last executing test programs:

1.260593358s ago: executing program 1 (id=652):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r3=>0x0})
r4 = socket(0x80000000000000a, 0x2, 0x0)
connect$netrom(r4, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x310, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004897}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async)
socket(0x80000000000000a, 0x2, 0x0) (async)
connect$netrom(r4, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) (async)
sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x310, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004897}, 0x4) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

1.259628183s ago: executing program 1 (id=653):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x48)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r4, 0x89e3)
accept4$netrom(r0, &(0x7f0000000200)={{0x3, @netrom}, [@rose, @rose, @null, @remote, @rose, @netrom, @remote, @netrom]}, 0x0, 0x80000)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x0, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x20, @none, 0x41}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7800008f1135305b1b9d49ee67eb764a2a75ac00ad9d51b4d3f05179796b0ea4933e3abc3f8653a81c92c831062ad62a129002c3b3199125e2370908a305358b8ac33ffc75629725ebd3cb5015b0170eccdd1f25ea5ffd93dcb973bf108af60236126185e9b8ad9519e71bafacfd48aac8be20c42ff8f973ae7b631047010322758961b63d352c4bfe73279e58393888e69db52c1db16ef835ba59aa54055e16ef02603f0402dbe6a9c8572d543d082901ee28bbee64", @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10)
sendmmsg(r9, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$sock_ifreq(r10, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_mtu=0xe8})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)

990.50879ms ago: executing program 2 (id=655):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0})
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4, @vifc_lcl_ifindex=r2, @broadcast}, 0x10)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e98b1eb000000000000000"], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x3, [@datasec={0xc, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x2, 0x40}], 'P'}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x12, 0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum64={0xc, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x8, 0x2, 0x7ff}, {0xa, 0x800, 0x140c}, {0x1, 0x8, 0x3}]}, @enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x0, 0x7ffd}, {0xa, 0x68cc}, {0xd, 0x8}, {0x10, 0xfe8e}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0xa2}]}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/89, 0xcb, 0x59, 0x1, 0x4671}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x9828fc74b822edaf}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

879.890412ms ago: executing program 2 (id=656):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)=0x2)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x80087601, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xffef}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r6, 0x22e, 0x70bd27, 0x25dfdc01, {}, [{{@pci, {0x1, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1)

878.25343ms ago: executing program 2 (id=657):
socket(0x2a, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000400), &(0x7f0000000c40), 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xff34)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtclass={0x48, 0x28, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {0x2, 0xe}, {0x9, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x2}, {0x0, 0xffe0}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

769.870684ms ago: executing program 2 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb88}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r5)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
getsockname$packet(r0, &(0x7f0000000a40)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000ac0)={0x4c, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x6, 0xb8, 0x50, 0x9, {0x4e20, 0x4e23, [0x8, 0x1, 0x81, 0x800], [0xfffffff7, 0x1000, 0x47, 0x80000001], r12, [0x6, 0x96]}, 0x7, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000408000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)

629.310356ms ago: executing program 2 (id=661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0)

569.892387ms ago: executing program 0 (id=662):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580))
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]})
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]})
close(0x3)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

568.124545ms ago: executing program 2 (id=663):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
getsockname$packet(r0, &(0x7f0000000a40)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000ac0)={0x4c, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x6, 0xb8, 0x50, 0x9, {0x4e20, 0x4e23, [0x8, 0x1, 0x81, 0x800], [0xfffffff7, 0x1000, 0x47, 0x80000001], r1, [0x6, 0x96]}, 0x7, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000000ac0)={0x4c, 0x12, 0x100, 0x70bd28, 0x25dfdbfc, {0x6, 0xb8, 0x50, 0x9, {0x4e20, 0x4e23, [0x8, 0x1, 0x81, 0x800], [0xfffffff7, 0x1000, 0x47, 0x80000001], r1, [0x6, 0x96]}, 0x7, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000408000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x1000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x64, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0xe, 0x2, 0x200}, {0x804, 0x7, 0x3, 0x3}]}}}]}}]}, 0x64}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)

480.506357ms ago: executing program 0 (id=664):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0xe, 0xfff1}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x9}}]}, 0x2c}}, 0x4000000)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x7, 0x2}}}}]}, 0x40}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0xa8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000001090001007379b2a9d723c95e5ddf0000030a01010000000000000000010000000900030073797a32000000000900010073797a310000000028000000000a0500000000000000000000080003000000be0000011400000011000100"/141], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)
poll(&(0x7f0000000080)=[{r4, 0xc0a9}], 0x1, 0x3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r7, 0x0)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf253a00000008000300", @ANYRES32=r10, @ANYBLOB="8e005b0062ad58c481780301b9e33515a531b05ecdac0efb1f69bba9a0a41ffe2523feccda89945d9a3f3956c05bb2d2707e37b8e56051f0442ae21a798b3f58f01144d8ea592636d6c52cca5e199b0b897a099a3b8fe563f3fe31c58feb230fbb4d38f9f609161c3a61e2980446354c64e4c89990c826bae92a8122d188155b710d4fe6065496c5d7edfb5ef1d2000004005b00"], 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ffff00fcdbdf257700003008000300", @ANYRES32=r10, @ANYBLOB="0c00990001000000590000000800ef00010000000800ef00010000000500ee00260000000800ef00000000000500ee0004000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4001)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xfff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x4, 0x4}, {}, {0x1, 0xf}}}, 0x24}}, 0x20040054)

399.296568ms ago: executing program 0 (id=665):
r0 = socket$kcm(0x21, 0x2, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x1}, @sadb_x_sec_ctx={0x1f, 0x18, 0x7, 0x7, 0xef, "d56015c6be61ccd173eb7b2a75efe19f151d46e9e97e99bc59b6ebbbde73cfcfb1f7f91006a83981d5fa24aa0547413cb6f15b90496a3561ed8d0af310ec6d1d8de76d846376fe01218baafd50051704d1510836b2019fc43a60de6a8c11902a2384de46092d21a2936bad12f5f0ec2620688c0a3910f19eac0f2770170ebd62ef86ea4ea593e7b985fd06125ad9b1e8a95c33e37a7badd2b346fe1fc86ef14a4c62abcec76267539da5fbfbd66060f1c1d9bc263276cf65424c8dd5531753ea2f44104928190894d96d3960ca293a5c3f20cce854d42d9f4e202b36eecef0eb8131e87dd0e0784f962625b6c80b85"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_x_policy={0x8, 0x12, 0x2, 0xd145bfd553fee0ef, 0x0, 0x6e6bb8, 0x9, {0x6, 0x32, 0xcb, 0x0, 0x0, 0x1981000, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback}}]}, 0x160}, 0x1, 0x7}, 0x0) (async, rerun: 32)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x3, 0xa333, 0x2]}, &(0x7f0000000080)=0x44)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000", @ANYRES32=0x0, @ANYBLOB="e000000200000000000000001800000000000000100100000c0000004404000100000000"], 0x38}, 0x0) (async)
r3 = socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x24004000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64)
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xb7, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8}}, {0x4}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pselect6(0x40, &(0x7f00000000c0)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) (async, rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (rerun: 32)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000060005000000000004000600"], 0x48}}, 0x0)

398.361169ms ago: executing program 1 (id=666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000000002de0e116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="011802000b110000280012800b000434da6c6b65011a65727370616e00001800028004001200050000e0000000000500160002000000"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084)
socket$alg(0x26, 0x5, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c00128009000100766c616e000000000c0002aaaaaa00000a00010007"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r9, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r12, {0x9}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x9}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x7}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x51}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

210.536954ms ago: executing program 0 (id=667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0xa43, 0x4)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800006, 0x100010, r6, 0x94949000)
ioctl(r6, 0x5, &(0x7f0000000040)="4553c525a929fa4937d0d3eca7254f902a958ee808be079e7fdf35c357eac0d4b0759febd5a3f60b57d4712dd521e140e06d77b8c7a6419908b20d8918d0b5f743933b6b6a7dcb2d0eb57e6324dc7f483e8510b4be4be534c3ee47a97ae9de4daf69da31c5c3d0ea0e7aad8d590b66e39dd50aaedf2486fdc2a5d047288d386afde45ab875d2aa0fbba10332d7f46d09f83900aca7656f40f25c65448f5e1bcd590000914f652802ee5c197384468479")
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0xda}]}}]}, 0x48}}, 0x0)

209.509937ms ago: executing program 0 (id=668):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x6, 0xf7, &(0x7f0000000040)=""/247}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000020850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000300))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r9, r7, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c)
sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001d00000429bd7000fddbdf250a000000", @ANYRES32=r7, @ANYBLOB="08003400080007000000120024000e8004000200050001000700000005000100040000000400020005000100e9000000080009000600000014000e80050001007f00e882050001000900000037faa8483fc841d04fe58bc4709a1fa73fbc978d33a8ae6226d9d4270cb9648edcdb84639c2e45c20b59e771375ed02bb03acefdc7037450f561541c0724f643287b"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r10 = socket(0x2, 0x3, 0xff)
setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000080)=0x4, 0x4)
sendmmsg$inet(r10, &(0x7f00000049c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000000)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x400, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}}, 0x804)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r12=>0x0})
r13 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)

208.580993ms ago: executing program 1 (id=669):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x9, [@fwd={0xc}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x3, [{0x4, 0x7, 0x80000001}, {0xc, 0x3, 0x94b}, {0x3, 0x1, 0x4}, {0x2, 0xc6e, 0x40004}, {0xc, 0x1, 0x81}, {0x3, 0x1ff, 0x1}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x6}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @datasec={0xc, 0x4, 0x0, 0xf, 0x2, [{0x2, 0x4, 0x8}, {0x4, 0x5, 0x1000}, {0x1, 0x5, 0x1}, {0x5, 0x10000, 0xc}], "4da1"}]}, {0x0, [0x2e, 0x0, 0x0, 0x30, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000400)=""/187, 0xdd, 0xbb, 0x1, 0x0, 0x10000}, 0x28)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0xc, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x1)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000700)={@mcast1, 0x52, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1a, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0xb}, [@exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xb, 0x1, 0x8, 0x6, 0xb459a960d117d567}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000200)=""/89, 0x41000, 0x64, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000500)={0xfffffff7, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x8, 0x3, 0x101}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x0, 0x5, 0x5, 0x4}, {0x0, 0x4, 0xe}, {0x2, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x5, 0x9}, {0x4, 0x3, 0xf, 0x7}], 0x10, 0xfffffffd}, 0x94)

59.565667ms ago: executing program 1 (id=670):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x700}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}]}}]}, 0x48}}, 0x0)

58.094282ms ago: executing program 1 (id=671):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000e80))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004", @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYBLOB="540a654ce80d2ba51740b00c19a0b915ace6fb12696f49de491c8276ece107e4f26470905aeb026c61ffa47d06391e9c98075ffb"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000fcffffff00"/20, @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)

