
[   63.323235][ T5844] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.327023][ T5844] Buffer I/O error on dev nbd0, logical block 3, async page read
[   63.331878][ T5844] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.337173][ T5844] Buffer I/O error on dev nbd0, logical block 0, async page read
[   63.342922][ T5844] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   63.346788][ T5844] Buffer I/O error on dev nbd0, logical block 1, async page read
[   63.360724][ T5844] ldm_validate_partition_table(): Disk read failed.
[   63.368335][ T5844] Dev nbd0: unable to read RDB block 0
[   63.372331][ T5844]  nbd0: unable to read partition table
[   63.382191][ T5844] ldm_validate_partition_table(): Disk read failed.
[   63.386567][ T5844] Dev nbd0: unable to read RDB block 0
[   63.395125][ T5844]  nbd0: unable to read partition table
[   63.467228][ T6323] vxcan1: entered allmulticast mode
[   63.478257][ T6323] vxcan1: left allmulticast mode
[   63.541646][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'.
[   63.545111][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'.
[   63.562432][ T6331] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.575600][ T6334] netlink: 108 bytes leftover after parsing attributes in process `syz.0.138'.
[   63.580818][ T6334] netlink: 108 bytes leftover after parsing attributes in process `syz.0.138'.
[   63.591206][ T6334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.138'.
[   63.670681][ T6343] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   63.709897][ T6343] bond1: entered promiscuous mode
[   63.711837][ T6343] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.714722][ T6344] netlink: 'syz.0.142': attribute type 29 has an invalid length.
[   63.719079][ T6344] netlink: 'syz.0.142': attribute type 29 has an invalid length.
[   64.009395][ T6372] bridge_slave_0: left allmulticast mode
[   64.011788][ T6372] bridge_slave_0: left promiscuous mode
[   64.014430][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.029849][ T6372] bridge_slave_1: left allmulticast mode
[   64.032301][ T6372] bridge_slave_1: left promiscuous mode
[   64.037379][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.053615][ T6372] bond0: (slave bond_slave_0): Releasing backup interface
[   64.079642][ T6372] bond0: (slave bond_slave_1): Releasing backup interface
[   64.083488][ T6378] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   64.096601][ T6372] team0: Port device team_slave_0 removed
[   64.104331][ T6372] team0: Port device team_slave_1 removed
[   64.106726][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.111321][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.115351][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.119081][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.166708][ T6378] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.168969][ T6372] syz.0.150 (6372) used greatest stack depth: 19864 bytes left
[   64.181073][ T6379] vlan3: entered allmulticast mode
[   64.191722][ T6379] bond2: (slave vlan3): making interface the new active one
[   64.197333][ T6379] bond2: (slave vlan3): Enslaving as an active interface with an up link
[   64.335636][ T6393] netlink: 'syz.2.155': attribute type 12 has an invalid length.
[   64.365343][ T6395] gretap0: entered promiscuous mode
[   64.369242][ T6395] gretap0: left promiscuous mode
[   64.637668][ T6410] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.693420][ T6413] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   64.702800][ T6410] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.744907][ T6410] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.747651][ T6415] netlink: 'syz.2.162': attribute type 2 has an invalid length.
[   64.760900][ T6415] k*]: entered promiscuous mode
[   64.785695][ T6415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.809468][ T6418] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   64.815757][ T6418] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   64.833463][ T6417] veth0_to_team: entered promiscuous mode
[   64.836146][ T6417] veth0_to_team: entered allmulticast mode
[   64.843802][ T6415] Illegal XDP return value 16128 on prog  (id 174) dev syz_tun, expect packet loss!
[   64.861407][ T6410] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.983284][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.010438][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.033886][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.050497][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.404606][ T6449] sctp: [Deprecated]: syz.1.170 (pid 6449) Use of int in max_burst socket option.
[   65.404606][ T6449] Use struct sctp_assoc_value instead
[   65.420375][ T6449] 8021q: VLANs not supported on ip6_vti0
[   66.471162][ T6490] veth0_to_team: left promiscuous mode
[   66.484165][ T6490] ip6tnl1: left promiscuous mode
[   67.020149][ T6541] __nla_validate_parse: 14 callbacks suppressed
[   67.020166][ T6541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.190'.
[   71.048497][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.051365][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.446950][ T6622] vlan4: entered promiscuous mode
[   73.450801][ T6622] team0: entered promiscuous mode
[   73.452469][ T6622] team_slave_0: entered promiscuous mode
[   73.454494][ T6622] team_slave_1: entered promiscuous mode
[   73.463462][ T6622] team0: Device vlan4 is already an upper device of the team interface
[   73.527174][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.586533][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'.
[   73.598744][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   73.602156][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.0.201'.
[   73.617949][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   73.620701][ T6632] netlink: 72 bytes leftover after parsing attributes in process `syz.0.201'.
[   73.980277][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'.
[   73.983738][ T6658] bridge_slave_1: left allmulticast mode
[   73.985842][ T6658] bridge_slave_1: left promiscuous mode
[   73.990988][ T6658] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.997118][ T6658] bridge_slave_0: left allmulticast mode
[   73.999954][ T6658] bridge_slave_0: left promiscuous mode
[   74.002203][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.099126][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'.
[   74.235955][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'.
[   74.292216][ T6673] bridge2: port 1(veth0_to_bond) entered blocking state
[   74.294639][ T6673] bridge2: port 1(veth0_to_bond) entered disabled state
[   74.296926][ T6673] veth0_to_bond: entered allmulticast mode
[   74.319398][ T6673] veth0_to_bond: entered promiscuous mode
[   75.147922][ T6678] netlink: 'syz.0.213': attribute type 1 has an invalid length.
[   75.253169][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'.
[   75.324276][ T6694] team0: Device gtp0 is up. Set it down before adding it as a team port
[   75.472271][ T6713] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.542620][ T6713] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.594328][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.616956][ T6713] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.664416][ T6713] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.759053][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.775518][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.789765][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.803661][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.955410][ T6739] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   76.016765][ T6739] bond2: (slave gretap1): making interface the new active one
[   76.020701][ T6739] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   76.047667][ T6742] netlink: 'syz.1.233': attribute type 1 has an invalid length.
[   77.366427][ T6793] netlink: 'syz.1.248': attribute type 7 has an invalid length.
[   77.402947][ T6795] warning: `syz.1.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.070449][ T6839] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[   78.105919][ T6839] bond3: entered promiscuous mode
[   78.110488][ T6839] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.123905][ T6839] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.127184][ T6839] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   78.131180][ T6839] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   78.137669][ T6839] bond3: (slave vxcan3): making interface the new active one
[   78.140534][ T6839] vxcan3: entered promiscuous mode
[   78.143578][ T6839] bond3: (slave vxcan3): Enslaving as an active interface with an up link
[   78.149721][ T6839] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[   78.189613][ T6847] netlink: 'syz.0.265': attribute type 2 has an invalid length.
