last executing test programs:

750.469783ms ago: executing program 1 (id=686):
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a000000160000dfb20000007f0f6b4937671769db43223b51ce4469485c3206b20e4b90df2dd55c074a550630429036444b710b358d997ddae99a689ee7a3530033e54e77af21ef13b6f29da41f9f3a3dedf3c7337f257ca6823305c727d392c2e4508daa2dea75793303d8abe14394d175ae2bcba4fa3520db0d7587725e9b29be7477c8e67c355086f9c39d4cfda995efa661c64ddf78f328b3e605c3405bc79fb084151823289bfe784d48e27bb4189f09cf"], 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x7, 0x1c16, 0x8}, 0x5, 0x0, 0x10000, 0x6, 0x1, 0xe, 0x14, 0x1f, 0x7, 0x78d9, {0x1, 0x6, 0xc, 0xfffffffb, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00080028bd7000000004000b0004000900"/32], 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x881)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000006c0)={0x6, 0x0, 0x7, 0x9eb8, <r3=>0x0}, &(0x7f0000000a40)=0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000001240)=[{&(0x7f0000000a00)=@in6={0xa, 0x4e21, 0x1, @remote, 0x3}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000180)="33f4d93748ac572f2319e0fac0955709032d7c3ed5bf0a80fd480f4abe8f5e97578cd0b577926c8c8a3acfc4c3e38e58a783a5e609f2f5b195a6e54193e3bb15682110436c85070335535fc59841243a9dcd5d448bfbae9a51e881f978c13dd69451dc9102594c00446e90ba7f21d4a16f40234e29ab33b55da05d74211cee1203d44de0f93058c213949eb360713f52af727dd383b94e703a44466a90b97e3044b1506ee0a963c70a84ed9ea9a16f5ac998f1e05fc5b1458f24", 0xba}, {&(0x7f0000000240)="a444bb9117b49a450570dd5af6b371fd52c23e91b4e27981f243d1d603ce6f1de9730c8d162b4739afd0646e68ad50d0ec93ca8acfd4ff5a5c85d000aeaf5375c354d4294e5a39e742f04c3c43686af0018fe1898781c9a8f8ebc288fbbcabd74f258d504b7e61f671150b8d9f99bebef1b38a0da9e8df021cc2db013cfa76faf2b54fcfa68e15f404b02e6bad0aa11ea953acc8b94ad17dba86c4fc9f5f47d49e4ca9c7db9aaf9956eeac40db451b997019a09955", 0xb5}, {&(0x7f0000000340)="615311ae2870d86c4c51c5b8a5db73b3eaba207434e700a12676b1547665d2f120232cc93a56feb589745f24809a721d91238aad6f8d3e9309d973cc7fbb2632869fa823b204b5b8b944ff5cc1559be22b7a2942bc3d9693fb4076e79ad43f91a1f534a76c02ef0e4722adbd1808a1501a7734b88d5c035fd9ef4064e2c641530258", 0x82}, {&(0x7f0000000400)="db5bf9a32117d6e69fdb42abd3c8b2d71b9dc1621a20ae5778307bfadc7f735ce8e3a9e2fbf7edf5147470c89190757ec0b0c4ab6313", 0x36}, {&(0x7f0000000500)="49e1ee21081e24f75678b6bf4702293ce803500783d7e56ab89e4c5eb4fb46ae1b0c08a098b0685b4e64466487a1a1f1937ed5eaa9dedd9920dd2ca750d74319706ea3d6ecf44f2604aaf708712d6a0b8cbceeeede4b7eed34bcfba5f8485d8be465a89b4fc759757be45c3cded364b9d258f92458802800ef3fdac4122d82c4256dcb2b75732f680500d0df6ec5a911be7f7e86e416b46d83d68c5bb43f7f0f7f4716e1d7caa0315e", 0xa9}, {&(0x7f00000005c0)="434b357acd70e96409c8462063", 0xd}, {&(0x7f0000000600)="d2203bec8c5a9e8bb179fef7ecbcde0a33f2b451a6eab7c963d9f1d484fc69fdeab0c7c7fea1f4f062ec17b0d141061dab3763f2bd35ecd8377626cee5366b218cabd06e9666b49a689444edde9a37b7f1294c8de2f9b1529070cb74c8430b814a17d7299645882108318739e07cf22087025580955dfd55dddc19d24c50f328ed0e226b9a8b6a9873a49a89716f03baf89c55a40fe184ae638b", 0x9a}, {&(0x7f0000000780)="f65e82151a154a0ea87ec9f01a46f4e726714b749ed77380e916d707fdd1fb9424370904981e36378cdebd20f8df70d48d8c838bedc7315e7c5b776c50b94a01751a7179c4dad39320d28f350d878ddad0275213591af2c2690136550bb1a1d285293361b9b1076bee93162d431f44d5edd5adbe52baad091d7e293920063d8af59652d7b2adda832d8a5fed16dda68c3e41685aab0563a92a1b1d331e29ad44cc827c05450ca3835e2b2080a47816dc2c5919dfa5b471bfb1dde852f6f0484db889771cd3ef8de1e5520657c64c276e6b64235731b6b36c421850d4df4d24fb429612cfdf", 0xe5}, {&(0x7f0000000880)="8f3a7dc839c4fd7c2e4bea16e32397db631dfb0df1654a4d1cd316da3e459f86fe038ccc8882e4869bb6a6843f56fe4d5fb001a1d684ff9233852646ba4cf3808889ae886f591f5fdb89beaaa68ab1b40c77879bfe92ff4d0135dc5bcf0638a00152476cbc76bdf5f97d8b9ee4d06690810eb0dbb3fabc4ad575209b71e4ff586b0551fdaf812d852ec10807c673835f6412ec9756440e84b0b1e7da4017df1bd449f39c68890c3d5bd5041780c46b5a01b36e76a283617d1999f5a7d9bb85aabf0cf3e8d44f8861c6dac5c83bbfda136dc334e9c6c4dc7729c72b391a9140cc5d3c8f6151eddc052cc2bc69d024967898aeb5df489ad024d7694e", 0xfb}, {&(0x7f00000011c0)="678b480e1d98c0c9165fe7564d302d603c0e3739716b0555fbea36a27c3ab5bcdeceb80569cfa5385feb216733ec59e18479a53c07bc6a0d4a210718880ae2565eda26e924db1ea3c90f1b4fbb70957fb959a944f4edfeb7d3fa6391b407e9501de4f9f3af8e89d825e930092b97f8ae363c1619e0ccfb977f072d64ef", 0x7d}, {&(0x7f0000000b80)="2adc0ee79b355e678ef0f502003392d582ecc4076fade5da00"/35, 0x23}], 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000010000008400000000000000d3f91a000000010020000000000000008400000002000000ff7f06000800000007000000", @ANYRES32=r3, @ANYBLOB="180000000000000084000000000000000300010102000300180000000000000084000000070000000a0101000000000018000000000000008400000006000000feff000000000000"], 0x80, 0x20000000}, {&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="e477c6189c10343dd4a171755b774cb64355b38a8258cd4fc9f154578b2d91e97cfe2f5d31a56bad4fc2cc7deeacf662fe9975", 0x33}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="18000000000000008400000006000000f6ff00000000000018000000000000008400000007000000ac1414bb000000002000000000000000840000000800000000000000000000000000000000000000180000705d000000840000000600000000f80000a65849f7fbd7ebabe225e9e7cbda7800000000190280d40b803c97b3a849"], 0x68, 0x40400c0}, {&(0x7f0000000c40)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000c80)="fad983a2df707e66996699d5ebe77e658756d55597e708e8156c05e3d68c012f7e4958116bda78507b7f9a2bfc6efbf0982fb5ac0dea3ea8594abf6ab68cb47532740fd62f5c265598814c0ba6129723eca42236728bfaa79f4e9ebed4bb3d1a5af064ed875919b3db9180d5204266966cbe50fa141db17c3e56df50f76bfaffd3fcb27c3dc010ecd54f213a1468e267a30b6564ed711dca7ca8ef0bf2db7be26c2bd6b1b787c4bd327777141ad1ed8f0cdbda1177aebfb872ba13a98300e36b349958", 0xc3}, {&(0x7f0000000d80)="dd6c9c76ba7933a6c5061e33c125e9f3fdf41180c7fa50cf930102f3fda28fdb931b47bc168f4a7b34b1c695d3e36fa73d23de3974cdd4a8a0951a338205aa77716e3e4e1f6d40a85be89db55e2e62ec63663be9eefa9bc5ad46a14731e9c25a1bf2aed9487d0d9db83b491089246ea86adaa1695c9f57bf2b64c1bcc62d45bc9f1ef1f41ae34220db88952b29643762d86340289fb20c0654e2", 0x9a}, {&(0x7f0000000e40)="de1edafded96a7f8d2a62494d201acaa617d84dfa905bad5665af506a6bd37e6e83265baaf153ba107e2156cb85b3de9f652be784414e6b36cbe4d5f5ef65248af7d4f12d05c71f0f3ba7ae664d5ff6640ff03f336276492b33c157868f4249aa98e44589e35549083780398a9942b0049c3bd9619b788953526009d0dff0f0e78930dd5b2a07ede2408bddcfe94114dbf696e5c6208b90953380b2f5abc5d817892c4f625a1f869876f8b0e323c61ee6c6eac5012ab55aaaa69334cda5c4e6200b00bfc8596012dc0e372f990464b94fab97413cae423", 0xd7}, {&(0x7f0000000f40)="abe76ff51e1a4231e22f3bd6599b7b6d65", 0x11}, {&(0x7f0000000f80)="586bdbe01b294982e4d56118cd09d4b6c971cadafd8b9a8b6cdc392b1374c527c212599c8bce5fa854131c5abd163cf5d55b289fe5d1d556e59fd673e4", 0x3d}, {&(0x7f0000000fc0)="0d0af9d4a55893978a9f2c6b141853791311c561f15ab0568b61b026155f43dc7377f60a7c221a9b11ac39136ad76ce90f4d82738f9b28cb6b6b25917a0511e7a4a3e8928d0d33f8fe6786d2dfb628041070f8b07e6d0618bb338fde68861bb1f67df5b3c888f4336b0160fdb15494a4", 0x70}, {&(0x7f0000001040)="0a22ef848d0ec5e52d4a82dd1a75d03b8c3b47f6090d2c03df5464a910a8fd6527e8dff7d8b174de6c8e1c40d84d60e2c7ab5bcb19970421bd8502d5246292501149be8ffe96e9cc03f51b8fad18fd53b6feb7d7db6b73cffe720f02a2ab96b9fa4e5bd2a46a818bc0462ff5381d045bb9d5995048d10d246a15d6cee11971eca219996c17e49e23a57f2cbfa6d077c5853f3d9100bba65c9da129b0738ffeff14b8e8786e1f1fca56cf4b7a2bdd54396414fe610539e11f8d05333940ca091eeedc2347af6e1358e475e85b4c93150757daea902f7229a30c79ad6bc296b9de8a9a6f229fb05aa570c93275a14825", 0xef}], 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="20000000000000008400000002b7505da20fcca95400000003000000ba5f601147008ce76f53db7750913dc3a39797875abe", @ANYRES32=r3, @ANYBLOB="18000000000000008400000006000000d1650000000000003000000000000000840000000100000000080000000200000600000008000000070000000000000008000000", @ANYRES32=r3, @ANYRESDEC=r1], 0x80, 0x20000000}], 0x3, 0x20000044)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r6, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20004000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30020000060a0b04000000000000000002001d956af6ad1b7d4ab5f662335f210c000000000000000900010073797a30000000000900020073797a320000000014000000f3f25c0cef901e61d2702bcda5aac63e2a49338532b6"], 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0xa, 0x5, 0x0)

