last executing test programs:

2.745296348s ago: executing program 2 (id=1744):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)={0x4c, r5, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x4c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@remote, @multicast2, <r7=>0x0}, &(0x7f0000000100)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r8=>0x0, 0x8, 0x8, 0x4, 0x4, {{0x32, 0x4, 0x2, 0x4, 0xc8, 0x65, 0x0, 0x3, 0x1f8932d872b17de8, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0x47, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1, 0x7b}, {@rand_addr=0x64010101, 0x2}, {@private=0xa010102, 0x10}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@private=0xa010100, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xcd, 0x3, 0x5, [{@local, 0x1}, {@local, 0x43e7837e}, {@local, 0x9}]}, @generic={0x8e, 0xe, "bf09197b31e68c282d73d144"}, @generic={0x82, 0x6, "400f2add"}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x0, [0xa65]}, @generic={0x94, 0x11, "76cdba654c4b915bae321914cfe1ba"}, @lsrr={0x83, 0x7, 0x80, [@multicast2]}, @ssrr={0x89, 0x7, 0xb, [@multicast1]}, @lsrr={0x83, 0x17, 0x33, [@empty, @private=0xa010102, @rand_addr=0x64010101, @loopback, @loopback]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r9=>0x0})
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffff90b, 0x7, 0x2, 0x0, 0xfffffff7, 0x1, 0x8, 0x1, 0x80000000}}}}]}, 0x58}}, 0x4008000)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0x2, 0xb}, {0xd, 0xb6525a732e749ba6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @multicast2, <r16=>0x0}, &(0x7f0000000300)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', <r17=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', <r18=>0x0, 0x7, 0x7, 0x300000, 0x7, {{0x12, 0x4, 0x3, 0x6, 0x48, 0x65, 0x0, 0x11, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x71, 0x1, 0x7, [{@rand_addr=0x64010102, 0x5}, {@remote, 0x9}]}, @end, @rr={0x7, 0x7, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0xf, "c24731c272ad7696500a98fafe"}, @end, @ra={0x94, 0x4}, @generic={0x86, 0x3, ';'}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40092010}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x1a0, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x1a0}}, 0x0)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r19, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688810046", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.822747498s ago: executing program 2 (id=1753):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000358000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1)

1.821938161s ago: executing program 2 (id=1755):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0xf5ffffff}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

1.821503741s ago: executing program 2 (id=1756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a010583f7cf23ce7c0000000000160400000900010073797a30000000000900020073797a3100000000140103800800014000000000080002400000000030000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000000400038014000000100001000000c5884b78000000"], 0xb8}}, 0x0)

1.750572523s ago: executing program 2 (id=1760):
socket$nl_audit(0x10, 0x3, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf33bfc183f3a9f01, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x9}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.7401653s ago: executing program 2 (id=1763):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="120000007a000106000000000000000007"], 0x18}], 0x1}, 0x4000000)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000005c0)="05", 0x1}, {&(0x7f0000000180)="3b281cc7446e2d07e583cd4861d445ed0668714f38df398fc6e7eb52bb6d7c3c", 0x20}], 0x2}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @empty, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000000)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b900000000000000074e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd75a1333a305105474f12174cc7e9a3346f1b283b5eb1635851765c1dcf00c0000000000000e7383ad813784d56acf1a47a8f76eb95e0b493d063c854a6e0448a60130b4b5aa837b776949198a7f13b3cc0d2cf0e6b0da48c1a1078a9218088a9860d23945221d0c17f57a2b4d779fa9e9036fb3db7b7faa7ce5c402b9678b0c1b18269919997bb37f350b7b477df81f6a514b825c65067c04c60a645810491ddfad92e7e1f7b7e66c2791066a8307ec361aa38600406eb87a743d435c94e9dbd06fca685fba9b2e044f473e0a772065cc8f0e9b565caaa39304b", 0x15f}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f00000009c0)}}], 0x3, 0x24000045)

1.54138946s ago: executing program 1 (id=1769):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x4d4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8001, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xfffffffd}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x400300, 0x0, 0x0, 0x10}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x8001, 0x7fffffff, 0x3, 0x6, 0x9, 0x3}}, {0xa, 0x2, [0xc6, 0x56, 0x0]}}, {{0x1c, 0x1, {0x2, 0xe5, 0x7, 0x7, 0x0, 0x9, 0x7, 0x1}}, {0x6, 0x2, [0x909e]}}, {{0x1c, 0x1, {0xe, 0x7f, 0x101, 0x4, 0x2, 0x6, 0x2, 0x2}}, {0x8, 0x2, [0x2048, 0x8000]}}, {{0x1c, 0x1, {0x4, 0x40, 0x5, 0x4, 0x6, 0x100, 0x4, 0x7}}, {0x12, 0x2, [0x1, 0x6, 0x3efd, 0x4, 0x6, 0x9, 0x10]}}, {{0x1c, 0x1, {0xf3, 0x0, 0x753, 0x100, 0x1, 0x2, 0x55e, 0x6}}, {0x10, 0x2, [0x39f, 0x4, 0x4, 0x0, 0x3, 0x9]}}, {{0x1c, 0x1, {0x2, 0x0, 0x7, 0xbe, 0x0, 0x1, 0x3ff, 0x4}}, {0xc, 0x2, [0x4, 0x6, 0x7, 0x8]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x4d4}}, 0x0)

1.541127439s ago: executing program 1 (id=1770):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x200000}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x40, 0xf380, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0xd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@end]}}}}})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='c ', @ANYRES32=r2], 0xa)
sendmsg$nl_route_sched(r1, 0x0, 0x40)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
socket(0x1d, 0x2, 0x6)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cf", 0x8b}, {&(0x7f00000001c0)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e7ff02f7ca7eefba257aec7de6629f161bf3dcfe2b5c06245feab64407ddf6eb9e4e10cf50bbc30a028f2e79fd4a156c7a213ae", 0x67}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x1a8}], 0x1}}], 0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000104feffffff000000", @ANYRES32=r7, @ANYBLOB="ae1e0200033823e48242d76526283e55255720fe00000000050021000c000000"], 0x28}}, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x682, 0x4)

672.263099ms ago: executing program 1 (id=1777):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$packet(r0, &(0x7f0000000080)="3303", 0x2, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14)

518.191721ms ago: executing program 1 (id=1780):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)

449.712452ms ago: executing program 1 (id=1783):
socket$nl_audit(0x10, 0x3, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000a40)={0x89f, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x9}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