[   78.468737][ T6857] netlink: 'syz.0.270': attribute type 4 has an invalid length.
[   78.602869][ T6857] bond3: left promiscuous mode
[   78.604834][ T6857] vxcan3: left promiscuous mode
[   78.609304][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.615143][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.621740][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.628574][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.016622][ T6874] __nla_validate_parse: 10 callbacks suppressed
[   79.016632][ T6874] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.277'.
[   79.022381][ T6874] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   79.071611][ T6874] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   79.074290][ T6874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.277'.
[   79.435646][ T6899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.278113][ T6941] netlink: 348 bytes leftover after parsing attributes in process `syz.2.291'.
[   80.598281][ T6955] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.604598][ T6955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   80.941941][ T6965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.953530][ T6966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.996456][ T6970] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[   81.287017][  T973] cfg80211: failed to load regulatory.db
[   81.501090][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   81.503576][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   81.506049][   T10] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   81.513149][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   81.528038][ T6981] syz.2.307: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.534669][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT(full) 
[   81.534688][ T6981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.534696][ T6981] Call Trace:
[   81.534703][ T6981]  <TASK>
[   81.534710][ T6981]  dump_stack_lvl+0x189/0x250
[   81.534733][ T6981]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.534749][ T6981]  ? __pfx__printk+0x10/0x10
[   81.534768][ T6981]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.534784][ T6981]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.534799][ T6981]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.534815][ T6981]  warn_alloc+0x214/0x310
[   81.534835][ T6981]  ? stack_depot_save_flags+0x40/0x860
[   81.534853][ T6981]  ? __pfx_warn_alloc+0x10/0x10
[   81.534873][ T6981]  ? kasan_save_track+0x4f/0x80
[   81.534889][ T6981]  ? xskq_create+0x56/0x170
[   81.534906][ T6981]  ? xsk_init_queue+0xb0/0x110
[   81.534921][ T6981]  ? xsk_setsockopt+0x4dc/0x8d0
[   81.534935][ T6981]  ? do_sock_setsockopt+0x17c/0x1b0
[   81.534947][ T6981]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   81.534958][ T6981]  ? do_syscall_64+0xfa/0x3b0
[   81.534967][ T6981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.534986][ T6981]  __vmalloc_node_range_noprof+0x125/0x12f0
[   81.535026][ T6981]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.535048][ T6981]  ? __kasan_kmalloc+0x93/0xb0
[   81.535067][ T6981]  vmalloc_user_noprof+0xad/0xf0
[   81.535084][ T6981]  ? xskq_create+0xbf/0x170
[   81.535102][ T6981]  xskq_create+0xbf/0x170
[   81.535120][ T6981]  xsk_init_queue+0xb0/0x110
[   81.535139][ T6981]  xsk_setsockopt+0x4dc/0x8d0
[   81.535157][ T6981]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.535173][ T6981]  ? __pfx_aa_sk_perm+0x10/0x10
[   81.535194][ T6981]  ? aa_sock_opt_perm+0xff/0x1b0
[   81.535208][ T6981]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   81.535221][ T6981]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.535238][ T6981]  do_sock_setsockopt+0x17c/0x1b0
[   81.535254][ T6981]  __x64_sys_setsockopt+0x13f/0x1b0
[   81.535271][ T6981]  do_syscall_64+0xfa/0x3b0
[   81.535281][ T6981]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.535298][ T6981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.535309][ T6981]  ? exc_page_fault+0x9f/0xf0
[   81.535328][ T6981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.535340][ T6981] RIP: 0033:0x7fbd3958ebe9
[   81.535352][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.535360][ T6981] RSP: 002b:00007fbd3a4aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.535381][ T6981] RAX: ffffffffffffffda RBX: 00007fbd397c5fa0 RCX: 00007fbd3958ebe9
[   81.535391][ T6981] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[   81.535399][ T6981] RBP: 00007fbd39611e19 R08: 0000000000000004 R09: 0000000000000000
[   81.535407][ T6981] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.535414][ T6981] R13: 00007fbd397c6038 R14: 00007fbd397c5fa0 R15: 00007ffc75298fa8
[   81.535436][ T6981]  </TASK>
[   81.535441][ T6981] Mem-Info:
[   81.660910][ T6981] active_anon:5458 inactive_anon:0 isolated_anon:0
[   81.660910][ T6981]  active_file:1161 inactive_file:38230 isolated_file:0
[   81.660910][ T6981]  unevictable:1772 dirty:65 writeback:0
[   81.660910][ T6981]  slab_reclaimable:9789 slab_unreclaimable:52263
[   81.660910][ T6981]  mapped:18062 shmem:2438 pagetables:945
[   81.660910][ T6981]  sec_pagetables:0 bounce:0
[   81.660910][ T6981]  kernel_misc_reclaimable:0
[   81.660910][ T6981]  free:291162 free_pcp:23003 free_cma:0
[   81.679645][ T6981] Node 0 active_anon:13804kB inactive_anon:0kB active_file:2508kB inactive_file:10540kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:46816kB dirty:192kB writeback:0kB shmem:5084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4908kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.693149][ T6981] Node 1 active_anon:8028kB inactive_anon:0kB active_file:2136kB inactive_file:142380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25432kB dirty:68kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7140kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.706466][ T6981] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.719265][ T6981] lowmem_reserve[]: 0 811 811 811 811
[   81.721694][ T6981] Node 0 DMA32 free:397096kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13804kB inactive_anon:0kB active_file:2508kB inactive_file:10540kB unevictable:3552kB writepending:192kB present:1556484kB managed:830928kB mlocked:16kB bounce:0kB free_pcp:45304kB local_pcp:27928kB free_cma:0kB
[   81.734990][ T6981] lowmem_reserve[]: 0 0 0 0 0
[   81.737128][ T6981] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.762591][ T6981] lowmem_reserve[]: 0 0 854 854 854
[   81.764764][ T6981] Node 1 Normal free:293384kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8028kB inactive_anon:0kB active_file:2136kB inactive_file:142380kB unevictable:3536kB writepending:68kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46832kB local_pcp:16804kB free_cma:0kB
[   81.775732][ T6981] lowmem_reserve[]: 0 0 0 0 0
[   81.777716][ T6981] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.782648][ T6981] Node 0 DMA32: 384*4kB (U) 243*8kB (UE) 91*16kB (UM) 173*32kB (UME) 121*64kB (U) 58*128kB (UME) 15*256kB (U) 8*512kB (UME) 1*1024kB (U) 1*2048kB (M) 88*4096kB (M) = 397096kB
[   81.789183][ T6981] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   81.794943][ T6981] Node 1 Normal: 718*4kB (UME) 640*8kB (UME) 395*16kB (UME) 235*32kB (UME) 124*64kB (UME) 31*128kB (UME) 6*256kB (UM) 4*512kB (UM) 12*1024kB (UM) 13*2048kB (UME) 53*4096kB (M) = 293320kB
[   81.802517][ T6981] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.805785][ T6981] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.809934][ T6981] 41829 total pagecache pages
[   81.811921][ T6981] 0 pages in swap cache
[   81.813883][ T6981] Free swap  = 124996kB
[   81.815409][ T6981] Total swap = 124996kB
[   81.817001][ T6981] 786301 pages RAM
[   81.818793][ T6981] 0 pages HighMem/MovableOnly
[   81.820587][ T6981] 241337 pages reserved
[   81.822157][ T6981] 0 pages cma reserved
[   81.906856][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'.