695.231032ms ago: executing program 1 (id=688):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, 0x1}, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x440)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={<r3=>r1, 0x8, 0x8001, 0x5})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xff, 0x32}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1128}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x5, 0x10, 0x1000, 0xfffb]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2c5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendto$phonet(r3, &(0x7f0000000440)="d1a89983f95ffa4f0cd29e8d2dec6109298d61ce068dbf086c1300c6a7b386aef29fa844c6c78040cebadfc3d87a69fbf954c70b06ab855b1e8f807444b8f8d4541c33d838cdc6d30930c0e5f7c646ea798285d9d97463f47251b5e518f8c0feb7826515de19cb7c4395833026f9e3fa84c0fc76b26514beaba62fe75594eed4b35def905d729765d1", 0x89, 0x44044, &(0x7f0000000500)={0x23, 0x16, 0x8, 0xb}, 0x10)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x264, r4, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb, 0x10}}}}, [@NL80211_ATTR_IE={0x236, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xf, 0x8}}, @random_vendor={0xdd, 0xb8, "f7a96a35f972108c4d99087470836ab28b20fe8db4bc30c8a397adf80c13a7a973b7343343334a999dfbc51e3a7c0d57bbef6d38ccbab8414608e2251b5aff55e52e5b480af7db15ecdc08c15e75c76a91691938e551a15fc998b0e68c2b2adc42352a4510cd1885bbf1ba17aa4f4a6796c3a4d8e2fd4e69f6dbe4f4f8d54521e50642193edce9d07b1fa5c473dca59a859dd03fd22263f78c82740be41d1eba537a8776c374214b23dfab9233efa2c750d5231988048536"}, @preq={0x82, 0x46, {{0x1, 0x0, 0x1}, 0x7, 0xf, 0x8, @broadcast, 0xfffff5fb, @void, 0x0, 0x5, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0x572a}, {{0x1, 0x0, 0x1}, @device_a, 0x3}, {{}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x6f9d7407}]}}, @tim={0x5, 0xe8, {0x0, 0xce, 0x1, "405ca931210585b104bedbbc4fafd4e940f83c9a97438e3e9a99d91edc18e74a431b35bf669f8dd1b486df2a28c5d8837274202d886915e4da58270909f732637a9be06aab3b5adf91ad71009470d7a42e7d9455d14e3dff571e74bf58843e0c86560241db8e26947be9d4b1de2e8d80616bf56b140661a419b43b3baddb3d3a41522ce61e9d48e0abb4975713877e99ff53e7b2674ccde3860e5484f60132fb6d75195c421b869af56670b6645a78c50a6940a6cdb370290776687168a0b41c7cd76f19ab953d315bcf3e59492e13facedaf0a4bb09f562794dd713101bc3f13b90d416db"}}, @random_vendor={0xdd, 0x30, "f62466ac88a8c9dbb2741ec67195d4bf45351fa143c03c8473ff8c835a4d97d6f53c97cd930fcac6da3a79bca3fd2e1b"}, @dsss={0x3, 0x1, 0xa1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r3)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$FIOCLEX(r6, 0x5451)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000008c0)={0xe8, 0x9, 0xffff, 0xa94, 0x3395})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x8, r6}, 0x18)
sendmsg$nl_route(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getroute={0x14, 0x1a, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4)
sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f5, 0x200, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'syztnl1\x00', <r8=>0x0, 0x2f, 0x0, 0xb, 0x1, 0x2, @empty, @local, 0x20, 0x700, 0x10000, 0x8}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r3, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0], 0x0, 0x1e, &(0x7f0000000d40)=[{}], 0x8, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f80)={'syztnl1\x00', <r10=>0x0, 0x7800, 0xbbb0, 0x2, 0x5, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x68, 0x0, 0xfe, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x6, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x2}, {@loopback}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001040)={'wg1\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl2\x00', <r12=>0x0, 0x4, 0xc0, 0xf, 0x3, 0x20, @loopback, @mcast2, 0x0, 0x20, 0x6, 0x5}})
getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000001140)={@initdev, <r13=>0x0}, &(0x7f0000001180)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001240)={'syztnl2\x00', &(0x7f00000011c0)={'ip6gre0\x00', <r14=>0x0, 0x0, 0x1, 0x1, 0x3ff, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x40, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001280)={'syztnl1\x00', <r15=>0x0, 0x40, 0x20, 0x5, 0x2, {{0x10, 0x4, 0x1, 0x39, 0x40, 0x65, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0x25, 0x0, 0x7, [0xd317, 0x8, 0x0, 0xfffffff1, 0x5]}, @ra={0x94, 0x4}, @generic={0x89, 0x3, 'P'}, @rr={0x7, 0xb, 0x66, [@empty, @empty]}, @generic={0x86, 0x2}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000001480)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xd8, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)
getsockname$packet(r3, &(0x7f00000014c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001500)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000015c0)={'ip6gre0\x00', &(0x7f0000001540)={'ip6tnl0\x00', r16, 0x2f, 0x1e, 0x6, 0x5, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x80, 0x20, 0x9, 0x1}})

631.255889ms ago: executing program 1 (id=689):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x90000)

627.645882ms ago: executing program 0 (id=691):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x104, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0x917, 0x1000}, 0x14}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="60000000020601020000000000000000000020000900020073797a320000000011000300686173683a6e65742c6e6574000000000500050002000000050004000200000014000780080006000000000208001340fffffffc0500010007"], 0x60}}, 0x20000000)

547.204484ms ago: executing program 0 (id=692):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) (async)
shutdown(r0, 0x1) (async)
r1 = socket(0x1e, 0x4, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000003c0)=ANY=[], 0x9)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, 0x1403, 0x1, 0x709d29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000010) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r5], 0x38}}, 0x0) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x2, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50)
write$tun(r7, 0x0, 0x0) (async)
recvmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) (async)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', <r8=>0x0, 0x1, 0x700, 0x17c8, 0x7fff, {{0x1d, 0x4, 0x0, 0x24, 0x74, 0x67, 0x0, 0xf, 0x4, 0x0, @multicast2, @private=0xa010100, {[@lsrr={0x83, 0xf, 0xc4, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x7}, @generic={0x86, 0xe, "46335ee5d132040ff43b56d2"}, @rr={0x7, 0x0, 0xf0}]}}}}}) (async)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x81, 0x0, 0x3, 0x8e4, 0x8, 0x1}, {0x7, 0x80, 0x5, 0x389, 0x9, 0x4}], ['\x00', '\x00', '\x00', '\x00']})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000051000200000000000800a00180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000f1ffffffb7030000ae00000005000000c80000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x61) (async)
connect$packet(r1, &(0x7f0000000080)={0x11, 0x5, r8, 0x1, 0x2, 0x6, @remote}, 0x14) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000004900), 0x4)

546.910704ms ago: executing program 1 (id=693):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x1fa, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00dd86bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

546.636662ms ago: executing program 0 (id=694):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x10, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040010)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000004c0)=""/206, 0x28, 0xce, 0x1, 0x3, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x3, 0x5, 0x400, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x3}, 0x50)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r5, <r9=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x85}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000480)='GPL\x00', 0x1, 0x9f, &(0x7f00000007c0)=""/159, 0x40f00, 0x10, '\x00', r3, 0x18, r4, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xc, 0x1, 0x81}, 0x10, 0xb9d7, 0xffffffffffffffff, 0x6, &(0x7f0000000c80)=[r8, r9], &(0x7f0000000cc0)=[{0x5, 0x1, 0xf, 0xb}, {0x5, 0x2, 0x3, 0xb}, {0x0, 0x2, 0x5, 0x4}, {0x3, 0x4, 0x0, 0x4}, {0x2, 0x2, 0x0, 0x6}, {0x0, 0x1, 0x10, 0x1}], 0x10, 0x5}, 0x94)