0s ago: executing program 0 (id=672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}]}]}, 0xcc}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r5, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r1, 0x7d87a000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x454eb010bfaf95d8, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8)
sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0x400c001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c00000000001e4d21dbc90ff5319500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x2}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c9017c74b4bfdbab20000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x19, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000013000000611071000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24801' (ED25519) to the list of known hosts.
syzkaller login: [   56.420874][ T5797] cgroup: Unknown subsys name 'net'
[   56.588566][ T5797] cgroup: Unknown subsys name 'cpuset'
[   56.595380][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.707749][ T5797] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.621108][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.627306][ T5200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.630654][ T5200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.635234][ T5200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.638575][ T5200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.715308][ T5200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.718807][ T5200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.721971][ T5200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.735579][ T5200] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.738527][ T5200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.782885][   T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.785944][   T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.788920][   T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.791860][   T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.795798][   T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.888024][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   64.020326][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.023661][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.027220][ T5811] bridge_slave_0: entered allmulticast mode
[   64.030938][ T5811] bridge_slave_0: entered promiscuous mode
[   64.039042][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.041712][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.045179][ T5811] bridge_slave_1: entered allmulticast mode
[   64.048765][ T5811] bridge_slave_1: entered promiscuous mode
[   64.105128][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.120574][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.175385][ T5811] team0: Port device team_slave_0 added
[   64.183685][ T5811] team0: Port device team_slave_1 added
[   64.244599][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.246652][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.253600][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.258148][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   64.281088][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.283151][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.291294][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.335421][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   64.387308][ T5811] hsr_slave_0: entered promiscuous mode
[   64.389606][ T5811] hsr_slave_1: entered promiscuous mode
[   64.430888][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.433119][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.436558][ T5816] bridge_slave_0: entered allmulticast mode
[   64.439247][ T5816] bridge_slave_0: entered promiscuous mode
[   64.452037][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.454875][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.457082][ T5816] bridge_slave_1: entered allmulticast mode
[   64.459693][ T5816] bridge_slave_1: entered promiscuous mode
[   64.518114][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.537974][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.540114][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.542284][ T5819] bridge_slave_0: entered allmulticast mode
[   64.546037][ T5819] bridge_slave_0: entered promiscuous mode
[   64.556298][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.567783][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.570708][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.573504][ T5819] bridge_slave_1: entered allmulticast mode
[   64.577849][ T5819] bridge_slave_1: entered promiscuous mode
[   64.626431][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.644759][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.648450][ T5816] team0: Port device team_slave_0 added
[   64.656481][ T5816] team0: Port device team_slave_1 added
[   64.692283][ T5819] team0: Port device team_slave_0 added
[   64.704981][ T5819] team0: Port device team_slave_1 added
[   64.725528][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.727978][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.738059][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.750879][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.753455][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.762866][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.767109][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.769670][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.779723][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.792581][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.794852][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.802392][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.873610][ T5816] hsr_slave_0: entered promiscuous mode
[   64.876667][ T5816] hsr_slave_1: entered promiscuous mode
[   64.879198][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[   64.880982][ T5816] Cannot create hsr debugfs directory
[   64.888134][ T5819] hsr_slave_0: entered promiscuous mode
[   64.890555][ T5819] hsr_slave_1: entered promiscuous mode
[   64.892671][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   64.894600][ T5819] Cannot create hsr debugfs directory
[   64.920143][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.955275][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.959899][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.975735][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.175032][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.184988][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.205747][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.211986][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.261545][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.276027][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.280054][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.290248][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.299667][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.358127][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   65.379150][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.381970][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.405715][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.408488][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.492810][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.542748][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   65.551276][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.566706][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.569692][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.590508][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.593218][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.618954][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   65.652549][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.655149][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.668234][ T5200] Bluetooth: hci0: command tx timeout
[   65.669166][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.673022][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.712219][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.776927][ T5811] veth0_vlan: entered promiscuous mode
[   65.783985][ T5811] veth1_vlan: entered promiscuous mode
[   65.814327][ T5811] veth0_macvtap: entered promiscuous mode
[   65.819356][ T5811] veth1_macvtap: entered promiscuous mode
[   65.827471][ T5200] Bluetooth: hci2: command tx timeout
[   65.829718][ T5200] Bluetooth: hci1: command tx timeout
[   65.849980][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.858666][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.868501][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.875431][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.896145][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.913976][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.966583][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.970094][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.979407][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.991083][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.021594][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.025852][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.071762][ T5816] veth0_vlan: entered promiscuous mode
[   66.092571][ T5816] veth1_vlan: entered promiscuous mode
[   66.109588][ T5819] veth0_vlan: entered promiscuous mode
[   66.116225][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.128431][ T5819] veth1_vlan: entered promiscuous mode
[   66.141493][ T5816] veth0_macvtap: entered promiscuous mode
[   66.157105][ T5816] veth1_macvtap: entered promiscuous mode
[   66.189183][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.189599][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.197166][ T5819] veth0_macvtap: entered promiscuous mode
[   66.210478][ T5819] veth1_macvtap: entered promiscuous mode
[   66.215748][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.230149][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.261281][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.264420][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.277026][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.278806][ T5876] Bluetooth: MGMT ver 1.23
[   66.283512][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.296100][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.332043][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.342366][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.368326][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.395119][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.419080][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.421790][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.465583][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.468396][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.498353][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.500546][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.541690][  T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.548669][  T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.588554][ T5887] sctp: [Deprecated]: syz.2.3 (pid 5887) Use of int in maxseg socket option.
[   66.588554][ T5887] Use struct sctp_assoc_value instead
[   66.648646][ T5890] raw_sendmsg: syz.1.5 forgot to set AF_INET. Fix it!
[   66.893403][ T5904] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6'.
[   66.942647][ T5907] netem: change failed
[   67.003727][ T5915] netlink: 'syz.2.8': attribute type 3 has an invalid length.
[   67.065461][ T5915] syz_tun: entered allmulticast mode
[   67.085983][ T5915] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.097841][ T5915] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   67.148038][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.150736][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.153320][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.174520][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.178025][ T5922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.180637][ T5922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'.
[   67.187384][ T5921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.220285][ T5914] syz_tun: left allmulticast mode
[   67.220329][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.292479][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   67.319483][ T5936] tipc: Started in network mode
[   67.321252][ T5936] tipc: Node identity 1ac4191484f1, cluster identity 4711
[   67.325350][ T5936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.331591][ T5936] syzkaller0: entered promiscuous mode
[   67.333253][ T5936] syzkaller0: entered allmulticast mode
[   67.358395][ T5936] tipc: Resetting bearer <eth:syzkaller0>
[   67.372913][ T5935] tipc: Resetting bearer <eth:syzkaller0>
[   67.397100][ T5935] tipc: Disabling bearer <eth:syzkaller0>
[   67.408340][ T5941] syzkaller0: entered promiscuous mode
[   67.410146][ T5941] syzkaller0: entered allmulticast mode
[   67.412449][ T5942] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   67.556983][ T5950] netlink: 'syz.2.18': attribute type 16 has an invalid length.