[   82.468646][ T7028] netlink: 'syz.2.322': attribute type 9 has an invalid length.
[   82.471310][ T7028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.322'.
[   82.625202][ T7039] netlink: 'syz.2.325': attribute type 2 has an invalid length.
[   82.633892][ T7039] : entered promiscuous mode
[   82.683052][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'.
[   82.686124][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'.
[   82.694228][ T7044] geneve2: entered promiscuous mode
[   82.696035][ T7044] geneve2: entered allmulticast mode
[   82.740920][ T7047] vlan3: entered promiscuous mode
[   82.743086][ T7047] macvtap0: entered promiscuous mode
[   82.795665][ T7053] netlink: 104 bytes leftover after parsing attributes in process `syz.2.327'.
[   83.638049][ T7123] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20001
[   83.642855][ T7117] syzkaller0: entered promiscuous mode
[   83.645126][ T7117] syzkaller0: entered allmulticast mode
[   84.550335][ T7139] bridge4: entered promiscuous mode
[   84.552822][ T7139] bridge4: entered allmulticast mode
[   84.578663][ T7142] netlink: 'syz.2.351': attribute type 1 has an invalid length.
[   84.638711][ T7146] bond2: entered promiscuous mode
[   84.641683][ T7146] bond2: entered allmulticast mode
[   84.644103][ T7146] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.699354][ T7142] bridge0: entered promiscuous mode
[   84.701826][ T7142] bridge0: entered allmulticast mode
[   84.704834][ T7142] bond2: (slave bridge0): Enslaving as a backup interface with an up link
[   84.710870][ T7148] bond0: (slave rose0): Error: Device can not be enslaved while up
[   84.750169][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.844007][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.852864][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.858373][ T5876] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   85.013731][ T5876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.025611][ T5876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.045985][ T5876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.051240][ T5876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.066737][   T33] audit: type=1800 audit(1757440494.780:3): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.357" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=533 res=0 errno=0
[   85.085563][   T33] audit: type=1804 audit(1757440494.780:4): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.357" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=533 res=1 errno=0
[   85.145818][ T7171] netlink: 'syz.0.359': attribute type 30 has an invalid length.
[   85.253551][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'.
[   85.365948][ T7189] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.363'.
[   85.564860][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[   85.569069][ T7193] IPVS: Unknown mcast interface: batadv0
[   85.572678][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'.
[   85.613470][ T7205] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   85.616743][ T7205] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   85.763222][ T7219] IPv6: Can't replace route, no match found
[   85.802312][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'.
[   85.896036][ T7227] syzkaller1: entered promiscuous mode
[   85.899956][ T7227] syzkaller1: entered allmulticast mode
[   86.054062][ T7238] netlink: 76 bytes leftover after parsing attributes in process `syz.0.381'.
[   86.061271][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'.
[   86.163571][ T7246] netlink: 3 bytes leftover after parsing attributes in process `syz.1.384'.
[   86.253603][ T7252] tipc: Started in network mode
[   86.255811][ T7252] tipc: Node identity d2ee85052fb6, cluster identity 4711
[   86.259503][ T7252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.266731][ T7252] tipc: Resetting bearer <eth:syzkaller0>
[   86.272683][ T7251] tipc: Disabling bearer <eth:syzkaller0>
[   86.549601][ T7270] syzkaller1: entered promiscuous mode
[   86.551410][ T7270] syzkaller1: entered allmulticast mode
[   86.563497][ T7270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.394'.
[   86.566551][ T7270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.394'.
[   86.816894][ T7278] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   86.877122][ T7302] sctp: [Deprecated]: syz.1.396 (pid 7302) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.877122][ T7302] Use struct sctp_sack_info instead
[   86.952357][ T7305] openvswitch: netlink: Flow key attr not present in new flow.
[   87.564226][ T7344] netlink: 'syz.1.408': attribute type 1 has an invalid length.
[   87.866454][ T7366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.914506][ T7366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.974352][ T7366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.034479][ T7366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.097950][ T7377] netlink: 'syz.2.414': attribute type 12 has an invalid length.
[   88.107122][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.117569][ T5860] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.127310][ T5860] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.137395][ T5860] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.142571][ T7368] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.186191][ T7368] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.242726][ T7368] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.287547][ T7368] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.316250][ T7385] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[   88.327284][ T7385] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   88.334934][ T7385] gretap1: entered promiscuous mode
[   88.457958][ T7387] veth2: entered allmulticast mode
[   89.562017][ T7439] sctp: [Deprecated]: syz.2.437 (pid 7439) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.562017][ T7439] Use struct sctp_sack_info instead
[   89.786842][ T7463] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[   90.228760][ T7486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.525975][ T7504] __nla_validate_parse: 20 callbacks suppressed
[   90.525988][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[   90.533453][ T7504] netlink: 'syz.0.455': attribute type 8 has an invalid length.
[   90.741315][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.456'.
[   90.784847][ T7508] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   90.788918][ T7508] netlink: 144 bytes leftover after parsing attributes in process `syz.2.457'.
[   90.792589][ T7508] netlink: 96 bytes leftover after parsing attributes in process `syz.2.457'.
[   90.853259][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'.
[   90.856551][ T7508] netlink: 'syz.2.457': attribute type 20 has an invalid length.
[   90.868458][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.868521][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'.
[   90.872081][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.879259][ T7508] netlink: 'syz.2.457': attribute type 20 has an invalid length.
[   90.883071][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.887208][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.614912][ T7524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.931546][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'.
[   91.936020][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'.
[   91.941029][ T7529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.464'.
[   92.672011][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.683605][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.698029][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.708485][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.031924][ T7561] geneve2: entered promiscuous mode
[   93.038736][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.049588][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.067261][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.072823][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.549285][ T7577] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   93.613411][ T7577] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[   93.623669][ T7577] bond3: (slave vxcan5): Error -95 calling set_mac_address
[   93.651228][ T7578] gretap2: entered promiscuous mode
[   93.654636][ T7578] bond3: (slave gretap2): making interface the new active one
[   93.658178][ T7578] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   93.662316][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'.