145.434152ms ago: executing program 1 (id=1786):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000101ffffff0600"/20], 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040) (async)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000101ffffff0600"/20], 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x2c, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x20108, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xc}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x20108, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xc}, 0x50)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xc94, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11bc, 0x1}, 0xe) (async)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xc94, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11bc, 0x1}, 0xe)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
socket$kcm(0x2c, 0x3, 0x0) (async)
r9 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20)
close(r8)
close(r9)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
accept4(r4, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80, 0x800) (async)
accept4(r4, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80, 0x800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008084}, 0x40000)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r10)
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c821a131000000000095be000000000000000000000000000000000000000000e7e7a4deb45337faa19f004398bfa1a5226ae8e3a5f82571a91efd858eadc6213c21801a6e83f1bc20d791ce63975e732b19864f11b7fc71d00b7b27ac6b34a152433ffa322023be06a5de9624d96f3f9e48e84149771d6f40d03300"/133], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94)

144.323812ms ago: executing program 0 (id=1787):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8}, 0x94)

144.11835ms ago: executing program 0 (id=1788):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x10, 0x1}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = socket(0x11, 0x80a, 0x0)
sendto$x25(r4, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

143.939687ms ago: executing program 0 (id=1789):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xcc, 0x32, 0x51b, 0x10, 0x400, {}, [{0xb8, 0x1, [@m_skbmod={0xb4, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x85, 0x14, "dd3463885c9fbebd6f7ab8491b5eb99ee998d7412ce8258dc98b2b36a09e1c344c04330849832d612a6266b8216eb39fd3d49bd29d017b57d162b416e201d61ee28fe6ff0663428c271eca0aab602a3a6a00ac52b1500e725468dabb96f6096639e70dbbe2d7a958413500eb537ca40edcc325ed2272d965874053d470e8e8e4fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x3}}}}]}]}, 0xcc}}, 0x60000000)

92.54836ms ago: executing program 0 (id=1790):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x76, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x2c}}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x80) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)

92.050258ms ago: executing program 0 (id=1791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x6b2}, 0x2f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000ac0)={r4, "2092289e3c88fe2c0dec7e00f21dde66"})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x6b2}, 0x2f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000ac0)={r7, "2092289e3c88fe2c0dec7e00f21dde66"})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_pressure(r8, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x6b2}, 0x2f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000ac0)={r10, "2092289e3c88fe2c0dec7e00f21dde66"})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x11, 0x0, {0x9, @struct={0x5, 0x4}, r4, 0x6, 0xa, 0xd131, 0x1, 0x8, 0x405, @struct={0x1, 0x98ac}, 0x2, 0x81, [0x1, 0xffff, 0x2ef34ed0, 0x6, 0x1, 0xc]}, {0x66aa, @usage=0x3, r7, 0x6, 0xfffffffffffffffb, 0x5, 0x5, 0x4, 0x4, @usage=0x6, 0x4, 0x6, [0x7, 0x2, 0x2, 0x200, 0x6, 0x3]}, {0xffffffffffff3cff, @struct={0x3, 0x4}, r10, 0x5, 0x2c, 0x3, 0xd, 0x4, 0x400, @struct={0x2, 0x1}, 0x3, 0x0, [0x1, 0xc09, 0xffffffffffffff62, 0x6, 0xe, 0x2]}, {0x100000001, 0x6, 0x8001}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010)

