last executing test programs:

1.586680035s ago: executing program 0 (id=210):
socket(0x2a, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.586047121s ago: executing program 2 (id=211):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x4040080)
close(0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0xffff, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004090)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
r3 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
unshare(0x6a040000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0)
pwritev(r4, 0x0, 0x0, 0xe5, 0x1)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x30, 0x5, 0x3f}, 0x2c)
r6 = socket$kcm(0xa, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd2a, 0xcd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8009)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.32569002s ago: executing program 0 (id=212):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100))
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10)

1.324890594s ago: executing program 1 (id=213):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
socket(0x2b, 0x1, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000040000000000000090000008500000011000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc6)

1.146107546s ago: executing program 0 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000f900850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
socket$key(0xf, 0x3, 0x2)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r8 = socket$unix(0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1.03613261s ago: executing program 2 (id=215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="65b5dd1f7ef091a112a393effebe0c5a3a10e0f98e3187185541a5152462257114f528bf87f9de96c49d40e4c887c8a1f57e72d44e93f3acdcc51165bdda2d41264d4604d77ae0eba453a00b8c278693ed297a3db5eaeb78e1885e87da84f514d5da35b094e3517c3df5e6ed5c27c40ef4cfc4d720f567d01346487ee485b6666a7e551f992ffd92463a93437f5beb", @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ac14140df6000000000000000000000000000000000000000900000000000000010000000000000000000000000000000800000000000000000000000000000004000000000000000800000000000000000000000000000000000000000002000000000000040000090000000000000000000000010000000000000000000000000000000a000000000000000000000000000000bf826b79", @ANYRESHEX=r0, @ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0xc0)
unshare(0x24020400)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x4e})
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r6], 0xb4}, 0x1, 0x0, 0x0, 0x24080410}, 0x4000054)

697.202172ms ago: executing program 2 (id=216):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt(r2, 0x0, 0x82, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x12}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x4c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