[   93.665253][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.891480][ T7644] netlink: 'syz.0.494': attribute type 1 has an invalid length.
[   94.952738][ T7644] bond5: (slave bridge6): making interface the new active one
[   94.955987][ T7644] bond5: (slave bridge6): Enslaving as an active interface with an up link
[   95.228378][ T7661] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[   95.268037][ T7661] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   95.629429][ T7684] netlink: 'syz.2.503': attribute type 10 has an invalid length.
[   95.640725][ T7684] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   95.650498][ T7675] __nla_validate_parse: 2 callbacks suppressed
[   95.650512][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.503'.
[   95.688705][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   95.752269][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[   95.936199][ T7700] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[   95.939280][ T7700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.510'.
[   95.943184][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'.
[   95.958123][ T5846] IPVS: starting estimator thread 0...
[   96.048014][ T7705] IPVS: using max 42 ests per chain, 100800 per kthread
[   96.303864][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'.
[   97.326192][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   97.590341][ T7773] syzkaller1: entered promiscuous mode
[   97.592777][ T7773] syzkaller1: entered allmulticast mode
[   97.690542][ T7786] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.537'.
[   97.694497][ T7786] bridge_slave_1: default FDB implementation only supports local addresses
[   98.218751][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'.
[   98.232106][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'.
[   98.284004][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[   98.287951][ T7845] netlink: 'syz.1.549': attribute type 29 has an invalid length.
[   98.291968][ T7845] !: renamed from dummy0 (while UP)
[   98.476773][ T7870] pimreg3: entered allmulticast mode
[   98.492325][ T7869] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.495671][ T7869] netlink: 'syz.2.555': attribute type 12 has an invalid length.
[   99.074184][ T7927] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.137565][ T7927] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.196238][ T7927] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.215983][ T7935] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   99.219706][ T7935] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   99.267005][ T7927] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.286424][ T7937] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.296927][ T7937] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   99.303385][ T7937] bond7: (slave macvlan2): Enslaving as a backup interface with a down link
[   99.310575][ T7937] veth0_to_bond: left allmulticast mode
[   99.313409][ T7937] veth0_to_bond: left promiscuous mode
[   99.316277][ T7937] bridge2: port 1(veth0_to_bond) entered disabled state
[   99.324039][ T7937] bond2: (slave gretap1): Releasing active interface
[   99.333412][ T7937] bond3: (slave vxcan3): Releasing backup interface
[   99.342365][ T7937] bond5: (slave bridge6): Releasing active interface
[   99.351614][ T7937] bond7: (slave macvlan2): Releasing backup interface
[   99.409927][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.432455][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.447078][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.471195][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.702267][ T7967] nbd: must specify an index to disconnect
[  100.086914][ T7976] netlink: 'syz.1.579': attribute type 12 has an invalid length.
[  100.243221][ T7987] sctp: [Deprecated]: syz.2.582 (pid 7987) Use of int in max_burst socket option deprecated.
[  100.243221][ T7987] Use struct sctp_assoc_value instead
[  100.577552][   T54] Bluetooth: hci2: link tx timeout
[  100.579974][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.584386][   T54] Bluetooth: hci2: link tx timeout
[  100.586054][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.590935][   T54] Bluetooth: hci2: link tx timeout
[  100.593296][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.596359][   T54] Bluetooth: hci2: link tx timeout
[  100.598502][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.601249][   T54] Bluetooth: hci2: link tx timeout
[  100.603416][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.606543][   T54] Bluetooth: hci2: link tx timeout
[  100.609461][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.620009][ T8000] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[  100.925290][ T8004] netlink: 'syz.2.587': attribute type 2 has an invalid length.
[  101.029928][ T8006] delete_channel: no stack
[  101.212595][ T8017] bond0: (slave syz_tun): Releasing backup interface
[  101.220152][ T8017] bond0: (slave bond_slave_0): Releasing backup interface
[  101.225272][ T8017] bond0: (slave bond_slave_1): Releasing backup interface
[  101.236424][ T8017] team0: Port device team_slave_0 removed
[  101.242356][ T8017] team0: Port device team_slave_1 removed
[  101.244729][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.248687][ T8017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.252916][ T8017] bond2: (slave bridge0): Removing an active aggregator
[  101.256345][ T8017] bond2: (slave bridge0): Releasing backup interface
[  101.259679][ T8017] bridge0: left promiscuous mode
[  101.261461][ T8017] bridge0: left allmulticast mode
[  101.264422][ T8017] bond3: (slave gretap2): Releasing active interface
[  101.362513][ T8020] __nla_validate_parse: 7 callbacks suppressed
[  101.362526][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[  101.509284][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'.
[  101.571590][ T8034] netlink: 324 bytes leftover after parsing attributes in process `syz.0.597'.
[  101.657611][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'.
[  101.661434][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'.
[  101.786003][ T8047] netlink: 'syz.0.602': attribute type 5 has an invalid length.
[  101.792035][ T8047] netlink: 'syz.0.602': attribute type 5 has an invalid length.
[  101.875810][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  101.880504][ T8053] netlink: 'syz.2.606': attribute type 1 has an invalid length.
[  101.884610][ T8053] netlink: 'syz.2.606': attribute type 2 has an invalid length.
[  101.906558][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'.
[  101.911170][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.607'.
[  101.994400][ T8063] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.998028][ T8063] netlink: 'syz.0.610': attribute type 11 has an invalid length.
[  102.253137][ T8076] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[  102.255911][ T8076] netlink: 119 bytes leftover after parsing attributes in process `syz.0.614'.