449.793426ms ago: executing program 0 (id=695):
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x7, 0x1c16, 0x8}, 0x5, 0x0, 0x10000, 0x6, 0x1, 0xe, 0x14, 0x1f, 0x7, 0x78d9, {0x1, 0x6, 0xc, 0xfffffffb, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000006c0)={0x6, 0x0, 0x7, 0x9eb8, <r3=>0x0}, &(0x7f0000000a40)=0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000001240)=[{&(0x7f0000000140)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000180)="33f4d93748ac572f2319e0fac0955709032d7c3ed5bf0a80fd480f4abe8f5e97578cd0b577926c8c8a3acfc4c3e38e58a783a5e609f2f5b195a6e54193e3bb15682110436c85070335535fc59841243a9dcd5d448bfbae9a51e881f978c13dd69451dc9102594c00446e90ba7f21d4a16f40234e29ab33b55da05d74211cee1203d44de0f93058c213949eb360713f52af727dd383b94e703a44466a90b97e3044b1506ee0a963c70a84ed9ea9a16f5ac998f1e05fc5b1458f24", 0xba}, {&(0x7f0000000240)="a444bb9117b49a450570dd5af6b371fd52c23e91b4e27981f243d1d603ce6f1de9730c8d162b4739afd0646e68ad50d0ec93ca8acfd4ff5a5c85d000aeaf5375c354d4294e5a39e742f04c3c43686af0018fe1898781c9a8f8ebc288fbbcabd74f258d504b7e61f671150b8d9f99bebef1b38a0da9e8df021cc2db013cfa76faf2b54fcfa68e15f404b02e6bad0aa11ea953acc8b94ad17dba86c4fc9f5f47d49e4ca9c7db9aaf9956eeac40db451b997019a09955", 0xb5}, {&(0x7f0000000340)="615311ae2870d86c4c51c5b8a5db73b3eaba207434e700a12676b1547665d2f120232cc93a56feb589745f24809a721d91238aad6f8d3e9309d973cc7fbb2632869fa823b204b5b8b944ff5cc1559be22b7a2942bc3d9693fb4076e79ad43f91a1f534a76c02ef0e4722adbd1808a1501a7734b88d5c035fd9ef4064e2c641530258", 0x82}, {&(0x7f0000000400)="db5bf9a32117d6e69fdb42abd3c8b2d71b9dc1621a20ae5778307bfadc7f735ce8e3a9e2fbf7edf5147470c89190757ec0b0c4ab6313", 0x36}, {&(0x7f0000000500)="49e1ee21081e24f75678b6bf4702293ce803500783d7e56ab89e4c5eb4fb46ae1b0c08a098b0685b4e64466487a1a1f1937ed5eaa9dedd9920dd2ca750d74319706ea3d6ecf44f2604aaf708712d6a0b8cbceeeede4b7eed34bcfba5f8485d8be465a89b4fc759757be45c3cded364b9d258f92458802800ef3fdac4122d82c4256dcb2b75732f680500d0df6ec5a911be7f7e86e416b46d83d68c5bb43f7f0f7f4716e1d7caa0315e", 0xa9}, {&(0x7f00000005c0)="434b357acd70e96409c8462063", 0xd}, {&(0x7f0000000600)="d2203bec8c5a9e8bb179fef7ecbcde0a33f2b451a6eab7c963d9f1d484fc69fdeab0c7c7fea1f4f062ec17b0d141061dab3763f2bd35ecd8377626cee5366b218cabd06e9666b49a689444edde9a37b7f1294c8de2f9b1529070cb74c8430b814a17d7299645882108318739e07cf22087025580955dfd55dddc19d24c50f328ed0e226b9a8b6a9873a49a89716f03baf89c55a40fe184ae638b", 0x9a}, {&(0x7f0000000780)="f65e82151a154a0ea87ec9f01a46f4e726714b749ed77380e916d707fdd1fb9424370904981e36378cdebd20f8df70d48d8c838bedc7315e7c5b776c50b94a01751a7179c4dad39320d28f350d878ddad0275213591af2c2690136550bb1a1d285293361b9b1076bee93162d431f44d5edd5adbe52baad091d7e293920063d8af59652d7b2adda832d8a5fed16dda68c3e41685aab0563a92a1b1d331e29ad44cc827c05450ca3835e2b2080a47816dc2c5919dfa5b471bfb1dde852f6f0484db889771cd3ef8de1e5520657c64c276e6b64235731b6b36c421850d4df4d24fb429612cfdf", 0xe5}, {&(0x7f0000000880)="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", 0xfb}], 0x9, &(0x7f0000000a80)=[@init={0x18, 0x84, 0x0, {0xf9d3, 0x0, 0x0, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x6, 0x8, 0x7, r3}}, @init={0x18, 0x84, 0x0, {0x3, 0x101, 0x2, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010100}, @authinfo={0x18, 0x84, 0x6, {0xfffe}}], 0x80, 0x20000000}, {&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000b40)="e477c6189c10343dd4a171755b774cb64355b38a8258cd4fc9f154578b2d91e97cfe2f5d31a56bad4fc2cc7deeacf662fe9975", 0x33}], 0x1, &(0x7f0000000bc0)=[@authinfo={0x18, 0x84, 0x6, {0xfff9}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0xf800}}], 0x68, 0x40400c0}, {&(0x7f0000000c40)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000c80)="fad983a2df707e66996699d5ebe77e658756d55597e708e8156c05e3d68c012f7e4958116bda78507b7f9a2bfc6efbf0982fb5ac0dea3ea8594abf6ab68cb47532740fd62f5c265598814c0ba6129723eca42236728bfaa79f4e9ebed4bb3d1a5af064ed875919b3db9180d5204266966cbe50fa141db17c3e56df50f76bfaffd3fcb27c3dc010ecd54f213a1468e267a30b6564ed711dca7ca8ef0bf2db7be26c2bd6b1b787c4bd327777141ad1ed8f0cdbda1177aebfb872ba13a98300e36b349958", 0xc3}, {&(0x7f0000000d80)="dd6c9c76ba7933a6c5061e33c125e9f3fdf41180c7fa50cf930102f3fda28fdb931b47bc168f4a7b34b1c695d3e36fa73d23de3974cdd4a8a0951a338205aa77716e3e4e1f6d40a85be89db55e2e62ec63663be9eefa9bc5ad46a14731e9c25a1bf2aed9487d0d9db83b491089246ea86adaa1695c9f57bf2b64c1bcc62d45bc9f1ef1f41ae34220db88952b29643762d86340289fb20c0654e2", 0x9a}, {&(0x7f0000000e40)="de1edafded96a7f8d2a62494d201acaa617d84dfa905bad5665af506a6bd37e6e83265b0af153ba107e2156cb85b3de9f652be784414e6b39dbf68750b03deedb7e2ccd7a76cbe4d5f5ef65248af7d4f12d05c71f0f3ba7ae664d5ff664080f1f336276492b33c15c8fdff94891f627868f4249aa98e44589e35549083780398a9942b004dc3bd9619b788953526009d0ddfb00e78930dd5b2a07eb90953380b2f5abc5d817892c4f625a1f869876f8b0e323c61ee6c6eac5012ab55aaaa69334cda584e6200b00bfc8596012dc0e372f990464b94fab97413cae423", 0xdc}, {&(0x7f0000000f40)="abe76ff51e1a4231e22f3bd6599b7b6d65", 0x11}, {&(0x7f0000000f80)="586bdbe01b294982e4d56118cd09d4b6c971cadafd8b9a8b6cdc392b1374c527c212599c8bce5fa854131c5abd163cf5d55b289fe5d1d556e59fd673e4", 0x3d}, {&(0x7f0000000fc0)="0d0af9d4a55893978a9f2c6b141853791311c561f15ab0568b61b026155f43dc7377f60a7c221a9b11ac39136ad76ce90f4d82738f9b28cb6b6b25917a0511e7a4a3e8928d0d33f8fe6786d2dfb628041070f8b07e6d0618bb338fde68861bb1f67df5b3c888f4336b0160fdb15494a4", 0x70}, {&(0x7f0000001040)="0a22ef848d0ec5e52d4a82dd1a75d03b8c3b47f6090d2c03df5464a910a8fd6527e8dff7d8b174de6c8e1c40d84d60e2c7ab5bcb19970421bd8502d5246292501149be8ffe96e9cc03f51b8fad18fd53b6feb7d7db6b73cffe720f02a2ab96b9fa4e5bd2a46a818bc0462ff5381d045bb9d5995048d10d246a15d6cee11971eca219996c17e49e23a57f2cbfa6d077c5853f3d9100bba65c9da129b0738ffeff14b8e8786e1f1fca56cf4b7a2bdd54396414fe610539e11f8d05333940ca091eeedc2347af6e1358e475e85b4c93150757daea902f7229a30c79ad6bc296b9de8a9a6f229fb05aa570c93275a14825", 0xef}], 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="20000000000000008400000002000000090001000200000003000000", @ANYRES32=r3, @ANYBLOB="18000000000000008400000006000000d1650000000000003000000000000000840000000100000000080000000200000600000008000000070000000000000008000000", @ANYRES32=r3, @ANYBLOB="82440000000000008400000005000000300000006d000000b136a9d3527a303a22b2de4126058c746a6bc621b87e5f104b88405754e0cfd504bbb0c0e2cd72614e6a93526bc7a81a70e291f5172b2d68904815e1fb16cd8689ee5b27c5992d2235d01378745355c701ffff00000000006e13d4659109bcfba69f818aa95cdcf6"], 0x80, 0x20000000}], 0x492492492492519, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x20000802)

448.793883ms ago: executing program 1 (id=696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x4004080)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa9}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @exit, @exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x3, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x18c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80000)

389.857428ms ago: executing program 1 (id=697):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}}, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x27, 0x3, 0x33)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r8, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xa1ffffff, 0x0, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}}, 0x34}}, 0x50)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000)
syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$AUDIT_TRIM(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
sendmsg$kcm(r9, 0x0, 0x0)
r10 = socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x7120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000001ada00006b110e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

368.118332ms ago: executing program 2 (id=698):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x46, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004880}, 0x8004)

270.980965ms ago: executing program 0 (id=699):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_opts(r2, 0x0, 0xc, 0x0, &(0x7f0000000080))
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

270.655775ms ago: executing program 2 (id=700):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x280000)

211.083165ms ago: executing program 0 (id=701):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = getpid() (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async, rerun: 64)
r6 = socket(0x2b, 0x80801, 0x1) (rerun: 64)
setsockopt$inet6_mtu(r6, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x5c, 0x6a, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

210.616239ms ago: executing program 2 (id=702):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x20007}], 0x1, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010053797a300000000008000340000000e2130000001100010000000000000000000000000a"], 0x64}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=<r2=>r0], 0x48}}, 0x8c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=<r4=>0xffffffffffffffff], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESHEX=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESOCT=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x40080)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000b60a010800000010000000000a00f900"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x5b, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x14, &(0x7f0000000740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r8=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="0800011042f5b99deabb002db6c830da7ed4739604bdb089978cc42c23fc0b172a89dce0b22728882408604ba27d55704eebcda604066d52e7199edf2d8096997a9bfccc53", @ANYRES32=r8, @ANYBLOB="08000e0006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2400c081)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010001000000000c000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

60.728794ms ago: executing program 2 (id=703):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000000300240007"], 0xd0}}, 0x0)
socketpair(0x22, 0x3, 0x0, &(0x7f0000000780))

59.984759ms ago: executing program 2 (id=704):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x188, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x3b, 0xc, "a2d411d501e1394b65ad6731f55aafe72c738a4b2b4684d02440fb12f51dfa40d6189c31a1198c3e9b19a438b01bc6b6705f3b62f2791f"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15888c56}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8fd21a9}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x39a2e9f2}]}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x115331e7}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f65a8e7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f2be17c}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfc908e1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2993c1cc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c13e607}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x214}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x140, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x224}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa5f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbdd0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8080}, 0xc010)
r5 = accept4$bt_l2cap(r2, &(0x7f00000005c0)={0x1f, 0x0, @none}, &(0x7f0000000600)=0xe, 0x80000)
connect$bt_l2cap(r5, &(0x7f0000000640)={0x1f, 0x8, @none, 0x5}, 0xe)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xab5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6cb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008095}, 0x80) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), 0xffffffffffffffff) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000008c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0xc801) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000a00)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000a40)=<r12=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1dc, r9, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_SDP={0x1b0, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xd, 0x1, 'pim6reg1\x00'}, {0x4}, {0x7, 0x1, '([)'}, {0x6, 0x1, '!\xfc'}, {0x7, 0x1, ']$]'}, {0x4}, {0xc, 0x1, '*-{(/-M['}, {0x5, 0x1, '('}]}, {0x80, 0x0, 0x0, 0x1, [{0x14, 0x1, '*{]\t&!\\(:$]){@\xc3]'}, {0x5, 0x1, '+'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0xd, 0x1, 'pim6reg1\x00'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xb, 0x1, 'filter\x00'}, {0x5, 0x1, '.'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x6, 0x1, '@+'}]}, {0x20, 0x0, 0x0, 0x1, [{0xa, 0x1, 'vlan1\x00'}, {0xb, 0x1, 'TIPCv2\x00'}, {0x4}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'route\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x8, 0x1, '/+=]'}, {0x7, 0x1, '\\&{'}, {0x8, 0x1, '[}!['}]}, {0x18, 0x0, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '^'}, {0x9, 0x1, '}#}@['}, {0x4}]}, {0x64, 0x0, 0x0, 0x1, [{0xa, 0x1, 'vcan0\x00'}, {0x6, 0x1, '))'}, {0xa, 0x1, 'route\x00'}, {0xc, 0x1, ',-,\\:\\-@'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '#'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '}'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r13, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000e80)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000ec0)={'macsec0\x00', {0x2, 0x0, @remote}})
close(r5) (async)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r8)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r14, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c840}, 0x1) (async)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000001040)=0xea, 0x4)