696.665245ms ago: executing program 2 (id=217):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x2)
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x1, &(0x7f0000000100)='C'}) (async)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000140)=@buf={0x1, &(0x7f0000000100)='C'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000180)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x3, "846ca46dd39154"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001180)={{r2, 0x100000000, 0x8, 0xf37, 0x9, 0xffffffffffffff77, 0x8, 0x0, 0x6, 0xc3f, 0x8, 0x400, 0x3, 0x1, 0x1}})
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000002180)=0x180000, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000002180)=0x180000, 0x4)
r3 = socket$unix(0x1, 0x5, 0x0)
sendto$unix(r3, &(0x7f00000021c0)="1aeab3e704ea4eeed771c93522f4814a13", 0x11, 0x4080, &(0x7f0000002200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
sendto$unix(r3, &(0x7f00000021c0)="1aeab3e704ea4eeed771c93522f4814a13", 0x11, 0x4080, &(0x7f0000002200)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000002280)) (async)
ioctl$NILFS_IOCTL_SYNC(r3, 0x80086e8a, &(0x7f0000002280))
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000022c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000022c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003640)={r0, 0x20, &(0x7f0000003600)={&(0x7f0000002500)=""/4096, 0x1000, 0x0, &(0x7f0000003500)=""/230, 0xe6}}, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xf8, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40004)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r4, &(0x7f0000003840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000038c0)={'sit0\x00', &(0x7f0000003880)={@mcast2, @multicast2, 0x3, 0xc}})
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003940), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x4008804) (async)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x4008804)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003a40)={<r7=>r4, 0x3, 0x5})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003a80)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003c80)={r0, 0x58, &(0x7f0000003c00)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003c80)={r0, 0x58, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d40)={0x0, 0x8, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e00)={0x11, 0x1e, &(0x7f0000003ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x93e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000003bc0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000003cc0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003d00)={0x4, 0xd, 0x80, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003d80)=[r0, 0x1, r10, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000003dc0)=[{0x2, 0x1, 0x8, 0xa}], 0x10, 0xec6}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e00)={0x11, 0x1e, &(0x7f0000003ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4e}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x93e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000003bc0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000003cc0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003d00)={0x4, 0xd, 0x80, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003d80)=[r0, 0x1, r10, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000003dc0)=[{0x2, 0x1, 0x8, 0xa}], 0x10, 0xec6}, 0x94)
sendmsg$kcm(r7, &(0x7f0000005480)={&(0x7f0000003ec0)=@l2={0x1f, 0x1, @none, 0x9f08}, 0x80, &(0x7f0000005200)=[{&(0x7f0000003f40)="680611b5962def552bc1164d07c232097685e2a30c5e06779a9ca8d266a1bb2b8d74a8b671171f0e3917e37642c3bb9f6eba00e2efc8f1bb5b6f5d2bfca3a0338ffc0abc92ec9235361a3e39ddfaf6e68bc716d73b3a1b6375fef2301c2eb62f45ab0a4e78f620cb30c9e1a18f6eca6bf258d88398693eb24f83bc0cf9ef5ce7809ae6eac9948faa3f40d2d758b37f6385fce934f7abb5cf104ad9b71b0eee27f6522eaf9a841d80060a4418d8bcf1930832bb5ce1b8656008b00ddf3bc259b03c5b2b205a", 0xc5}, {&(0x7f0000004040)="0c20ef465b5d9201618e1bc4782eb8f3d11065d304f210c0649129fa5b1d2f1d5c9791d4d634bf2a004f7be94a693047f91fd92a9280acf7cf4d0472f445a99d562f2a55ecf08a328a3ddea9cf9102a1dfd0e0436bf3f478067c751f8b9668e843636dc31fdc879d487fa50a9b46fff06d20abeb27508b88ca43352b4337f6e70fb73f22e06170a92d892f067871d3a33bfa97b0f545faeaa8daeff1bc2ed7248182326a521209127d00dd3ab1301af7739154715f4523f929cf294d85206343a70cf7a0e9449e10a96752d6b9e6de9f3ff1d9c05bc8033336bc4c8195d38e680097679cff52ec5f361fb96e07516cf25f7440a6cb1ff62ccd0a1d868c6d0cc7000b2a892531dac41e6c497254cdb385710cc37971f6b6a6487fd1476cf23e25992c5dda260d7be1dbba4fe5182f968a787673d9b6b063f26e7eb5ee182c072c8809be1d086f320b9dd684f46c2a0a726971af234bce4d54ee78d8d74f6df83276bc6e7e9ab0b4e4584d1f8a3a8722ef22dd53cae9cb0ce1b1571a0eeb6817ef48a78d12db6b37c4ecd8598517f7ad4a115408c20ac626d8b03e3fc63367c6ff6551489f73284e706f8b7efb4fc3a671c12954980c0e3e978625b64e52d03e530e560896351ae592b429b1181676dbbfb30437f4448a782d0cb323e5c34b1c14ba7d2ab7ba51ae8efa4d9388bbb0360467f3c884cab681310a416d3264281d9dbb4115cf14968ae985a58db5efca205c4bbc18247881195b5f05561307e478f3c644e41c2df05a3ba232b3c9f222c24f6f72e379e814357133096aea6a36af9d95bd8f4b95a7446c2429db96a77d8d0fdd95e9f9df611f6e67c9f7de12c447179358b80b81ddd0aee20a3c50050860ca43dc8f7270aa71197582477aa86aa57e86b3b129fea9f60c302d4165771bb0100e21d1209287630612f04a4ecbc09504793ba9f5b294f8b0168ee80f583508a5cf4595b39267a054ece5aa0992b8abe9d52fec737593ac87162c30519452c1ac73ba422fe7c0a3afd5e955f5500d5eeb76f3261855b534a6b73cba9b5697ef570f522d20fcb53c5669ea3e4fb692d4b7869a5e1b97d3c9fe32e77c1e627e1f902e0fb274153890b4b8aef313d6530ec768425c02691791c2c2b2dc10f9e583b7e49f043fe4302390f8efb4489c818bc2e7d70fe3cbd4736b90ed77713cd6280f11d5645a6b8bd3117741af6704b4458d1b081f0e2aba253ddbb13c4bacc64ab92356d229013883192eb452a943442ef9f6a0b6b580ec8b4cd3c56760aa3ef51df4fa8c67d9629c648be61c59927e48381acc3ed98fc49301dd96e4b678d532ff75295ff4c300e9e729ee66387c50687f613ec42f64474cf9a20c70e490b4a7cdc628f9d63f81755dde313a1cbaab41095301cd1d9b1e858f882f6f6cedfd576f3f7fb530df7c8ee4e4f703ed031c9654a958f1a1494a25ace1e7e68e125c0496e0da326a29d56b4f24e836ceefa1d22ee736a5e78ffaca45de6ac70989b112c2cba037a18ce1449e76e6979f5c15fa3d340f56bf9093bf1edd8b776ff9d285f3b6b05cd9994d067eacfe1fdc995973e35027a578f1f67559b705f79e3224109049332c978f4415854332c4432f24b910fe0773001a5b74264ce27e45cc05949e6cd91a9ecab55dbe553dafd2965adb8adb8445220f1ecfc08e677cc3d71f8e26ce03c51d3bae33facad475f77ac0ecc6572e34e0d294aeccf2663f6c41dd1aab5bf1b035d9d660c17be987184e35332e817852f87f358ea68a1f97b2376abc4f2a25215fa5ff259780d27d3a2c8202d0abe87468c5d72da473cc065b230bc2669a3f0b8409ea9f12918cf07846be46dac5cc4ea8fdd65c827c543aca20b04e46e829668ca832aaa02f33601716e79c88b6f2b88d56c087fcdb3082ee374b6d0a9062305375cde928091cdb2e02ce890b8d14cbf3ad624b3865291c825bb8eaa2f3029cbab182aa2d08aa18cdf141ec78d3a63695af2106d8371f42bd29b2db9daf034757313eeb6c15002a1ac657c87c767bbde5733e21eeabcdafeba8bf69ed5f3fdeb1aee32f46023dcf80771cacaa2eed11f0d860ec0fab062021bdc47a101c2a58351955addd80451083b16fd7114c12a7302165223487e34a3157435328280ee02b5a1b9a198ca679293180a2d61c68ffb1243800022e6589f6105f8277f90add3868aebf5693d90583ac8b8b24a45e6e70cb55e3421e0270812cee8c0d02bfa28d2a72333bb3b670f47661b9a247b64701ab2dc232cf9e9f4d156e57dc086c239709e4a56cf3de1e850bcda016628103799e9a79cb0fefabee8b066469e6c07ef5c918b270219bf70c242de6d1d999ea2bb47cc78898cfb4a17f0304b8180a48c277f3c07dbecfbf9fd324f00fad06c2d8eaf05dc9f78d6f24ec4b4a7e2cd255563279bccdedcbaa48451ca2b91505b8d0a8233ce74bfadc02a587adf6de5a85a134ede630416f494f4576d57818902a72918d