[  102.639323][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  102.971694][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  103.030314][ T8122] GUP no longer grows the stack in syz.2.628 (8122): 200000003000-20000000a000 (200000001000)
[  103.035498][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.2.628 Not tainted syzkaller #0 PREEMPT(full) 
[  103.035517][ T8122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.035525][ T8122] Call Trace:
[  103.035533][ T8122]  <TASK>
[  103.035539][ T8122]  dump_stack_lvl+0x189/0x250
[  103.035562][ T8122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.035578][ T8122]  ? __pfx__printk+0x10/0x10
[  103.035593][ T8122]  ? find_vma+0xe7/0x160
[  103.035610][ T8122]  ? __lock_acquire+0xab9/0xd20
[  103.035637][ T8122]  __get_user_pages+0x24d0/0x2ce0
[  103.035650][ T8122]  ? __lock_acquire+0xab9/0xd20
[  103.035686][ T8122]  ? __gup_longterm_locked+0xc68/0x1660
[  103.035706][ T8122]  __gup_longterm_locked+0xde9/0x1660
[  103.035731][ T8122]  ? sanity_check_pinned_pages+0x123a/0x1300
[  103.035752][ T8122]  gup_fast_fallback+0x1e6a/0x2010
[  103.035793][ T8122]  ? __pfx_gup_fast_fallback+0x10/0x10
[  103.035806][ T8122]  ? stack_trace_save+0x9c/0xe0
[  103.035820][ T8122]  ? __pfx_stack_trace_save+0x10/0x10
[  103.035842][ T8122]  ? pin_user_pages_fast+0x4d/0xb0
[  103.035859][ T8122]  iov_iter_extract_pages+0x35a/0x5e0
[  103.035881][ T8122]  extract_iter_to_sg+0xe46/0x24e0
[  103.035910][ T8122]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  103.035943][ T8122]  ? __asan_memset+0x22/0x50
[  103.035960][ T8122]  af_alg_get_rsgl+0x436/0x810
[  103.035991][ T8122]  aead_recvmsg+0x4cc/0x13f0
[  103.036017][ T8122]  ? rcu_is_watching+0x15/0xb0
[  103.036045][ T8122]  ? __pfx_aead_recvmsg+0x10/0x10
[  103.036064][ T8122]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  103.036078][ T8122]  ? __pfx_aead_recvmsg+0x10/0x10
[  103.036097][ T8122]  sock_recvmsg_nosec+0x186/0x1c0
[  103.036118][ T8122]  ____sys_recvmsg+0x3aa/0x460
[  103.036139][ T8122]  ? __pfx_____sys_recvmsg+0x10/0x10
[  103.036166][ T8122]  ? import_iovec+0x74/0xa0
[  103.036182][ T8122]  ___sys_recvmsg+0x1b5/0x510
[  103.036232][ T8122]  ? __pfx____sys_recvmsg+0x10/0x10
[  103.036272][ T8122]  ? __might_fault+0xb0/0x130
[  103.036291][ T8122]  do_recvmmsg+0x307/0x770
[  103.036313][ T8122]  ? __pfx_do_recvmmsg+0x10/0x10
[  103.036337][ T8122]  ? __pfx_do_futex+0x10/0x10
[  103.036367][ T8122]  __x64_sys_recvmmsg+0x190/0x240
[  103.036383][ T8122]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  103.036397][ T8122]  ? do_syscall_64+0xbe/0x3b0
[  103.036409][ T8122]  do_syscall_64+0xfa/0x3b0
[  103.036417][ T8122]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.036432][ T8122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.036443][ T8122]  ? exc_page_fault+0x9f/0xf0
[  103.036457][ T8122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.036466][ T8122] RIP: 0033:0x7fbd3958ebe9
[  103.036474][ T8122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.036479][ T8122] RSP: 002b:00007fbd3a4aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  103.036489][ T8122] RAX: ffffffffffffffda RBX: 00007fbd397c5fa0 RCX: 00007fbd3958ebe9
[  103.036493][ T8122] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[  103.036497][ T8122] RBP: 00007fbd39611e19 R08: 0000000000000000 R09: 0000000000000000
[  103.036501][ T8122] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  103.036505][ T8122] R13: 00007fbd397c6038 R14: 00007fbd397c5fa0 R15: 00007ffc75298fa8
[  103.036516][ T8122]  </TASK>
[  104.629559][ T8168] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001
[  104.748803][ T8173] nbd1: detected capacity change from 0 to 127
[  104.761020][   T55] block nbd1: Receive control failed (result -104)
[  104.769573][ T8181] netlink: 'syz.2.648': attribute type 15 has an invalid length.
[  104.777258][ T8181] ip6gretap0: default FDB implementation only supports local addresses
[  105.103156][ T8210] netlink: 'syz.0.657': attribute type 1 has an invalid length.
[  105.117706][ T8210] 8021q: adding VLAN 0 to HW filter on device bond8
[  105.129515][ T8210] bond8: (slave gretap2): making interface the new active one
[  105.134101][ T8210] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  105.139583][ T8210] syz.0.657 (8210) used greatest stack depth: 18904 bytes left
[  105.259588][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.265302][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.269351][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.273037][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.306207][ T8220] sctp: [Deprecated]: syz.0.660 (pid 8220) Use of int in maxseg socket option.
[  105.306207][ T8220] Use struct sctp_assoc_value instead
[  105.681779][ T8230] netlink: 'syz.1.664': attribute type 33 has an invalid length.
[  106.317493][ T5876] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.321817][ T5876] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.325736][ T5876] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.333554][ T5876] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.793950][ T8274] __nla_validate_parse: 12 callbacks suppressed
[  106.793965][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  106.809996][ T5876] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.813583][ T5876] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.821406][ T5876] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.824941][ T5876] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.838782][ T8273] netlink: 'syz.1.677': attribute type 6 has an invalid length.
[  107.122757][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'.
[  107.223920][ T8288] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  107.261050][ T8288] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.374854][ T8301] netlink: 'syz.0.683': attribute type 3 has an invalid length.
[  107.378204][ T8301] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.683'.
[  107.451258][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[  107.451564][ T8309] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  107.454328][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  107.819845][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[  108.034871][ T8344] ipvlan2: entered promiscuous mode
[  108.036902][ T8344] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  108.095665][ T8348] pim6reg1: entered promiscuous mode
[  108.099428][ T8348] pim6reg1: entered allmulticast mode
[  108.145733][ T8350] _Z`Ԁ@S: entered promiscuous mode
[  108.283661][ T8363] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  108.321697][ T8363] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.365275][ T8363] veth9: entered promiscuous mode
[  108.372471][ T8363] bond5: (slave veth9): Enslaving as an active interface with a down link
[  108.376614][ T8363] erspan0: entered allmulticast mode
[  108.458818][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  108.462505][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[  108.466400][ T8380] netlink: 'syz.2.706': attribute type 20 has an invalid length.
[  108.472611][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  108.484415][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[  108.487394][ T8380] netlink: 'syz.2.706': attribute type 20 has an invalid length.
[  108.522836][ T8382] geneve2: entered promiscuous mode
[  108.524608][ T8382] geneve2: entered allmulticast mode
[  108.580357][ T8386] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  108.900193][ T8413] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  108.902850][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.947084][ T8416] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  109.117468][ T8437] netlink: 'syz.1.719': attribute type 10 has an invalid length.