0s ago: executing program 2 (id=705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x60}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010002000000fbdbdf250a405300000000081a00030014000200fc0200000000000000000000000000001400010020010000000000000000000000000002"], 0x44}}, 0x40000)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000200)=0x10)
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x800, 0x5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004580)=ANY=[@ANYBLOB="5c00000010003904000000000100000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x5c}}, 0x20040004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4471' (ED25519) to the list of known hosts.
syzkaller login: [   56.101210][ T5818] cgroup: Unknown subsys name 'net'
[   56.208230][ T5818] cgroup: Unknown subsys name 'cpuset'
[   56.212543][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.553807][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.668171][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.671989][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.676008][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.680351][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.683909][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.698137][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.701157][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.704790][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.709751][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.713356][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.741673][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.745086][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.753345][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.757736][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.761524][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.986748][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   61.993245][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   62.095452][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   62.194528][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.198097][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.200488][ T5834] bridge_slave_0: entered allmulticast mode
[   62.203397][ T5834] bridge_slave_0: entered promiscuous mode
[   62.225002][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.228742][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.231700][ T5838] bridge_slave_0: entered allmulticast mode
[   62.236054][ T5838] bridge_slave_0: entered promiscuous mode
[   62.240952][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.243972][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.247404][ T5838] bridge_slave_1: entered allmulticast mode
[   62.251161][ T5838] bridge_slave_1: entered promiscuous mode
[   62.255938][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.258943][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.261803][ T5834] bridge_slave_1: entered allmulticast mode
[   62.265929][ T5834] bridge_slave_1: entered promiscuous mode
[   62.360162][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.365128][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.368441][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.371579][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.374597][ T5842] bridge_slave_0: entered allmulticast mode
[   62.378819][ T5842] bridge_slave_0: entered promiscuous mode
[   62.383992][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.388361][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.398208][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.401212][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.404084][ T5842] bridge_slave_1: entered allmulticast mode
[   62.408542][ T5842] bridge_slave_1: entered promiscuous mode
[   62.440774][ T5838] team0: Port device team_slave_0 added
[   62.454679][ T5834] team0: Port device team_slave_0 added
[   62.457957][ T5838] team0: Port device team_slave_1 added
[   62.461933][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.467206][ T5834] team0: Port device team_slave_1 added
[   62.472470][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.521391][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.523660][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.532091][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.536479][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.538691][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.547646][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.553061][ T5842] team0: Port device team_slave_0 added
[   62.556445][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.558925][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.567113][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.571276][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.573471][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.581728][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.588084][ T5842] team0: Port device team_slave_1 added
[   62.628971][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.631805][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.642714][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.660212][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.663096][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.672813][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.681218][ T5838] hsr_slave_0: entered promiscuous mode
[   62.683546][ T5838] hsr_slave_1: entered promiscuous mode
[   62.706057][ T5834] hsr_slave_0: entered promiscuous mode
[   62.708740][ T5834] hsr_slave_1: entered promiscuous mode
[   62.710926][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   62.712807][ T5834] Cannot create hsr debugfs directory
[   62.768974][ T5842] hsr_slave_0: entered promiscuous mode
[   62.771315][ T5842] hsr_slave_1: entered promiscuous mode
[   62.773471][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   62.776175][ T5842] Cannot create hsr debugfs directory
[   62.993701][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.003737][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.011172][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.027606][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.081322][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.091092][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.100257][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.104942][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.162994][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.174150][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.182512][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.191068][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.201477][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.236730][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   63.245684][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.248520][ T4865] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.258184][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.261025][ T4865] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.329202][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.358991][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   63.373151][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.376107][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.385023][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.396965][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.399920][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.427602][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   63.443595][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.446479][ T5116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.459470][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.462345][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.522649][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.600121][ T5834] veth0_vlan: entered promiscuous mode
[   63.607701][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.614957][ T5834] veth1_vlan: entered promiscuous mode
[   63.643920][ T5834] veth0_macvtap: entered promiscuous mode
[   63.653587][ T5834] veth1_macvtap: entered promiscuous mode
[   63.660788][ T5842] veth0_vlan: entered promiscuous mode
[   63.677498][ T5842] veth1_vlan: entered promiscuous mode
[   63.684636][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.694176][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.709967][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.727592][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.732134][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.741024][ T5842] veth0_macvtap: entered promiscuous mode
[   63.743564][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.751191][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.755634][ T5224] Bluetooth: hci1: command tx timeout
[   63.756571][ T5839] Bluetooth: hci0: command tx timeout
[   63.764811][ T5842] veth1_macvtap: entered promiscuous mode
[   63.775086][ T5838] veth0_vlan: entered promiscuous mode
[   63.791293][ T5838] veth1_vlan: entered promiscuous mode
[   63.807516][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.822890][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.826445][ T5839] Bluetooth: hci2: command tx timeout
[   63.837189][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.841188][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.846222][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.852035][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.854843][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.863092][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.901771][ T5838] veth0_macvtap: entered promiscuous mode
[   63.908222][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.910712][ T5838] veth1_macvtap: entered promiscuous mode
[   63.911329][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.979631][ T5116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.988064][ T5116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.002714][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.010539][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.038960][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.050255][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.053411][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.062932][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.093483][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.096988][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.099619][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.110522][ T5904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'.
[   64.168229][ T5116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.170933][ T5116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.217303][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.224732][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.248366][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   64.252178][ T5911] team1 (uninitialized): Failed to send options change via netlink (err -105)
[   64.272056][ T5911] team1: entered promiscuous mode
[   64.273692][ T5911] team1: entered allmulticast mode
[   64.291160][ T5911] Zero length message leads to an empty skb
[   64.496456][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.497234][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.513683][ T5928] xt_SECMARK: invalid mode: 0
[   64.524140][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'.
[   64.556535][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   64.573577][ T5932] netlink: 'syz.0.13': attribute type 6 has an invalid length.
[   64.644371][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15'.
[   64.768503][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'.
[   64.862180][ T5945] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   64.889381][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'.
[   65.081282][ T5966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23'.
[   65.086400][ T5966] netlink: 'syz.1.23': attribute type 11 has an invalid length.
[   65.089679][ T5966] netlink: 'syz.1.23': attribute type 11 has an invalid length.
[   65.092821][ T5966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.23'.
[   65.159132][ T5966] bridge1: entered promiscuous mode
[   65.161414][ T5966] bridge1: entered allmulticast mode
[   65.480110][ T5984] tipc: Started in network mode
[   65.482399][ T5984] tipc: Node identity a260084bd74d, cluster identity 4711
[   65.486370][ T5984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.489944][ T5984] syzkaller0: entered promiscuous mode
[   65.492321][ T5984] syzkaller0: entered allmulticast mode
[   65.508451][ T5984] tipc: Resetting bearer <eth:syzkaller0>
[   65.512536][ T5982] tipc: Resetting bearer <eth:syzkaller0>
[   65.527071][ T5982] tipc: Disabling bearer <eth:syzkaller0>
[   65.664594][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28'.
[   65.757136][ T5996] xt_SECMARK: invalid mode: 0
[   65.826887][ T5839] Bluetooth: hci0: command tx timeout
[   65.829156][ T5839] Bluetooth: hci1: command tx timeout
[   65.905773][ T5224] Bluetooth: hci2: command tx timeout
[   65.926295][ T6001] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   65.931673][ T6001] bond1 (unregistering): Released all slaves
[   66.630644][ T6046] xt_SECMARK: invalid mode: 0
[   66.715891][ T6052] batadv_slave_0: entered promiscuous mode
[   66.725162][ T6052] batadv_slave_0: left promiscuous mode
[   66.928488][ T6066] xt_SECMARK: invalid mode: 0
[   66.967235][ T6068] batadv0: mtu less than device minimum
[   66.991168][ T6068] bridge_slave_1: left allmulticast mode
[   66.993401][ T6068] bridge_slave_1: left promiscuous mode
[   66.996828][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.003526][ T6068] bridge_slave_0: left allmulticast mode
[   67.006651][ T6068] bridge_slave_0: left promiscuous mode
[   67.008560][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.181988][ T6072] netlink: 'syz.2.58': attribute type 12 has an invalid length.