0s ago: executing program 0 (id=1792):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "2ae386"}, 0x4)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote, @private1, @mcast1, 0x6, 0x24, 0x5, 0x100, 0x10, 0x82480040, r1})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x80, 0x10}, 0xc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x24, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @tail_call, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xce}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}]}, &(0x7f0000000340)='syzkaller\x00', 0xff, 0xa8, &(0x7f0000000380)=""/168, 0x41100, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xd, 0x6, 0x76}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, r3], &(0x7f0000000540)=[{0x5, 0x4, 0xf}], 0x10, 0x3a0}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x3c}}, 0x4008001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r4, 0x0, 0x14}, 0x18)
r6 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', <r7=>r1, 0x4, 0x8, 0x5, 0xffffffff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x1, 0x17, 0x0, 0x9}})
sendmmsg$inet(r6, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)="55935aaff457c82246e785e4cf7e74afaacaebfd3f9d2800d57a5264320da61e9110450a74576f84ff1be7b828ea7764cc10de13383cd201ee18", 0x3a}, {&(0x7f0000000800)="831fba49ccd0d0fb3b6f8b7c0f8e18decf8ad4d86ed0f618f8130d607004c68e44544cb9fccdbd23cb43021db20a278733eb0b5aa8c67c57a93be03405367cfaebb1bdf3c12a44ad63d5ec554951bf91f9223d73377d4b4f3207d34a03632a3aef02e0210ab976959e90e40b03a3760813de1565e33cd147a679e05f9946342c6971dd1a4a", 0x85}, {&(0x7f00000008c0)="d5dacbc42cf7e101751cec7e889a78ac748b1fa6980254fcd1aff2d03da9062f8f719652da2489b24c659b7f6d2c5f38223705bc732ed9f369b77c799e28b8c98ca6b7a9027806fc4751ca461c5b2a653f340bb9b541da839ab531967f66138f3b4ed23c4e07bb0254b68b429118b6c38422b554d98a1e7d2908b6de8aca0602ffc3f37a9e3ff5f40df557cc6bcda4a6f39fd0bad6135bd1f555ce649a245b1468c2165dcb3db15616d90622cf43bc7f523b8bf030dd1c287b5b80830120961e1a0a", 0xc2}, {&(0x7f00000009c0)="403299e064be65f0bcccdea25a056a0aba1b534beb7d287eee2242d0305b597096614734ddfe37e004eaea4e5cd941c0d970386d9d03fa1eac2ad59de46eea43d56e", 0x42}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="456c1e6756c8065f20613373b43dbd1036342cb0215e40a575a8349ada02168cece8b35c77089740f7e13609f9df57ef6c9383b1e9f6aace96c154c124fd87283030f66f19adc3c90e5b8a17d782a5b6b1a68528f19abd326756b2b058354833a9eefff026", 0x65}, {&(0x7f0000000b00)="58b8b6cdbb9a98f0c6158068c8", 0xd}], 0x7, &(0x7f0000000bc0)=[@ip_retopts={{0xf0, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x27, 0x0, 0x2, [0x5, 0x7, 0x2, 0x3, 0xffffffff, 0x5, 0xc9d]}, @generic={0x83, 0xb, "b813efd73ba7d8e805"}, @timestamp_prespec={0x44, 0x3c, 0xd, 0x3, 0x9, [{@remote, 0x9}, {@multicast1, 0x17}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@loopback, 0x8000}, {@loopback}, {@private=0xa010101, 0x8}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0x5b, 0x3, 0x3, [{@loopback, 0x8}, {@local, 0x10000}]}, @cipso={0x86, 0x4d, 0x3, [{0x1, 0x6, "61a4cfb0"}, {0x75f049375d650f63, 0x2}, {0x2, 0x3, "d0"}, {0x6, 0x8, "a703560b402e"}, {0x0, 0x11, "87642762a32872f13ad97d70877806"}, {0x5, 0x5, "07c44f"}, {0x7, 0xc, "8cd3d8d5e41800abea87"}, {0x2, 0x9, "58e277878e6646"}, {0x7, 0x9, "fa1b3e7d90783a"}]}, @rr={0x7, 0x17, 0x18, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="175797e4979709ef7fd2ab11661958da66aca71fe8ad2855f48e41ac845e1154896fdd6c3b5c090f8d3b80a2a3663fc11d7bf1b941aa6a6810dcffa4fbf9cb57b91edec20b5bb4535ab0be3276e35f1088952af9beb7cd7272fd46d3d9a6645e9e569790dddcf805", 0x68}, {&(0x7f0000000d40)="36b2dc11baedcfe21d8242e5abef6d9217197d6ebe96501e6b7c8c655ec4152ba6b8a48d191c5a5c99413dfa1cde8385e5c16641745b0e3c6e893ca868bbff0165b9b45fdaed35f4791eb9fe63cc14fefcc02a7457d2b020ae17537f8ae195fcd26c4030dce0f7119ccc674c16ce6fbafa2d4418ecd5", 0x76}, {&(0x7f0000000dc0)="37020350ceeed5c5c06d29ed6318c6736cb23f5022ff80102167c3459e0605ac3edef59f14cecd71daf06fc6b0694cd326d4f3a4153b1af6fc8d341ad6d5c28dd729670b2f3b324145d4f6744dc6d875fceb8b79cf8a70ebb90b40f7d40d522c601993706fb1bd27365d0e242baa3ad68d05e6790a144b6cbdaca41819d7c3000eb8d9665d501d0abfd21a6b79f435285b3b131dacb3660d31b7793a701a215caace2a464f13e68ac3da187391a6cf37df9d4c36b938261f49fc4e80e910af09ac985cac783434ad5afdc2", 0xcb}], 0x3, &(0x7f0000000fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="56748a95076bc978eab3e57285daf6bd9e72ea11e1184b868dc3a85d42deb51c07509229d144a688c0b36dc145381e1495d57e5b9457bd3e4413e8e8e92ade340ab17e419110fa9f80087cd991c5257bc28ed26e97f4654bb525b28515860bc4c0f6acae360dcef49efda168d027a3da56607184654aa0592c550973", 0x7c}, {&(0x7f0000001080)="b561d3620614363b234fb8e1838f32d1916f69db9393f1a6e6786a9c02a80dd71613096ec0790bcea9bf070d53be5b601e731f7085c933243e77292dd98444a4b1434df9b96b045f6cebf84dda2d128178af3cbef6a3661b57e04ceddfa8325c7f3f4a732d71a4f1df6e5c347746e2ce8644557ac7a760456779964bb2988b9538604dbef87852165f533a29e58c3d89749d048cde1591", 0x97}, {&(0x7f0000001140)="bd1f26a261bbedcf3b3e515df8e7ba4087f0ec762fb45e0fd388942c2212945e8573daea339c37da0842309ae579bcbe54344fac2fc9e53ab7f05d363125c86cf2e26c4958758fc795b5a6623b0aa166ac213fba305ce1874eced516423d0927e043755f457469b3cb5d5c0fdf192bca170f15b468", 0x75}], 0x3, &(0x7f0000001200)=[@ip_retopts={{0x50, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x91, 0x0, 0x2, [0x8]}, @end, @ssrr={0x89, 0xb, 0xcd, [@multicast2, @loopback]}, @end, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x6, [{@local, 0x7ff}, {@multicast2, 0x3}, {@remote, 0x40}]}, @rr={0x7, 0x7, 0xcd, [@local]}]}}}], 0x50}}], 0x3, 0xd0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f0000001340)=0x7, 0x4)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001380)={<r9=>0x0, 0xed, "379a5099d27f1e949a44265cbe2582ec9e70d71982307ae53ab724796c1a066fac1f59c54df7c800aa0f7c526467463f151401b1a796bfadc297640e0a641e6f4d633119779f19bccbfdbc94a188ae7e59093f3127f2b3cd1d5e3fb200f93f939d585686d0c68c942426f45d4f8004b72f1f0a9eb58ed5df58b1e0e4693eceb385e7a586c24e3368d4071c6832960712042bb6c420e1f639410b2caef8cc5cea73169334a60cfe20d6a32a33fa4b5ac4321390227baf4de9c098be1a023ef8053f2f759c086f1757c6db2c226f758d9a2c327e8972efdbf83fd8610f508c1a0f2a2f13a9903e1cc8e397f0e08a"}, &(0x7f0000001480)=0xf5)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000014c0)={<r10=>r9, 0x51, "2b7e9675fde5fa50af26408190806bc14683b694eb236a559a4fba62c9d4402e737befca6079e064fc14da710e56b11824febd9612fb8390458ef24e5ef85790e34923e5a46289155e1fcc9b7807c9022d"}, &(0x7f0000001540)=0x59)
syz_extract_tcp_res(&(0x7f0000001580), 0xd, 0xb48)
r11 = socket$isdn(0x22, 0x3, 0x25)
ioctl$IMHOLD_L1(r11, 0x80044948, &(0x7f00000015c0)=0x2)
getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000001600), &(0x7f0000001640)=0x4)
r12 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r12, 0x89e1, &(0x7f0000001680)={@rand_addr=' \x01\x00', @mcast2})
sendmsg$kcm(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000016c0)="2fc010640b233cc3ac34aa8f7ba5c7b04091a40cb71919738cfeb840fe598703f6", 0x21}, {&(0x7f0000001700)="f27ce663a9ff1fb419438cc3a24f80778da5f202de9f61ef80cefa340bd6bbcfe45cbcf3a34bcfcefdcf0c7174f1703a350eab087dc734787266b2d140bf1aa42d25d66cbea9872e75cbada07440867bae6b719403e3fe8c8d691572347a419cde8be34779cf9dded3d690ad7a722f88d83feccb2eab26ea9a516579d9bacf08f2d0a4d4ddce0d6e4ea3010667bf70059655acb25b6dcb6c1df50839cd385c7077854155", 0xa4}, {&(0x7f00000017c0)="ba8e4e95b2dda712e5ae541f8d081bd427d19d5c3fad07a1c1d9e37d3e10d8ee8e48a85c5604c58c76e5cd67664293bb8ec526ad1374945b6e2e9088e88c113586baea1d06d4fcdd6ea3be23350340d102e602758e3dd4b5cb01", 0x5a}, {&(0x7f0000001840)="77432dd84a9d0e15d8d615fa84d7e624325c8506599f06dbf70b238894f5d88909f0a48ca644eedb2b4418c6fc925488508ebee6623275196f94c713656908f76241f9470995e2621f297fb36248281465c4e9b7a312d41db8cc0762a7d0dbe7229e0f310a16db054e2dba1afeeddc6f6188facdf27d66cfca4255c678b8ca125b7fd7a481104e4b74296af648746025409f159125e28f2470", 0x99}, {&(0x7f0000001900)="c0f91e81f289e1475ce856821a3134704ae89498060a9c5978246091356eeca1d7fcb318e599ff1e4bb641bfc8c266c18e755b85081206d3de88ab61e5ac2d8f963ac8e8fa146018c57fd551d5a1e584f25e0014a4d6c86a983c4ddfde0286b82117c0cf5d0cb8a9112de77c85ef3146e4d9dd0271f28a248d0ae226dfb757d45886fb0a935df1923dcdfade6b687d1f70f4d36a65856c5d83ba651e9b3ba923ea385601bdfa1e3a8b2ae3b6aa14a17f2d7fdc94f51b82f8a19198d81f68ce72", 0xc0}, {&(0x7f00000019c0)="d214847902fa30d5776c384395089ad3b986848e90ff044be6dc09fc9e77bae17fbb3157f89dfeeedbc13b7d8ad524c147da8ff84a0b33e18e0a8fcd981c1ee11fcec7cd8b5dd2830464f738082c318e2264f1166fb0725b8bfd5bcd13fc2d2f0d68a4e8702f09d2db0364f6c4e0c3c7e1c40b849a6fb0301a7a98cb59913349395316805477df8e132156b1c4e542ed2356c5817e0dcdb8a28a32115c0a34b4f28bff9156b92eee2a87f1e7", 