[  109.145222][ T8437] !: entered promiscuous mode
[  109.158732][ T8437] team0: Port device 0! added
[  109.172514][ T8446] !: left promiscuous mode
[  109.179483][ T8446] team0: Port device 0! removed
[  109.184179][ T8446] !: entered promiscuous mode
[  109.186365][ T8446] !: entered allmulticast mode
[  109.208554][ T8446] bond0: (slave 0!): Enslaving as an active interface with an up link
[  109.433363][ T8457] 8021q: adding VLAN 0 to HW filter on device bond9
[  109.436411][ T8457] bridge8: port 1(bond9) entered blocking state
[  109.441183][ T8457] bridge8: port 1(bond9) entered disabled state
[  109.443899][ T8457] bond9: entered allmulticast mode
[  109.449601][ T8457] bridge8: port 1(bond9) entered blocking state
[  109.451952][ T8457] bridge8: port 1(bond9) entered forwarding state
[  109.874691][ T1032] bridge8: port 1(bond9) entered disabled state
[  109.927211][ T8484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.931218][ T8484] syzkaller0: entered promiscuous mode
[  109.933982][ T8484] syzkaller0: entered allmulticast mode
[  109.939467][ T8484] syzkaller0: mtu less than device minimum
[  109.946917][ T8483] tipc: Resetting bearer <eth:syzkaller0>
[  109.968772][ T8483] tipc: Disabling bearer <eth:syzkaller0>
[  110.040715][ T8495] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  110.375990][ T8524] netlink: zone id is out of range
[  110.379006][ T8524] netlink: zone id is out of range
[  110.381315][ T8524] netlink: zone id is out of range
[  110.383652][ T8524] netlink: zone id is out of range
[  110.385786][ T8524] netlink: zone id is out of range
[  110.390676][ T8524] netlink: zone id is out of range
[  110.398699][ T8524] bond5: (slave veth9): Releasing active interface
[  110.665341][ T8542] batadv1: entered promiscuous mode
[  110.667690][ T8542] batadv1: entered allmulticast mode
[  110.843658][ T8554] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  111.862162][ T8617] __nla_validate_parse: 19 callbacks suppressed
[  111.862179][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.770'.
[  112.174281][ T8633] validate_nla: 2 callbacks suppressed
[  112.174290][ T8633] netlink: 'syz.2.775': attribute type 10 has an invalid length.
[  112.325499][ T8646] netlink: 'syz.1.779': attribute type 3 has an invalid length.
[  112.408507][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'.
[  112.568203][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'.
[  113.163371][ T8695] netlink: 'syz.2.790': attribute type 2 has an invalid length.
[  113.181256][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'.
[  113.191616][ T8695] netlink: 64 bytes leftover after parsing attributes in process `syz.2.790'.
[  113.201960][ T8695] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  113.353256][ T8700] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  113.360137][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'.
[  113.375540][ T8700] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  113.379251][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'.
[  113.382462][ T8700] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  113.385360][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'.
[  113.398762][ T8700] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  113.402311][ T8700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.791'.
[  113.432527][ T8707] netlink: 44 bytes leftover after parsing attributes in process `syz.1.792'.
[  113.529463][ T8701] macvlan2: entered promiscuous mode
[  113.531329][ T8701] vlan0: entered promiscuous mode
[  114.004778][ T8739] netlink: 'syz.2.799': attribute type 2 has an invalid length.
[  114.045639][ T8739] erspan0: left allmulticast mode
[  114.090340][ T8739] net_ratelimit: 5 callbacks suppressed
[  114.090351][ T8739] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  114.253934][ T8765] team0: No ports can be present during mode change
[  114.473871][ T8790] bridge5: entered allmulticast mode
[  114.490413][ T8791] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  114.584784][ T8798] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.646431][ T8798] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.708840][ T8798] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.765327][ T8798] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.774959][ T8818] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.779065][ T8818] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.847484][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.857555][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.863883][ T8818] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.867467][ T8818] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.887425][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.896841][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.945514][ T8818] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.950018][ T8818] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.005433][ T8818] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.009850][ T8818] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.026532][ T8830] tap0: tun_chr_ioctl cmd 2147767507
[  115.070984][ T5876] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.074690][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.088506][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.093398][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.106788][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.112217][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.125724][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.129646][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.136457][ T8817] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.141394][ T8817] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.152352][   T13] ==================================================================
[  115.155913][   T13] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  115.159162][   T13] Read of size 8 at addr ffff8880200e9cb0 by task kworker/u8:1/13
[  115.163431][   T13] 
[  115.164504][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  115.164518][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.164526][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  115.164548][   T13] Call Trace:
[  115.164556][   T13]  <TASK>
[  115.164562][   T13]  dump_stack_lvl+0x189/0x250
[  115.164577][   T13]  ? __kasan_check_byte+0x12/0x40
[  115.164593][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.164605][   T13]  ? lock_release+0x4b/0x3e0
[  115.164623][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  115.164637][   T13]  print_report+0xca/0x240
[  115.164648][   T13]  ? __mutex_lock+0x147/0x1350
[  115.164658][   T13]  kasan_report+0x118/0x150
[  115.164671][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.164685][   T13]  ? __mutex_lock+0x147/0x1350
[  115.164697][   T13]  __mutex_lock+0x147/0x1350
[  115.164708][   T13]  ? __mutex_lock+0x5bb/0x1350
[  115.164718][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  115.164734][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  115.164744][   T13]  ? __lock_acquire+0xab9/0xd20
[  115.164760][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  115.164777][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  115.164787][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  115.164796][   T13]  process_scheduled_works+0xae1/0x17b0
[  115.164812][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.164827][   T13]  worker_thread+0x8a0/0xda0