[   67.465628][ T6089] nbd0: detected capacity change from 0 to 63
[   67.485778][   T57] block nbd0: Receive control failed (result -104)
[   67.516079][ T6097] netlink: 'syz.2.67': attribute type 30 has an invalid length.
[   67.579828][ T6106] netlink: 'syz.1.68': attribute type 10 has an invalid length.
[   67.592990][ T6106] dummy0: entered promiscuous mode
[   67.603592][ T6106] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   67.905976][ T5839] Bluetooth: hci0: command tx timeout
[   67.908434][ T5224] Bluetooth: hci1: command tx timeout
[   67.985833][ T5224] Bluetooth: hci2: command tx timeout
[   68.016082][ T6121] netlink: 'syz.0.75': attribute type 10 has an invalid length.
[   68.020370][ T6121] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.025568][ T6121] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.455762][ T6139] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[   68.459861][ T6139] bond2 (unregistering): Released all slaves
[   68.711433][ T6152] tipc: Started in network mode
[   68.713128][ T6152] tipc: Node identity 6e1c36a2dd16, cluster identity 4711
[   68.715595][ T6152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.738670][ T6151] tipc: Disabling bearer <eth:syzkaller0>
[   69.011832][ T6174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.020888][ T6176] Cannot find set identified by id 0 to match
[   69.070709][ T6179] netlink: 'syz.0.97': attribute type 11 has an invalid length.
[   69.078235][ T6179] netlink: 'syz.0.97': attribute type 11 has an invalid length.
[   69.094970][ T5848] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.098661][ T5848] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.106211][ T6179] netlink: 'syz.0.97': attribute type 11 has an invalid length.
[   69.106888][    C0] Illegal XDP return value 16128 on prog  (id 28) dev team0, expect packet loss!
[   69.108811][ T5848] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.127658][ T5848] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.141293][ T6184] __nla_validate_parse: 15 callbacks suppressed
[   69.141308][ T6184] netlink: 240 bytes leftover after parsing attributes in process `syz.2.100'.
[   69.328884][ T6194] dummy0: left promiscuous mode
[   69.331862][ T6194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.386101][ T6198] xt_TCPMSS: Only works on TCP SYN packets
[   69.390248][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.430188][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'.
[   69.434994][ T6198] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.445872][ T6198] vlan2: entered promiscuous mode
[   69.450478][ T6198] bond1: entered promiscuous mode
[   69.640238][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   69.926395][ T6226] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   69.958288][ T6226] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.960960][ T6229] batadv_slave_0: entered promiscuous mode
[   69.970864][ T6226] bond2: (slave dummy0): making interface the new active one
[   69.974025][ T6226] bond2: (slave dummy0): Enslaving as an active interface with an up link
[   69.979876][ T6229] batadv_slave_0: left promiscuous mode
[   69.983153][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'.
[   69.995626][ T5839] Bluetooth: hci0: command tx timeout
[   69.997697][ T5224] Bluetooth: hci1: command tx timeout
[   70.057917][ T6226] bond2 (unregistering): (slave dummy0): Releasing active interface
[   70.062530][ T6226] bond2 (unregistering): Released all slaves
[   70.077033][ T5224] Bluetooth: hci2: command tx timeout
[   70.209869][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'.
[   70.224521][ T6238] bridge0: port 1(veth0_to_bond) entered blocking state
[   70.227382][ T6238] bridge0: port 1(veth0_to_bond) entered disabled state
[   70.229736][ T6238] veth0_to_bond: entered allmulticast mode
[   70.232434][ T6238] veth0_to_bond: entered promiscuous mode
[   70.317086][ T6250] xt_hashlimit: max too large, truncated to 1048576
[   70.572190][ T6273] nbd: couldn't find device at index 536870912
[   70.597714][ T6273] netlink: 'syz.2.131': attribute type 1 has an invalid length.
[   70.636096][ T6273] bond2: (slave veth3): Enslaving as an active interface with a down link
[   70.648208][ T6273] bond2: (slave veth5): Enslaving as an active interface with a down link
[   70.651477][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'.
[   70.654318][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'.
[   70.656985][ T6273] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.665179][ T6273] netlink: 96 bytes leftover after parsing attributes in process `syz.2.131'.
[   70.671196][ T6273] xt_l2tp: missing protocol rule (udp|l2tpip)
[   70.712291][ T6283] sctp: [Deprecated]: syz.2.134 (pid 6283) Use of int in max_burst socket option.
[   70.712291][ T6283] Use struct sctp_assoc_value instead
[   70.731262][ T6285] xt_hashlimit: size too large, truncated to 1048576
[   70.811002][ T6295] xt_SECMARK: invalid mode: 0
[   70.836185][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[   70.843075][ T6297] netlink: 'syz.2.138': attribute type 23 has an invalid length.
[   70.972956][ T6308] tap0: tun_chr_ioctl cmd 1074025677
[   70.974805][ T6308] tap0: linktype set to 0
[   70.981425][ T6308] tap0: tun_chr_ioctl cmd 2147767519
[   71.000655][ T6312] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   71.418935][ T6332] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.503662][ T6342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.509603][ T6342] syzkaller0: entered promiscuous mode
[   71.511480][ T6342] syzkaller0: entered allmulticast mode
[   71.540271][ T6344] bond1: option ad_select: invalid value (34)
[   71.543661][ T6344] bond1 (unregistering): Released all slaves
[   71.552494][ T6341] tipc: Resetting bearer <eth:syzkaller0>
[   71.564814][ T6341] tipc: Disabling bearer <eth:syzkaller0>
[   71.698885][ T6356] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[   71.702087][ T6356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.804344][ T6366] xt_CT: No such helper "snmp"
[   71.949958][ T6382] No such timeout policy "syz1"
[   71.957444][ T6384] openvswitch: netlink: Unknown key attributes 2
[   72.000557][ T6388] batadv_slave_0: entered promiscuous mode
[   72.007265][ T6388] batadv_slave_0: left promiscuous mode
[   72.060520][ T6396] vet0_virt_wif: renamed from lo (while UP)
[   72.134538][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.147718][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.150569][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.154090][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.159000][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.161793][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.165814][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.168590][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.171400][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.174239][ T6403] xt_TPROXY: Can be used only with -p tcp or -p udp
[   72.189563][ T6405] netlink: 'syz.2.176': attribute type 19 has an invalid length.
[   72.199494][ T6405] netlink: 'syz.2.176': attribute type 19 has an invalid length.
[   72.202042][ T5848] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.206078][ T5848] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.210936][ T5848] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.214577][ T5848] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.267133][ T6400] 8021q: VLANs not supported on xfrm0
[   72.512785][ T6420] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   72.516124][ T6420] netlink: 'syz.0.181': attribute type 3 has an invalid length.
[   72.679484][ T6429] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   72.824433][ T6438] batadv_slave_0: entered promiscuous mode
[   72.827474][ T6438] batadv_slave_0: left promiscuous mode
[   73.228955][ T6452] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   73.234199][ T6452] bond3 (unregistering): Released all slaves
[   74.114212][ T6482] xt_ecn: cannot match TCP bits for non-tcp packets
[   74.356403][ T6508] __nla_validate_parse: 82 callbacks suppressed
[   74.356417][ T6508] netlink: 228 bytes leftover after parsing attributes in process `syz.0.214'.
[   74.531580][   T34] audit: type=1800 audit(1766020228.021:2): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.214" name="memory.events" dev="tmpfs" ino=409 res=0 errno=0
[   74.532639][ T6528] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[   74.605181][ T6537] netlink: 'syz.1.221': attribute type 4 has an invalid length.
[   74.707120][ T6552] netlink: 'syz.2.226': attribute type 11 has an invalid length.
[   74.710263][ T6552] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.226'.
[   74.721362][ T5888] IPVS: starting estimator thread 0...
[   74.760577][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.767972][ T6560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.229'.
[   74.833871][ T6562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.838757][ T6557] IPVS: using max 78 ests per chain, 187200 per kthread
[   74.868665][ T6573] syz.2.234 uses old SIOCAX25GETINFO
[   74.968967][ T6576] tipc: Started in network mode
[   74.970744][ T6576] tipc: Node identity 9ec4870cc907, cluster identity 4711
[   74.973294][ T6576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.976505][ T6576] syzkaller0: entered promiscuous mode
[   74.978559][ T6576] syzkaller0: entered allmulticast mode
[   74.989064][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[   75.003644][ T6575] tipc: Disabling bearer <eth:syzkaller0>
[   75.082177][ T6578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.481312][ T6610] bond2 (unregistering): Released all slaves
[   75.568886][ T6617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.244'.
[   75.626079][ T6617] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   75.629349][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.0.245'.
[   75.633273][ T6617] bond2 (unregistering): Released all slaves
[   75.761359][ T6621] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   75.763988][ T6631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.767751][ T6631] IPv6: NLM_F_CREATE should be set when creating new route
[   75.770111][ T6631] IPv6: NLM_F_CREATE should be set when creating new route
[   75.774692][ T6632] netlink: 112 bytes leftover after parsing attributes in process `syz.2.247'.
[   75.781322][ T6621] bond2 (unregistering): Released all slaves
[   75.793565][ T6633] netlink: 112 bytes leftover after parsing attributes in process `syz.2.247'.
[   75.834289][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   75.932965][ T6649] openvswitch: netlink: IP tunnel dst address not specified
[   75.990737][ T6658] netlink: 1208 bytes leftover after parsing attributes in process `syz.1.255'.
[   76.504076][ T6714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.511101][ T6714] syzkaller0: entered promiscuous mode
[   76.513369][ T6714] syzkaller0: entered allmulticast mode
[   76.540048][ T6714] tipc: Resetting bearer <eth:syzkaller0>
[   76.549739][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.551851][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.559078][ T6713] tipc: Resetting bearer <eth:syzkaller0>
[   76.583533][ T6713] tipc: Disabling bearer <eth:syzkaller0>
[   76.655153][ T6723] tun0: tun_chr_ioctl cmd 1074025672
[   76.657099][ T6723] tun0: ignored: set checksum disabled
[   76.724161][ T6731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.866042][ T6736] Bluetooth: MGMT ver 1.23
[   76.931487][ T6738] vlan0: entered promiscuous mode
[   76.933365][ T6738] bond0: entered promiscuous mode
[   76.936014][ T6738] bond_slave_0: entered promiscuous mode
[   76.938689][ T6738] bond_slave_1: entered promiscuous mode
[   76.941691][ T6738] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   76.981444][ T6756] validate_nla: 2 callbacks suppressed
[   76.981453][ T6756] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   77.152514][ T6772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.451305][ T6791] tipc: Failed to remove unknown binding: 66,1,1/0:1799040174/1799040176
[   77.457217][ T6791] tipc: Failed to remove unknown binding: 66,1,1/0:1799040174/1799040176
[   77.460892][ T6791] tipc: Failed to remove unknown binding: 66,1,1/0:1799040174/1799040176
[   78.228442][ T6821] set match dimension is over the limit!
[   78.230427][ T6821] set match dimension is over the limit!
[   78.232352][ T6821] set match dimension is over the limit!
[   78.234365][ T6821] set match dimension is over the limit!
[   78.238087][ T6821] set match dimension is over the limit!
[   78.240057][ T6821] set match dimension is over the limit!
[   78.242465][ T6821] set match dimension is over the limit!
[   78.245009][ T6821] set match dimension is over the limit!
[   78.248258][ T6821] set match dimension is over the limit!
[   78.250501][ T6821] set match dimension is over the limit!
[   78.631573][ T6837] syzkaller0: entered promiscuous mode
[   78.633721][ T6837] syzkaller0: entered allmulticast mode
[   78.803743][ T6854] netlink: 'syz.1.311': attribute type 4 has an invalid length.
[   78.814311][ T6854] syz_tun: entered allmulticast mode
[   78.830568][ T6852] syz_tun: left allmulticast mode
[   78.892141][ T6856] xt_l2tp: missing protocol rule (udp|l2tpip)
[   79.396000][ T6881] __nla_validate_parse: 21 callbacks suppressed
[   79.396011][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.435595][ T6881] .70: renamed from hsr0 (while UP)
[   79.448146][ T6881] .70: entered allmulticast mode
[   79.449813][ T6881] hsr_slave_0: entered allmulticast mode
[   79.451579][ T6881] hsr_slave_1: entered allmulticast mode
[   79.453582][ T6881] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   79.481116][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.484444][ T6881] .71: renamed from .70 (while UP)
[   79.526853][ T6881] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[   79.548611][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.552159][ T6881] .70: renamed from .71 (while UP)