[   67.559120][ T5950] netlink: 'syz.2.18': attribute type 17 has an invalid length.
[   67.598355][ T5956] Zero length message leads to an empty skb
[   67.620693][ T5955] can: request_module (can-proto-0) failed.
[   67.636335][ T5956] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.20'.
[   67.647054][ T5957] bond0: Error: Cannot enslave bond to itself.
[   67.748479][ T5200] Bluetooth: hci0: command tx timeout
[   67.843128][ T5976] netlink: 'syz.2.25': attribute type 1 has an invalid length.
[   67.847764][ T5976] netlink: 'syz.2.25': attribute type 2 has an invalid length.
[   67.904411][ T5200] Bluetooth: hci1: command tx timeout
[   67.914433][ T5200] Bluetooth: hci2: command tx timeout
[   68.912568][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.919973][ T5982] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   69.139135][ T5991] netlink: 'syz.1.30': attribute type 178 has an invalid length.
[   69.359695][ T6001] gretap1: entered promiscuous mode
[   69.361484][ T6001] gretap1: entered allmulticast mode
[   69.363131][ T6003] netlink: 'syz.0.33': attribute type 1 has an invalid length.
[   69.462043][ T6007] warning: `syz.1.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.475474][ T6007] netlink: 'syz.1.34': attribute type 10 has an invalid length.
[   69.483696][ T6007] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   69.530533][ T6011] lo speed is unknown, defaulting to 1000
[   69.532292][ T6011] lo speed is unknown, defaulting to 1000
[   69.535937][ T6011] lo speed is unknown, defaulting to 1000
[   69.541992][ T6009] tipc: Started in network mode
[   69.543802][ T6009] tipc: Node identity 0e46c5021c97, cluster identity 4711
[   69.548044][ T6009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.551674][ T6009] syzkaller0: entered promiscuous mode
[   69.553704][ T6009] syzkaller0: entered allmulticast mode
[   69.556283][ T6011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.576853][ T6009] tipc: Resetting bearer <eth:syzkaller0>
[   69.583095][ T6008] tipc: Resetting bearer <eth:syzkaller0>
[   69.607052][ T6008] tipc: Disabling bearer <eth:syzkaller0>
[   69.633842][ T6011] lo speed is unknown, defaulting to 1000
[   69.640022][ T6011] lo speed is unknown, defaulting to 1000
[   69.656265][ T6012] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   69.726814][ T6011] lo speed is unknown, defaulting to 1000
[   69.741754][ T6019] syzkaller0: entered promiscuous mode
[   69.743377][ T6019] syzkaller0: entered allmulticast mode
[   69.775762][ T6017] pimreg: entered allmulticast mode
[   69.777645][ T6017] pimreg: left allmulticast mode
[   69.824676][ T5200] Bluetooth: hci0: command tx timeout
[   69.835572][ T6027] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   69.985249][ T5200] Bluetooth: hci2: command tx timeout
[   69.985283][   T57] Bluetooth: hci1: command tx timeout
[   70.120673][ T6043] syzkaller0: entered promiscuous mode
[   70.122917][ T6043] syzkaller0: entered allmulticast mode
[   70.142773][ T6047] IPVS: Scheduler module ip_vs_sip not found
[   70.929090][ T6055] pim6reg: entered allmulticast mode
[   70.939267][ T6055] pim6reg: left allmulticast mode
[   70.998978][ T6059] netlink: 'syz.0.46': attribute type 1 has an invalid length.
[   71.084599][ T6061] erspan0: entered promiscuous mode
[   71.094328][ T6061] erspan0: entered allmulticast mode
[   71.117543][ T6066] vlan2: entered promiscuous mode
[   71.134858][ T6066] bond0: entered promiscuous mode
[   71.146063][ T6066] bond_slave_0: entered promiscuous mode
[   71.148580][ T6066] bond_slave_1: entered promiscuous mode
[   71.294989][ T6087] __nla_validate_parse: 23 callbacks suppressed
[   71.294999][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[   71.448134][ T6090] netlink: 144 bytes leftover after parsing attributes in process `syz.0.56'.
[   71.473167][ T6089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.56'.
[   71.506730][ T6092] netlink: 'syz.1.57': attribute type 11 has an invalid length.
[   71.509475][ T6092] netlink: 224 bytes leftover after parsing attributes in process `syz.1.57'.
[   71.583339][ T6096] lo speed is unknown, defaulting to 1000
[   71.630662][ T6101] syzkaller0: entered promiscuous mode
[   71.632561][ T6101] syzkaller0: entered allmulticast mode
[   71.636523][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.58'.
[   71.646341][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   71.650999][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'.
[   71.667374][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.671197][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.904183][   T57] Bluetooth: hci0: command tx timeout
[   71.933987][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'.
[   72.064246][   T57] Bluetooth: hci1: command tx timeout
[   72.064468][ T5200] Bluetooth: hci2: command tx timeout
[   72.123133][ T6130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.71'.
[   72.137149][ T6130] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET)
[   72.253205][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   72.370745][ T6154] lo speed is unknown, defaulting to 1000
[   72.414714][ T6157] validate_nla: 2 callbacks suppressed
[   72.414735][ T6157] netlink: 'syz.2.79': attribute type 9 has an invalid length.
[   72.507483][ T6158] lo speed is unknown, defaulting to 1000
[   72.908239][ T6191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.910521][ T6191] sit0: entered promiscuous mode
[   72.912067][ T6191] sit0: entered allmulticast mode
[   72.957316][ T6191] tipc: Resetting bearer <eth:syzkaller0>
[   73.376639][ T6197] netlink: 'syz.2.89': attribute type 20 has an invalid length.
[   73.419452][ T6201] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   73.422297][ T6201] team0: Device ipvlan2 is already an upper device of the team interface
[   73.444342][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.448566][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.455105][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.458307][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.467999][ T6204] netlink: 'syz.2.90': attribute type 66 has an invalid length.
[   73.566340][ T6208] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   73.667731][ T6217] ip6gre1: entered promiscuous mode
[   73.669547][ T6217] ip6gre1: entered allmulticast mode
[   73.673110][ T6217] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.673513][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.679933][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.686473][ T6217] netlink: 'syz.1.95': attribute type 20 has an invalid length.
[   73.694343][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   73.696549][ T6217] netlink: 'syz.1.95': attribute type 20 has an invalid length.
[   73.697089][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.703592][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.707880][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.710865][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.774944][ T6191] tipc: Disabling bearer <eth:syzkaller0>
[   73.926552][ T6236] netlink: 'syz.0.101': attribute type 10 has an invalid length.
[   73.936331][ T6236] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   73.939374][ T6236] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.974448][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.025551][ T6247] vti0: entered promiscuous mode
[   74.027740][ T6247] vti0: entered allmulticast mode
[   74.038724][ T6247] geneve2: entered promiscuous mode
[   74.086568][ T6253] @0: renamed from bond_slave_1 (while UP)
[   74.372410][ T6275] tipc: Started in network mode
[   74.374212][ T6275] tipc: Node identity 7215ec7c9a1, cluster identity 4711
[   74.376486][ T6275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.379098][ T6275] syzkaller0: entered promiscuous mode
[   74.380704][ T6275] syzkaller0: entered allmulticast mode
[   74.384170][ T5200] Bluetooth: hci0: command tx timeout
[   74.463407][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   74.465726][  T974] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.472753][ T6274] tipc: Disabling bearer <eth:syzkaller0>
[   74.548322][ T6281] bridge_slave_0: left allmulticast mode
[   74.550261][ T6281] bridge_slave_0: left promiscuous mode
[   74.552834][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.567820][ T6281] bridge_slave_1: left allmulticast mode
[   74.569767][ T6281] bridge_slave_1: left promiscuous mode
[   74.571782][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.578831][ T6281] bond0: (slave bond_slave_0): Releasing backup interface
[   74.585430][ T6281] bond0: (slave c@0): Releasing backup interface
[   74.597860][ T6281] team0: Port device team_slave_0 removed
[   74.602827][ T6281] team0: Port device team_slave_1 removed
[   74.606227][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.608652][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.612325][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.616508][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.620143][ T6281] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   74.627270][    T9] lo speed is unknown, defaulting to 1000
[   74.643532][ T6281] netlink: 'syz.1.114': attribute type 10 has an invalid length.
[   74.747796][   T10] cfg80211: failed to load regulatory.db
[   74.809457][ T6303] syzkaller0: entered promiscuous mode
[   74.811058][ T6303] syzkaller0: entered allmulticast mode
[   74.995566][ T6313] xfrm1: entered promiscuous mode
[   75.003231][ T6313] xfrm1: entered allmulticast mode
[   75.029416][ T6314] syzkaller0: entered promiscuous mode
[   75.031099][ T6314] syzkaller0: entered allmulticast mode
[   76.763240][ T6340] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   76.780206][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.791249][ T6340] bond1: (slave gretap1): making interface the new active one
[   76.797022][ T6340] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.844954][ T6340] syz.2.130 (6340) used greatest stack depth: 18832 bytes left
[   76.852345][ T6348] __nla_validate_parse: 30 callbacks suppressed
[   76.852355][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   76.965837][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.136'.
[   76.972031][ T6355] lo speed is unknown, defaulting to 1000
[   77.013893][ T6358] netlink: 80 bytes leftover after parsing attributes in process `syz.1.134'.
[   77.052548][ T6359] lo speed is unknown, defaulting to 1000
[   77.072893][ T6362] syzkaller0: entered promiscuous mode
[   77.075533][ T6362] syzkaller0: entered allmulticast mode
[   77.664230][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   78.035150][ T6370] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.040858][ T6370] bond0: (slave rose0): Enslaving as an active interface with an up link
[   78.091994][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'.
[   78.200761][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'.
[   78.326034][ T6393] lo speed is unknown, defaulting to 1000
[   78.437911][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   78.514920][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[   78.574467][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.596470][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[   78.609821][ T6419] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   78.683602][ T6426] netlink: 'syz.2.152': attribute type 6 has an invalid length.
[   78.707622][ T6416] ip6tnl1: entered promiscuous mode
[   78.709092][ T6416] ip6tnl1: entered allmulticast mode
[   78.719931][ T6416] team0: Device ip6tnl1 is of different type
[   78.753427][ T6430] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[   78.802792][ T6430] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.936442][  T974] IPVS: starting estimator thread 0...
[   79.025215][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.035370][ T6440] IPVS: using max 62 ests per chain, 148800 per kthread
[   79.048746][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   79.218193][ T6446] lo speed is unknown, defaulting to 1000
[   79.410202][ T6441] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   79.418933][ T6455] tipc: Cannot configure node identity twice
[   79.422191][ T6455] netlink: 52 bytes leftover after parsing attributes in process `syz.1.159'.
[   79.517200][ T6461] syzkaller0: entered promiscuous mode
[   79.519295][ T6461] syzkaller0: entered allmulticast mode
[   79.695696][ T6475] tipc: Cannot configure node identity twice
[   79.802066][ T6482] vlan2: entered promiscuous mode
[   79.811079][ T6482] vlan2: entered allmulticast mode
[   79.819084][ T6482] hsr_slave_1: entered allmulticast mode
[   80.319969][ T6505] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   80.390319][ T6508] IPv6: sit1: Disabled Multicast RS
[   81.087772][ T6543] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   81.090563][ T6543] macvtap1: entered promiscuous mode
[   81.571551][ T6566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.575381][ T6565] syzkaller0: entered promiscuous mode
[   81.577588][ T6565] syzkaller0: entered allmulticast mode
[   81.588239][ T6565] tipc: Resetting bearer <eth:syzkaller0>
[   81.606099][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[   81.615397][ T6564] tipc: Disabling bearer <eth:syzkaller0>