0xac}, {&(0x7f0000001a80)="a5c9eb32348a466d6c948327b00b296217eddb6081d2ccea60e7eb6b2e3da2c0ed3e9d4fecb6b8eae06f73c7d7acb0f9dd607c9b0c2747a1c13a1b78a94de20d6d", 0x41}, {&(0x7f0000001b00)="fc043d01b8208b60dfa393961854d823f3cc95b0a670ae34625249156ede2f998bd3a2000bcc8390c1d88ae024dcaa2b1034d4ede0762bf4d0f831cc43320e7a17ba2a13175d6f894ee3f4dd1b2489d3d701dfed9501b8894230e1443346e4b77f719d31f03bd06c5ae0d90718b0c0742221858c77a9b8b776cb01d89d91966272daed95d99c1e592b6e7dabd62361", 0x8f}], 0x8, &(0x7f0000001c40)=[{0x108, 0x113, 0x8, "5889d969a7a6370604ffd17b1671bd03c4e0ad380ddd676450d2d4bfa25c459eccbbfd27580a7a1abf23987392be30c0598a63eb517f41872c3557eae83e8085e720ffe1335f5b784b469319fbc4776ba8e753fe67b1358e3cb610594bc90ab00d82374406a46394819f3ca131cb65a3ddcb65fa380e31247e3e0fbda7c47c71998a46624880d677d686280509bbd9451f013b202bc8a09ddf773400af31cc5e4b8962168894ee3a0c7bb1d518ba3187cd002d2cb5a3e40dc9c27111087c62d071113f0bcc799378c5b46986fb71798d1647cb5dba79a273a95c731401627bacc19f344e042226d17353b2b556ed86e258"}, {0xe8, 0xff, 0x5, "9ce400923ef2b1b359e5bb388c4d0633117dab32af112751a6f50478ba0a69f70a8342a34c2528d2c3a7bd50c2f04d2ea2d29f8a75ac345fe69788134df6c3888e387382f8a11d95e785c03071a2a6cd22437971c9be3b368036aa3fea8c6c9c45dde107658efeadd47c757fee31c7e822b656febfa39981c99abfd351bf089023d53e0c0a6dc9fd99847f7b9eb90265c0c8d127945f74eac735146b375fc2f25742ac7bc683bd5127d6e4b3810c523e0cac5f2aa9bfc7256e3dd036af7527f35b22fac89ee00f902a31f2a49d2e542351b59c137b2449"}], 0x1f0}, 0x6)
r13 = socket$inet6(0xa, 0x4, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r13, 0x84, 0x6, &(0x7f0000001e80)={r10, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000001f40)=0x84)
ioctl$F2FS_IOC_RESIZE_FS(r13, 0x4008f510, &(0x7f0000001f80)=0x9)
socketpair(0x3, 0x3, 0x1, &(0x7f0000001fc0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000002000)={@private1, r1}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41926' (ED25519) to the list of known hosts.
syzkaller login: [   47.719628][ T5781] cgroup: Unknown subsys name 'net'
[   47.843839][ T5781] cgroup: Unknown subsys name 'cpuset'
[   47.847570][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.577733][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.213933][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.218187][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.221854][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.224491][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.226794][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.230077][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.230183][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.233351][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.235497][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.238012][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.240307][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.242505][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.244750][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.251107][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.265045][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.446899][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   53.583695][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.586725][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.589391][ T5850] bridge_slave_0: entered allmulticast mode
[   53.593125][ T5850] bridge_slave_0: entered promiscuous mode
[   53.603432][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.606019][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.608412][ T5850] bridge_slave_1: entered allmulticast mode
[   53.611815][ T5850] bridge_slave_1: entered promiscuous mode
[   53.626946][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   53.634279][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   53.660294][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.673561][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.757146][ T5850] team0: Port device team_slave_0 added
[   53.772390][ T5850] team0: Port device team_slave_1 added
[   53.832440][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.835628][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.838638][ T5854] bridge_slave_0: entered allmulticast mode
[   53.844164][ T5854] bridge_slave_0: entered promiscuous mode
[   53.848716][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.852491][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.855575][ T5854] bridge_slave_1: entered allmulticast mode
[   53.859404][ T5854] bridge_slave_1: entered promiscuous mode
[   53.878648][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.882006][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.885068][ T5846] bridge_slave_0: entered allmulticast mode
[   53.889032][ T5846] bridge_slave_0: entered promiscuous mode
[   53.907912][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.910828][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.922039][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.952260][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.955268][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.958229][ T5846] bridge_slave_1: entered allmulticast mode
[   53.963178][ T5846] bridge_slave_1: entered promiscuous mode
[   53.967144][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.970203][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.981652][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.995188][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.028702][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.037934][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.068478][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.116929][ T5850] hsr_slave_0: entered promiscuous mode
[   54.120179][ T5850] hsr_slave_1: entered promiscuous mode
[   54.138084][ T5854] team0: Port device team_slave_0 added
[   54.143125][ T5854] team0: Port device team_slave_1 added
[   54.147180][ T5846] team0: Port device team_slave_0 added
[   54.164462][ T5846] team0: Port device team_slave_1 added
[   54.225847][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.228760][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.240485][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.247413][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.250261][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.261724][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.296599][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.299520][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.310097][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.335696][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.338708][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.350723][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.396091][ T5854] hsr_slave_0: entered promiscuous mode
[   54.399212][ T5854] hsr_slave_1: entered promiscuous mode
[   54.402262][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   54.404242][ T5854] Cannot create hsr debugfs directory
[   54.459489][ T5846] hsr_slave_0: entered promiscuous mode
[   54.467207][ T5846] hsr_slave_1: entered promiscuous mode
[   54.469338][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   54.471336][ T5846] Cannot create hsr debugfs directory