7cf9bffe8adc88450e44eb66b171e67f24787136b5e18c33ce2eac6e31ef4a29dc2881086a5048c0a671d9e1863a5f5832cad7a35d04b7fc25d9a62eebafcd177ab2bcd2464660c737e715559448462b175f2ca61bbfb6601c0d8555b722c3b818be5b4a69a85e32b1e4c76915ec00d0c542044dd9ccd0173e02c47cd4e86f37891839f93a4291cd343a566e060c633dad0b570067f2acd1e12a3634687bcb269a2fc45b6617bc7274cffa3f25925d5e1cf7bcf8e7cb891c8cbaaad1989f83ffef9bae41bdf6ea402e8071dd5937a5d41866e6d3bc71f27657d893f7c602b97eb221f70a4e05012fbf96bcb1bf69535251449164c8ce449100809c14f034c23bc61d4f842d73022114857b5fe75bb17df992f9ea19513451c184c0a84b24b0076ed04621225ea0f5202e6d8b1fdfd27a70de665089e26df56ad55eebd25f9b4c67ded0f7c41ac9310d4204fe6404057af4fbf7cd55f7b637d883f9bd86b5ae695f9e4276d872030a89441c6681123d5ed2a465d5739a280109ce4dc71a3a2401d3f3a88e43e92c528f380ca1b53c972f8d1cf23e7de7ce1cf1d899c4dfd161477fcc0dc88194e039dfe4e9d9c293eeff614ee53550dc797614bc854241d1c01f90ec955c46fc39e0f89426ce69a284296be37accc6c8c48b5791027457f7d21ea0285691c1487857df3d9811ed8f1a6ceed3bdee167233e800982fa6dd73e51adbe914450647d2484a188be5d7672883b885ed0f230097f231c18b3e37d24c0e47f120690e069d7fd0ee5715fe7e9e6cd55b9bf069687a43af3533255cc7030f61bcd842522e6a1aeb482fe48c074c817ca94d1a470a919eaa25d32f71f5918174b4fa81a9de3cc47cc4eaaa2f6c34d2e2d1d4f85864a6d13835b24d55cb3c198654adcf25bc5acf72e3afd3027a9357cbaa960592fae6522c3666f851825311e14aee3985ddae0503072e2d0d26fd78a7ab72298738f5fc466439a1fb854c06bdbd984fddaf0f2b5adc259b2e42a1856295396e28161478e3bd11fab7d9d90d42a4ddb40f5796f8c5aeff0881bb357f29f729bd836d1959811671018db8b5b59bb32e2306d3e4a7b8fbd755383ad2021298e2fb108f645e03f4ea23845b66181e67c6ab060e41c573a39fe576dca765752dc4dcdb007cf45763e61d17b8fd508ecc66e9f56b983ad96ce7f28faf1a5454f220a11096c06a9b885d20194e42129fcc2d7a8d492ba5232585bb8b22738a136e9e13d3dd30fe483c6c36cfdf73a3a228f3f756f95ac600a6c1d22d2845acf8eca436b193b1c4a4d1ce82329dc7fb359ca25b205b2cf3943134cafc56fd480dd91744303b158789fcc5b4e2bb8f5d16e9224a9c8b427e4163cabab339e31fab22920ce906b019f9a7a440d6534374790b237d585469a4b0f05fc6374e08672935e35a9bdd7488d15e72dedae203b54b37bfaa5263a6f93d6bf034947bb7160381e87f007f49f9633d3e1926f95a62eea7f428f84a705cf329c353c50884d2fb99348c73ca9999567518f6dc48fb478dcbbe852453585c32f074d3ac3224eb234bba7c5c295398d20812c46675caf63e683827e8e2df0a83266d348741d1fb988cdb507b243b5d66ae64bc8dd731ba7c34d8ad19705d00eda0516bb46d4b49ff3e185c5fd13c0afc33cc1d993037a669d12ef7651bae9d0dd4b65a897f1e43a482b6e965b1f9d6196760a5c08dd872fc075bc1236dff914b73a7f420178d712febe27baf425d7bb3f4b02085f0536a7359f2b7c843d623fca97ba6bb6aab0f1f1010b5773ea795da17e8b0498b60eab2186e68374ae37890ff8b8005d75baa61be6047e34760ed5d760cecb9e18275d39cd0c62e10aba4d689d96d5bc77ebdf828161c3f0dc2531a04247a2c9e15c676d84d43e40ac35e47567e99b212c8243fb78941f33eadd972a4f1028c61e8bf9f526fc04f40d10b94aa5d4bff3877dc8e216449b64c41e2ff6d49f18fee59f0635e37e15ebceaaf000694da99353da7e74010b3ae9665b463d3bd6823b2bed91565270ec8f70b1676e3265bccb4858c998a723f8e268649256bf4cfa9cc92be10d1fd443291571dfc9e22ecc73318ece09a1b2e9f536c48cdb7a976d494bb2f9922e339740a095d2274c6dd49cb9d4c561790a44b79087bf5cb2bae438265e1abc16b3111a3313cc60ee2e40646d36ec4ca5d9ea34dd26c7555b36e3b943471948408fcd326c5a2502830c0259d002e9866a8b9cdde29a44b7acab0c19f3bf8c81ba56e71a8b1724379cb5cc935063ffb5a32e921599294bdba35587cb5c8145cff61dba59937eb4463d8867d4478eb4187d16f40993a3549d2c38444599b6684824a5d9327a9340cc3c10ffa14c0558997ebabacf756412418fc7023947ccb72a5c5350706f297a4d8a6699b479de125d0e183371c90de1f88a88cd096aac4f5d2b15b216d31096f939f7c107bc82a4aeb2278696eefbecb605bb0c3f8ed9420b847359efc5359e81f225ee31fddba6db27f430ab1140590ee91600d8171061d850ff5c0f916164fab26b52e62c5096362aad1e20b7a4ba327b4a272dfb8cf751f8b800ba2df1de01c4ad486c906635d76ffb83e30a179960049b6b1790773878a1d70fda302264dc720851a6cae5a08d9d11cac183e8c8a2c2a14e72a20b85869c26a3304d12293493a3a2fd75f29d2bc46452306879562514f9267ffb94c88114eff7feb3d10be23401f4bc316948e9a9f896b557ac338313deeae10da372dd7dacfb56f569e98a3b1ae83ecb9bb82fce7b873b4df653b96da32cb83073c33949131c4092825887dd4a7c5487338e55a1b68a862503176b9852f6b6a6c2b8882cd8035531defc45f3bf4e501a0d4d5306cf6cb03b1b72ca5874610a2f9f31f95c0473a16c78ae9b7495e14930d0b9190c49d1c46423c81447ad082c020d5db61a6dd623a2877e9c6137bd68bcb996a914d2bd377ebacd58a931e6941f9a08640af73c2478ec4ed5dde92814ec55e8b172e69ea061ef7f1797564077f4d591c730ae3c0de54059b6c11315bba98e582b60866b80571477847b876cf6449f3addbb91a6be8a9d8be9312742f682d52b230cb1bdea990898b89d401be87bbdeaf340910321dc8be3d048d0723b44fd69260c0fb2948031458cdfb2d644b0016bbe4d88d52aba024c8141d5876436f48c40504d1cbff3e72f84b01180061aef7ba2fb7ae8f51965cf437c87f432cbff6c2742d79788c954107c1d05f8962cc127a9a6673fcbe9b558fd30f238eae831fc40119f864cbf4e61391", 0x1000}, {&(0x7f0000005040)="be5702dd42ece60b4d4fb1d021c18b4b4beb6bc1fdda0f4b52f8f4d84477d774c320eb52b2c6ec2827d1d3cbf8e9773e46fb67530583ba24d74d1fb27fbdec13f354e3e39a0def62011d6ea2182fa3c6cd89b1bbc745edee3b29f82c4f0e831014890e040e36130997235163c31b3e3fd6c8a66aad93f84a0d613fd90749c3ee37dbb4dcd0a0c9bfe0cfdd50ac0eee6d6de2c4b78151b52970a952ea67197431446ca83f54cbf400fb6b975d93082a05c374d2d20229fb94da40027617a685573090f75a120484bd0910fd95386b4cdc17f53d915ab923040915cf8d3125768f1e64edcd9d44e3e8ce2a2de4b96f544b431e4e0f62", 0xf5}, {&(0x7f0000005140)="db24d7ec6a06daa796ebb7b45533de018cf17c63e838096268f73d5cf9aa94485c7ec66a55502cf5", 0x28}, {&(0x7f0000005180)="ed8e7e10636841bc5413395dd81498f51bbea892f0d9defd79533ff919383a1afc144dbed0ec6237d6fcded27f20ffe574a8382935a53d9fb21de8b264e7a3651362a4a82716b213bf3fcae40fdbadf49f52390a8bf444f9dcf6e2847f38774ee719215640d8d14f9db799cb11b49566cc0b398b", 0x74}], 0x5, &(0x7f0000005280)=[{0x48, 0x29, 0x3, "c26412947e7544befb99742fc92aef5e48ba83f97142e4df150ad78f4eb722ad8c1c94e33db2fe96898cd6ed85824227252ee32e4d929b"}, {0xe0, 0x10f, 0x591d, "c852d41b39492adff4f64e8e996d2bece283fbe0e7d49f4b59d932e7f0a685c800eceb09c27d1e16dfafbcb827fedd3ffeeac86400396a105fb26d14a839e5dfb873fd33d49459b5ae39e81b08f69cf9aa497d2473c3c0a42713908231a4508c2f6ed18877cda89c57fe1c160cb18ac4d276c81916d391d723dc28608e447784570dc074a834fd50526462ed72effa1f0a8a5737173fa82fc6ffa6663f62325dc810f1c56d21cb7b9fca546ad3452d8df783ce5ba3acbe66987901d9fa9c8ced4c7ad98769d7e2f86c82c67c"}, {0xc0, 0x11, 0x9, "89b9d82efd955cc31b1cc3a5a7fb5349ae57f521d0418467a1457d8b06e04d7b0dc93a5f12c8efedc4fd2be3479458a797b75bad26c250945ce91fb2baed906a8e9787344a1982996897844016030bec97141e2cdb5ce38480c6cb7604928e1aadae0d39c2c13de508ed3c942333b1dd505f4ef10c2637ac43fbaf46a423a964b2bda27cd72cfef1c5c6268f03ed79be06def33775e35c598074631bd8d7631e6393540b544ff40e3d"}], 0x1e8}, 0x890)
setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00000054c0)="94ef544125e2be4ef8303b105b416330bf865906959cdea129a4328fc4ce80ad2d23cdbd4c0c2139033041c98cff98c139cebe865d7fe46a24d66800d136e25eb28f8436ad778137a0e7b85f159f9c8980d38225a5dc3bf197c44073941a439fab5f2fa330066b4c53bfcc9cbe83a958aac7625eb6936f8ad4e512d22eddae5362bf34b886e67c059d7c0baa7b645520db", 0x91)
sendmsg$NFT_BATCH(r7, &(0x7f0000005680)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005640)={&(0x7f00000055c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x20048000)
getsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f00000056c0)=""/85, &(0x7f0000005740)=0x55) (async)
getsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f00000056c0)=""/85, &(0x7f0000005740)=0x55)
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000005840)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005800)={&(0x7f00000057c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000020}, 0x20000001)