[   79.560012][ T6881] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   79.565716][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.581040][ T6881] .71: renamed from .70 (while UP)
[   79.584992][ T6881] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[   79.591717][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.595639][ T6881] .70: renamed from .71 (while UP)
[   79.598650][ T6881] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   79.603468][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.606550][ T6881] .71: renamed from .70 (while UP)
[   79.611241][ T6881] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[   79.617193][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.620759][ T6881] .70: renamed from .71 (while UP)
[   79.627683][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.630624][ T6881] .71: renamed from .70 (while UP)
[   79.641551][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.645708][ T6881] .70: renamed from .71 (while UP)
[   79.649190][ T6881] netlink: 9 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.652200][ T6881] .71: renamed from .70 (while UP)
[   79.656617][ T6881] .70: renamed from .71 (while UP)
[   79.662323][ T6881] .71: renamed from .70 (while UP)
[   79.668192][ T6881] .70: renamed from .71 (while UP)
[   79.672107][ T6881] .71: renamed from .70 (while UP)
[   79.677400][ T6881] .70: renamed from .71 (while UP)
[   79.680912][ T6881] .71: renamed from .70 (while UP)
[   79.684993][ T6881] .70: renamed from .71 (while UP)
[   79.697197][ T6881] .71: renamed from .70 (while UP)
[   79.700330][ T6881] .70: renamed from .71 (while UP)
[   79.706287][ T6894] gretap1: entered promiscuous mode
[   79.708854][ T6881] .71: renamed from .70 (while UP)
[   79.712003][ T6881] .70: renamed from .71 (while UP)
[   79.715086][ T6881] .71: renamed from .70 (while UP)
[   79.719814][ T6881] .70: renamed from .71 (while UP)
[   79.722732][ T6881] .71: renamed from .70 (while UP)
[   79.726735][ T6881] .70: renamed from .71 (while UP)
[   79.731162][ T6881] .71: renamed from .70 (while UP)
[   79.733980][ T6881] .70: renamed from .71 (while UP)
[   79.739829][ T6881] .71: renamed from .70 (while UP)
[   79.748955][ T6881] .70: renamed from .71 (while UP)
[   79.756232][ T6881] .71: renamed from .70 (while UP)
[   79.759070][ T6881] .70: renamed from .71 (while UP)
[   79.764209][ T6881] .71: renamed from .70 (while UP)
[   79.770578][ T6881] .70: renamed from .71 (while UP)
[   80.045706][ T6909] netlink: 'syz.1.328': attribute type 1 has an invalid length.
[   80.267929][ T6917] sctp: [Deprecated]: syz.1.331 (pid 6917) Use of int in max_burst socket option deprecated.
[   80.267929][ T6917] Use struct sctp_assoc_value instead
[   80.782187][ T6932] vlan2: entered allmulticast mode
[   80.784094][ T6932] gretap0: entered allmulticast mode
[   80.820877][ T6934] xt_TPROXY: Can be used only with -p tcp or -p udp
[   81.208157][ T6949] netlink: 'syz.1.341': attribute type 83 has an invalid length.
[   82.271294][    C1] vcan0: j1939_tp_rxtimer: 0xffff888175097800: rx timeout, send abort
[   82.660817][ T6968] veth1_to_bond: entered allmulticast mode
[   82.674046][ T6968] bond0: (slave bond_slave_1): Releasing backup interface
[   82.688634][ T6968] veth1_to_bond (unregistering): left allmulticast mode
[   82.775531][    C1] vcan0: j1939_tp_rxtimer: 0xffff888175097800: abort rx timeout. Force session deactivation
[   82.923517][ T6977] vlan3: entered allmulticast mode
[   82.931065][ T6981] netlink: 'syz.1.352': attribute type 11 has an invalid length.
[   82.935603][ T6977] erspan0: entered allmulticast mode
[   83.038880][ T6985] syzkaller1: entered promiscuous mode
[   83.040708][ T6985] syzkaller1: entered allmulticast mode
[   83.134648][ T6994] bridge_slave_0: left allmulticast mode
[   83.136923][ T6994] bridge_slave_0: left promiscuous mode
[   83.138954][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.143665][ T6994] bridge_slave_1: left allmulticast mode
[   83.149379][ T6994] bridge_slave_1: left promiscuous mode
[   83.151353][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.178724][ T6994] bond0: (slave bond_slave_0): Releasing backup interface
[   83.182453][ T6994] bond_slave_0: left promiscuous mode
[   83.198080][ T6994] bond0: (slave bond_slave_1): Releasing backup interface
[   83.205994][ T6994] bond_slave_1: left promiscuous mode
[   83.220762][ T6994] team0: Port device team_slave_0 removed
[   83.242677][ T6994] team0: Port device team_slave_1 removed
[   83.251671][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.254555][ T6994] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.260340][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.263049][ T6994] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.267346][ T6994] net_ratelimit: 28 callbacks suppressed
[   83.267353][ T6994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.344331][ T7012] vlan2: entered promiscuous mode
[   83.346391][ T7012] bond0: entered promiscuous mode
[   83.348089][ T7012] bond_slave_0: entered promiscuous mode
[   83.753691][ T7060] vlan3: entered promiscuous mode
[   83.755664][ T7060] geneve1: entered promiscuous mode
[   83.757490][ T7060] vlan3: entered allmulticast mode
[   83.759145][ T7060] geneve1: entered allmulticast mode
[   83.761080][ T7061] .70: renamed from hsr0 (while UP)
[   83.764313][ T7061] .70: entered allmulticast mode
[   83.766941][ T7061] hsr_slave_0: entered allmulticast mode
[   83.768695][ T7061] hsr_slave_1: entered allmulticast mode
[   83.770687][ T7061] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   83.867400][ T7067] can: request_module (can-proto-3) failed.
[   84.401671][ T7113] TCP: TCP_TX_DELAY enabled
[   84.588238][ T7120] infiniband !yz!: set down
[   84.589881][ T7120] infiniband !yz!: added team_slave_0
[   84.622859][ T7120] RDS/IB: !yz!: added
[   84.626987][ T7120] smc: adding ib device !yz! with port count 1
[   84.629016][ T7120] smc:    ib device !yz! port 1 has no pnetid
[   84.639448][ T7131] __nla_validate_parse: 45 callbacks suppressed
[   84.639457][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'.
[   84.937738][ T7140] ipt_REJECT: ECHOREPLY no longer supported.
[   84.946394][ T7140] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   85.027792][ T7146] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[   85.063821][ T7146] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.075525][ T7149] netlink: 220 bytes leftover after parsing attributes in process `syz.1.408'.
[   85.090744][ T7146] bond2: (slave veth7): Enslaving as an active interface with a down link
[   85.097023][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'.
[   85.100523][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.408'.
[   85.104292][ T7149] netlink: 1 bytes leftover after parsing attributes in process `syz.1.408'.
[   85.150288][ T7151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.409'.
[   85.407249][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   85.419867][ T5866] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.419889][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[   85.422606][ T5866] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.422622][ T5866] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.422635][ T5866] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.501204][ T7184] sctp: [Deprecated]: syz.2.416 (pid 7184) Use of int in maxseg socket option.
[   85.501204][ T7184] Use struct sctp_assoc_value instead
[   85.716382][ T7210] netlink: 'syz.2.421': attribute type 1 has an invalid length.
[   85.742145][ T7210] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.775991][ T7210] bond3: (slave geneve2): making interface the new active one
[   85.780266][ T7210] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   86.039480][ T7222] nbd: nbd0 already in use
[   86.246081][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   86.517002][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[   86.716183][ T7255] delete_channel: no stack
[   86.799868][  T899] cfg80211: failed to load regulatory.db
[   86.970539][ T7290] openvswitch: netlink: nsh attr 0 has unexpected len 700 expected 0
[   86.973916][ T7290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.027000][ T7292] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   87.047009][ T7292] bond2 (unregistering): Released all slaves
[   87.092678][ T7299] netlink: 'syz.0.440': attribute type 3 has an invalid length.
[   87.095163][ T7299] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   87.179877][ T7303] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   87.474618][ T7342] netlink: 'syz.1.447': attribute type 1 has an invalid length.
[   87.509636][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.990892][ T7415] xt_policy: neither incoming nor outgoing policy selected
[   88.067071][ T7415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.070670][ T7415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.141905][ T7415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.145175][ T7415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.169025][ T7425] netlink: 'syz.2.460': attribute type 11 has an invalid length.
[   88.202343][ T7415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.205664][ T7415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.257489][ T7415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.261417][ T7415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.332091][ T5848] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.336042][ T5848] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.346260][ T5848] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.349207][ T5848] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.358229][ T5848] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.361458][ T5848] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.374503][ T5848] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.378267][ T5848] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.929067][ T7444] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .	΁*]
[   89.009257][ T7446] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.014402][ T7446] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   89.035698][ T7446] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   89.333060][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.336468][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.420193][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.441397][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.469891][ T7464] .70: left allmulticast mode
[   89.472005][ T7464] hsr_slave_0: left allmulticast mode
[   89.474307][ T7464] hsr_slave_1: left allmulticast mode
[   89.531165][ T7464] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   89.568996][ T7464] vlan2: left promiscuous mode
[   89.570970][ T7464] bond0: left promiscuous mode
[   89.572936][ T7464] bond_slave_0: left promiscuous mode
[   89.576368][ T7464] vlan3: left promiscuous mode
[   89.578272][ T7464] geneve1: left promiscuous mode
[   89.580404][ T7464] vlan3: left allmulticast mode
[   89.582382][ T7464] geneve1: left allmulticast mode
[   89.605090][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.608420][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.611235][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.613995][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.624132][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.628497][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.631436][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.632374][ T7484] netlink: 'syz.0.478': attribute type 5 has an invalid length.
[   89.634304][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.644589][ T7484] ip6erspan0: entered promiscuous mode
[   89.686019][ T7486] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[   89.713871][ T7487] bond3: (slave gretap3): making interface the new active one
[   89.718443][ T7487] bond3: (slave gretap3): Enslaving as an active interface with an up link
[   89.794193][ T7501] Set syz0 is full, maxelem 0 reached
[   89.829544][ T7503] openvswitch: netlink: Message has 440 unknown bytes.
[   89.832446][ T7503] __nla_validate_parse: 51 callbacks suppressed
[   89.832454][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'.
[   89.838116][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'.
[   89.847515][ T7503] gretap0: entered promiscuous mode
[   89.850347][ T7503] gretap0: left promiscuous mode
[   90.001939][ T7511] netlink: 'syz.0.490': attribute type 1 has an invalid length.
[   90.017573][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.491'.
[   90.020304][ T7511] bond4: entered promiscuous mode
[   90.023235][ T7511] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.027120][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'.
[   90.028334][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'.
[   90.030965][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'.
[   90.033708][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'.
[   90.047020][ T7518] tc_dump_action: action bad kind
[   90.254708][ T7545] netlink: 68 bytes leftover after parsing attributes in process `syz.1.500'.
[   90.283451][ T7545] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   90.308967][ T7545] bond3 (unregistering): Released all slaves
[   90.434784][ T7558] syzkaller1: entered promiscuous mode
[   90.436767][ T7558] syzkaller1: entered allmulticast mode
[   90.744770][ T7574] syzkaller0: entered promiscuous mode
[   90.746692][ T7574] syzkaller0: entered allmulticast mode
[   91.091073][ T7586] netlink: 64 bytes leftover after parsing attributes in process `syz.2.513'.
[   91.094820][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[   91.306213][ T7598] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   91.311941][ T7598] bond3 (unregistering): Released all slaves
[   91.520702][ T7606] xt_SECMARK: invalid mode: 0
[   91.645144][ T7610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.648155][ T7610] syzkaller0: entered promiscuous mode