[   81.863036][ T6573] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.866983][ T6574] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.930632][ T6580] __nla_validate_parse: 12 callbacks suppressed
[   81.930642][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'.
[   82.057111][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.192'.
[   82.063735][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'.
[   82.093687][ T6591] v: renamed from vlan0 (while UP)
[   82.156202][ T6595] syzkaller0: entered promiscuous mode
[   82.157837][ T6595] syzkaller0: entered allmulticast mode
[   82.202953][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'.
[   82.394801][ T6606] lo speed is unknown, defaulting to 1000
[   82.451664][ T6609] syzkaller0: entered promiscuous mode
[   82.453613][ T6609] syzkaller0: entered allmulticast mode
[   82.562866][ T6615] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[   82.659189][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'.
[   82.671037][ T6619] netlink: 25 bytes leftover after parsing attributes in process `syz.0.201'.
[   82.677332][ T6618] syzkaller0: entered promiscuous mode
[   82.679085][ T6618] syzkaller0: entered allmulticast mode
[   82.686703][ T6619] netlink: 'syz.0.201': attribute type 4 has an invalid length.
[   82.688935][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   82.691759][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'.
[   82.694931][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   82.796842][ T6621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.201'.
[   83.106855][ T6624] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8
[   83.110512][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.578101][ T6629] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.581757][ T6629] syzkaller0: entered promiscuous mode
[   83.583351][ T6629] syzkaller0: entered allmulticast mode
[   83.615657][ T6634] tipc: Resetting bearer <eth:syzkaller0>
[   83.626337][ T6634] tipc: Disabling bearer <eth:syzkaller0>
[   84.348466][ T6697] netlink: 'syz.2.216': attribute type 1 has an invalid length.
[   84.365815][ T6697] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.386571][ T6695] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.388804][ T6695] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.392561][ T6695] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   84.413164][ T6697] vlan2: entered allmulticast mode
[   84.417070][ T6697] team0: entered allmulticast mode
[   84.418537][ T6697] team_slave_0: entered allmulticast mode
[   84.420201][ T6697] team_slave_1: entered allmulticast mode
[   84.422463][ T6697] team_slave_0: entered promiscuous mode
[   84.424275][ T6697] team_slave_1: entered promiscuous mode
[   84.427312][ T6697] team_slave_0: left promiscuous mode
[   84.428828][ T6697] team_slave_1: left promiscuous mode
[   84.431692][ T6697] bond3: (slave vlan2): making interface the new active one
[   84.435249][ T6697] team_slave_0: entered promiscuous mode
[   84.436954][ T6697] team_slave_1: entered promiscuous mode
[   84.439013][ T6697] bond3: (slave vlan2): Enslaving as an active interface with an up link
[   84.714188][ T6704] lo speed is unknown, defaulting to 1000
[   84.754903][ T6706] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   84.981736][ T6711] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[   85.118128][ T6720] syzkaller0: entered promiscuous mode
[   85.119798][ T6720] syzkaller0: entered allmulticast mode
[   85.241178][ T6725] netlink: 'syz.2.223': attribute type 4 has an invalid length.
[   85.260287][ T6726] syzkaller0: entered promiscuous mode
[   85.261904][ T6726] syzkaller0: entered allmulticast mode
[   85.418231][ T6738] bridge_slave_0: left allmulticast mode
[   85.420307][ T6738] bridge_slave_0: left promiscuous mode
[   85.422043][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.430190][ T6738] bridge_slave_1: left allmulticast mode
[   85.437605][ T6738] bridge_slave_1: left promiscuous mode
[   85.439271][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.452534][ T6738] bond0: (slave bond_slave_0): Releasing backup interface
[   85.458054][ T6738] bond_slave_0: left promiscuous mode
[   85.469368][ T6738] bond0: (slave bond_slave_1): Releasing backup interface
[   85.497891][ T6738] bond_slave_1: left promiscuous mode
[   85.507213][ T6738] team0: Port device team_slave_0 removed
[   85.512476][ T6738] team0: Port device team_slave_1 removed
[   85.515553][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.517858][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.521738][ T6738] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.526085][ T6738] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.530533][ T6738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   85.556257][ T6738] netlink: 'syz.0.226': attribute type 10 has an invalid length.
[   85.744250][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   85.759669][ T6758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.774676][ T6759] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   85.897772][ T6764] gretap1: entered promiscuous mode
[   85.899916][ T6764] gretap1: entered allmulticast mode
[   86.180203][ T6773] lo speed is unknown, defaulting to 1000
[   86.271469][ T6774] lo speed is unknown, defaulting to 1000
[   86.834749][ T6804] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   87.117932][ T6812] __nla_validate_parse: 17 callbacks suppressed
[   87.117949][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'.
[   87.149018][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'.
[   87.209637][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[   87.391543][ T6826] netlink: 48 bytes leftover after parsing attributes in process `syz.1.245'.
[   87.556991][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[   87.561377][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[   87.629787][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'.
[   87.722390][ T6841] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.249'.
[   87.732401][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   87.736897][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'.
[   87.872529][ T6844] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   87.899482][ T6844] bond3: entered promiscuous mode
[   87.901502][ T6844] bond3: entered allmulticast mode
[   87.905082][ T6844] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.920463][ T6844] syzkaller0: entered promiscuous mode
[   87.922570][ T6844] syzkaller0: entered allmulticast mode
[   88.184975][ T6853] veth1_macvtap: left promiscuous mode
[   88.708379][ T6868] lo speed is unknown, defaulting to 1000
[   88.880987][   T24] IPVS: starting estimator thread 0...
[   88.891519][ T6869] netlink: 'syz.0.257': attribute type 17 has an invalid length.
[   88.896063][ T6868] netlink: 'syz.0.257': attribute type 17 has an invalid length.
[   88.906984][ T6868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.950722][ T6869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.995880][ T6872] IPVS: using max 62 ests per chain, 148800 per kthread
[   89.078955][ T6881] hsr_slave_0: left promiscuous mode
[   89.082127][ T6881] hsr_slave_1: left promiscuous mode
[   89.216673][ T6883] netlink: 'syz.0.261': attribute type 12 has an invalid length.
[   89.456087][ T6894] netlink: 'syz.0.263': attribute type 21 has an invalid length.
[   89.928168][ T6904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.936310][ T6904] syzkaller0: entered promiscuous mode
[   89.938027][ T6904] syzkaller0: entered allmulticast mode
[   89.980229][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[   90.010917][ T6904] tipc: Disabling bearer <eth:syzkaller0>
[   90.243310][ T6926] netlink: 'syz.1.273': attribute type 3 has an invalid length.
[   90.247732][ T6924] netlink: 'syz.1.273': attribute type 3 has an invalid length.
[   90.324972][ T6924] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   90.353626][ T6924] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.380073][ T6924] bond4: (slave geneve3): making interface the new active one
[   90.383320][ T6924] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   90.440842][ T6945] Cannot find set identified by id 0 to match
[   90.443925][ T6945] x_tables: duplicate underflow at hook 1
[   90.449841][ T6947] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   90.506583][ T5277] hid-generic 0005:15C2:5508.0001: item fetching failed at offset 0/1
[   90.509310][ T5277] hid-generic 0005:15C2:5508.0001: probe with driver hid-generic failed with error -22
[   90.512381][ T6953] vti0: entered promiscuous mode
[   90.707397][ T6965] netlink: 'syz.2.281': attribute type 11 has an invalid length.
[   90.795904][ T6971] syzkaller0: entered promiscuous mode
[   90.797674][ T6971] syzkaller0: entered allmulticast mode
[   90.861411][ T6973] netlink: 'syz.2.284': attribute type 30 has an invalid length.
[   91.347852][ T6990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.350773][ T6990] syzkaller0: entered promiscuous mode
[   91.352819][ T6990] syzkaller0: entered allmulticast mode
[   91.453563][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[   91.545422][ T6999] syzkaller0: entered promiscuous mode
[   91.547015][ T6999] syzkaller0: entered allmulticast mode
[   92.147449][ T6989] tipc: Resetting bearer <eth:syzkaller0>
[   92.156115][ T6989] tipc: Disabling bearer <eth:syzkaller0>
[   92.203700][ T7009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.224440][ T7009] syzkaller0: entered promiscuous mode
[   92.226200][ T7009] syzkaller0: entered allmulticast mode
[   92.254806][ T7012] tipc: Resetting bearer <eth:syzkaller0>
[   92.278765][ T7012] tipc: Disabling bearer <eth:syzkaller0>
[   92.288870][ T7015] __nla_validate_parse: 18 callbacks suppressed
[   92.288880][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'.
[   92.301980][ T7016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.315433][ T7016] syzkaller0: entered promiscuous mode
[   92.317227][ T7016] syzkaller0: entered allmulticast mode
[   92.339964][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'.
[   92.353269][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   92.372783][ T7014] tipc: Disabling bearer <eth:syzkaller0>
[   92.400362][ T7022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.406152][ T7022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.422400][ T7025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.437802][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[   92.462077][ T7024] syzkaller0: entered promiscuous mode
[   92.465199][ T7024] syzkaller0: entered allmulticast mode
[   92.479049][ T7030] netlink: 'syz.0.299': attribute type 1 has an invalid length.
[   92.483461][ T7022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.486882][ T7022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.493718][ T7024] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.522544][ T7024] tipc: Resetting bearer <eth:syzkaller0>
[   92.532377][ T7030] gretap1: entered allmulticast mode
[   92.538943][ T7030] bond2: (slave gretap1): making interface the new active one
[   92.542499][ T7030] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   92.568022][ T7022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.571201][ T7022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.579789][ T7023] tipc: Resetting bearer <eth:syzkaller0>
[   92.588007][ T7023] tipc: Disabling bearer <eth:syzkaller0>
[   92.631228][ T7022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.634316][ T7022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.646652][ T7034] netlink: 'syz.0.300': attribute type 27 has an invalid length.
[   92.701165][ T7034] sit0: left promiscuous mode
[   92.702892][ T7034] sit0: left allmulticast mode
[   92.928943][ T7034] vlan2: left promiscuous mode
[   92.931030][ T7034] bond0: left promiscuous mode
[   92.936622][ T7034] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   92.971095][ T7034] gretap1: left allmulticast mode
[   92.995842][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.999658][ T7039] 8021q: adding VLAN 0 to HW filter on device team0
[   93.006651][ T7039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.013353][ T5878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.017961][ T5878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.022140][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   93.060253][ T5878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.066540][ T5878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.101153][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'.
[   93.128108][ T5878] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.130546][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.140707][ T7067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.306'.
[   93.148604][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.151541][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.156317][ T7067] netlink: 'syz.2.306': attribute type 9 has an invalid length.
[   93.173271][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.177719][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.193635][ T5878] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.199223][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.255303][ T7077] Cannot find set identified by id 0 to match