614.876271ms ago: executing program 2 (id=218):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async, rerun: 64)
write$tun(r0, 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r2, &(0x7f0000000440)=ANY=[@ANYRES8=r1], 0xa) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRESHEX=r2], 0x58}}, 0x0)

530.263467ms ago: executing program 2 (id=219):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x4}, {0x6, 0x1}]})
write(r7, 0x0, 0x0) (async)
write(r7, 0x0, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
r9 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x1800)
ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000400)=@generic={0x1, 0xffffffffffffffa5, 0xfffffffffffffffc})
recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r8, &(0x7f00000005c0), 0x10000000000003c6)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_ife={0xe4, 0x1, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async)
sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r6) (async)
close(r6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x40000001, 0x4, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0xb2, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x8, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0xf, 0x2, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x2, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x900, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x4, 0x5, 0x5, 0x0, 0x2, 0x7, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x800007d, 0x3ff, 0x2, 0xfffffefe, 0x1, 0x244f, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0xfffffff9, 0xf5f, 0x101, 0xfffffffb, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0xa, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x1c50034b, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e4, 0x5, 0x8, 0x5e, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8d, 0x3, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x4, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYRES64=r0], 0x38}, 0x1, 0x300}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYRES64=r0], 0x38}, 0x1, 0x300}, 0x0)

326.857751ms ago: executing program 1 (id=220):
r0 = socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r1=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r1}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xd, r1, 0xfffffffc}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

204.861979ms ago: executing program 1 (id=221):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0xfe030000, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)

202.400983ms ago: executing program 1 (id=222):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5, 0x0, 0x300}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

198.356533ms ago: executing program 0 (id=223):
socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
getsockname$packet(r2, 0x0, &(0x7f0000000040))
setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000980)}, 0xfd73)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b08000000007cda00"/20, @ANYRES32=r3, @ANYBLOB="f2ffffff00"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="05000000000000000200"/28], 0x50)
sendmsg$nl_generic(r7, 0x0, 0xc000)
sendmsg$netlink(r5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000940)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaa42000008000500", @ANYRES32=r11, @ANYBLOB="3599fd37ba18022afc76e8e968460c8d037f41490468f0da4558f7420815b41587bfb1c81ee7a66c33d42c8790ac83a9020647e1193281f583a7f06ad14c8c4d2bb3622f1bd526f308002a0236a3a9271edf2adb57002cd75e"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r12 = socket(0x10, 0x80002, 0x0)
sendmsg$802154_dgram(r12, &(0x7f0000000880)={&(0x7f0000000700)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4044080}, 0x8000)
sendmsg$inet_sctp(r12, &(0x7f00000006c0)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="907dc4136069a9744ae32a2673111d1a67139e0ad1a3714e70c99f2c66e98da153abec7b6c58dd6abd00d94594698f88d4ef6efc6f3cfebb8890677bf00f8bacd6003ca80c33daccf10991558026", 0x4e}, {&(0x7f0000000240)="17b9e2a52cb9b0dea3d1170aa08eccc4cde5345fe1bd0677a8616529a634bc5798f00ac8a0b3ec958ff042b42aaa6dc910f5cb4961cdc24e9694524e20aa72c87093ef64aa7d660f09cf5e1fc90b", 0x4e}, {&(0x7f00000002c0)="94a56a7b9037918abafc322d388e6920d0dc3e949b548a60781b7019b4e2d54b00874e916c381ac5a6522a464d682769baeaf1fc126fd4135755016d1d92d88aeffe8172aeee4a655f540bf8c09006483cb9dfbe2cb35a7e97d6728b39382c0d52743c0aef8cd4967d75c1d16aab01d8cf730f49d5fa0a60041f4dedfccb23223eeb1150eb54cc8d9e98e8dfcd2dd412bd7ceb20fdb6340721b1e1e1019b74f85eae", 0xa2}, {&(0x7f0000000380)="fd7ed0d7bd92781fe82591c7cbd890073d4c205dadb4911f4c22c8b7a2fd93a99ab2f995d43dcb0d67775898268cb1e139347285400e67a6ba7fa7afba78862672b664a97eebf938ea10a2aa38ee531e9c26a88e8f5d8dbef1c932eec955e7d3c45f1b704cd0a0a53bcc07e299c5653c38a66eb4dfa78809368488002c8668fc027848aced8a3ebce70d4c3b6631e73b6fd9ff38fe14f57e15df3861c485fee4e46d5c6061d475f3fc345c7a15159eaf48839a99e8e3795760a8a66758e609a72cd83c8891d9f3b5f67b2b2f90f6ce58241825f7e246d2095dc2439be89b3bd2e1a5e31f946add3a1af720bf2cf5bc63e73f3a6192b78dd5", 0xf8}, {&(0x7f0000000480)="856e165dc39427cbcef8878aa761dd4a99ae5dc331d42b04c3d864ccc7b065e9a52835820451217746d1bed1ab8760c1d389466ee219645125fbbdcb6c611363d4057f691b9e3a0eb819aa9df07ba9eda31ef67642ae031ee0998e77a60eea4c4ab66cc81f0fa5b8fd0eb67a0d0c08831593f50e98b26830327bed5f6d6908b23b417b826cb3e008d3dd85dc4561ce7592c9cc39549192698a601835ab86f8031785c8ffaa8a056d52871fbe6747857228c56e0265f3ed3dbb802bdf58d89ec802e590a6d6", 0xc5}], 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ffffffff000000001800000000c7139d7f7a2566b49287e43688000000840000000500000010000000020000002000000000000000840000000800000000000000000000000000ffff7f0000011800000000000000840000000500000010000000ffffffff180000000000000084000000070000000000000084000000010000000000070004000000f1ffffff03000000f29b0000050000000600"/185, @ANYRES32=0x0], 0xb0, 0x200040c0}, 0x20000010)

135.785595ms ago: executing program 0 (id=224):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000300)=""/198, 0x0, 0x1000, 0x883, 0x1}, 0x20)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'gretap0\x00', {}, 0x9})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000018c0)="34bc5b1527f0ad59e2589b57889603cc90d9a9cd17e087dd50570b25b79b3572df0b38f9eff6", 0x26}], 0x1}, 0x800)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
sendmmsg$inet(r3, &(0x7f0000000ec0), 0x0, 0x48844)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x52, 0x0, 0x0, 0xffffffff}, 0x28)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000180))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv4_delroute={0x2c, 0x18, 0xa01, 0x0, 0xffffffff, {0x2, 0x10, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x2c}}, 0x4040818)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

135.302209ms ago: executing program 1 (id=225):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x5)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast1}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8)
sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x2, 0x4)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x8, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x6, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x3ff, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@dev={0xac, 0x14, 0x14, 0x68}, 0x4d3, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@private=0xa010100, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in=@loopback, 0x4d4, 0x2b}, 0x0, @in=@remote, 0x3505}, {{@in6=@mcast1, 0x0, 0x2b}, 0x8, @in6=@local, 0x10, 0x1, 0x0, 0x7, 0x1, 0x40000, 0x7}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0xa31edff430691956}, 0x4080)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500921401000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_dump={0x3f, 0x5, 0x3d, 0x31, "129cbda59775dcc181c4d6edf230cfeca2192a3c8e02918139a49358692916305a903ea544e14708fbca1d5f78090a2e9f"}})
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r6, 0x6afc91deabb5003e, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x40007)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002340), 0x82, 0x0)
ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, &(0x7f0000002380)={0x5128065b, 0x1})

9.218191ms ago: executing program 0 (id=226):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
socket(0x2b, 0x1, 0x1)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000040000000000000090000008500000011000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e810001020800450000b0000000000011907c00000000e0000001000017c1009c90780100000001000000626abd460043000000000079a7000000400000000000000000000000000020008a000000000000002beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f55be1497a9edd45189dacc307c3506000000a9c5b5b06cbc715d9569f2b2ee1cf210c588b60723e0cc4e1fdd8d6d18e2e9ee4939689f00000000000000000000000000d0cc2ff799ba9e0a3ef314195058dc7288315c11fc3f30cd576737b6c0b14197474814f94754775002eb654cc7b5869e2847a93af8ec45ffda727739ba20583ef62c907c491d6dd5c8a585e4183ede3f500fc97522223bc0538f326a64393e23c2892d76e61ef76a4575"], 0xc6)