[   54.566709][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.592089][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.608121][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.624622][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.693197][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.702466][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.708183][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.714361][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.769369][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.777749][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.787480][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.794906][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.833866][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.858672][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   54.870994][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.873692][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.885766][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.888211][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.914525][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.936476][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   54.953239][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.955560][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.962934][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.972735][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.984226][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.986683][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.002892][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   55.023455][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.025985][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.030438][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.032916][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.049927][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.055448][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.069880][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.130469][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.184816][ T5850] veth0_vlan: entered promiscuous mode
[   55.189628][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.198952][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.202145][ T5850] veth1_vlan: entered promiscuous mode
[   55.242971][ T5850] veth0_macvtap: entered promiscuous mode
[   55.245890][ T5854] veth0_vlan: entered promiscuous mode
[   55.250204][ T5850] veth1_macvtap: entered promiscuous mode
[   55.264917][ T5846] veth0_vlan: entered promiscuous mode
[   55.268827][ T5854] veth1_vlan: entered promiscuous mode
[   55.280214][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.283265][ T5846] veth1_vlan: entered promiscuous mode
[   55.290455][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.301719][   T54] Bluetooth: hci1: command tx timeout
[   55.301881][ T5239] Bluetooth: hci0: command tx timeout
[   55.305835][ T5848] Bluetooth: hci2: command tx timeout
[   55.313013][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.319487][ T5854] veth0_macvtap: entered promiscuous mode
[   55.324160][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.327129][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.334761][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.338591][ T5854] veth1_macvtap: entered promiscuous mode
[   55.355940][ T5846] veth0_macvtap: entered promiscuous mode
[   55.360749][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.370697][ T5846] veth1_macvtap: entered promiscuous mode
[   55.379158][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.394346][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.401199][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.407025][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.413744][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.417297][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.431730][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.443877][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.454942][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.455112][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.457747][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.463782][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.477816][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.516714][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.523169][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.552359][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.554911][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.559173][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.565898][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.583215][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.596858][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.599938][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.667300][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.670614][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.730539][ T5920] netlink: 'syz.0.1': attribute type 33 has an invalid length.
[   55.733744][ T5920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'.
[   55.903666][ T5935] netlink: 'syz.1.6': attribute type 10 has an invalid length.
[   55.919422][ T5935] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   55.934217][ T5943] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   56.169408][ T5964] netlink: 'syz.1.15': attribute type 33 has an invalid length.
[   56.174128][ T5964] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.034640][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'.
[   57.090680][ T6041] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[   57.112111][ T6041] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.130309][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.250461][ T6055] netlink: 'syz.2.23': attribute type 33 has an invalid length.
[   57.264071][ T6055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23'.
[   57.291881][ T6057] netlink: 'syz.0.30': attribute type 10 has an invalid length.
[   57.381697][ T5239] Bluetooth: hci1: command tx timeout
[   57.383070][   T54] Bluetooth: hci0: command tx timeout
[   57.384093][ T5848] Bluetooth: hci2: command tx timeout
[   57.600194][ T6090] netlink: 'syz.2.34': attribute type 7 has an invalid length.
[   57.605039][ T6090] netlink: 'syz.2.34': attribute type 8 has an invalid length.
[   57.770128][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'.
[   57.828634][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   57.839856][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'.
[   58.026216][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.036370][ T6134] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.040377][ T6134] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   58.073672][ T6135] netlink: 198220 bytes leftover after parsing attributes in process `syz.2.44'.
[   59.164251][ T6187] netlink: 'syz.0.52': attribute type 2 has an invalid length.
[   59.437523][ T6198] netlink: 'syz.2.55': attribute type 10 has an invalid length.
[   59.447828][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   59.452560][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'.
[   59.461921][ T5848] Bluetooth: hci2: command tx timeout
[   59.462053][   T54] Bluetooth: hci1: command tx timeout
[   59.464087][ T5239] Bluetooth: hci0: command tx timeout
[   59.753559][ T6229] bond_slave_0: entered promiscuous mode
[   59.755591][ T6229] bond_slave_1: entered promiscuous mode
[   59.757455][ T6229] macvlan2: entered promiscuous mode
[   59.759108][ T6229] bond0: entered promiscuous mode
[   59.762549][ T6229] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   59.832455][ T6237] lo speed is unknown, defaulting to 1000
[   59.834624][ T6237] lo speed is unknown, defaulting to 1000
[   59.838356][ T6237] lo speed is unknown, defaulting to 1000
[   59.847182][ T6237] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   59.858571][ T6237] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   59.876958][ T6237] lo speed is unknown, defaulting to 1000
[   59.880094][ T6237] lo speed is unknown, defaulting to 1000
[   59.888797][ T6237] lo speed is unknown, defaulting to 1000
[   59.923420][ T6237] Zero length message leads to an empty skb
[   60.549548][ T6282] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   60.583617][ T4332] wlan1: Trigger new scan to find an IBSS to join
[   61.541540][ T5239] Bluetooth: hci2: command tx timeout
[   61.542003][   T54] Bluetooth: hci0: command tx timeout
[   61.543357][ T5848] Bluetooth: hci1: command tx timeout
[   63.541881][ T4332] wlan1: Trigger new scan to find an IBSS to join
[   63.576991][ T6306] __nla_validate_parse: 9 callbacks suppressed
[   63.577000][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[   63.589140][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'.
[   63.718090][ T6316] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'.
[   63.836137][ T6325] tipc: Started in network mode
[   63.837819][ T6325] tipc: Node identity f6279722f97b, cluster identity 4711
[   63.840265][ T6325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.969796][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'.
[   64.034948][ T6324] tipc: Resetting bearer <eth:syzkaller0>
[   64.693136][ T6324] tipc: Disabling bearer <eth:syzkaller0>
[   64.742140][ T6353] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   64.845974][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   65.044287][ T6371] validate_nla: 1 callbacks suppressed