[   91.649942][ T7610] syzkaller0: entered allmulticast mode
[   91.659082][ T7609] tipc: Resetting bearer <eth:syzkaller0>
[   91.681311][ T7609] tipc: Disabling bearer <eth:syzkaller0>
[   92.179163][ T7626] xt_SECMARK: invalid mode: 0
[   93.001533][ T7677] batman_adv: batadv0: Adding interface: vlan4
[   93.004619][ T7677] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.027402][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.033703][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.040011][ T7677] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[   93.134191][ T4631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.138071][ T4631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.194039][ T7688] syzkaller1: entered promiscuous mode
[   93.205463][ T7688] syzkaller1: entered allmulticast mode
[   93.509175][ T7724] syz_tun: entered allmulticast mode
[   93.511972][ T7721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.514429][ T7721] syzkaller0: entered promiscuous mode
[   93.516471][ T7721] syzkaller0: entered allmulticast mode
[   93.531170][ T7721] tipc: Resetting bearer <eth:syzkaller0>
[   93.534931][ T7723] syz_tun: left allmulticast mode
[   93.593567][ T7726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.597505][ T7726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.619027][ T7720] tipc: Resetting bearer <eth:syzkaller0>
[   93.630363][ T7720] tipc: Disabling bearer <eth:syzkaller0>
[   93.649598][ T7731] syzkaller0: entered promiscuous mode
[   93.651894][ T7731] syzkaller0: entered allmulticast mode
[   93.671022][ T7726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.675856][ T7726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.789900][ T7726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.794216][ T7726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.805785][ T7737] batadv_slave_0: entered promiscuous mode
[   93.824467][ T7735] team1: entered promiscuous mode
[   93.828769][ T7735] team1: entered allmulticast mode
[   93.832049][   T34] audit: type=1107 audit(1766020247.321:3): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   93.832967][ T7736] batadv_slave_0: left promiscuous mode
[   93.920102][ T7726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.924363][ T7726] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.998700][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.004285][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.027179][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.031061][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.044309][ T5848] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.047406][ T5848] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.056896][ T5848] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.060084][ T5848] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.306213][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[   94.400127][ T7771] xt_SECMARK: invalid mode: 0
[   94.750649][ T7786] syzkaller1: entered promiscuous mode
[   94.752617][ T7786] syzkaller1: entered allmulticast mode
[   94.895393][ T7791] netlink: 'syz.2.581': attribute type 83 has an invalid length.
[   95.217728][ T7795] netlink: 'syz.0.583': attribute type 1 has an invalid length.
[   95.317572][ T7803] __nla_validate_parse: 16 callbacks suppressed
[   95.317582][ T7803] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.585'.
[   95.327959][ T7802] xfrm1: entered allmulticast mode
[   95.787947][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[   95.974052][ T7819] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   95.978317][ T7819] bond4 (unregistering): Released all slaves
[   96.260544][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'.
[   96.285744][ T7841] netlink: 'syz.0.599': attribute type 1 has an invalid length.
[   96.323039][ T7841] bond5: (slave veth9): Enslaving as an active interface with a down link
[   96.336275][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'.
[   96.347506][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'.
[   96.352915][ T7841] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.427127][ T7853] xt_SECMARK: invalid mode: 0
[   96.497679][ T7865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.605'.
[   96.618856][ T7875] xt_SECMARK: invalid mode: 0
[   96.664042][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'.
[   96.666376][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   96.670409][ T7877] bond0: entered promiscuous mode
[   96.672221][ T7877] bond_slave_0: entered promiscuous mode
[   96.674741][ T7877] bond0: left promiscuous mode
[   96.676655][ T7877] bond_slave_0: left promiscuous mode
[   96.681843][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   96.684262][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   96.831665][ T7873] infiniband syz2: set down
[   96.833495][ T5902] ip6_vti0 speed is unknown, defaulting to 1000
[   96.837198][ T7873] infiniband syz2: added ip6_vti0
[   96.874236][ T7873] RDS/IB: syz2: added
[   96.877475][ T7873] smc: adding ib device syz2 with port count 1
[   96.878803][   T34] audit: type=1800 audit(1766020250.371:4): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.614" name="memory.events" dev="tmpfs" ino=1169 res=0 errno=0
[   96.879734][ T7873] smc:    ib device syz2 port 1 has no pnetid
[   96.888516][   T34] audit: type=1804 audit(1766020250.381:5): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.614" name="/newroot/223/memory.events" dev="tmpfs" ino=1169 res=1 errno=0
[   96.889929][ T5902] ip6_vti0 speed is unknown, defaulting to 1000
[   96.901889][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   96.956194][ T7890] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   96.961232][ T7890] bond4 (unregistering): Released all slaves
[   97.018453][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   97.119321][ T7895] netlink: 'syz.2.616': attribute type 3 has an invalid length.
[   97.129651][ T7873] ip6_vti0 speed is unknown, defaulting to 1000
[   97.190118][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'.
[   97.230457][ T7897] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   97.234299][ T7897] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   97.283990][ T7900] macvlan2: entered promiscuous mode
[   97.287656][ T7900] macvlan2: entered allmulticast mode
[   97.290450][ T7900] bond4: (slave macvlan2): Error -98 calling set_mac_address
[   97.376902][ T7907] netlink: 44 bytes leftover after parsing attributes in process `syz.2.620'.
[   97.488582][ T7919] netlink: 'syz.0.625': attribute type 7 has an invalid length.
[   97.557797][ T7924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.565794][ T5874] ip6_vti0 speed is unknown, defaulting to 1000
[   97.567778][ T5874] syz2: Port: 1 Link ACTIVE
[   97.569465][ T5874] ip6_vti0 speed is unknown, defaulting to 1000
[   97.675814][   T25] block nbd0: Possible stuck request ffff888109bd0000: control (read@0,1024B). Runtime 30 seconds
[   97.680389][   T25] block nbd0: Possible stuck request ffff888109bd0200: control (read@1024,1024B). Runtime 30 seconds
[   97.684014][   T25] block nbd0: Possible stuck request ffff888109bd0400: control (read@2048,1024B). Runtime 30 seconds
[   97.687857][   T25] block nbd0: Possible stuck request ffff888109bd0600: control (read@3072,1024B). Runtime 30 seconds
[   97.702690][ T7937] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   97.717399][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'.
[   97.900869][ T7956] netlink: 'syz.2.633': attribute type 1 has an invalid length.
[   98.199408][ T7982] bond5: entered promiscuous mode
[   98.201865][ T7982] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.226128][ T7987] bond6: entered promiscuous mode
[   98.228091][ T7987] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.310952][ T7996] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   98.494849][ T8006] netlink: 'syz.0.646': attribute type 18 has an invalid length.
[   98.788932][ T8017] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   98.793495][ T8017] bond6 (unregistering): Released all slaves
[   98.822890][ T8019] netlink: 'syz.0.649': attribute type 1 has an invalid length.
[   98.861668][ T8017] gretap4: entered promiscuous mode
[   99.014722][ T8025] xt_SECMARK: invalid mode: 0
[   99.028070][ T8027] netlink: 'syz.1.653': attribute type 1 has an invalid length.
[   99.058401][ T8027] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[   99.062015][ T8027] bond3: (slave vxcan5): Error -95 calling set_mac_address
[   99.168365][ T8040] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[   99.183639][ T8040] xt_CT: You must specify a L4 protocol and not use inversions on it
[   99.346208][ T8038] ip6_vti0 speed is unknown, defaulting to 1000
[   99.640960][ T8071] xt_SECMARK: invalid mode: 0
[   99.906409][  T167] wlan1: Trigger new scan to find an IBSS to join
[  100.214557][ T8100] netlink: 'syz.1.679': attribute type 2 has an invalid length.
[  100.230783][ T8100] : entered promiscuous mode
[  100.446783][ T8126] __nla_validate_parse: 13 callbacks suppressed
[  100.446798][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'.
[  100.549659][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  100.559026][ T8136] macsec1: entered promiscuous mode
[  100.561103][ T8136] macsec1: entered allmulticast mode
[  100.683586][ T8149] bridge: RTM_NEWNEIGH with invalid state 0x10
[  100.769187][ T8151] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  100.788581][ T8151] bond6 (unregistering): Released all slaves
[  100.817135][ T8156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.697'.
[  100.825668][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[  100.829608][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.697'.
[  100.897725][ T8160] tipc: Enabled bearer <ib:macvlan0>, priority 10
[  100.904382][ T8160] bridge7: entered allmulticast mode
[  100.977177][ T8166] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.981019][ T8166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.030912][ T8166] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.034985][ T8166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.084303][ T8166] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.088857][ T8166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.110165][ T8175] netlink: 92 bytes leftover after parsing attributes in process `syz.2.703'.
[  101.112979][ T8175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.703'.
[  101.139768][ T8166] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.143159][ T8166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.202804][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.206858][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.221529][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.224757][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.234552][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.238531][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.252742][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.258034][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.264316][ T8166] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  101.268534][ T8166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.270983][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[  101.280500][   T13] ==================================================================
[  101.283762][   T13] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  101.286815][   T13] Read of size 8 at addr ffff888106efe0b0 by task kworker/u8:1/13
[  101.290755][   T13] 
[  101.291741][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.291757][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.291766][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  101.291788][   T13] Call Trace:
[  101.291794][   T13]  <TASK>
[  101.291800][   T13]  dump_stack_lvl+0x189/0x250
[  101.291815][   T13]  ? __kasan_check_byte+0x12/0x40
[  101.291830][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.291843][   T13]  ? lock_release+0x4b/0x3b0
[  101.291857][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  101.291873][   T13]  print_report+0xca/0x240
[  101.291886][   T13]  ? __mutex_lock+0x147/0x1350
[  101.291896][   T13]  kasan_report+0x118/0x150
[  101.291909][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.291925][   T13]  ? __mutex_lock+0x147/0x1350
[  101.291938][   T13]  __mutex_lock+0x147/0x1350
[  101.291950][   T13]  ? __mutex_lock+0x5bb/0x1350
[  101.291962][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  101.291978][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  101.291995][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  101.292013][   T13]  ? process_scheduled_works+0x9ef/0x1770
[  101.292025][   T13]  ? process_scheduled_works+0x9ef/0x1770
[  101.292038][   T13]  process_scheduled_works+0xad1/0x1770
[  101.292058][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.292075][   T13]  worker_thread+0x8a0/0xda0
[  101.292095][   T13]  kthread+0x711/0x8a0
[  101.292110][   T13]  ? __pfx_worker_thread+0x10/0x10
[  101.292122][   T13]  ? __pfx_kthread+0x10/0x10
[  101.292137][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.292152][   T13]  ? lockdep_hardirqs_on+0x98/0x140
[  101.292168][   T13]  ? __pfx_kthread+0x10/0x10
[  101.292183][   T13]  ret_from_fork+0x599/0xb30
[  101.292195][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  101.292209][   T13]  ? __switch_to_asm+0x39/0x70
[  101.292222][   T13]  ? __switch_to_asm+0x33/0x70
[  101.292236][   T13]  ? __pfx_kthread+0x10/0x10
[  101.292251][   T13]  ret_from_fork_asm+0x1a/0x30
[  101.292271][   T13]  </TASK>
[  101.292275][   T13] 
[  101.365590][   T13] Allocated by task 8166:
[  101.367117][   T13]  kasan_save_track+0x3e/0x80
[  101.368958][   T13]  __kasan_kmalloc+0x93/0xb0
[  101.370787][   T13]  __kmalloc_noprof+0x41d/0x800
[  101.372727][   T13]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[  101.375080][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.377084][   T13]  register_netdevice+0x15bd/0x1a70
[  101.379040][   T13]  nsim_create+0xb3f/0x1050