0s ago: executing program 1 (id=227):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x13e0, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x139c, 0x4, 0x0, 0x1, [{0x11a0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1190, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1008, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_FROM_DATA={0x6c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x39, 0x1, "e252521ee5e222a65491b31160147a1c6b22b25ddb7eaf36f118e6cabae73bb2ebb446cfac9e2ec184e6d16a4fb90be6687cb385d0"}, @NFTA_DATA_VALUE={0xe, 0x1, "fc243f81a87a1e704a09"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_TO_DATA={0x10c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "00a6ff6637eb329904c3fa99b97c490c1c2910fe977d687733d0b99fb66ccb8a030a33936739ff7232c11330a930802fd64afa17e73e4de8d6660519a49d04c733a3a4b75cb32f05ec77cbfeb4bb6b15975779ad7286b8de52efece01af2c4ab018879f168e108580c802aa5156ecb651ca5fe1579043a"}, @NFTA_DATA_VALUE={0x89, 0x1, "08cb16414cad30875f4ca61bdb353ce53e3097eafef7ecbc4d815902edbc79659ece3bae282843578186e50e53a1baf8dc84153f8ee992d0109cee6e3f62d058316c4f042a9129dd6710285d9ee93ac8e85288214f155428e0dfa78f97818739ba9ff9695476b412c993a4c30c5c238055555e1f2899bc6489d58e0ed5c509911431f9c047"}]}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x743c1118}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xac, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_TO_DATA={0x80, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xcc0}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5b82fc47}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1408}, 0x1, 0x0, 0x0, 0x4008091}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x64, 0x0, 0x10a, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "91d77ecb40f5d45d47cac3ee0e2fe5b8"}, @NL80211_ATTR_PMK={0x14, 0xfe, "690a9008bc1f52ccaa87cfe78e5f8e83"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "56a3c793f34eecafe28732ccf7e85ae1"}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x8000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xf5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r9, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r9, @ANYBLOB="2e27000020830600"], 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26174' (ED25519) to the list of known hosts.
syzkaller login: [   58.361095][ T5597] cgroup: Unknown subsys name 'net'
[   58.468726][ T5597] cgroup: Unknown subsys name 'cpuset'
[   58.473283][ T5597] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.291445][ T5597] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.573758][ T5001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.578170][ T5001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.581822][ T5001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.588280][ T5001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.590800][ T5001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.609785][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.614557][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.617496][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.622053][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.625006][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.668366][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.673207][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.677868][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.682021][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.688624][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.221189][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.223853][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.227320][ T5615] bridge_slave_0: entered allmulticast mode
[   65.230092][ T5615] bridge_slave_0: entered promiscuous mode
[   65.248159][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.250418][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.253040][ T5615] bridge_slave_1: entered allmulticast mode
[   65.255816][ T5615] bridge_slave_1: entered promiscuous mode
[   65.290163][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.294470][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.350030][ T5615] team0: Port device team_slave_0 added
[   65.376964][ T5615] team0: Port device team_slave_1 added
[   65.378858][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.381828][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.385116][ T5611] bridge_slave_0: entered allmulticast mode
[   65.388741][ T5611] bridge_slave_0: entered promiscuous mode
[   65.393415][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.396965][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.399376][ T5611] bridge_slave_1: entered allmulticast mode
[   65.402914][ T5611] bridge_slave_1: entered promiscuous mode
[   65.449122][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.451304][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.458924][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.474515][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.476535][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.483838][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.490152][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.503403][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.537114][ T5611] team0: Port device team_slave_0 added
[   65.538992][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.541847][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.544903][ T5623] bridge_slave_0: entered allmulticast mode
[   65.548224][ T5623] bridge_slave_0: entered promiscuous mode
[   65.561553][ T5611] team0: Port device team_slave_1 added
[   65.577498][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.580334][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.583194][ T5623] bridge_slave_1: entered allmulticast mode
[   65.586593][ T5623] bridge_slave_1: entered promiscuous mode
[   65.624798][ T5615] hsr_slave_0: entered promiscuous mode
[   65.627150][ T5615] hsr_slave_1: entered promiscuous mode
[   65.629752][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.631965][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.640358][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.646864][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.652778][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.656971][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.659382][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.667203][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.713486][ T5623] team0: Port device team_slave_0 added
[   65.737796][ T5623] team0: Port device team_slave_1 added
[   65.776252][ T5611] hsr_slave_0: entered promiscuous mode
[   65.778453][ T5611] hsr_slave_1: entered promiscuous mode
[   65.780465][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   65.782161][ T5611] Cannot create hsr debugfs directory
[   65.800357][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.803093][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.812763][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.823292][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.826097][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.835602][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.970354][ T5623] hsr_slave_0: entered promiscuous mode
[   65.973072][ T5623] hsr_slave_1: entered promiscuous mode
[   65.975321][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   65.977903][ T5623] Cannot create hsr debugfs directory
[   66.109890][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.118201][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.121553][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.126092][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.152708][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.157509][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.172683][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.177395][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.258091][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.270184][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.274114][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.281785][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.287617][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.298325][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.301795][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.308866][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.381760][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.387140][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.389881][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.395331][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.402579][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.407571][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.410739][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.418431][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.465521][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.495395][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   66.508390][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.510845][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.533284][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.535822][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.557452][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.607244][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   66.612570][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.629856][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.632142][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.641783][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   66.647018][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.649393][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.666021][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.668400][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.677114][ T5001] Bluetooth: hci1: command tx timeout
[   66.679457][   T54] Bluetooth: hci0: command tx timeout
[   66.683442][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.685559][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.765474][   T54] Bluetooth: hci2: command tx timeout
[   66.980329][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.030567][ T5615] veth0_vlan: entered promiscuous mode
[   67.050140][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.054627][ T5615] veth1_vlan: entered promiscuous mode
[   67.088755][ T5615] veth0_macvtap: entered promiscuous mode
[   67.102340][ T5615] veth1_macvtap: entered promiscuous mode
[   67.111995][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.128396][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.142114][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.149528][ T5623] veth0_vlan: entered promiscuous mode
[   67.159694][ T5669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.168417][ T5669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.182903][ T5669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.188413][ T5669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.193522][ T5623] veth1_vlan: entered promiscuous mode
[   67.254386][ T5611] veth0_vlan: entered promiscuous mode
[   67.272695][ T5623] veth0_macvtap: entered promiscuous mode
[   67.285558][ T5611] veth1_vlan: entered promiscuous mode
[   67.290421][ T5623] veth1_macvtap: entered promiscuous mode
[   67.333442][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.334971][    C0] clocksource: Watchdog remote CPU 1 read timed out
[   67.341329][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.346362][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.362864][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.382845][ T5611] veth0_macvtap: entered promiscuous mode
[   67.397078][ T5648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.400262][ T5648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.407638][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.408397][ T5611] veth1_macvtap: entered promiscuous mode
[   67.412870][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.414354][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.420199][ T5648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.495841][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.511535][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.513628][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.529454][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.537117][ T5648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.540745][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.543574][ T5648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.603725][ T5648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.608490][ T5648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.629185][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.635360][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.703350][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.708846][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.758578][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.762563][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.838205][ T5728] netlink: 'syz.2.3': attribute type 83 has an invalid length.
[   68.070999][ T5741] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   68.135746][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.159900][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.163862][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.191482][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.207280][ T5741] macvlan2: entered promiscuous mode
[   68.208940][ T5741] macvlan2: entered allmulticast mode
[   68.331726][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   68.387106][ T5758] Zero length message leads to an empty skb
[   68.423101][ T5762] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   68.512825][ T5765] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14'.
[   68.526519][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   68.630379][ T5767] Cannot find set identified by id 0 to match
[   68.695691][ T5772] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17'.
[   68.756191][   T54] Bluetooth: hci0: command tx timeout
[   68.758673][ T5001] Bluetooth: hci1: command tx timeout
[   68.835431][ T5001] Bluetooth: hci2: command tx timeout
[   68.886800][ T5781] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.169513][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.192947][ T5804] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.205332][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.228505][ T5799] openvswitch: netlink: Flow actions attr not present in new flow.
[   69.232010][ T5804] bond1 (unregistering): Released all slaves
[   69.353637][ T5814] netlink: 'syz.1.21': attribute type 7 has an invalid length.
[   69.469345][ T5815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.926624][ T5815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.980121][ T5815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.081502][ T5815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.173663][ T5669] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.195270][ T5669] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.222545][ T5648] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.239567][ T5823] bond2: entered promiscuous mode
[   70.241805][ T5823] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.252579][ T5648] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.317139][ T5828] netlink: 'syz.1.25': attribute type 58 has an invalid length.