[   93.363469][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.443030][ T7098] syzkaller0: entered promiscuous mode
[   93.445484][ T7098] syzkaller0: entered allmulticast mode
[   93.481491][ T7093] ipt_REJECT: ECHOREPLY no longer supported.
[   93.594024][ T7105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.600044][ T7105] syzkaller0: entered promiscuous mode
[   93.601987][ T7105] syzkaller0: entered allmulticast mode
[   93.612200][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'.
[   93.638807][ T7105] tipc: Resetting bearer <eth:syzkaller0>
[   93.702108][ T7105] tipc: Resetting bearer <eth:syzkaller0>
[   93.717935][ T7105] tipc: Disabling bearer <eth:syzkaller0>
[   93.780069][ T7117] netlink: 240 bytes leftover after parsing attributes in process `syz.1.318'.
[   93.933758][ T7115] Set syz1 is full, maxelem 6117 reached
[   94.097446][ T5877] lo speed is unknown, defaulting to 1000
[   94.099258][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.101756][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.104586][ T5877] syz1: Port: 1 Link DOWN
[   94.108269][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.111516][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.114940][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.118003][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.120771][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.123536][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.155909][ T7121] syzkaller0: entered promiscuous mode
[   94.157811][ T7121] syzkaller0: entered allmulticast mode
[   94.512577][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[   94.517030][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[   94.722810][ T7128] syzkaller0: entered promiscuous mode
[   94.725540][ T7128] syzkaller0: entered allmulticast mode
[   94.731039][ T7127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.752271][ T7127] tipc: Resetting bearer <eth:syzkaller0>
[   95.612402][ T7127] tipc: Disabling bearer <eth:syzkaller0>
[   95.626047][ T7132] dummy0: entered promiscuous mode
[   95.628403][ T7132] macsec1: entered promiscuous mode
[   95.630609][ T7132] macsec1: entered allmulticast mode
[   95.632667][ T7132] dummy0: entered allmulticast mode
[   95.637780][ T7132] dummy0: left allmulticast mode
[   95.640112][ T7132] dummy0: left promiscuous mode
[   95.734620][ T7140] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   95.957709][ T7162] lo speed is unknown, defaulting to 1000
[   96.000741][ T7162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.686830][ T7165] wg0: entered promiscuous mode
[   96.688711][ T7165] wg0: entered allmulticast mode
[   96.827664][ T7170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.831102][ T7170] syzkaller0: entered promiscuous mode
[   96.833272][ T7170] syzkaller0: entered allmulticast mode
[   96.855902][ T7170] tipc: Resetting bearer <eth:syzkaller0>
[   96.861952][ T7169] tipc: Resetting bearer <eth:syzkaller0>
[   96.874486][ T7169] tipc: Disabling bearer <eth:syzkaller0>
[   97.575834][ T7187] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   97.847021][ T7193] syzkaller0: entered promiscuous mode
[   97.848626][ T7193] syzkaller0: entered allmulticast mode
[   97.851547][ T7192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.861235][ T7193] tipc: Resetting bearer <eth:syzkaller0>
[   97.865891][ T7191] tipc: Resetting bearer <eth:syzkaller0>
[   97.873205][ T7191] tipc: Disabling bearer <eth:syzkaller0>
[   97.966844][ T7201] validate_nla: 1 callbacks suppressed
[   97.966860][ T7201] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   98.007105][ T7201] bond4: entered promiscuous mode
[   98.009349][ T7201] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.091047][ T7211] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   98.095967][ T7214] __nla_validate_parse: 8 callbacks suppressed
[   98.095984][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[   98.101599][ T7214] netlink: 'syz.2.344': attribute type 20 has an invalid length.
[   98.105619][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[   98.108956][ T7214] netlink: 'syz.2.344': attribute type 20 has an invalid length.
[   98.236093][ T7225] netlink: 'syz.2.349': attribute type 7 has an invalid length.
[   98.297653][ T7228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'.
[   98.336187][ T7231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.353275][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.359357][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.362354][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.365676][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.368343][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.371082][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   98.597243][ T7244] block nbd0: not configured, cannot reconfigure
[   98.743861][ T7263] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.078659][ T7294] xfrm1: entered promiscuous mode
[   99.081953][ T7294] xfrm1: entered allmulticast mode
[   99.192136][ T7298] siw: device registration error -23
[   99.195267][ T7298] siw: device registration error -23
[   99.197565][ T7298] siw: device registration error -23
[   99.199873][ T7298] siw: device registration error -23
[   99.204734][ T7298] siw: device registration error -23
[   99.209025][ T7298] siw: device registration error -23
[   99.212319][ T7298] siw: device registration error -23
[   99.383242][ T7310] tipc: Can't bind to reserved service type 1
[   99.889523][ T7334] lo speed is unknown, defaulting to 1000
[  100.009236][ T7341] netlink: 'syz.1.372': attribute type 39 has an invalid length.
[  100.042419][ T7339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  100.445611][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.449149][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.454503][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.463469][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.491425][ T7385] siw: device registration error -23
[  100.493266][ T7385] siw: device registration error -23
[  100.583213][ T7398] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.790015][ T7417] netlink: 'syz.2.387': attribute type 30 has an invalid length.
[  100.877038][ T7422] lo speed is unknown, defaulting to 1000
[  101.068123][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.070953][ T7430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.085926][ T7431] syzkaller0: entered promiscuous mode
[  101.089117][ T7431] syzkaller0: entered allmulticast mode
[  101.096571][ T7430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  101.106673][ T7429] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  101.112810][ T7429] tipc: Resetting bearer <eth:syzkaller0>
[  101.120785][ T7428] tipc: Resetting bearer <eth:syzkaller0>
[  101.132351][ T7428] tipc: Disabling bearer <eth:syzkaller0>
[  101.477512][ T7449] netlink: 'syz.0.395': attribute type 16 has an invalid length.
[  101.480517][ T7449] netlink: 'syz.0.395': attribute type 17 has an invalid length.
[  101.583687][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.588715][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.605611][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.619168][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.752318][ T7462] lo speed is unknown, defaulting to 1000
[  101.900958][ T7476] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[  101.931754][ T7476] team0: No ports can be present during mode change
[  101.999353][ T7482] sctp: [Deprecated]: syz.0.401 (pid 7482) Use of int in max_burst socket option.
[  101.999353][ T7482] Use struct sctp_assoc_value instead
[  102.051240][ T7484] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004
[  102.468855][ T7500] bond5: entered promiscuous mode
[  102.470417][ T7500] bond5: entered allmulticast mode
[  102.472306][ T7500] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.858333][ T7508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.883014][ T7505] 8021q: adding VLAN 0 to HW filter on device bond6
[  102.885945][ T7506] syzkaller0: entered promiscuous mode
[  102.888171][ T7506] syzkaller0: entered allmulticast mode
[  102.911160][ T7505] veth5: entered promiscuous mode
[  102.924641][ T7506] tipc: Resetting bearer <eth:syzkaller0>
[  102.928434][ T7504] tipc: Resetting bearer <eth:syzkaller0>
[  102.944976][ T7504] tipc: Disabling bearer <eth:syzkaller0>
[  102.997388][ T7511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.999713][ T7511] syzkaller0: entered promiscuous mode
[  103.001869][ T7511] syzkaller0: entered allmulticast mode
[  103.033866][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[  103.045794][ T7510] tipc: Disabling bearer <eth:syzkaller0>
[  103.050912][ T7514] sch_tbf: peakrate 3 is lower than or equals to rate 11421732400137327337 !
[  103.155082][ T7527] __nla_validate_parse: 25 callbacks suppressed
[  103.155092][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  103.346185][ T7539] netlink: 43 bytes leftover after parsing attributes in process `syz.0.416'.
[  103.408056][ T7539] IPv6: sit1: Disabled Multicast RS
[  103.410207][ T7539] sit1: entered allmulticast mode
[  103.472205][ T7547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.478150][ T7547] syzkaller0: entered promiscuous mode
[  103.480008][ T7547] syzkaller0: entered allmulticast mode
[  103.515658][ T7547] tipc: Resetting bearer <eth:syzkaller0>
[  103.519916][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'.
[  103.531607][ T7547] vlan3: entered promiscuous mode
[  103.533333][ T7547] bond0: entered promiscuous mode
[  103.536536][ T7547] bond_slave_0: entered promiscuous mode
[  103.538713][ T7547] bond_slave_1: entered promiscuous mode
[  103.563383][ T7552] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.566971][ T7546] tipc: Resetting bearer <eth:syzkaller0>
[  103.577668][ T7546] tipc: Disabling bearer <eth:syzkaller0>
[  103.746808][ T7570] lo speed is unknown, defaulting to 1000
[  103.971797][ T7579] validate_nla: 1 callbacks suppressed
[  103.971808][ T7579] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[  103.992629][ T7579] sctp: [Deprecated]: syz.1.426 (pid 7579) Use of int in max_burst socket option.
[  103.992629][ T7579] Use struct sctp_assoc_value instead
[  104.012035][ T7579] bond8: (slave veth5): Enslaving as an active interface with a down link
[  104.042840][ T7579] bond8: (slave veth7): Enslaving as an active interface with a down link
[  104.047010][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'.
[  104.051350][ T7579] 8021q: adding VLAN 0 to HW filter on device bond8
[  104.093697][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'.
[  104.106153][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  104.287223][ T7599] netlink: 830 bytes leftover after parsing attributes in process `syz.0.431'.
[  104.396180][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'.
[  104.402414][ T7604] netlink: 'syz.2.433': attribute type 5 has an invalid length.
[  104.475959][ T7612] pim6reg1: entered promiscuous mode
[  104.478463][ T7612] pim6reg1: entered allmulticast mode
[  104.578557][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.438'.
[  104.721191][ T7625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.743847][ T7625] tipc: Disabling bearer <eth:syzkaller0>
[  105.059645][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'.
[  105.171490][ T7641] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.177296][ T7639] netlink: 'syz.1.447': attribute type 21 has an invalid length.
[  105.211689][ T7639] syzkaller0: entered promiscuous mode
[  105.213798][ T7639] syzkaller0: entered allmulticast mode
[  106.183108][ T7644] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.185980][ T7644] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.477576][ T7673] netlink: 'syz.0.455': attribute type 5 has an invalid length.
[  106.481190][ T7673] netlink: 'syz.0.455': attribute type 5 has an invalid length.
[  106.493913][ T7671] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.497632][ T7671] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.501137][ T7671] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.527036][ T7676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.529379][ T7676] syzkaller0: entered promiscuous mode
[  106.532146][ T7676] syzkaller0: entered allmulticast mode
[  106.565800][ T7676] tipc: Resetting bearer <eth:syzkaller0>
[  106.567979][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  106.582141][ T7675] tipc: Resetting bearer <eth:syzkaller0>
[  106.585482][ T7682] netlink: 'syz.1.459': attribute type 4 has an invalid length.
[  106.594402][ T7675] tipc: Disabling bearer <eth:syzkaller0>
[  106.686059][ T7692] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  106.867795][ T7713] sctp: [Deprecated]: syz.2.462 (pid 7713) Use of int in maxseg socket option.
[  106.867795][ T7713] Use struct sctp_assoc_value instead
[  106.998024][   T33] audit: type=1800 audit(1762473655.497:2): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.465" name="memory.events" dev="tmpfs" ino=910 res=0 errno=0
[  107.020375][ T7719] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  107.518086][ T7745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.532091][ T7745] syzkaller0: entered promiscuous mode