[   65.044297][ T6371] netlink: 'syz.2.113': attribute type 13 has an invalid length.
[   65.048777][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   65.053824][ T6371] netlink: 'syz.2.113': attribute type 13 has an invalid length.
[   65.056490][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   65.094552][ T6375] netlink: 'syz.2.115': attribute type 10 has an invalid length.
[   65.200887][ T6386] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.119'.
[   65.483866][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'.
[   65.490793][ T6413] geneve2: entered promiscuous mode
[   65.689749][ T6438] C: renamed from team_slave_0 (while UP)
[   65.696451][ T6438] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   65.699239][ T6438] netlink: 152 bytes leftover after parsing attributes in process `syz.1.139'.
[   65.715841][ T6438] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.767160][ T6447] netlink: 'syz.0.140': attribute type 6 has an invalid length.
[   65.774293][ T6447] netlink: 'syz.0.140': attribute type 6 has an invalid length.
[   65.872095][ T6458] tipc: Invalid UDP bearer configuration
[   65.872136][ T6458] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   66.512468][ T6026] wlan1: Trigger new scan to find an IBSS to join
[   66.513022][ T6511] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   66.519791][ T6511] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   66.531495][ T6511] vlan2: entered allmulticast mode
[   66.533276][ T6511] macvtap0: entered allmulticast mode
[   66.535342][ T6511] veth0_macvtap: entered allmulticast mode
[   66.620401][ T6517] netlink: 'syz.1.170': attribute type 11 has an invalid length.
[   66.669429][ T6524] netlink: 'syz.1.172': attribute type 3 has an invalid length.
[   66.685726][ T6524] tipc: MTU too low for tipc bearer
[   67.186273][ T6542] netlink: 'syz.2.176': attribute type 6 has an invalid length.
[   67.192264][ T6542] netlink: 'syz.2.176': attribute type 6 has an invalid length.
[   67.462062][ T1181] wlan1: Creating new IBSS network, BSSID 66:2b:39:73:55:2e
[   67.537987][ T6552] tipc: Can't bind to reserved service type 0
[   67.541486][   T40] wlan1: Trigger new scan to find an IBSS to join
[   67.853837][ T6565] bond1: (slave geneve2): making interface the new active one
[   67.858416][ T6565] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   67.865113][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   67.868873][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   67.876364][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   67.880827][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.884255][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   68.225703][ T6591] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   68.233928][ T6591] syzkaller0: entered promiscuous mode
[   68.236248][ T6591] syzkaller0: entered allmulticast mode
[   68.654341][ T6565] syz.1.188 (6565) used greatest stack depth: 19184 bytes left
[   68.949184][ T6593] geneve2: entered allmulticast mode
[   69.084499][ T6610] __nla_validate_parse: 13 callbacks suppressed
[   69.084509][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.204'.
[   69.094603][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   69.098387][ T6613] IPVS: Error joining to the multicast group
[   69.207190][ T6613] openvswitch: netlink: Key type 10512 is out of range max 32
[   69.227042][ T6630] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.208'.
[   69.349827][ T6632] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[   69.357952][ T6632] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   69.366185][ T6642] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   69.744133][ T6656] gretap1: entered promiscuous mode
[   69.749410][ T6656] gretap1: entered allmulticast mode
[   69.923135][ T6673] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[   69.970149][ T6698] lo speed is unknown, defaulting to 1000
[   70.060289][ T6704] validate_nla: 4 callbacks suppressed
[   70.060303][ T6704] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[   70.393932][ T6730] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.234'.
[   70.516041][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'.
[   70.581191][ T4332] wlan1: Trigger new scan to find an IBSS to join
[   70.656624][ T6753] netlink: 'syz.2.245': attribute type 1 has an invalid length.
[   70.684550][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.696568][ T6753] bond1: (slave gretap1): making interface the new active one
[   70.700191][ T6753] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   70.827140][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[   70.906590][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.251'.
[   70.918131][ T6766] openvswitch: netlink: Flow key attr not present in new flow.
[   70.926094][ T6766] Bluetooth: MGMT ver 1.23
[   70.983640][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'.
[   70.987813][ T6773] netlink: 256 bytes leftover after parsing attributes in process `syz.1.254'.
[   70.992218][ T6773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.254'.
[   71.066096][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.147322][ T6793] netlink: 'syz.0.263': attribute type 10 has an invalid length.
[   71.292315][ T6814] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   71.295368][ T6816] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   71.302812][ T6814] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   71.454254][ T6833] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   71.457694][ T6834] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   71.482805][ T6833] bond1: (slave geneve3): making interface the new active one
[   71.485856][ T6833] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   71.488921][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   71.494796][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   71.497922][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   71.501865][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   71.551125][ T6026] wlan1: Trigger new scan to find an IBSS to join
[   71.777217][ T1181] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[   71.853769][ T6854] openvswitch: netlink: IP tunnel TTL not specified.
[   72.118832][ T6874] syz.2.289 (6874) used greatest stack depth: 18776 bytes left
[   72.215981][ T5879] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.223422][ T5879] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.228951][ T5879] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.235431][ T5879] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.425367][ T6905] ip6gre0: entered promiscuous mode
[   72.427795][ T6904] ip6gre0: left promiscuous mode
[   72.574459][ T6917] tun0: tun_chr_ioctl cmd 2147767520
[   73.063314][ T6960] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   73.080388][ T6960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.089302][ T5887] lo speed is unknown, defaulting to 1000
[   73.090465][ T6962] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[   73.490624][ T6986] trusted_key: syz.2.336 sent an empty control message without MSG_MORE.
[   73.541219][ T3579] wlan1: Trigger new scan to find an IBSS to join
[   73.719729][ T7014] netlink: 'syz.1.347': attribute type 10 has an invalid length.
[   74.194446][ T7046] __nla_validate_parse: 20 callbacks suppressed
[   74.194461][ T7046] netlink: 256 bytes leftover after parsing attributes in process `syz.0.357'.
[   74.201372][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.357'.
[   74.432573][ T6022] wlan1: Creating new IBSS network, BSSID 2e:e5:68:0a:fa:7f
[   74.581152][ T3579] wlan1: Trigger new scan to find an IBSS to join
[   74.682723][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'.
[   74.979347][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'.
[   75.166251][ T7090] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   75.169277][   T26] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[   75.672425][  T793] IPVS: starting estimator thread 0...
[   75.771547][ T7094] IPVS: using max 80 ests per chain, 192000 per kthread
[   75.834702][ T7104] netlink: 'syz.2.382': attribute type 10 has an invalid length.
[   75.860795][ T7106] netlink: 'syz.2.383': attribute type 9 has an invalid length.
[   76.049199][ T7124] vcan0: tx drop: invalid sa for name 0x0000000010000000