[   70.333889][ T5830] netlink: 'syz.2.27': attribute type 4 has an invalid length.
[   70.425787][ T5830] block nbd0: server does not support multiple connections per device.
[   70.433366][ T5830] block nbd0: shutting down sockets
[   70.521798][ T5837] openvswitch: netlink: EtherType 0 is less than min 600
[   70.568008][ T5840] tipc: Started in network mode
[   70.569569][ T5840] tipc: Node identity c2a3209a5c1c, cluster identity 4711
[   70.572532][ T5840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.577303][ T5840] syzkaller0: entered promiscuous mode
[   70.579524][ T5840] syzkaller0: entered allmulticast mode
[   70.589319][ T5839] tipc: Resetting bearer <eth:syzkaller0>
[   70.599750][ T5839] tipc: Disabling bearer <eth:syzkaller0>
[   70.695158][ T5842] netlink: 'syz.2.31': attribute type 9 has an invalid length.
[   70.834989][ T5001] Bluetooth: hci1: command tx timeout
[   70.835371][   T54] Bluetooth: hci0: command tx timeout
[   70.915837][   T54] Bluetooth: hci2: command tx timeout
[   71.032719][ T5848] ip6gretap0: entered promiscuous mode
[   71.240162][ T5858] IPv6: addrconf: prefix option has invalid lifetime
[   72.555490][ T5884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.663398][ T5903] netlink: 'syz.2.48': attribute type 29 has an invalid length.
[   72.686174][ T5903] netlink: 'syz.2.48': attribute type 29 has an invalid length.
[   72.771295][ T5909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   72.779204][ T5909] syzkaller0: entered promiscuous mode
[   72.781103][ T5909] syzkaller0: entered allmulticast mode
[   72.831699][ T5904] bond1 (unregistering): Released all slaves
[   72.915173][   T54] Bluetooth: hci0: command tx timeout
[   72.917229][   T54] Bluetooth: hci1: command tx timeout
[   72.972156][ T5918] dummy0: entered allmulticast mode
[   72.995158][   T54] Bluetooth: hci2: command tx timeout
[   73.081327][ T5669] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.085837][ T5669] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.090198][ T5669] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.093653][ T5669] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.126377][ T5930] Cannot find set identified by id 0 to match
[   73.223102][ T5937] __nla_validate_parse: 16 callbacks suppressed
[   73.223113][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   73.276942][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'.
[   73.283630][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.58'.
[   73.306786][ T5933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.58'.
[   73.338993][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'.
[   73.393381][ T5945] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[   73.452526][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'.
[   73.512614][ T5945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'.
[   73.615235][ T5945] syzkaller0: entered promiscuous mode
[   73.624267][ T5945] syzkaller0: entered allmulticast mode
[   73.664034][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   73.669657][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   73.676853][ T5952] netlink: 'syz.1.63': attribute type 14 has an invalid length.
[   73.720200][ T5954] netlink: 19 bytes leftover after parsing attributes in process `syz.2.64'.
[   73.884126][ T5960] veth3: entered promiscuous mode
[   73.922241][ T5966] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   73.951795][ T5966] 8021q: adding VLAN 0 to HW filter on device bond4
[   73.995863][ T5966] bond4: (slave geneve2): making interface the new active one
[   74.004454][ T5966] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   74.252907][ T5991] pim6reg1: entered promiscuous mode
[   74.254528][ T5991] pim6reg1: entered allmulticast mode
[   74.267325][ T5993] netlink: 'syz.2.74': attribute type 1 has an invalid length.
[   74.380350][ T5677] bridge0: entered promiscuous mode
[   74.397524][ T6005] veth3: entered promiscuous mode
[   74.601592][ T6028] Cannot find set identified by id 0 to match
[   74.646085][ T6032] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20000
[   74.860735][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.866609][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.895246][ T6045] netlink: 'syz.2.85': attribute type 16 has an invalid length.
[   74.898381][ T6045] netlink: 'syz.2.85': attribute type 17 has an invalid length.
[   74.923040][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.925303][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.929007][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.931214][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.970594][ T6045] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.974275][ T6045] bond2: left promiscuous mode
[   74.979375][ T6045] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.981856][ T6045] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   75.016607][ T5648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.019380][ T5648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.022002][ T5648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.027004][ T5648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.193295][ T6060] xt_hashlimit: size too large, truncated to 1048576
[   75.227193][ T6063] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   75.251637][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.258206][ T6065] bridge_slave_0 (unregistering): left allmulticast mode
[   75.260547][ T6065] bridge_slave_0 (unregistering): left promiscuous mode
[   75.263515][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.300704][ T6067] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   75.666147][ T6090] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   75.710570][ T6090] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   75.713929][ T6090] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[   75.721028][ T6090] bond1: (slave vxcan1): making interface the new active one
[   75.724573][ T6090] bond1: (slave vxcan1): Enslaving as an active interface with an up link
[   75.732578][ T6090] bond1 (unregistering): (slave vxcan1): Releasing backup interface
[   75.736824][ T6090] bond1 (unregistering): Released all slaves
[   76.270097][ T6156] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   76.311532][ T6156] 8021q: adding VLAN 0 to HW filter on device bond5
[   76.327090][ T6156] bond5: (slave dummy0): making interface the new active one
[   76.330222][ T6156] bond5: (slave dummy0): Enslaving as an active interface with an up link
[   76.339303][ T6156] bond5: (slave dummy0): Releasing active interface
[   76.518397][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   76.626525][ T6189] ip6t_srh: unknown srh match flags  4000
[   76.966858][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.970899][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.113597][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.119773][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.286577][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.290365][ T6218] 8021q: adding VLAN 0 to HW filter on device team0
[   77.299089][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.332177][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.334997][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.343421][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.346175][ T6218] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.493869][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.501918][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.553266][ T6218] veth1_macvtap: left promiscuous mode
[   77.567366][ T6218] veth0_macvtap: left promiscuous mode
[   77.578303][ T6218] veth0_macvtap: entered promiscuous mode
[   77.621086][ T6218] veth1_macvtap: entered promiscuous mode
[   77.680567][ T6218] 8021q: adding VLAN 0 to HW filter on device eth0
[   77.704696][ T6218] 8021q: adding VLAN 0 to HW filter on device eth1
[   77.719447][ T6218] 8021q: adding VLAN 0 to HW filter on device eth2
[   77.737250][ T6218] 8021q: adding VLAN 0 to HW filter on device eth3
[   77.763852][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv1
[   77.777968][ T6218] veth3: left promiscuous mode
[   77.871150][ T5648] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.876331][ T5648] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.881683][ T5648] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.927428][ T6229] bond1: entered promiscuous mode
[   77.932431][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.984932][ T6231] bond1: (slave bridge2): making interface the new active one
[   77.987324][ T6231] bridge2: entered promiscuous mode
[   77.989697][ T6231] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   77.992895][ T5648] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.054108][ T6239] syzkaller0: entered promiscuous mode
[   78.055920][ T6239] syzkaller0: entered allmulticast mode
[   78.311864][ T6249] __nla_validate_parse: 14 callbacks suppressed
[   78.311882][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'.
[   78.909902][ T6217] Set syz1 is full, maxelem 65536 reached
[   79.517712][ T6268] IPVS: length: 8 != 55835000840
[   79.617375][ T6247] pim6reg: entered allmulticast mode
[   79.619786][ T6248] pim6reg: left allmulticast mode
[   79.621903][ T6248] dummy0: left allmulticast mode
[   79.650180][ T6251] macvlan2: entered promiscuous mode
[   79.651907][ T6251] macvlan2: entered allmulticast mode
[   79.689507][ T6263] bond6 (unregistering): Released all slaves
[   79.792792][ T6281] validate_nla: 3 callbacks suppressed
[   79.792803][ T6281] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   79.820621][ T6281] bond2: entered promiscuous mode
[   79.825565][ T6281] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.849972][ T6281] bond2: (slave bridge3): making interface the new active one
[   79.853842][ T6281] bridge3: entered promiscuous mode
[   79.857441][ T6281] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   79.884412][ T6287] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   79.904981][ T6290] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   79.937604][ T6287] 8021q: adding VLAN 0 to HW filter on device bond6
[   79.972815][ T6290] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.982238][ T6287] vlan2: entered allmulticast mode
[   79.983843][ T6287] bond6: entered allmulticast mode
[   80.005067][ T6296] bond3: (slave veth5): Enslaving as an active interface with an up link
[   80.021191][ T6290] netlink: 'syz.0.122': attribute type 1 has an invalid length.
[   80.038810][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv1
[   80.051333][ T6291] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   80.115679][ T6304] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   80.178369][ T6309] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   80.197208][ T6309] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.211610][ T6309] bond1: (slave ip6erspan0): making interface the new active one
[   80.215779][ T6309] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   80.300475][ T6316] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   80.329384][ T6316] bond2: entered promiscuous mode
[   80.331790][ T6316] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.370748][ T6316] bond2: (slave bridge3): making interface the new active one
[   80.373582][ T6316] bridge3: entered promiscuous mode
[   80.377765][ T6316] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   80.412826][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   80.430747][ T6322] netlink: 33 bytes leftover after parsing attributes in process `syz.1.131'.
[   80.555504][ T5685] IPVS: starting estimator thread 0...
[   80.596721][ T6337] netlink: 'syz.0.135': attribute type 29 has an invalid length.
[   80.645037][ T6333] IPVS: using max 46 ests per chain, 110400 per kthread
[   80.688206][ T6341] bridge_slave_1: left allmulticast mode
[   80.690326][ T6341] bridge_slave_1: left promiscuous mode
[   80.692636][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.709366][ T6348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.139'.
[   80.717452][ T6341] bond0: (slave bond_slave_0): Releasing backup interface
[   80.723881][ T6341] bond0: (slave bond_slave_1): Releasing backup interface
[   80.739254][ T6341] team0: Port device team_slave_0 removed
[   80.749328][ T6341] team0: Port device team_slave_1 removed
[   80.752411][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.757326][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.761581][ T6341] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.763760][ T6341] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.767577][ T6341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.782312][ T6349] team0: Mode changed to "broadcast"
[   80.790199][ T6346] syzkaller0: entered promiscuous mode
[   80.792497][ T6346] syzkaller0: entered allmulticast mode
[   80.877624][ T6358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[   80.881582][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[   80.927132][ T6358] veth3: entered allmulticast mode
[   80.932457][ T6358] bond7: (slave veth3): Enslaving as an active interface with an up link
[   80.943533][ T6357] bond7 (unregistering): (slave veth3): Releasing backup interface
[   80.950615][ T6357] bond7 (unregistering): Released all slaves
[   81.044641][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   81.048451][ T6375] netlink: 'syz.2.143': attribute type 1 has an invalid length.
[   81.050800][ T6375] netlink: 'syz.2.143': attribute type 2 has an invalid length.
[   81.064125][ T6375] netlink: 'syz.2.143': attribute type 16 has an invalid length.
[   81.102365][ T6375] vlan2: left allmulticast mode
[   81.104152][ T6375] bond6: left allmulticast mode
[   81.108352][ T6375] veth3: left allmulticast mode
[   81.187594][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   81.309942][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'.
[   83.841333][ T6352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.904036][ T6388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.146'.
[   84.350709][ T6397] ip6gretap0: left promiscuous mode
[   84.364122][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.367972][ T6397] 8021q: adding VLAN 0 to HW filter on device team0
[   84.372289][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.418101][ T6397] veth1_vlan: left promiscuous mode
[   84.422272][ T6397] veth0_vlan: left promiscuous mode
[   84.426335][ T6397] veth0_vlan: entered promiscuous mode
[   84.433372][ T6397] veth1_vlan: entered promiscuous mode
[   84.442024][ T6397] veth1_macvtap: left promiscuous mode
[   84.445519][ T6397] veth0_macvtap: left promiscuous mode
[   84.449310][ T6397] veth0_macvtap: entered promiscuous mode
[   84.459172][ T6397] veth1_macvtap: entered promiscuous mode
[   84.467248][ T6397] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.473402][ T6397] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.480398][ T6397] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.487654][ T6397] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.496136][ T6397] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   84.504006][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.511749][ T6397] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.514951][ T6397] ip6gretap0: entered promiscuous mode
[   84.518166][ T6397] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.520734][ T6397] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   84.526379][ T6397] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.531439][ T6397] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.537405][ T6397] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.542762][ T6397] 8021q: adding VLAN 0 to HW filter on device bond7