[  107.534375][ T7745] syzkaller0: entered allmulticast mode
[  107.548543][ T7745] tipc: Resetting bearer <eth:syzkaller0>
[  107.550886][ T7745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  107.558536][ T7744] tipc: Resetting bearer <eth:syzkaller0>
[  107.571631][ T7744] tipc: Disabling bearer <eth:syzkaller0>
[  107.659354][ T7750] block nbd1: Unsupported socket: should be TCP or UNIX.
[  107.786862][ T7753] netlink: 'syz.0.476': attribute type 13 has an invalid length.
[  107.892969][ T7755] xt_l2tp: v2 doesn't support IP mode
[  107.956941][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.960680][ T7758] 8021q: adding VLAN 0 to HW filter on device team0
[  107.966558][ T7758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.009310][ T7760] dvmrp0: entered allmulticast mode
[  108.653678][ T7776] lo speed is unknown, defaulting to 1000
[  108.699345][ T7778] __nla_validate_parse: 53 callbacks suppressed
[  108.699357][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'.
[  108.711685][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'.
[  108.740675][   T33] audit: type=1800 audit(1762473657.237:3): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.481" name="cgroup.controllers" dev="tmpfs" ino=726 res=0 errno=0
[  108.851380][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'.
[  108.867748][ T7782] delete_channel: no stack
[  109.148147][ T7801] netlink: 'syz.2.491': attribute type 1 has an invalid length.
[  109.183565][ T7801] bond5: (slave geneve2): making interface the new active one
[  109.187938][ T7801] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  109.191226][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  109.193812][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  109.196812][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  109.199456][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  109.226860][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.311384][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.315942][ T7813] syzkaller0: entered promiscuous mode
[  109.317948][ T7813] syzkaller0: entered allmulticast mode
[  109.360738][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.365073][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.369171][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.373141][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.376648][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.380437][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  109.451794][ T7817] netlink: 'syz.1.495': attribute type 1 has an invalid length.
[  109.501892][ T7062] hid-generic 0005:0002:5508.0002: item fetching failed at offset 3/4
[  109.505785][ T7062] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22
[  109.511599][ T7819] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  109.591765][ T7823] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[  109.612370][ T7823] gretap1: entered allmulticast mode
[  109.616882][ T7823] bond9: (slave gretap1): making interface the new active one
[  109.619806][ T7823] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  109.716479][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.772797][ T7838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.776250][ T7838] syzkaller0: entered promiscuous mode
[  109.778652][ T7838] syzkaller0: entered allmulticast mode
[  109.795404][ T7838] tipc: Resetting bearer <eth:syzkaller0>
[  109.799555][ T7838] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  109.804765][ T7837] tipc: Resetting bearer <eth:syzkaller0>
[  109.814480][ T7837] tipc: Disabling bearer <eth:syzkaller0>
[  109.971806][ T7841] syzkaller1: entered promiscuous mode
[  109.973888][ T7841] syzkaller1: entered allmulticast mode
[  110.016192][ T7844] x_tables: duplicate underflow at hook 2
[  110.018446][ T7843] x_tables: duplicate underflow at hook 2
[  110.168396][ T7853] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.172206][ T7853] bond0: (slave bond3): Enslaving as an active interface with an up link
[  110.230377][ T7853] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  110.236303][ T7853] bond0 (unregistering): (slave bond3): Releasing backup interface
[  110.245909][ T7853] bond0 (unregistering): Released all slaves
[  110.268734][ T7858] macsec1: entered promiscuous mode
[  110.270390][ T7858] macsec1: entered allmulticast mode
[  110.775269][ T7901] geneve3: entered promiscuous mode
[  110.777227][ T7901] geneve3: entered allmulticast mode
[  110.780381][   T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 37421 - 0
[  110.783754][   T12] netdevsim netdevsim2 netdevsim0: set [1, 3] type 2 family 0 port 45745 - 0
[  110.789800][   T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 37421 - 0
[  110.793098][   T12] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 45745 - 0
[  110.800522][   T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 37421 - 0
[  110.803760][   T12] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 45745 - 0
[  110.808386][   T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 37421 - 0
[  110.811722][   T12] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 45745 - 0
[  110.989235][ T7920] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[  111.057444][ T7920] 8021q: adding VLAN 0 to HW filter on device bond6
[  111.081307][ T7928] 8021q: adding VLAN 0 to HW filter on device bond6
[  111.083891][ T7928] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.089985][ T7928] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  111.325888][ T7938] syzkaller0: entered promiscuous mode
[  111.334226][ T7938] syzkaller0: entered allmulticast mode
[  112.503109][ T7964] syzkaller0: entered promiscuous mode
[  112.514707][ T7964] syzkaller0: entered allmulticast mode
[  112.758785][ T7990] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  112.875636][ T8001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.878950][ T8001] syzkaller0: entered promiscuous mode
[  112.880828][ T8001] syzkaller0: entered allmulticast mode
[  112.909633][ T8001] tipc: Resetting bearer <eth:syzkaller0>
[  112.926371][ T8000] tipc: Resetting bearer <eth:syzkaller0>
[  112.952214][ T8000] tipc: Disabling bearer <eth:syzkaller0>
[  113.158593][ T8024] Bluetooth: MGMT ver 1.23
[  113.211591][ T8028] netlink: 'syz.2.543': attribute type 20 has an invalid length.
[  113.213933][ T8028] netlink: 'syz.2.543': attribute type 20 has an invalid length.
[  113.329388][ T8045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.336231][ T8045] syzkaller0: entered promiscuous mode
[  113.338508][ T8045] syzkaller0: entered allmulticast mode
[  113.364000][ T8045] tipc: Resetting bearer <eth:syzkaller0>
[  113.373002][ T8043] tipc: Resetting bearer <eth:syzkaller0>
[  113.398770][ T8047] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  113.401744][ T8043] tipc: Disabling bearer <eth:syzkaller0>
[  113.423716][ T8047] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  113.429838][ T8047] bond1: (slave vcan0): Error -95 calling set_mac_address
[  113.475879][ T8047] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  113.479987][ T8047] bond1: (slave vcan0): Error -95 calling set_mac_address
[  113.551418][ T8056] siw: device registration error -23
[  113.583235][ T8054] netlink: 'syz.2.552': attribute type 20 has an invalid length.
[  113.586325][ T8054] netlink: 'syz.2.552': attribute type 20 has an invalid length.
[  113.835890][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.840670][ T8070] __nla_validate_parse: 23 callbacks suppressed
[  113.840684][ T8070] netlink: 244 bytes leftover after parsing attributes in process `syz.2.557'.
[  114.357575][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'.
[  114.830170][ T8114] validate_nla: 2 callbacks suppressed
[  114.830182][ T8114] netlink: 'syz.2.568': attribute type 13 has an invalid length.
[  114.834670][ T8114] netlink: 'syz.2.568': attribute type 17 has an invalid length.
[  114.861926][ T8114] lo speed is unknown, defaulting to 1000
[  114.937101][ T8114] netlink: 324 bytes leftover after parsing attributes in process `syz.2.568'.
[  114.940930][ T8114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.342450][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  115.348239][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  115.492915][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  115.570825][ T8131] syzkaller0: entered promiscuous mode
[  115.572978][ T8131] syzkaller0: entered allmulticast mode
[  116.786356][ T8139] x_tables: duplicate underflow at hook 1
[  116.857648][ T8147] netlink: 'syz.2.576': attribute type 1 has an invalid length.
[  116.884478][ T8147] 8021q: adding VLAN 0 to HW filter on device bond7
[  116.904844][ T8147] veth9: entered promiscuous mode
[  116.914578][ T8147] syz_tun: entered allmulticast mode
[  116.935805][ T8146] syz_tun: left allmulticast mode
[  117.017727][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'.
[  117.154418][ T8163] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  117.162347][ T8163] syzkaller0: entered promiscuous mode
[  117.163899][ T8163] syzkaller0: entered allmulticast mode
[  118.075137][ T8172] vti0: entered promiscuous mode
[  118.105511][ T8180] netlink: 'syz.2.584': attribute type 14 has an invalid length.
[  118.188526][ T8191] xt_TCPMSS: Only works on TCP SYN packets
[  118.219996][ T8190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[  118.346541][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'.
[  118.445493][ T8206] netlink: 67 bytes leftover after parsing attributes in process `syz.2.592'.
[  118.565621][ T8210] netlink: 'syz.2.594': attribute type 1 has an invalid length.
[  118.639859][ T8212] siw: device registration error -23
[  118.653763][ T8210] 8021q: adding VLAN 0 to HW filter on device bond8
[  118.941682][ T8231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.944901][ T8231] syzkaller0: entered promiscuous mode
[  118.946726][ T8231] syzkaller0: entered allmulticast mode
[  118.958582][ T8231] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  118.972932][ T8231] tipc: Resetting bearer <eth:syzkaller0>
[  118.976547][ T8230] tipc: Resetting bearer <eth:syzkaller0>
[  118.984484][ T8230] tipc: Disabling bearer <eth:syzkaller0>
[  119.030944][ T8233] __nla_validate_parse: 2 callbacks suppressed
[  119.030954][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[  119.294532][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'.
[  119.341337][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.606'.
[  119.382450][ T8266] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  119.386676][ T8272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.388729][ T8273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.391487][ T8270] syzkaller0: entered promiscuous mode
[  119.393035][ T8270] syzkaller0: entered allmulticast mode
[  119.397334][ T8270] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  119.410691][ T8272] tipc: Resetting bearer <eth:syzkaller0>
[  119.420926][ T8269] tipc: Resetting bearer <eth:syzkaller0>
[  119.422501][ T8275] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  119.430756][ T8275] Cannot find set identified by id 1 to match
[  119.433069][ T8269] tipc: Disabling bearer <eth:syzkaller0>
[  119.486229][ T8276] netlink: 'syz.1.608': attribute type 39 has an invalid length.
[  119.519547][ T8280] syzkaller0: entered promiscuous mode
[  119.521242][ T8280] syzkaller0: entered allmulticast mode
[  119.546349][ T8278] syzkaller0: entered promiscuous mode
[  119.548645][ T8278] syzkaller0: entered allmulticast mode
[  120.396893][ T8289] netlink: 'syz.1.611': attribute type 2 has an invalid length.
[  120.399169][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.611'.
[  120.402078][ T8289] netlink: 'syz.1.611': attribute type 1 has an invalid length.
[  120.555517][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'.
[  120.558894][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'.
[  120.605218][ T8289] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.675660][ T8294] sctp: [Deprecated]: syz.2.612 (pid 8294) Use of int in maxseg socket option.
[  120.675660][ T8294] Use struct sctp_assoc_value instead
[  120.683960][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  120.688675][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.612'.
[  121.289826][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'.
[  121.354750][ T8302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.615'.
[  121.367642][ T8302] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  121.459419][ T8304] siw: device registration error -23
[  121.500133][ T8307] netlink: 'syz.2.617': attribute type 13 has an invalid length.
[  121.633740][ T8315] netlink: 'syz.2.620': attribute type 6 has an invalid length.
[  121.652596][ T8317] geneve4: entered promiscuous mode
[  121.654843][ T8317] geneve4: entered allmulticast mode
[  121.658048][ T5838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 35900 - 0
[  121.660901][ T5838] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 60605 - 0
[  121.663809][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 35900 - 0
[  121.674360][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 60605 - 0
[  121.709949][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 35900 - 0