[   76.096505][ T7121] bridge3: entered promiscuous mode
[   76.098193][ T7121] bridge3: entered allmulticast mode
[   76.102541][ T7121] team0: Port device bridge3 added
[   76.109211][ T7121] netlink: 'syz.2.389': attribute type 11 has an invalid length.
[   76.112201][ T7121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'.
[   76.151773][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.168595][ T7135] bond0: (slave rose0): Enslaving as an active interface with an up link
[   76.229340][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.397'.
[   76.380734][ T7171] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.405'.
[   76.472035][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   76.475717][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'.
[   76.478820][ T7183] netlink: 'syz.1.410': attribute type 14 has an invalid length.
[   76.493548][ T7183] netlink: 'syz.1.410': attribute type 13 has an invalid length.
[   76.648309][ T7193] netlink: 72 bytes leftover after parsing attributes in process `syz.0.413'.
[   76.658046][ T7193] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   77.089882][ T7259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.095549][ T7259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   77.164678][ T7259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.168220][ T7259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   77.246580][ T7259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.252846][ T7259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   77.308210][ T7259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.315875][ T7259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   77.342310][ T7267] lo speed is unknown, defaulting to 1000
[   77.412824][   T24] IPVS: starting estimator thread 0...
[   77.425318][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   77.428832][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   77.446566][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   77.450056][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   77.472316][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   77.475488][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   77.497062][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   77.500716][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   77.504516][ T7270] IPVS: using max 78 ests per chain, 187200 per kthread
[   77.541103][ T1181] wlan1: Trigger new scan to find an IBSS to join
[   77.601814][ T7278] IPVS: set_ctl: invalid protocol: 255 172.30.1.2:20001
[   77.840724][ T7290] netlink: 'syz.1.445': attribute type 10 has an invalid length.
[   77.964535][ T6022] wlan1: Selected IBSS BSSID 2e:e5:68:0a:fa:7f based on configured SSID
[   77.971048][ T7301] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   78.455598][ T5880] IPVS: stop unused estimator thread 0...
[   78.464619][   T26] wlan1: Creating new IBSS network, BSSID 86:d3:52:30:1b:1b
[   78.537901][ T7341] syzkaller0: entered promiscuous mode
[   78.539806][ T7341] syzkaller0: entered allmulticast mode
[   79.323594][ T7354] __nla_validate_parse: 5 callbacks suppressed
[   79.323610][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'.
[   79.403245][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'.
[   79.425092][ T7373] netlink: 'syz.0.472': attribute type 4 has an invalid length.
[   79.594868][ T7386] ip6tnl0: entered promiscuous mode
[   79.606455][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[   79.619344][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'.
[   79.686514][ T7385] ip6tnl0: left promiscuous mode
[   79.705419][ T7402] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   79.709122][  T221] wlan1: Selected IBSS BSSID 86:d3:52:30:1b:1b based on configured SSID
[   79.794112][ T7410] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[   79.798135][ T7409] netlink: 'syz.0.484': attribute type 1 has an invalid length.
[   79.866070][ T7415] netlink: 'syz.1.483': attribute type 13 has an invalid length.
[   80.047479][ T7415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.067730][ T7423] lo speed is unknown, defaulting to 1000
[   80.070135][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   80.074175][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'.
[   80.139875][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'.
[   80.205475][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.489'.
[   80.434769][ T7446] 8021q: adding VLAN 0 to HW filter on device team0
[   80.440761][ T7446] bond0: (slave team0): Enslaving as an active interface with an up link
[   80.626894][ T7450] lo speed is unknown, defaulting to 1000
[   80.664660][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'.
[   80.720306][ T7419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.750045][ T7450] netlink: 228 bytes leftover after parsing attributes in process `syz.2.496'.
[   81.009009][ T7481] validate_nla: 3 callbacks suppressed
[   81.009019][ T7481] netlink: 'syz.1.504': attribute type 1 has an invalid length.
[   81.020001][ T7481] NCSI netlink: No device for ifindex 0
[   81.230891][ T7511] team0: Device gtp0 is of different type
[   81.314150][   T10] cfg80211: failed to load regulatory.db
[   81.450393][ T7531] netlink: 'syz.1.522': attribute type 1 has an invalid length.
[   81.477092][ T7531] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.494736][ T7531] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.497228][ T7531] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   81.506674][ T7531] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   81.525660][ T7536] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[   81.528243][ T7536] netlink: 'syz.0.524': attribute type 3 has an invalid length.
[   81.548843][ T7539] netlink: 'syz.1.522': attribute type 1 has an invalid length.
[   81.554974][ T7539] netlink: 'syz.1.522': attribute type 2 has an invalid length.
[   81.704976][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.709840][ T7555] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[   81.725828][ T7555] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.731478][ T7555] netlink: 'syz.1.531': attribute type 3 has an invalid length.
[   81.825615][ T7572] openvswitch: netlink: Key 4 has unexpected len 11 expected 12
[   81.845645][ T7571] can: request_module (can-proto-0) failed.
[   82.366485][ T7606] netlink: 'syz.2.550': attribute type 10 has an invalid length.
[   82.618561][ T7625] !: renamed from dummy0 (while UP)
[   82.923678][ T7649] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   83.223722][ T7664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   83.227351][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   83.228506][ T7665] IPVS: stopping backup sync thread 7664 ...
[   83.294857][ T6026] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[   83.298497][ T7669] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   83.623247][ T7681] tipc: Started in network mode
[   83.625379][ T7681] tipc: Node identity ac14140f, cluster identity 4711
[   83.628556][ T7681] tipc: New replicast peer: 255.255.255.255
[   83.631897][ T7681] tipc: Enabled bearer <udp:syz2>, priority 10
[   83.737100][ T7684] block nbd0: Unsupported socket: shutdown callout must be supported.
[   84.047756][ T7698] ip6gre1: entered allmulticast mode
[   84.052388][ T7697] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   84.057214][ T7699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.058729][ T7697] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   84.642220][   T10] tipc: Node number set to 2886997007
[   84.652614][ T7756] __nla_validate_parse: 21 callbacks suppressed
[   84.652624][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.599'.
[   84.704097][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'.
[   84.850207][ T7784] syzkaller1: entered promiscuous mode
[   84.853238][ T7784] syzkaller1: entered allmulticast mode
[   84.936976][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'.
[   85.028953][ T6022] wlan1: Selected IBSS BSSID 86:d3:52:30:1b:1b based on configured SSID
[   85.033699][ T7809] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   85.036692][ T7809] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.374867][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'.
[   85.439243][ T7851] netlink: 228 bytes leftover after parsing attributes in process `syz.0.636'.