[  115.164839][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.164856][   T13]  ? __kthread_parkme+0x7b/0x200
[  115.164869][   T13]  kthread+0x711/0x8a0
[  115.164884][   T13]  ? __pfx_worker_thread+0x10/0x10
[  115.164895][   T13]  ? __pfx_kthread+0x10/0x10
[  115.164908][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.164922][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.164937][   T13]  ? __pfx_kthread+0x10/0x10
[  115.164949][   T13]  ret_from_fork+0x3fc/0x770
[  115.164961][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  115.164974][   T13]  ? __switch_to_asm+0x39/0x70
[  115.164987][   T13]  ? __switch_to_asm+0x33/0x70
[  115.165000][   T13]  ? __pfx_kthread+0x10/0x10
[  115.165013][   T13]  ret_from_fork_asm+0x1a/0x30
[  115.165059][   T13]  </TASK>
[  115.165063][   T13] 
[  115.256640][   T13] Allocated by task 8818:
[  115.258483][   T13]  kasan_save_track+0x3e/0x80
[  115.260439][   T13]  __kasan_kmalloc+0x93/0xb0
[  115.262349][   T13]  __kmalloc_noprof+0x27a/0x4f0
[  115.264426][   T13]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  115.267056][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.269202][   T13]  register_netdevice+0x1608/0x1ae0
[  115.271389][   T13]  nsim_create+0xae8/0xf10
[  115.273252][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  115.275408][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  115.277524][   T13]  nsim_dev_reload_up+0x451/0x780
[  115.279611][   T13]  devlink_reload+0x4ec/0x8d0
[  115.281572][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  115.283756][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  115.286008][   T13]  genl_rcv_msg+0x60e/0x790
[  115.287857][   T13]  netlink_rcv_skb+0x208/0x470
[  115.289847][   T13]  genl_rcv+0x28/0x40
[  115.291549][   T13]  netlink_unicast+0x82f/0x9e0
[  115.293559][   T13]  netlink_sendmsg+0x805/0xb30
[  115.295561][   T13]  __sock_sendmsg+0x21c/0x270
[  115.297477][   T13]  ____sys_sendmsg+0x505/0x830
[  115.299428][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  115.301377][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  115.303477][   T13]  do_syscall_64+0xfa/0x3b0
[  115.305332][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.307736][   T13] 
[  115.308757][   T13] Freed by task 8817:
[  115.310422][   T13]  kasan_save_track+0x3e/0x80
[  115.312337][   T13]  kasan_save_free_info+0x46/0x50
[  115.314414][   T13]  __kasan_slab_free+0x5b/0x80
[  115.316460][   T13]  kfree+0x18e/0x440
[  115.318120][   T13]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  115.320675][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.322762][   T13]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  115.325371][   T13]  unregister_netdevice_queue+0x33c/0x380
[  115.327686][   T13]  nsim_destroy+0x1dd/0x670
[  115.329536][   T13]  __nsim_dev_port_del+0x14d/0x1b0
[  115.331719][   T13]  nsim_dev_reload_destroy+0x288/0x490
[  115.333924][   T13]  nsim_dev_reload_down+0x8a/0xc0
[  115.335956][   T13]  devlink_reload+0x1b6/0x8d0
[  115.337931][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  115.340234][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  115.342635][   T13]  genl_rcv_msg+0x60e/0x790
[  115.344612][   T13]  netlink_rcv_skb+0x208/0x470
[  115.346599][   T13]  genl_rcv+0x28/0x40
[  115.348351][   T13]  netlink_unicast+0x82f/0x9e0
[  115.350451][   T13]  netlink_sendmsg+0x805/0xb30
[  115.352534][   T13]  __sock_sendmsg+0x21c/0x270
[  115.354576][   T13]  ____sys_sendmsg+0x505/0x830
[  115.356634][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  115.358665][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  115.360799][   T13]  do_syscall_64+0xfa/0x3b0
[  115.362760][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.365297][   T13] 
[  115.366346][   T13] Last potentially related work creation:
[  115.368791][   T13]  kasan_save_stack+0x3e/0x60
[  115.370848][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  115.373134][   T13]  insert_work+0x3d/0x330
[  115.375005][   T13]  __queue_work+0xbaf/0xfb0
[  115.377041][   T13]  queue_work_on+0x181/0x270
[  115.379009][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  115.381349][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  115.383573][   T13]  geneve_offload_rx_ports+0xd7/0x160
[  115.385803][   T13]  geneve_netdevice_event+0x6a/0x80
[  115.388040][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.390241][   T13]  call_netdevice_notifiers+0x88/0xc0
[  115.392495][   T13]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  115.395235][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.397389][   T13]  register_netdevice+0x1608/0x1ae0
[  115.399503][   T13]  nsim_create+0xae8/0xf10
[  115.401348][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  115.403503][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  115.405652][   T13]  nsim_dev_reload_up+0x451/0x780
[  115.407766][   T13]  devlink_reload+0x4ec/0x8d0
[  115.409799][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  115.412139][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  115.414458][   T13]  genl_rcv_msg+0x60e/0x790
[  115.416409][   T13]  netlink_rcv_skb+0x208/0x470
[  115.418428][   T13]  genl_rcv+0x28/0x40
[  115.420125][   T13]  netlink_unicast+0x82f/0x9e0
[  115.422052][   T13]  netlink_sendmsg+0x805/0xb30
[  115.424128][   T13]  __sock_sendmsg+0x21c/0x270
[  115.426140][   T13]  ____sys_sendmsg+0x505/0x830
[  115.428230][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  115.430208][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  115.432286][   T13]  do_syscall_64+0xfa/0x3b0
[  115.434166][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.436595][   T13] 
[  115.437613][   T13] Second to last potentially related work creation:
[  115.440308][   T13]  kasan_save_stack+0x3e/0x60
[  115.442319][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  115.444522][   T13]  insert_work+0x3d/0x330
[  115.446336][   T13]  __queue_work+0xcd2/0xfb0
[  115.448262][   T13]  queue_work_on+0x181/0x270
[  115.450233][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  115.452604][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  115.454907][   T13]  vxlan_offload_rx_ports+0x139/0x200
[  115.457202][   T13]  vxlan_netdevice_event+0x111/0x470
[  115.459456][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.461624][   T13]  call_netdevice_notifiers+0x88/0xc0
[  115.463870][   T13]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  115.466519][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.468705][   T13]  register_netdevice+0x1608/0x1ae0
[  115.470892][   T13]  nsim_create+0xae8/0xf10
[  115.472800][   T13]  __nsim_dev_port_add+0x6b6/0xb10
[  115.474939][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  115.477126][   T13]  nsim_dev_reload_up+0x451/0x780
[  115.479223][   T13]  devlink_reload+0x4ec/0x8d0
[  115.481161][   T13]  devlink_nl_reload_doit+0xb35/0xd50
[  115.483379][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  115.485624][   T13]  genl_rcv_msg+0x60e/0x790
[  115.487467][   T13]  netlink_rcv_skb+0x208/0x470
[  115.489474][   T13]  genl_rcv+0x28/0x40
[  115.491150][   T13]  netlink_unicast+0x82f/0x9e0
[  115.493134][   T13]  netlink_sendmsg+0x805/0xb30
[  115.495203][   T13]  __sock_sendmsg+0x21c/0x270
[  115.497243][   T13]  ____sys_sendmsg+0x505/0x830
[  115.499324][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  115.501388][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  115.503539][   T13]  do_syscall_64+0xfa/0x3b0
[  115.505468][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.507928][   T13] 