[  121.712430][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 60605 - 0
[  121.729350][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 35900 - 0
[  121.732707][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 60605 - 0
[  121.780599][ T8330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.783232][ T8330] syzkaller0: entered promiscuous mode
[  121.786058][ T8330] syzkaller0: entered allmulticast mode
[  121.801908][ T8325] lo speed is unknown, defaulting to 1000
[  121.825931][ T8333] netlink: 'syz.2.623': attribute type 10 has an invalid length.
[  121.843128][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.849654][ T8333] batadv0: entered promiscuous mode
[  121.851990][ T8333] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  121.859299][ T8325] netlink: 'syz.2.623': attribute type 10 has an invalid length.
[  121.976316][ T8339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.979603][ T8339] syzkaller0: entered promiscuous mode
[  121.981418][ T8339] syzkaller0: entered allmulticast mode
[  122.043853][ T8339] tipc: Resetting bearer <eth:syzkaller0>
[  122.102253][ T8341] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  122.126198][ T8339] tipc: Resetting bearer <eth:syzkaller0>
[  122.137491][ T8339] tipc: Disabling bearer <eth:syzkaller0>
[  122.185766][ T8328] tipc: Resetting bearer <eth:syzkaller0>
[  122.205125][ T8328] tipc: Disabling bearer <eth:syzkaller0>
[  122.233782][ T8350] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  122.241918][ T8350] macvtap0: entered promiscuous mode
[  122.243462][ T8350] batadv0: entered promiscuous mode
[  122.247041][ T8350] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  122.250414][ T8350] batadv0: left promiscuous mode
[  122.276271][ T8354] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  122.304625][  T974] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.465160][ T8367] lo speed is unknown, defaulting to 1000
[  122.511363][ T8365] lo speed is unknown, defaulting to 1000
[  122.625116][ T7055] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  122.648374][ T8373] lo speed is unknown, defaulting to 1000
[  122.787904][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 35900 - 0
[  122.790865][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 60605 - 0
[  122.799126][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 35900 - 0
[  122.804738][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 60605 - 0
[  122.824723][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 35900 - 0
[  122.827375][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 60605 - 0
[  122.830543][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 35900 - 0
[  122.834781][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 60605 - 0
[  123.028045][ T8391] veth0: entered promiscuous mode
[  123.034004][ T8390] veth0: left promiscuous mode
[  123.068122][ T8393] syzkaller0: entered promiscuous mode
[  123.069859][ T8393] syzkaller0: entered allmulticast mode
[  123.292245][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.301242][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.330164][ T8401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.332784][ T8401] syzkaller0: entered promiscuous mode
[  123.334741][ T8401] syzkaller0: entered allmulticast mode
[  123.339618][ T8401] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  123.354499][ T8401] tipc: Resetting bearer <eth:syzkaller0>
[  123.357130][ T8400] tipc: Resetting bearer <eth:syzkaller0>
[  123.367741][ T8400] tipc: Disabling bearer <eth:syzkaller0>
[  123.473271][ T8403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.477823][ T8403] syzkaller0: entered promiscuous mode
[  123.479474][ T8403] syzkaller0: entered allmulticast mode
[  123.494947][ T8403] tipc: Resetting bearer <eth:syzkaller0>
[  123.498754][ T8402] tipc: Resetting bearer <eth:syzkaller0>
[  123.510376][ T8402] tipc: Disabling bearer <eth:syzkaller0>
[  123.689388][ T8416] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[  123.691576][ T7052] IPVS: starting estimator thread 0...
[  123.774138][ T8417] IPVS: using max 62 ests per chain, 148800 per kthread
[  123.953436][ T8424] netlink: 'syz.2.655': attribute type 30 has an invalid length.
[  124.163558][ T8431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.166592][ T8431] syzkaller0: entered promiscuous mode
[  124.168378][ T8431] syzkaller0: entered allmulticast mode
[  124.179377][ T8431] tipc: Resetting bearer <eth:syzkaller0>
[  124.188672][ T8430] tipc: Resetting bearer <eth:syzkaller0>
[  124.198944][ T8430] tipc: Disabling bearer <eth:syzkaller0>
[  124.291960][ T8440] __nla_validate_parse: 234 callbacks suppressed
[  124.291970][ T8440] netlink: 76 bytes leftover after parsing attributes in process `syz.2.661'.
[  124.297616][ T8441] netlink: 76 bytes leftover after parsing attributes in process `syz.2.661'.
[  124.410091][ T8445] geneve4: entered promiscuous mode
[  124.436713][ T8446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.439789][ T8446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.443514][ T8446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  124.448173][ T8446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 37421 - 0
[  124.450993][ T8446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 45745 - 0
[  124.541690][ T8446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.545876][ T8446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.548893][ T8446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  124.551876][ T8446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 37421 - 0
[  124.555730][ T8446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 45745 - 0
[  124.575574][ T8458] xt_l2tp: missing protocol rule (udp|l2tpip)
[  124.582618][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[  124.586296][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[  124.598834][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[  124.615912][ T8446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.618907][ T8446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.621857][ T8446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  124.625327][ T8446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 37421 - 0
[  124.628763][ T8446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 45745 - 0
[  124.645922][ T8454] geneve2: entered promiscuous mode
[  124.647898][ T8454] geneve2: entered allmulticast mode
[  124.653731][ T8458] netlink: 'syz.1.666': attribute type 6 has an invalid length.
[  124.657200][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57741 - 0
[  124.660792][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59690 - 0
[  124.671492][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57741 - 0
[  124.674893][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59690 - 0
[  124.678173][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57741 - 0
[  124.682579][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59690 - 0
[  124.686714][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57741 - 0
[  124.689048][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59690 - 0
[  124.707649][ T8446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.710700][ T8446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.713747][ T8446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  124.718336][ T8446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 37421 - 0
[  124.721309][ T8446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 45745 - 0
[  124.773563][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  124.778353][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  124.793331][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  124.797132][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  124.800806][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  124.816810][ T5660] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.820973][ T5660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 45745 - 0
[  124.830138][ T5660] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 37421 - 0
[  124.834949][ T5660] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  124.842598][ T5660] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  124.868946][ T5660] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.872710][ T5660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 45745 - 0
[  124.876668][ T5660] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 37421 - 0
[  124.881356][ T5660] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  124.883724][ T5660] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  124.896440][ T5660] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.899128][ T5660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 45745 - 0
[  124.903885][ T5660] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 37421 - 0
[  124.908868][ T5660] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  124.911384][ T5660] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  124.942039][ T8471] bond11 (unregistering): Released all slaves
[  124.960482][ T5838] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.963163][ T5838] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 45745 - 0
[  124.965974][ T5838] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 37421 - 0
[  124.968473][ T5838] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  124.970945][ T5838] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  124.976809][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.979723][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45745 - 0
[  124.982603][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37421 - 0
[  124.994306][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  124.997413][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0
[  125.006601][ T5838] ==================================================================
[  125.009295][ T5838] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  125.011447][ T5838] Read of size 8 at addr ffff8881750fcab0 by task kworker/u8:3/5838
[  125.015343][ T5838] 
[  125.016060][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  125.016070][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.016077][ T5838] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  125.016093][ T5838] Call Trace:
[  125.016097][ T5838]  <TASK>
[  125.016101][ T5838]  dump_stack_lvl+0x189/0x250
[  125.016114][ T5838]  ? __kasan_check_byte+0x12/0x40
[  125.016122][ T5838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.016132][ T5838]  ? lock_release+0x4b/0x3e0
[  125.016141][ T5838]  ? __virt_addr_valid+0x4a5/0x5c0
[  125.016151][ T5838]  print_report+0xca/0x240
[  125.016161][ T5838]  ? __mutex_lock+0x147/0x1350
[  125.016171][ T5838]  kasan_report+0x118/0x150
[  125.016203][ T5838]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.016215][ T5838]  ? __mutex_lock+0x147/0x1350
[  125.016226][ T5838]  __mutex_lock+0x147/0x1350
[  125.016238][ T5838]  ? __mutex_lock+0x5bb/0x1350
[  125.016249][ T5838]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  125.016257][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[  125.016268][ T5838]  ? __lock_acquire+0xab9/0xd20
[  125.016277][ T5838]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  125.016293][ T5838]  ? process_scheduled_works+0x9ef/0x17b0
[  125.016302][ T5838]  ? process_scheduled_works+0x9ef/0x17b0
[  125.016309][ T5838]  process_scheduled_works+0xae1/0x17b0
[  125.016322][ T5838]  ? __pfx_process_scheduled_works+0x10/0x10
[  125.016333][ T5838]  worker_thread+0x8a0/0xda0
[  125.016342][ T5838]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.016353][ T5838]  ? __kthread_parkme+0x7b/0x200
[  125.016363][ T5838]  kthread+0x711/0x8a0
[  125.016373][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  125.016381][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.016390][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.016399][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.016408][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.016417][ T5838]  ret_from_fork+0x4bc/0x870
[  125.016426][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  125.016434][ T5838]  ? __switch_to_asm+0x39/0x70
[  125.016440][ T5838]  ? __switch_to_asm+0x33/0x70
[  125.016446][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.016455][ T5838]  ret_from_fork_asm+0x1a/0x30
[  125.016465][ T5838]  </TASK>
[  125.016467][ T5838] 
[  125.082722][ T5838] Allocated by task 8446:
[  125.083959][ T5838]  kasan_save_track+0x3e/0x80
[  125.085301][ T5838]  __kasan_kmalloc+0x93/0xb0
[  125.086628][ T5838]  __kmalloc_noprof+0x411/0x7f0
[  125.088016][ T5838]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  125.089769][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.091238][ T5838]  register_netdevice+0x1608/0x1ae0
[  125.092725][ T5838]  nsim_create+0xb3f/0x1050
[  125.094021][ T5838]  __nsim_dev_port_add+0x6b6/0xb10
[  125.095476][ T5838]  nsim_dev_port_add_all+0x37/0xf0
[  125.096989][ T5838]  nsim_dev_reload_up+0x451/0x780
[  125.098654][ T5838]  devlink_reload+0x4ec/0x8d0
[  125.100319][ T5838]  devlink_nl_reload_doit+0xb35/0xd50
[  125.101929][ T5838]  genl_family_rcv_msg_doit+0x215/0x300
[  125.103552][ T5838]  genl_rcv_msg+0x60e/0x790
[  125.104879][ T5838]  netlink_rcv_skb+0x208/0x470
[  125.106282][ T5838]  genl_rcv+0x28/0x40