[   84.547702][ T6399] warning: `syz.0.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.620069][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   84.630980][ T6406] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   84.639449][ T6406] bond3: (slave lo): Enslaving as an active interface with an up link
[   84.642659][ T6406] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   84.696188][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   84.810740][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[   84.813891][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[   84.867900][ T6422] validate_nla: 6 callbacks suppressed
[   84.867915][ T6422] netlink: 'syz.1.155': attribute type 1 has an invalid length.
[   84.937465][ T6422] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.961587][ T6425] bond4: (slave veth5): Enslaving as an active interface with a down link
[   85.025223][ T6425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'.
[   85.041447][ T6428] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[   85.046028][ T6428] bond8: entered promiscuous mode
[   85.048467][ T6428] 8021q: adding VLAN 0 to HW filter on device bond8
[   85.093350][ T6425] bond4: (slave bridge4): Enslaving as an active interface with a down link
[   85.151846][ T6434] xt_hl: Unknown TTL match mode: 237
[   85.226560][ T6439] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   85.261259][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   85.273339][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   85.279424][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   85.286975][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'.
[   85.453377][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.456342][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.514061][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.522296][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.648114][ T6449] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   85.653533][ T6449] bond4 (unregistering): Released all slaves
[   85.674931][ T6225] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.679576][ T6225] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.688430][ T6225] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.691926][ T6225] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.701165][ T6225] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.704661][ T6225] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.719667][ T6225] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.723419][ T6225] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.826480][ T6458] Cannot find set identified by id 0 to match
[   85.929344][ T6461] pim6reg: entered allmulticast mode
[   85.933408][ T6461] pim6reg: left allmulticast mode
[   86.200854][ T6463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   86.258517][   T24] IPVS: starting estimator thread 0...
[   86.365555][ T6476] IPVS: using max 43 ests per chain, 103200 per kthread
[   86.694182][ T6478] veth3: left promiscuous mode
[   86.698251][ T6478] bond1: left promiscuous mode
[   86.700254][ T6478] bridge2: left promiscuous mode
[   86.709206][ T6478] bond2: left promiscuous mode
[   86.713606][ T6478] bridge3: left promiscuous mode
[   86.736454][ T6485] bond0 (unregistering): Released all slaves
[   86.767548][  T797] cfg80211: failed to load regulatory.db
[   87.082385][ T6500] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   87.115861][ T6500] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.158396][ T6505] Cannot find set identified by id 0 to match
[   87.180222][ T6500] bond4: (slave veth7): Enslaving as an active interface with a down link
[   87.226157][ T6506] bond4: (slave veth9): Enslaving as an active interface with a down link
[   87.256888][ T6513] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   87.277085][ T6513] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.299936][ T6500] bond5: entered promiscuous mode
[   87.302026][ T6500] bond5: entered allmulticast mode
[   87.304409][ T6500] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.329547][ T6513] bond5: (slave ip6gretap1): making interface the new active one
[   87.334176][ T6513] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[   87.529813][ T6528] netlink: 'syz.1.177': attribute type 2 has an invalid length.
[   87.546693][ T6528] netlink: 'syz.1.177': attribute type 2 has an invalid length.
[   87.628542][ T6534] ip6gretap2: entered promiscuous mode
[   87.727088][ T6540] netlink: 'syz.2.178': attribute type 13 has an invalid length.
[   87.730129][ T6540] netlink: 'syz.2.178': attribute type 17 has an invalid length.
[   87.739301][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.746480][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.749997][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.752634][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.768016][ T6540] ip6gretap0: left promiscuous mode
[   87.773708][ T6540] 8021q: adding VLAN 0 to HW filter on device team0
[   87.780107][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.822814][ T6540] veth1_vlan: left promiscuous mode
[   87.826142][ T6540] veth0_vlan: left promiscuous mode
[   87.829509][ T6540] veth0_vlan: entered promiscuous mode
[   87.836123][ T6540] veth1_vlan: entered promiscuous mode
[   87.843553][ T6540] veth1_macvtap: left promiscuous mode
[   87.846867][ T6540] veth0_macvtap: left promiscuous mode
[   87.850655][ T6540] veth0_macvtap: entered promiscuous mode
[   87.854452][ T6540] veth1_macvtap: entered promiscuous mode
[   87.863091][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.867100][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.871099][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.874557][ T6540] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.878956][ T6540] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   87.885367][ T6540] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.894123][ T6540] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.897814][ T6540] ip6gretap0: entered promiscuous mode
[   87.902322][ T6540] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.906235][ T6540] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   87.910895][ T6540] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.918585][ T6540] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.923880][ T6540] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.931317][ T6540] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.937505][ T6540] bond8: left promiscuous mode
[   87.939754][ T6540] 8021q: adding VLAN 0 to HW filter on device bond8
[   87.949515][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.953509][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.976967][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.979699][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.399140][ T6521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.612777][ T6553] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   90.700416][ T6553] bond6: entered promiscuous mode
[   90.703198][ T6553] 8021q: adding VLAN 0 to HW filter on device bond6
[   90.757108][ T6567] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   91.234150][ T6594] : renamed from dummy0 (while UP)
[   91.548952][ T6605] syzkaller0: entered promiscuous mode
[   91.551108][ T6605] syzkaller0: entered allmulticast mode
[   91.682583][ T6609] bond7: Unable to set peer notification delay as MII monitoring is disabled
[   91.691444][ T6609] bond7 (unregistering): Released all slaves
[   91.768442][ T6613] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   91.791915][ T6613] bond7: entered promiscuous mode
[   91.796419][ T6613] 8021q: adding VLAN 0 to HW filter on device bond7
[   91.816432][ T6613] bond7: (slave bridge4): making interface the new active one
[   91.824916][ T6613] bridge4: entered promiscuous mode
[   91.829927][ T6613] bond7: (slave bridge4): Enslaving as an active interface with an up link
[   91.853321][ T6616] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   91.867627][ T6616] bond6: entered promiscuous mode
[   91.869721][ T6616] bond6: entered allmulticast mode
[   91.871591][ T6616] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.887357][ T6616] erspan1: entered allmulticast mode
[   91.896603][ T6616] bond6: (slave erspan1): making interface the new active one
[   91.899435][ T6616] erspan1: entered promiscuous mode
[   91.902406][ T6616] bond6: (slave erspan1): Enslaving as an active interface with an up link
[   91.915960][ T6616] syz.1.199 (6616) used obsolete PPPIOCDETACH ioctl
[   92.043762][ T6626] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   92.058409][ T6626] bond8: entered promiscuous mode
[   92.060753][ T6626] 8021q: adding VLAN 0 to HW filter on device bond8
[   92.073883][ T6626] 8021q: adding VLAN 0 to HW filter on device bond8
[   92.076828][ T6626] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   92.080579][ T6626] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   92.086545][ T6626] bond8: (slave ip6gre1): making interface the new active one
[   92.088755][ T6626] ip6gre1: entered promiscuous mode
[   92.090996][ T6626] bond8: (slave ip6gre1): Enslaving as an active interface with an up link
[   92.095945][ T6626] __nla_validate_parse: 16 callbacks suppressed
[   92.095953][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.202'.
[   92.118142][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.122778][ T6627] bond9 (unregistering): Released all slaves
[   92.186576][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.192742][ T6627] bond9 (unregistering): Released all slaves
[   92.278430][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.283668][ T6627] bond9 (unregistering): Released all slaves
[   92.363055][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.368796][ T6627] bond9 (unregistering): Released all slaves
[   92.440825][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.446898][ T6627] bond9 (unregistering): Released all slaves
[   92.519840][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.527196][ T6627] bond9 (unregistering): Released all slaves
[   92.585269][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.589572][ T6627] bond9 (unregistering): Released all slaves
[   92.651874][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.657428][ T6627] bond9 (unregistering): Released all slaves
[   92.739229][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.744291][ T6627] bond9 (unregistering): Released all slaves
[   92.792500][ T6640] ip6gre1: entered allmulticast mode
[   92.799298][ T6640] team0: Device ip6gre1 is of different type
[   92.829571][ T6627] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   92.839186][ T6627] bond9 (unregistering): Released all slaves
[   92.872652][ T6646] netlink: 'syz.1.204': attribute type 1 has an invalid length.
[   92.918777][ T6646] veth7: entered allmulticast mode
[   92.923445][ T6646] bond7: (slave veth7): Enslaving as a backup interface with a down link
[   92.987712][ T6651] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   92.989499][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'.
[   93.016108][ T6651] bond8: entered promiscuous mode
[   93.018503][ T6651] 8021q: adding VLAN 0 to HW filter on device bond8
[   93.061011][ T6651] bond8: (slave bridge5): making interface the new active one
[   93.063927][ T6651] bridge5: entered promiscuous mode
[   93.072843][ T6651] bond8: (slave bridge5): Enslaving as an active interface with an up link
[   93.076144][ T6654] netlink: 'syz.0.207': attribute type 11 has an invalid length.
[   93.158931][ T6658] netlink: 'syz.1.209': attribute type 1 has an invalid length.
[   93.209534][ T6661] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[   93.259322][ T6662] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.268286][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'.
[   93.270105][ T6662] bond9: (slave vxcan3): Error -95 calling set_mac_address
[   93.335501][ T6658] bond9: (slave bridge6): Enslaving as an active interface with a down link
[   93.339693][ T6666] bond9: entered promiscuous mode
[   93.341765][ T6666] bond9: entered allmulticast mode
[   93.342993][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'.
[   93.344101][ T6666] 8021q: adding VLAN 0 to HW filter on device bond9
[   93.363062][ T6661] bridge5: entered promiscuous mode
[   93.365399][ T6661] bridge5: entered allmulticast mode
[   93.367944][ T6661] bond9: (slave bridge5): Enslaving as a backup interface with an up link
[   93.375886][ T6658] 8021q: adding VLAN 0 to HW filter on device bond9
[   93.395153][ T6661] bridge6: entered promiscuous mode
[   93.397332][ T6661] bridge6: entered allmulticast mode
[   93.400177][ T6661] bond9: (slave bridge6): Enslaving as a backup interface with a down link
[   93.445140][   T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.473941][ T2247] IPVS: starting estimator thread 0...
[   93.567567][ T6672] IPVS: using max 64 ests per chain, 153600 per kthread
[   93.595804][ T5648] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   93.661564][ T6685] tipc: Started in network mode
[   93.663610][ T6685] tipc: Node identity 1ee67d199954, cluster identity 4711
[   93.666776][ T6685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.670243][ T6684] syzkaller0: entered promiscuous mode
[   93.675452][ T6684] syzkaller0: entered allmulticast mode
[   93.789238][ T6683] tipc: Resetting bearer <eth:syzkaller0>
[   93.828745][ T6683] tipc: Disabling bearer <eth:syzkaller0>
[   93.857618][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'.
[   93.860574][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   93.867054][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'.
[   93.870727][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   94.278825][ T6709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.284262][ T6709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.393731][ T6709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.398348][ T6709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.454679][ T6713] veth0_to_hsr: entered allmulticast mode
[   94.465417][ T6713] pim6reg: entered allmulticast mode
[   94.468692][ T6713] pim6reg: left allmulticast mode
[   94.470855][ T6713] veth0_to_hsr: left allmulticast mode
[   94.528783][ T6709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.532738][ T6709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.560450][ T6715] Cannot find set identified by id 0 to match
[   94.661810][ T6709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.670332][ T6709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.785028][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.796520][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.813257][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.816521][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.827449][ T6729] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   94.830772][ T6729] netlink: 228 bytes leftover after parsing attributes in process `syz.1.227'.
[   94.838491][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.841615][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.858783][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.862325][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.867723][ T6710] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.870843][ T6710] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.887069][ T6729] vxcan2: entered promiscuous mode