[  101.380707][   T13]  __nsim_dev_port_add+0x6a6/0xaf0
[  101.382706][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  101.384716][   T13]  nsim_dev_reload_up+0x451/0x780
[  101.386671][   T13]  devlink_reload+0x4ec/0x8d0
[  101.388542][   T13]  devlink_nl_reload_doit+0x9b7/0xc60
[  101.390633][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  101.392817][   T13]  genl_rcv_msg+0x60e/0x790
[  101.394384][   T13]  netlink_rcv_skb+0x208/0x470
[  101.395994][   T13]  genl_rcv+0x28/0x40
[  101.397324][   T13]  netlink_unicast+0x82f/0x9e0
[  101.398877][   T13]  netlink_sendmsg+0x805/0xb30
[  101.400634][   T13]  __sock_sendmsg+0x21c/0x270
[  101.402515][   T13]  ____sys_sendmsg+0x505/0x820
[  101.404436][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  101.406048][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  101.407637][   T13]  do_syscall_64+0xfa/0xf80
[  101.409136][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.411048][   T13] 
[  101.411921][   T13] Freed by task 8166:
[  101.413303][   T13]  kasan_save_track+0x3e/0x80
[  101.414913][   T13]  kasan_save_free_info+0x46/0x50
[  101.416664][   T13]  __kasan_slab_free+0x5c/0x80
[  101.418258][   T13]  kfree+0x1c0/0x660
[  101.419523][   T13]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[  101.421552][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.423381][   T13]  unregister_netdevice_many_notify+0x1867/0x2340
[  101.425488][   T13]  unregister_netdevice_queue+0x317/0x350
[  101.427349][   T13]  nsim_destroy+0x1e5/0x680
[  101.428879][   T13]  __nsim_dev_port_del+0x14d/0x1b0
[  101.430554][   T13]  nsim_dev_reload_destroy+0x288/0x490
[  101.432362][   T13]  nsim_dev_reload_down+0x8a/0xc0
[  101.434035][   T13]  devlink_reload+0x1b6/0x8d0
[  101.435539][   T13]  devlink_nl_reload_doit+0x9b7/0xc60
[  101.437288][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  101.439058][   T13]  genl_rcv_msg+0x60e/0x790
[  101.440557][   T13]  netlink_rcv_skb+0x208/0x470
[  101.442177][   T13]  genl_rcv+0x28/0x40
[  101.443484][   T13]  netlink_unicast+0x82f/0x9e0
[  101.445035][   T13]  netlink_sendmsg+0x805/0xb30
[  101.446649][   T13]  __sock_sendmsg+0x21c/0x270
[  101.448188][   T13]  ____sys_sendmsg+0x505/0x820
[  101.449839][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  101.451384][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  101.453085][   T13]  do_syscall_64+0xfa/0xf80
[  101.454586][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.456577][   T13] 
[  101.457362][   T13] Last potentially related work creation:
[  101.459219][   T13]  kasan_save_stack+0x3e/0x60
[  101.460773][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  101.462528][   T13]  insert_work+0x3d/0x330
[  101.463917][   T13]  __queue_work+0xbae/0xf90
[  101.465456][   T13]  queue_work_on+0x181/0x270
[  101.467026][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  101.468986][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  101.470815][   T13]  geneve_offload_rx_ports+0xc7/0x150
[  101.472769][   T13]  geneve_netdevice_event+0x6a/0x80
[  101.474501][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.476235][   T13]  call_netdevice_notifiers+0x88/0xc0
[  101.477997][   T13]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  101.479945][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.481567][   T13]  register_netdevice+0x15bd/0x1a70
[  101.483214][   T13]  nsim_create+0xb3f/0x1050
[  101.484848][   T13]  __nsim_dev_port_add+0x6a6/0xaf0
[  101.486746][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  101.488409][   T13]  nsim_dev_reload_up+0x451/0x780
[  101.490029][   T13]  devlink_reload+0x4ec/0x8d0
[  101.491610][   T13]  devlink_nl_reload_doit+0x9b7/0xc60
[  101.493529][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  101.495390][   T13]  genl_rcv_msg+0x60e/0x790
[  101.496887][   T13]  netlink_rcv_skb+0x208/0x470
[  101.498551][   T13]  genl_rcv+0x28/0x40
[  101.499893][   T13]  netlink_unicast+0x82f/0x9e0
[  101.501484][   T13]  netlink_sendmsg+0x805/0xb30
[  101.503222][   T13]  __sock_sendmsg+0x21c/0x270
[  101.504749][   T13]  ____sys_sendmsg+0x505/0x820
[  101.506438][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  101.508138][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  101.509785][   T13]  do_syscall_64+0xfa/0xf80
[  101.511249][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.513344][   T13] 
[  101.514153][   T13] Second to last potentially related work creation:
[  101.516258][   T13]  kasan_save_stack+0x3e/0x60
[  101.517820][   T13]  kasan_record_aux_stack+0xbd/0xd0
[  101.519482][   T13]  insert_work+0x3d/0x330
[  101.520865][   T13]  __queue_work+0xcd0/0xf90
[  101.522434][   T13]  queue_work_on+0x181/0x270
[  101.523970][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  101.525855][   T13]  udp_tunnel_push_rx_port+0x180/0x200
[  101.527853][   T13]  vxlan_offload_rx_ports+0x129/0x1f0
[  101.529714][   T13]  vxlan_netdevice_event+0x111/0x470
[  101.531404][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.533118][   T13]  call_netdevice_notifiers+0x88/0xc0
[  101.534935][   T13]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  101.537240][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.539281][   T13]  register_netdevice+0x15bd/0x1a70
[  101.541154][   T13]  nsim_create+0xb3f/0x1050
[  101.542631][   T13]  __nsim_dev_port_add+0x6a6/0xaf0
[  101.544354][   T13]  nsim_dev_port_add_all+0x37/0xf0
[  101.546018][   T13]  nsim_dev_reload_up+0x451/0x780
[  101.547629][   T13]  devlink_reload+0x4ec/0x8d0
[  101.549281][   T13]  devlink_nl_reload_doit+0x9b7/0xc60
[  101.551092][   T13]  genl_family_rcv_msg_doit+0x215/0x300
[  101.552968][   T13]  genl_rcv_msg+0x60e/0x790
[  101.554522][   T13]  netlink_rcv_skb+0x208/0x470
[  101.556176][   T13]  genl_rcv+0x28/0x40
[  101.557501][   T13]  netlink_unicast+0x82f/0x9e0
[  101.559311][   T13]  netlink_sendmsg+0x805/0xb30
[  101.561091][   T13]  __sock_sendmsg+0x21c/0x270
[  101.562793][   T13]  ____sys_sendmsg+0x505/0x820
[  101.564376][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  101.565955][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  101.567595][   T13]  do_syscall_64+0xfa/0xf80
[  101.569360][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.571315][   T13] 
[  101.572193][   T13] The buggy address belongs to the object at ffff888106efe000
[  101.572193][   T13]  which belongs to the cache kmalloc-256 of size 256
[  101.577785][   T13] The buggy address is located 176 bytes inside of
[  101.577785][   T13]  freed 256-byte region [ffff888106efe000, ffff888106efe100)
[  101.582363][   T13] 
[  101.583204][   T13] The buggy address belongs to the physical page:
[  101.585336][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x106efe
[  101.588165][   T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  101.591050][   T13] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  101.593547][   T13] page_type: f5(slab)
[  101.595052][   T13] raw: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  101.597786][   T13] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  101.600589][   T13] head: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  101.604002][   T13] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  101.607148][   T13] head: 017ff00000000001 ffffea00041bbf81 00000000ffffffff 00000000ffffffff
[  101.610188][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  101.612978][   T13] page dumped because: kasan: bad access detected
[  101.614974][   T13] page_owner tracks the page as allocated
[  101.617073][   T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 63198124902, free_ts 63196394713
[  101.624732][   T13]  post_alloc_hook+0x234/0x290
[  101.626245][   T13]  get_page_from_freelist+0x2365/0x2440
[  101.627977][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  101.629804][   T13]  alloc_pages_mpol+0x232/0x4a0
[  101.631333][   T13]  allocate_slab+0x86/0x3b0
[  101.632786][   T13]  ___slab_alloc+0xf2b/0x1960
[  101.634264][   T13]  __slab_alloc+0x65/0x100
[  101.635699][   T13]  __kmalloc_noprof+0x47d/0x800
[  101.637214][   T13]  fib_create_info+0x171d/0x31f0
[  101.638948][   T13]  fib_table_insert+0xca/0x1b80
[  101.640481][   T13]  fib_magic+0x2c4/0x390
[  101.641869][   T13]  fib_add_ifaddr+0x3fb/0x5f0
[  101.643344][   T13]  fib_netdev_event+0x382/0x490
[  101.644878][   T13]  notifier_call_chain+0x19d/0x3a0
[  101.646475][   T13]  __dev_notify_flags+0x18d/0x2e0
[  101.648056][   T13]  netif_change_flags+0xe8/0x1a0
[  101.649784][   T13] page last free pid 10 tgid 10 stack trace:
[  101.651828][   T13]  __free_frozen_pages+0xbc8/0xd30
[  101.653711][   T13]  __put_partials+0x146/0x170
[  101.655197][   T13]  put_cpu_partial+0x1f2/0x2d0
[  101.656959][   T13]  __slab_free+0x288/0x2a0
[  101.658705][   T13]  qlist_free_all+0x97/0x100
[  101.660410][   T13]  kasan_quarantine_reduce+0x148/0x160
[  101.662181][   T13]  __kasan_slab_alloc+0x22/0x80
[  101.663816][   T13]  __kmalloc_cache_noprof+0x37c/0x700
[  101.665750][   T13]  nsim_fib_event+0xca1/0x8a30
[  101.667320][   T13]  nsim_fib_event_work+0x249/0x3b0
[  101.669164][   T13]  process_scheduled_works+0xad1/0x1770
[  101.671030][   T13]  worker_thread+0x8a0/0xda0
[  101.672601][   T13]  kthread+0x711/0x8a0
[  101.674177][   T13]  ret_from_fork+0x599/0xb30
[  101.676080][   T13]  ret_from_fork_asm+0x1a/0x30
[  101.678025][   T13] 
[  101.679039][   T13] Memory state around the buggy address:
[  101.681143][   T13]  ffff888106efdf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  101.684175][   T13]  ffff888106efe000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.687020][   T13] >ffff888106efe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.689868][   T13]                                      ^
[  101.691978][   T13]  ffff888106efe100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  101.694445][   T13]  ffff888106efe180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  101.697132][   T13] ==================================================================
[  101.714161][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  101.716755][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  101.719798][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.723630][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  101.726538][   T13] Call Trace:
[  101.727770][   T13]  <TASK>
[  101.728867][   T13]  dump_stack_lvl+0x99/0x250
[  101.730759][   T13]  ? __asan_memcpy+0x40/0x70
[  101.732674][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.734762][   T13]  ? __pfx__printk+0x10/0x10
[  101.736703][   T13]  vpanic+0x237/0x6d0
[  101.738370][   T13]  ? __pfx_vpanic+0x10/0x10
[  101.740245][   T13]  ? preempt_schedule+0xae/0xc0
[  101.742227][   T13]  ? __pfx_preempt_schedule+0x10/0x10
[  101.744307][   T13]  panic+0xb9/0xc0
[  101.745856][   T13]  ? __pfx_panic+0x10/0x10
[  101.747734][   T13]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  101.750185][   T13]  ? __mutex_lock+0x147/0x1350
[  101.752136][   T13]  check_panic_on_warn+0x89/0xb0
[  101.754194][   T13]  ? __mutex_lock+0x147/0x1350
[  101.756172][   T13]  end_report+0x6f/0x140
[  101.757927][   T13]  kasan_report+0x129/0x150
[  101.759821][   T13]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  101.762251][   T13]  ? __mutex_lock+0x147/0x1350
[  101.764177][   T13]  __mutex_lock+0x147/0x1350
[  101.765989][   T13]  ? __mutex_lock+0x5bb/0x1350
[  101.767912][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  101.770454][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  101.772225][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  101.774244][   T13]  ? process_scheduled_works+0x9ef/0x1770
[  101.776442][   T13]  ? process_scheduled_works+0x9ef/0x1770
[  101.778420][   T13]  process_scheduled_works+0xad1/0x1770
[  101.780550][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.782513][   T13]  worker_thread+0x8a0/0xda0
[  101.784000][   T13]  kthread+0x711/0x8a0
[  101.785322][   T13]  ? __pfx_worker_thread+0x10/0x10
[  101.787068][   T13]  ? __pfx_kthread+0x10/0x10
[  101.788531][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.790257][   T13]  ? lockdep_hardirqs_on+0x98/0x140
[  101.792055][   T13]  ? __pfx_kthread+0x10/0x10
[  101.793707][   T13]  ret_from_fork+0x599/0xb30
[  101.795430][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  101.797332][   T13]  ? __switch_to_asm+0x39/0x70
[  101.799110][   T13]  ? __switch_to_asm+0x33/0x70
[  101.800840][   T13]  ? __pfx_kthread+0x10/0x10
[  101.802329][   T13]  ret_from_fork_asm+0x1a/0x30
[  101.803815][   T13]  </TASK>
[  101.805423][   T13] Kernel Offset: disabled
[  101.806782][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:10:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001270f0
R8 =ffff88816b400237 R9 =1ffff1102d680046 R10=dffffc0000000000 R11=ffffffff851ad220
R12=dffffc0000000000 R13=ffffffff998daa09 R14=ffffffff99bef280 R15=0000000000000000
RIP=ffffffff851ad29c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e83a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004580 CR3=00000001a83fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f87b45ba498 00007f87b45ba470 XMM03=00007f87b45ba4a8 00007f87b45ba4a0
XMM04=00007f87b511d100 00007f87b45ba460 XMM05=00007f87b45ba478 00007f87b45ba4c0
XMM06=00007f87b45ba4b8 00007f87b45ba4b0 XMM07=00007f87b45ba4a8 00007f87b45ba4a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f87b43f2424
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=9f4990357628fa00 RBX=ffffffff81978eba RCX=9f4990357628fa00 RDX=0000000000000001
RSI=ffffffff8d78ff92 RDI=ffffffff8bc07960 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c6336db R9 =1ffff110478c66db R10=dffffc0000000000 R11=ffffed10478c66dc
R12=ffffffff8f81f870 R13=1ffff1102c09e000 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff8b5afd73 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9e3a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005840 CR3=0000000175db8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 000000ffffffffff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f40e59f2424
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