[  125.107455][ T5838]  netlink_unicast+0x82f/0x9e0
[  125.108829][ T5838]  netlink_sendmsg+0x805/0xb30
[  125.110214][ T5838]  __sock_sendmsg+0x21c/0x270
[  125.111565][ T5838]  ____sys_sendmsg+0x505/0x830
[  125.113104][ T5838]  ___sys_sendmsg+0x21f/0x2a0
[  125.114845][ T5838]  __x64_sys_sendmsg+0x19b/0x260
[  125.116694][ T5838]  do_syscall_64+0xfa/0xfa0
[  125.118379][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.120365][ T5838] 
[  125.121063][ T5838] Freed by task 8447:
[  125.122255][ T5838]  kasan_save_track+0x3e/0x80
[  125.123716][ T5838]  __kasan_save_free_info+0x46/0x50
[  125.125273][ T5838]  __kasan_slab_free+0x5c/0x80
[  125.126675][ T5838]  kfree+0x19a/0x6d0
[  125.127803][ T5838]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  125.129616][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.131092][ T5838]  unregister_netdevice_many_notify+0x1860/0x2390
[  125.132929][ T5838]  unregister_netdevice_queue+0x33c/0x380
[  125.134573][ T5838]  nsim_destroy+0x1e5/0x680
[  125.136032][ T5838]  __nsim_dev_port_del+0x14d/0x1b0
[  125.137567][ T5838]  nsim_dev_reload_destroy+0x288/0x490
[  125.139131][ T5838]  nsim_dev_reload_down+0x8a/0xc0
[  125.140737][ T5838]  devlink_reload+0x1b6/0x8d0
[  125.142489][ T5838]  devlink_nl_reload_doit+0xb35/0xd50
[  125.144509][ T5838]  genl_family_rcv_msg_doit+0x215/0x300
[  125.146583][ T5838]  genl_rcv_msg+0x60e/0x790
[  125.148297][ T5838]  netlink_rcv_skb+0x208/0x470
[  125.150070][ T5838]  genl_rcv+0x28/0x40
[  125.151641][ T5838]  netlink_unicast+0x82f/0x9e0
[  125.153467][ T5838]  netlink_sendmsg+0x805/0xb30
[  125.154973][ T5838]  __sock_sendmsg+0x21c/0x270
[  125.156395][ T5838]  ____sys_sendmsg+0x505/0x830
[  125.157807][ T5838]  ___sys_sendmsg+0x21f/0x2a0
[  125.159193][ T5838]  __x64_sys_sendmsg+0x19b/0x260
[  125.160639][ T5838]  do_syscall_64+0xfa/0xfa0
[  125.162114][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.164335][ T5838] 
[  125.165216][ T5838] Last potentially related work creation:
[  125.167296][ T5838]  kasan_save_stack+0x3e/0x60
[  125.169018][ T5838]  kasan_record_aux_stack+0xbd/0xd0
[  125.170929][ T5838]  insert_work+0x3d/0x330
[  125.172531][ T5838]  __queue_work+0xbaf/0xfb0
[  125.174216][ T5838]  queue_work_on+0x181/0x270
[  125.175930][ T5838]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  125.178003][ T5838]  udp_tunnel_push_rx_port+0x180/0x200
[  125.180016][ T5838]  geneve_offload_rx_ports+0xd7/0x160
[  125.181983][ T5838]  geneve_netdevice_event+0x6a/0x80
[  125.183897][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.185735][ T5838]  call_netdevice_notifiers+0x88/0xc0
[  125.187565][ T5838]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  125.189367][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.190818][ T5838]  register_netdevice+0x1608/0x1ae0
[  125.192312][ T5838]  nsim_create+0xb3f/0x1050
[  125.193615][ T5838]  __nsim_dev_port_add+0x6b6/0xb10
[  125.195094][ T5838]  nsim_dev_port_add_all+0x37/0xf0
[  125.196615][ T5838]  nsim_dev_reload_up+0x451/0x780
[  125.198233][ T5838]  devlink_reload+0x4ec/0x8d0
[  125.199711][ T5838]  devlink_nl_reload_doit+0xb35/0xd50
[  125.201192][ T5838]  genl_family_rcv_msg_doit+0x215/0x300
[  125.202699][ T5838]  genl_rcv_msg+0x60e/0x790
[  125.203975][ T5838]  netlink_rcv_skb+0x208/0x470
[  125.205364][ T5838]  genl_rcv+0x28/0x40
[  125.206482][ T5838]  netlink_unicast+0x82f/0x9e0
[  125.207920][ T5838]  netlink_sendmsg+0x805/0xb30
[  125.209300][ T5838]  __sock_sendmsg+0x21c/0x270
[  125.210688][ T5838]  ____sys_sendmsg+0x505/0x830
[  125.212177][ T5838]  ___sys_sendmsg+0x21f/0x2a0
[  125.213524][ T5838]  __x64_sys_sendmsg+0x19b/0x260
[  125.214953][ T5838]  do_syscall_64+0xfa/0xfa0
[  125.216403][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.218238][ T5838] 
[  125.218931][ T5838] Second to last potentially related work creation:
[  125.220796][ T5838]  kasan_save_stack+0x3e/0x60
[  125.222154][ T5838]  kasan_record_aux_stack+0xbd/0xd0
[  125.223611][ T5838]  insert_work+0x3d/0x330
[  125.224829][ T5838]  __queue_work+0xcd2/0xfb0
[  125.226117][ T5838]  queue_work_on+0x181/0x270
[  125.227505][ T5838]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  125.229100][ T5838]  udp_tunnel_push_rx_port+0x180/0x200
[  125.230683][ T5838]  vxlan_offload_rx_ports+0x139/0x200
[  125.232230][ T5838]  vxlan_netdevice_event+0x111/0x470
[  125.233741][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.235193][ T5838]  call_netdevice_notifiers+0x88/0xc0
[  125.236877][ T5838]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  125.238647][ T5838]  notifier_call_chain+0x1b6/0x3e0
[  125.240145][ T5838]  register_netdevice+0x1608/0x1ae0
[  125.241725][ T5838]  nsim_create+0xb3f/0x1050
[  125.243228][ T5838]  __nsim_dev_port_add+0x6b6/0xb10
[  125.245086][ T5838]  nsim_dev_port_add_all+0x37/0xf0
[  125.246692][ T5838]  nsim_dev_reload_up+0x451/0x780
[  125.248266][ T5838]  devlink_reload+0x4ec/0x8d0
[  125.249885][ T5838]  devlink_nl_reload_doit+0xb35/0xd50
[  125.251519][ T5838]  genl_family_rcv_msg_doit+0x215/0x300
[  125.253281][ T5838]  genl_rcv_msg+0x60e/0x790
[  125.254846][ T5838]  netlink_rcv_skb+0x208/0x470
[  125.256232][ T5838]  genl_rcv+0x28/0x40
[  125.257368][ T5838]  netlink_unicast+0x82f/0x9e0
[  125.258760][ T5838]  netlink_sendmsg+0x805/0xb30
[  125.260143][ T5838]  __sock_sendmsg+0x21c/0x270
[  125.261518][ T5838]  ____sys_sendmsg+0x505/0x830
[  125.262904][ T5838]  ___sys_sendmsg+0x21f/0x2a0
[  125.264278][ T5838]  __x64_sys_sendmsg+0x19b/0x260
[  125.265700][ T5838]  do_syscall_64+0xfa/0xfa0
[  125.267005][ T5838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.268686][ T5838] 
[  125.269404][ T5838] The buggy address belongs to the object at ffff8881750fca00
[  125.269404][ T5838]  which belongs to the cache kmalloc-256 of size 256
[  125.273376][ T5838] The buggy address is located 176 bytes inside of
[  125.273376][ T5838]  freed 256-byte region [ffff8881750fca00, ffff8881750fcb00)
[  125.277294][ T5838] 
[  125.277984][ T5838] The buggy address belongs to the physical page:
[  125.279821][ T5838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1750fc
[  125.282400][ T5838] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  125.284862][ T5838] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  125.287615][ T5838] page_type: f5(slab)
[  125.289131][ T5838] raw: 057ff00000000040 ffff888100041b40 ffffea0005afea80 dead000000000003
[  125.292343][ T5838] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  125.295534][ T5838] head: 057ff00000000040 ffff888100041b40 ffffea0005afea80 dead000000000003
[  125.298593][ T5838] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  125.301044][ T5838] head: 057ff00000000001 ffffea0005d43f01 00000000ffffffff 00000000ffffffff
[  125.303820][ T5838] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  125.306953][ T5838] page dumped because: kasan: bad access detected
[  125.309318][ T5838] page_owner tracks the page as allocated
[  125.311444][ T5838] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5915, tgid 5914 (syz.2.8), ts 67092065179, free_ts 67074153736
[  125.318908][ T5838]  post_alloc_hook+0x240/0x2a0
[  125.320704][ T5838]  get_page_from_freelist+0x2365/0x2440
[  125.322746][ T5838]  __alloc_frozen_pages_noprof+0x181/0x370
[  125.324829][ T5838]  alloc_pages_mpol+0x232/0x4a0
[  125.326553][ T5838]  allocate_slab+0x96/0x350
[  125.328213][ T5838]  ___slab_alloc+0xe94/0x18a0
[  125.329724][ T5838]  __slab_alloc+0x65/0x100
[  125.331012][ T5838]  __kmalloc_cache_noprof+0x411/0x6f0
[  125.332752][ T5838]  siw_cm_alloc_work+0x93/0x380
[  125.334564][ T5838]  siw_create_listen+0x4ef/0xf30
[  125.336385][ T5838]  iw_cm_listen+0x166/0x230
[  125.337954][ T5838]  rdma_listen+0xa53/0xd30
[  125.339584][ T5838]  cma_listen_on_dev+0x3f5/0x720
[  125.341459][ T5838]  cma_add_one+0x647/0xa50
[  125.343128][ T5838]  add_client_context+0x36a/0x790
[  125.345014][ T5838]  enable_device_and_get+0x19b/0x3d0
[  125.346975][ T5838] page last free pid 5879 tgid 5879 stack trace:
[  125.349280][ T5838]  __free_frozen_pages+0xbc4/0xd30
[  125.351117][ T5838]  rcu_core+0xcab/0x1770
[  125.352652][ T5838]  handle_softirqs+0x286/0x870
[  125.354178][ T5838]  __irq_exit_rcu+0xca/0x1f0
[  125.355455][ T5838]  irq_exit_rcu+0x9/0x30
[  125.356639][ T5838]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  125.358192][ T5838]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  125.359825][ T5838] 
[  125.360515][ T5838] Memory state around the buggy address:
[  125.362069][ T5838]  ffff8881750fc980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  125.364396][ T5838]  ffff8881750fca00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.366663][ T5838] >ffff8881750fca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.368926][ T5838]                                      ^
[  125.370548][ T5838]  ffff8881750fcb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  125.372843][ T5838]  ffff8881750fcb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  125.375129][ T5838] ==================================================================
[  125.396744][ T5838] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  125.398862][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  125.401567][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.404894][ T5838] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  125.406970][ T5838] Call Trace:
[  125.407943][ T5838]  <TASK>
[  125.408808][ T5838]  dump_stack_lvl+0x99/0x250
[  125.410127][ T5838]  ? __asan_memcpy+0x40/0x70
[  125.411471][ T5838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.412983][ T5838]  ? __pfx__printk+0x10/0x10
[  125.414304][ T5838]  vpanic+0x237/0x6d0
[  125.415459][ T5838]  ? __pfx_vpanic+0x10/0x10
[  125.416795][ T5838]  ? preempt_schedule+0xae/0xc0
[  125.418218][ T5838]  ? __pfx_preempt_schedule+0x10/0x10
[  125.419768][ T5838]  panic+0xb9/0xc0
[  125.420864][ T5838]  ? __pfx_panic+0x10/0x10
[  125.422166][ T5838]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  125.423850][ T5838]  ? __mutex_lock+0x147/0x1350
[  125.425363][ T5838]  check_panic_on_warn+0x89/0xb0
[  125.426837][ T5838]  ? __mutex_lock+0x147/0x1350
[  125.428221][ T5838]  end_report+0x78/0x160
[  125.429477][ T5838]  kasan_report+0x129/0x150
[  125.430920][ T5838]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.432667][ T5838]  ? __mutex_lock+0x147/0x1350
[  125.434185][ T5838]  __mutex_lock+0x147/0x1350
[  125.435499][ T5838]  ? __mutex_lock+0x5bb/0x1350
[  125.436906][ T5838]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  125.438714][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[  125.440188][ T5838]  ? __lock_acquire+0xab9/0xd20
[  125.441588][ T5838]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  125.443336][ T5838]  ? process_scheduled_works+0x9ef/0x17b0
[  125.444972][ T5838]  ? process_scheduled_works+0x9ef/0x17b0
[  125.446604][ T5838]  process_scheduled_works+0xae1/0x17b0
[  125.448194][ T5838]  ? __pfx_process_scheduled_works+0x10/0x10
[  125.449885][ T5838]  worker_thread+0x8a0/0xda0
[  125.451211][ T5838]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.453002][ T5838]  ? __kthread_parkme+0x7b/0x200
[  125.454411][ T5838]  kthread+0x711/0x8a0
[  125.455584][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  125.457008][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.458338][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.459806][ T5838]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.461315][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.462647][ T5838]  ret_from_fork+0x4bc/0x870
[  125.463972][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  125.465452][ T5838]  ? __switch_to_asm+0x39/0x70
[  125.466826][ T5838]  ? __switch_to_asm+0x33/0x70
[  125.468225][ T5838]  ? __pfx_kthread+0x10/0x10
[  125.469557][ T5838]  ret_from_fork_asm+0x1a/0x30
[  125.470941][ T5838]  </TASK>
[  125.472482][ T5838] Kernel Offset: disabled
[  125.473761][ T5838] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:01:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000004 RCX=0000000000000007 RDX=0000000000000003
RSI=0000000000000004 RDI=ffff888106f5d700 RBP=0000000000000000 RSP=ffffc90004057218
R8 =0000000000000000 R9 =ffffffff8230dcfd R10=dffffc0000000000 R11=fffff94000dfacf1
R12=0000000000000003 R13=0000000000000001 R14=ffff888106f5e348 R15=ffff888106f5e2f0
RIP=ffffffff819d5afc RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557a0f1500 ffffffff 00c00000
GS =0000 ffff88818eb3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb765f156c0 CR3=00000001756f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f57939b7498 00007f57939b7470 XMM03=00007f57939b74a8 00007f57939b74a0
XMM04=00007f579451d100 00007f57939b7460 XMM05=00007f57939b7478 00007f57939b74c0
XMM06=00007f57939b74b8 00007f57939b74b0 XMM07=00007f57939b74a8 00007f57939b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f579381315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90005197110
R8 =ffff888109878237 R9 =1ffff1102130f046 R10=dffffc0000000000 R11=ffffffff8514ca60
R12=dffffc0000000000 R13=ffffffff997d6939 R14=ffffffff99ae9f20 R15=0000000000000000
RIP=ffffffff8514cadc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557a10c5c8 CR3=00000001756f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb76521315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