[   94.888609][ T6729] vxcan2: entered allmulticast mode
[   94.894264][   T13] ==================================================================
[   94.896806][   T13] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15a/0x1550
[   94.899080][   T13] Read of size 8 at addr ffff88811577a0a8 by task kworker/u8:1/13
[   94.902035][   T13] 
[   94.903070][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[   94.903081][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.903088][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   94.903104][   T13] Call Trace:
[   94.903109][   T13]  <TASK>
[   94.903114][   T13]  dump_stack_lvl+0xe8/0x150
[   94.903124][   T13]  print_address_description+0x55/0x1e0
[   94.903133][   T13]  ? __mutex_lock+0x15a/0x1550
[   94.903144][   T13]  print_report+0x58/0x70
[   94.903151][   T13]  kasan_report+0x117/0x150
[   94.903163][   T13]  ? __mutex_lock+0x15a/0x1550
[   94.903175][   T13]  __mutex_lock+0x15a/0x1550
[   94.903209][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[   94.903222][   T13]  ? look_up_lock_class+0x57/0x110
[   94.903235][   T13]  ? __mutex_lock+0x608/0x1550
[   94.903245][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[   94.903254][   T13]  ? __pfx___mutex_lock+0x10/0x10
[   94.903266][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   94.903277][   T13]  ? process_scheduled_works+0xa70/0x1860
[   94.903285][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[   94.903295][   T13]  ? process_scheduled_works+0xa70/0x1860
[   94.903301][   T13]  ? process_scheduled_works+0xa70/0x1860
[   94.903309][   T13]  process_scheduled_works+0xb5d/0x1860
[   94.903321][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   94.903330][   T13]  ? assign_work+0x3d5/0x5e0
[   94.903337][   T13]  worker_thread+0xa53/0xfc0
[   94.903350][   T13]  kthread+0x388/0x470
[   94.903360][   T13]  ? __pfx_worker_thread+0x10/0x10
[   94.903367][   T13]  ? __pfx_kthread+0x10/0x10
[   94.903376][   T13]  ret_from_fork+0x514/0xb70
[   94.903384][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   94.903392][   T13]  ? __switch_to+0xc79/0x1410
[   94.903403][   T13]  ? __pfx_kthread+0x10/0x10
[   94.903411][   T13]  ret_from_fork_asm+0x1a/0x30
[   94.903424][   T13]  </TASK>
[   94.903427][   T13] 
[   94.964231][   T13] Allocated by task 6709:
[   94.965477][   T13]  kasan_save_track+0x3e/0x80
[   94.966858][   T13]  __kasan_kmalloc+0x93/0xb0
[   94.968164][   T13]  __kmalloc_noprof+0x35c/0x760
[   94.969670][   T13]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[   94.971606][   T13]  notifier_call_chain+0x1ad/0x3d0
[   94.973222][   T13]  register_netdevice+0x18c9/0x1ec0
[   94.974829][   T13]  nsim_create+0xbed/0x1160
[   94.976248][   T13]  __nsim_dev_port_add+0x857/0xd30
[   94.977862][   T13]  nsim_dev_port_add_all+0x37/0xf0
[   94.979520][   T13]  nsim_dev_reload_up+0x45f/0x7c0
[   94.981076][   T13]  devlink_reload+0x4f8/0x8c0
[   94.982579][   T13]  devlink_nl_reload_doit+0xaaa/0xc80
[   94.984248][   T13]  genl_family_rcv_msg_doit+0x22a/0x330
[   94.985984][   T13]  genl_rcv_msg+0x61c/0x7a0
[   94.987401][   T13]  netlink_rcv_skb+0x232/0x4b0
[   94.988949][   T13]  genl_rcv+0x28/0x40
[   94.990232][   T13]  netlink_unicast+0x75c/0x8e0
[   94.991739][   T13]  netlink_sendmsg+0x813/0xb40
[   94.993242][   T13]  ____sys_sendmsg+0x972/0x9f0
[   94.994725][   T13]  ___sys_sendmsg+0x2a5/0x360
[   94.996163][   T13]  __x64_sys_sendmsg+0x1bd/0x2a0
[   94.997734][   T13]  do_syscall_64+0x15f/0xf80
[   94.999338][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.001245][   T13] 
[   95.001974][   T13] Freed by task 6710:
[   95.003233][   T13]  kasan_save_track+0x3e/0x80
[   95.004726][   T13]  kasan_save_free_info+0x46/0x50
[   95.006267][   T13]  __kasan_slab_free+0x5c/0x80
[   95.007746][   T13]  kfree+0x1c5/0x640
[   95.009068][   T13]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[   95.011020][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.012627][   T13]  unregister_netdevice_many_notify+0x17a5/0x22c0
[   95.014570][   T13]  unregister_netdevice_queue+0x31f/0x360
[   95.016339][   T13]  nsim_destroy+0x277/0x7f0
[   95.017746][   T13]  __nsim_dev_port_del+0x14f/0x200
[   95.019548][   T13]  nsim_dev_reload_destroy+0x288/0x490
[   95.021281][   T13]  nsim_dev_reload_down+0x8a/0xc0
[   95.022791][   T13]  devlink_reload+0x1eb/0x8c0
[   95.024231][   T13]  devlink_nl_reload_doit+0xaaa/0xc80
[   95.025889][   T13]  genl_family_rcv_msg_doit+0x22a/0x330
[   95.027557][   T13]  genl_rcv_msg+0x61c/0x7a0
[   95.028953][   T13]  netlink_rcv_skb+0x232/0x4b0
[   95.030549][   T13]  genl_rcv+0x28/0x40
[   95.031775][   T13]  netlink_unicast+0x75c/0x8e0
[   95.033228][   T13]  netlink_sendmsg+0x813/0xb40
[   95.034631][   T13]  ____sys_sendmsg+0x972/0x9f0
[   95.036031][   T13]  ___sys_sendmsg+0x2a5/0x360
[   95.037502][   T13]  __x64_sys_sendmsg+0x1bd/0x2a0
[   95.038927][   T13]  do_syscall_64+0x15f/0xf80
[   95.040496][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.042521][   T13] 
[   95.043219][   T13] Last potentially related work creation:
[   95.044990][   T13]  kasan_save_stack+0x3e/0x60
[   95.046762][   T13]  kasan_record_aux_stack+0xbd/0xd0
[   95.048362][   T13]  insert_work+0x3d/0x330
[   95.049608][   T13]  __queue_work+0xbad/0xfc0
[   95.051017][   T13]  queue_work_on+0x106/0x1d0
[   95.052432][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   95.054087][   T13]  udp_tunnel_push_rx_port+0x186/0x210
[   95.055978][   T13]  geneve_offload_rx_ports+0xc7/0x150
[   95.057891][   T13]  geneve_netdevice_event+0x6a/0x80
[   95.059426][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.060868][   T13]  call_netdevice_notifiers+0x90/0xd0
[   95.062706][   T13]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[   95.065011][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.066984][   T13]  register_netdevice+0x18c9/0x1ec0
[   95.068949][   T13]  nsim_create+0xbed/0x1160
[   95.070572][   T13]  __nsim_dev_port_add+0x857/0xd30
[   95.072099][   T13]  nsim_dev_port_add_all+0x37/0xf0
[   95.073576][   T13]  nsim_dev_reload_up+0x45f/0x7c0
[   95.075033][   T13]  devlink_reload+0x4f8/0x8c0
[   95.076346][   T13]  devlink_nl_reload_doit+0xaaa/0xc80
[   95.077824][   T13]  genl_family_rcv_msg_doit+0x22a/0x330
[   95.079419][   T13]  genl_rcv_msg+0x61c/0x7a0
[   95.080709][   T13]  netlink_rcv_skb+0x232/0x4b0
[   95.082027][   T13]  genl_rcv+0x28/0x40
[   95.083156][   T13]  netlink_unicast+0x75c/0x8e0
[   95.084916][   T13]  netlink_sendmsg+0x813/0xb40
[   95.086746][   T13]  ____sys_sendmsg+0x972/0x9f0
[   95.088579][   T13]  ___sys_sendmsg+0x2a5/0x360
[   95.090369][   T13]  __x64_sys_sendmsg+0x1bd/0x2a0
[   95.092231][   T13]  do_syscall_64+0x15f/0xf80
[   95.093924][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.096021][   T13] 
[   95.096858][   T13] Second to last potentially related work creation:
[   95.099225][   T13]  kasan_save_stack+0x3e/0x60
[   95.100958][   T13]  kasan_record_aux_stack+0xbd/0xd0
[   95.102810][   T13]  insert_work+0x3d/0x330
[   95.104447][   T13]  __queue_work+0xccf/0xfc0
[   95.106105][   T13]  queue_work_on+0x106/0x1d0
[   95.107856][   T13]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   95.109843][   T13]  udp_tunnel_push_rx_port+0x186/0x210
[   95.111779][   T13]  vxlan_offload_rx_ports+0x129/0x1f0
[   95.113771][   T13]  vxlan_netdevice_event+0x111/0x480
[   95.115772][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.117718][   T13]  call_netdevice_notifiers+0x90/0xd0
[   95.119630][   T13]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[   95.121757][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.123402][   T13]  register_netdevice+0x18c9/0x1ec0
[   95.125215][   T13]  nsim_create+0xbed/0x1160
[   95.126930][   T13]  __nsim_dev_port_add+0x857/0xd30
[   95.128874][   T13]  nsim_dev_port_add_all+0x37/0xf0
[   95.130807][   T13]  nsim_dev_reload_up+0x45f/0x7c0
[   95.132647][   T13]  devlink_reload+0x4f8/0x8c0
[   95.134327][   T13]  devlink_nl_reload_doit+0xaaa/0xc80
[   95.136143][   T13]  genl_family_rcv_msg_doit+0x22a/0x330
[   95.138163][   T13]  genl_rcv_msg+0x61c/0x7a0
[   95.139797][   T13]  netlink_rcv_skb+0x232/0x4b0
[   95.141513][   T13]  genl_rcv+0x28/0x40
[   95.142945][   T13]  netlink_unicast+0x75c/0x8e0
[   95.144757][   T13]  netlink_sendmsg+0x813/0xb40
[   95.146647][   T13]  ____sys_sendmsg+0x972/0x9f0
[   95.148546][   T13]  ___sys_sendmsg+0x2a5/0x360
[   95.150356][   T13]  __x64_sys_sendmsg+0x1bd/0x2a0
[   95.152267][   T13]  do_syscall_64+0x15f/0xf80
[   95.153953][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.156149][   T13] 
[   95.157065][   T13] The buggy address belongs to the object at ffff88811577a000
[   95.157065][   T13]  which belongs to the cache kmalloc-256 of size 256
[   95.162148][   T13] The buggy address is located 168 bytes inside of
[   95.162148][   T13]  freed 256-byte region [ffff88811577a000, ffff88811577a100)
[   95.167201][   T13] 
[   95.168108][   T13] The buggy address belongs to the physical page:
[   95.170538][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811577a200 pfn:0x11577a
[   95.174130][   T13] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   95.177227][   T13] flags: 0x17ff00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff)
[   95.180360][   T13] page_type: f5(slab)
[   95.181597][   T13] raw: 017ff00000000240 ffff888100041b40 ffff888100040708 ffffea00041ad310
[   95.184602][   T13] raw: ffff88811577a200 000000080010000e 00000000f5000000 0000000000000000
[   95.187730][   T13] head: 017ff00000000240 ffff888100041b40 ffff888100040708 ffffea00041ad310
[   95.190955][   T13] head: ffff88811577a200 000000080010000e 00000000f5000000 0000000000000000
[   95.194111][   T13] head: 017ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[   95.197276][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   95.200437][   T13] page dumped because: kasan: bad access detected
[   95.202772][   T13] page_owner tracks the page as allocated
[   95.204902][   T13] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 66710582729, free_ts 66324845695
[   95.212466][   T13]  post_alloc_hook+0x231/0x280
[   95.214309][   T13]  get_page_from_freelist+0x24ba/0x2540
[   95.216405][   T13]  __alloc_frozen_pages_noprof+0x18d/0x380
[   95.218577][   T13]  allocate_slab+0x77/0x660
[   95.220272][   T13]  refill_objects+0x339/0x3d0
[   95.222020][   T13]  __pcs_replace_empty_main+0x321/0x720
[   95.224103][   T13]  __kmalloc_noprof+0x474/0x760
[   95.225949][   T13]  fib_create_info+0x1723/0x31f0
[   95.227822][   T13]  fib_table_insert+0xc8/0x1b50
[   95.229647][   T13]  fib_magic+0x434/0x510
[   95.231150][   T13]  fib_add_ifaddr+0x144/0x5f0
[   95.232846][   T13]  fib_netdev_event+0x382/0x490
[   95.234619][   T13]  notifier_call_chain+0x1ad/0x3d0
[   95.236343][   T13]  __dev_notify_flags+0x1a9/0x310
[   95.237772][   T13]  netif_change_flags+0xe8/0x1a0
[   95.239254][   T13]  do_setlink+0xfa5/0x45a0
[   95.240638][   T13] page last free pid 0 tgid 0 stack trace:
[   95.242367][   T13]  __free_frozen_pages+0xbc7/0xd30
[   95.243892][   T13]  rcu_core+0x7cd/0x1070
[   95.245421][   T13]  handle_softirqs+0x22a/0x840
[   95.246846][   T13]  __irq_exit_rcu+0xca/0x220
[   95.248249][   T13]  irq_exit_rcu+0x9/0x30
[   95.249521][   T13]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   95.251229][   T13]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   95.252983][   T13] 
[   95.253720][   T13] Memory state around the buggy address:
[   95.255430][   T13]  ffff888115779f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   95.257714][   T13]  ffff88811577a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.259979][   T13] >ffff88811577a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.262435][   T13]                                   ^
[   95.264409][   T13]  ffff88811577a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.267056][   T13]  ffff88811577a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.269613][   T13] ==================================================================
[   95.284270][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   95.286732][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[   95.290058][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.293812][   T13] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   95.296574][   T13] Call Trace:
[   95.297855][   T13]  <TASK>
[   95.298997][   T13]  vpanic+0x56c/0xa60
[   95.300560][   T13]  ? __pfx_vpanic+0x10/0x10
[   95.302302][   T13]  panic+0xc5/0xd0
[   95.303707][   T13]  ? __pfx_panic+0x10/0x10
[   95.305371][   T13]  ? preempt_schedule_thunk+0x16/0x30
[   95.307350][   T13]  ? __mutex_lock+0x15a/0x1550
[   95.309138][   T13]  ? preempt_schedule_thunk+0x16/0x30
[   95.311063][   T13]  ? __mutex_lock+0x15a/0x1550
[   95.312872][   T13]  check_panic_on_warn+0x89/0xb0
[   95.314769][   T13]  ? __mutex_lock+0x15a/0x1550
[   95.316589][   T13]  end_report+0x73/0x170
[   95.318195][   T13]  ? __mutex_lock+0x15a/0x1550
[   95.320093][   T13]  kasan_report+0x128/0x150
[   95.321907][   T13]  ? __mutex_lock+0x15a/0x1550
[   95.323755][   T13]  __mutex_lock+0x15a/0x1550
[   95.325564][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[   95.327579][   T13]  ? look_up_lock_class+0x57/0x110
[   95.329502][   T13]  ? __mutex_lock+0x608/0x1550
[   95.331344][   T13]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[   95.333655][   T13]  ? __pfx___mutex_lock+0x10/0x10
[   95.335568][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   95.337518][   T13]  ? process_scheduled_works+0xa70/0x1860
[   95.339653][   T13]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[   95.341932][   T13]  ? process_scheduled_works+0xa70/0x1860
[   95.344141][   T13]  ? process_scheduled_works+0xa70/0x1860
[   95.346319][   T13]  process_scheduled_works+0xb5d/0x1860
[   95.348489][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.350790][   T13]  ? assign_work+0x3d5/0x5e0
[   95.352523][   T13]  worker_thread+0xa53/0xfc0
[   95.354304][   T13]  kthread+0x388/0x470
[   95.355835][   T13]  ? __pfx_worker_thread+0x10/0x10
[   95.357662][   T13]  ? __pfx_kthread+0x10/0x10
[   95.359421][   T13]  ret_from_fork+0x514/0xb70
[   95.361134][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   95.362947][   T13]  ? __switch_to+0xc79/0x1410
[   95.364492][   T13]  ? __pfx_kthread+0x10/0x10
[   95.365934][   T13]  ret_from_fork_asm+0x1a/0x30
[   95.367424][   T13]  </TASK>
[   95.369250][   T13] Kernel Offset: disabled
[   95.370614][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:10:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000127270
R8 =ffff888109e00237 R9 =1ffff110213c0046 R10=dffffc0000000000 R11=ffffffff8544c610
R12=dffffc0000000000 R13=ffffffff9a4879f3 R14=ffffffff9a7a0880 R15=0000000000000000
RIP=ffffffff8544c68c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc8f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c262175 CR3=000000016b51a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000006c7e1 RBX=ffffffff819a91ea RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dfa675b RDI=ffffffff8c28ade0 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c6339db R9 =1ffff110478c673b R10=dffffc0000000000 R11=ffffed10478c673c
R12=0000000000000001 R13=1ffff1102c09e000 R14=0000000000000001 R15=1ffff1102c09e000
RIP=ffffffff8ba8a12f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a928f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32d132 CR3=000000016d942000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