[  115.508940][   T13] The buggy address belongs to the object at ffff8880200e9c00
[  115.508940][   T13]  which belongs to the cache kmalloc-256 of size 256
[  115.514817][   T13] The buggy address is located 176 bytes inside of
[  115.514817][   T13]  freed 256-byte region [ffff8880200e9c00, ffff8880200e9d00)
[  115.520604][   T13] 
[  115.521669][   T13] The buggy address belongs to the physical page:
[  115.524425][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x200e8
[  115.527972][   T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  115.531575][   T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  115.534770][   T13] page_type: f5(slab)
[  115.536513][   T13] raw: 00fff00000000040 ffff88801a441b40 ffffea0000909980 dead000000000004
[  115.540204][   T13] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  115.543902][   T13] head: 00fff00000000040 ffff88801a441b40 ffffea0000909980 dead000000000004
[  115.547588][   T13] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  115.551165][   T13] head: 00fff00000000001 ffffea0000803a01 00000000ffffffff 00000000ffffffff
[  115.554859][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  115.558565][   T13] page dumped because: kasan: bad access detected
[  115.561340][   T13] page_owner tracks the page as allocated
[  115.563659][   T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5850, tgid 5850 (syz-executor), ts 55431726414, free_ts 55218252971
[  115.572244][   T13]  post_alloc_hook+0x240/0x2a0
[  115.574222][   T13]  get_page_from_freelist+0x21e4/0x22c0
[  115.576485][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  115.579045][   T13]  alloc_pages_mpol+0x232/0x4a0
[  115.581188][   T13]  allocate_slab+0x8a/0x370
[  115.583053][   T13]  ___slab_alloc+0xbeb/0x1410
[  115.584981][   T13]  __kmalloc_cache_noprof+0x296/0x3d0
[  115.587328][   T13]  ____ip_mc_inc_group+0x528/0xde0
[  115.589525][   T13]  ip_mc_up+0x125/0x300
[  115.591352][   T13]  inetdev_event+0xfb3/0x15b0
[  115.593412][   T13]  notifier_call_chain+0x1b6/0x3e0
[  115.595530][   T13]  __dev_notify_flags+0x18d/0x2e0
[  115.597621][   T13]  netif_change_flags+0xe8/0x1a0
[  115.599621][   T13]  do_setlink+0xc55/0x41c0
[  115.601464][   T13]  rtnl_newlink+0x160b/0x1c70
[  115.603523][   T13]  rtnetlink_rcv_msg+0x7cf/0xb70
[  115.605676][   T13] page last free pid 15 tgid 15 stack trace:
[  115.608263][   T13]  __free_frozen_pages+0xbc4/0xd30
[  115.610468][   T13]  rcu_core+0xcab/0x1770
[  115.612350][   T13]  handle_softirqs+0x286/0x870
[  115.614456][   T13]  run_ksoftirqd+0x9b/0x100
[  115.616453][   T13]  smpboot_thread_fn+0x542/0xa60
[  115.618603][   T13]  kthread+0x711/0x8a0
[  115.620394][   T13]  ret_from_fork+0x3fc/0x770
[  115.622392][   T13]  ret_from_fork_asm+0x1a/0x30
[  115.624410][   T13] 
[  115.625444][   T13] Memory state around the buggy address:
[  115.627724][   T13]  ffff8880200e9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  115.631047][   T13]  ffff8880200e9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  115.634397][   T13] >ffff8880200e9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  115.637615][   T13]                                      ^
[  115.639555][   T13]  ffff8880200e9d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  115.642207][   T13]  ffff8880200e9d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  115.644851][   T13] ==================================================================
[  115.653498][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  115.656330][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  115.659967][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.664035][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  115.667079][   T13] Call Trace:
[  115.668518][   T13]  <TASK>
[  115.669756][   T13]  dump_stack_lvl+0x99/0x250
[  115.671704][   T13]  ? __asan_memcpy+0x40/0x70
[  115.673678][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.675834][   T13]  ? __pfx__printk+0x10/0x10
[  115.677760][   T13]  vpanic+0x281/0x750
[  115.679429][   T13]  ? preempt_schedule+0xae/0xc0
[  115.681124][   T13]  ? __pfx_vpanic+0x10/0x10
[  115.682575][   T13]  ? preempt_schedule_common+0x83/0xd0
[  115.684321][   T13]  ? preempt_schedule+0xae/0xc0
[  115.686185][   T13]  ? __pfx_preempt_schedule+0x10/0x10
[  115.688423][   T13]  panic+0xb9/0xc0
[  115.690003][   T13]  ? __pfx_panic+0x10/0x10
[  115.691894][   T13]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  115.694378][   T13]  ? __mutex_lock+0x147/0x1350
[  115.696410][   T13]  check_panic_on_warn+0x89/0xb0
[  115.698437][   T13]  ? __mutex_lock+0x147/0x1350
[  115.700175][   T13]  end_report+0x78/0x160
[  115.701798][   T13]  kasan_report+0x129/0x150
[  115.703588][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.705692][   T13]  ? __mutex_lock+0x147/0x1350
[  115.707618][   T13]  __mutex_lock+0x147/0x1350
[  115.709556][   T13]  ? __mutex_lock+0x5bb/0x1350
[  115.711577][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  115.714108][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  115.716229][   T13]  ? __lock_acquire+0xab9/0xd20
[  115.718309][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  115.720877][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  115.723205][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  115.725041][   T13]  process_scheduled_works+0xae1/0x17b0
[  115.727079][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.729538][   T13]  worker_thread+0x8a0/0xda0
[  115.731456][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.734077][   T13]  ? __kthread_parkme+0x7b/0x200
[  115.736047][   T13]  kthread+0x711/0x8a0
[  115.737783][   T13]  ? __pfx_worker_thread+0x10/0x10
[  115.739871][   T13]  ? __pfx_kthread+0x10/0x10
[  115.741640][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.743501][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.745471][   T13]  ? __pfx_kthread+0x10/0x10
[  115.747451][   T13]  ret_from_fork+0x3fc/0x770
[  115.749419][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  115.751561][   T13]  ? __switch_to_asm+0x39/0x70
[  115.753506][   T13]  ? __switch_to_asm+0x33/0x70
[  115.755271][   T13]  ? __pfx_kthread+0x10/0x10
[  115.757179][   T13]  ret_from_fork_asm+0x1a/0x30
[  115.759156][   T13]  </TASK>
[  115.761174][   T13] Kernel Offset: disabled
[  115.763055][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:55:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107130
R8 =ffff8881065d0237 R9 =1ffff11020cba046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8ec R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd39574c40 CR3=000000002e5d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fbd3a2fd100 00007fbd39797460 XMM05=00007fbd39797478 00007fbd397974c0
XMM06=00007fbd397974b8 00007fbd397974b0 XMM07=00007fbd397974a8 00007fbd397974a0
XMM08=0000000000000000 00007fbd39612ee7 XMM09=0000000000000000 00007fbd39612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44cfb RBX=1ffff11009608341 RCX=ffff888115719cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004c0f7e0 RSP=ffffc90004c0f660
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44ce3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2aaac9 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f96e8d97498 00007f96e8d97470 XMM03=00007f96e8d974a8 00007f96e8d974a0
XMM04=00007f96e98fd100 00007f96e8d97460 XMM05=00007f96e8d97478 00007f96e8d974c0
XMM06=00007f96e8d974b8 00007f96e8d974b0 XMM07=00007f96e8d974a8 00007f96e8d974a0
XMM08=0000000000000000 00007f96e8c12ee7 XMM09=0000000000000000 00007f96e8c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