[   85.471145][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[   85.474678][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[   85.491446][ T7855] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.637'.
[   85.533888][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.639'.
[   85.652608][ T7871] netlink: 9 bytes leftover after parsing attributes in process `syz.0.644'.
[   85.658378][ T7871] gretap0: entered promiscuous mode
[   85.875968][ T7893] lo speed is unknown, defaulting to 1000
[   85.983104][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.580131][ T7906] lo speed is unknown, defaulting to 1000
[   86.618371][   T10] IPVS: starting estimator thread 0...
[   86.703326][ T7908] IPVS: using max 78 ests per chain, 187200 per kthread
[   86.799195][ T5864] IPVS: stop unused estimator thread 0...
[   86.858363][ T7929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.862225][ T7929] syzkaller0: entered promiscuous mode
[   86.864409][ T7929] syzkaller0: entered allmulticast mode
[   86.867383][ T7932] validate_nla: 5 callbacks suppressed
[   86.867392][ T7932] netlink: 'syz.1.666': attribute type 10 has an invalid length.
[   86.868740][ T7929] tipc: Resetting bearer <eth:syzkaller0>
[   86.882651][ T7927] tipc: Resetting bearer <eth:syzkaller0>
[   86.891602][ T7927] tipc: Disabling bearer <eth:syzkaller0>
[   87.005554][ T7951] netlink: 'syz.2.673': attribute type 178 has an invalid length.
[   87.180566][ T7977] netlink: 'syz.0.683': attribute type 12 has an invalid length.
[   87.239898][ T7990] veth0: entered promiscuous mode
[   87.270868][ T7976] veth0: left promiscuous mode
[   87.337031][ T8004] netlink: 'syz.1.694': attribute type 4 has an invalid length.
[   87.339811][ T8002] tipc: Started in network mode
[   87.342510][ T8002] tipc: Node identity c204f65d1534, cluster identity 4711
[   87.351428][ T8002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.354284][ T8002] syzkaller0: entered promiscuous mode
[   87.363382][ T8002] syzkaller0: entered allmulticast mode
[   87.371969][ T8002] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.388610][ T8002] tipc: Resetting bearer <eth:syzkaller0>
[   87.402810][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[   87.419821][ T8013] tipc: Disabling bearer <eth:syzkaller0>
[   87.593175][ T8040] netlink: 'syz.2.706': attribute type 10 has an invalid length.
[   87.663486][ T8053] sctp: [Deprecated]: syz.1.710 (pid 8053) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.663486][ T8053] Use struct sctp_sack_info instead
[   87.695686][ T8059] gretap0: entered promiscuous mode
[   87.697992][ T8059] batadv_slave_1: entered promiscuous mode
[   87.766763][ T8063] netlink: 'syz.1.714': attribute type 12 has an invalid length.
[   87.770618][ T8063] netlink: 'syz.1.714': attribute type 12 has an invalid length.
[   87.816612][ T8073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.821940][ T8073] syzkaller0: entered promiscuous mode
[   87.824389][ T8073] syzkaller0: entered allmulticast mode
[   87.838702][ T8073] tipc: Resetting bearer <eth:syzkaller0>
[   87.897064][ T8072] tipc: Resetting bearer <eth:syzkaller0>
[   87.909311][ T8072] tipc: Disabling bearer <eth:syzkaller0>
[   88.015871][ T8094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.019475][ T8094] syzkaller0: entered promiscuous mode
[   88.022945][ T8094] syzkaller0: entered allmulticast mode
[   88.036889][ T8094] tipc: Resetting bearer <eth:syzkaller0>
[   88.044324][ T8093] tipc: Resetting bearer <eth:syzkaller0>
[   88.058903][ T8093] tipc: Disabling bearer <eth:syzkaller0>
[   88.145579][ T8096] syz.2.725 (8096) used greatest stack depth: 17464 bytes left
[   88.485328][ T8144] netlink: 'syz.1.738': attribute type 6 has an invalid length.
[   88.603716][ T8156] netlink: 'syz.2.743': attribute type 54 has an invalid length.
[   88.879326][ T8181] bond2: entered promiscuous mode
[   88.883407][ T8181] bond2: entered allmulticast mode
[   88.885671][ T8181] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.928835][ T8188] netlink: 'syz.0.753': attribute type 4 has an invalid length.
[   88.970694][ T8193] bridge0: entered promiscuous mode
[   89.223563][ T8212] geneve3: entered promiscuous mode
[   89.396320][ T5879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.399298][ T5879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.402662][ T5879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.405560][ T5879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.443394][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.459929][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.794478][ T8252] __nla_validate_parse: 23 callbacks suppressed
[   89.794488][ T8252] netlink: 84 bytes leftover after parsing attributes in process `syz.0.779'.
[   89.998907][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.781'.
[   90.195745][ T8275] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   90.199263][ T8275] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   90.398429][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.0.792'.
[   90.403509][ T8296] netlink: 43 bytes leftover after parsing attributes in process `syz.0.792'.
[   90.407275][ T8296] netlink: 43 bytes leftover after parsing attributes in process `syz.0.792'.
[   90.418508][ T8296] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   90.439451][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.443091][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.461540][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[   90.474031][   T24] IPVS: starting estimator thread 0...
[   90.570155][ T8308] IPVS: using max 79 ests per chain, 189600 per kthread
[   90.590374][ T8323] netlink: 8632 bytes leftover after parsing attributes in process `syz.0.801'.
[   90.604595][ T8327] netlink: 14 bytes leftover after parsing attributes in process `syz.2.802'.
[   90.676244][ T8338] netlink: 308 bytes leftover after parsing attributes in process `syz.2.805'.
[   90.680422][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'.
[   90.687529][ T8338] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   90.698972][ T8340] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   91.016696][ T8377] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   91.294656][ T8407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.298669][ T8407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   91.377733][ T8407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.382982][ T8407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   91.389563][ T8413] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   91.429288][ T8417] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   91.439870][ T8417] Bluetooth: MGMT ver 1.23
[   91.458541][ T8407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.472151][ T8407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   91.545712][ T8407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.548919][ T8407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[   91.637297][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[   91.641415][ T5879] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   91.654101][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[   91.657226][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   91.668516][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[   91.672506][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   91.689126][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[   91.694016][ T5879] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   91.702053][ T8441] tipc: Enabled bearer <ib:veth0_to_bond>, priority 10
[   92.081534][ T8484] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   92.278509][ T8512] openvswitch: netlink: EtherType 0 is less than min 600
[   92.718959][ T8543] validate_nla: 6 callbacks suppressed
[   92.718975][ T8543] netlink: 'syz.2.876': attribute type 4 has an invalid length.
[   92.812243][   T24] tipc: Node number set to 257726242
[   93.115212][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fedc400: rx timeout, send abort
[   93.237228][ T8562] netlink: 'syz.1.883': attribute type 4 has an invalid length.
[   93.449431][ T8585] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   93.458363][ T8585] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   93.615608][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f144c00: rx timeout, send abort
[   93.618943][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fedc400: abort rx timeout. Force session deactivation
[   93.704456][ T8597] netlink: 'syz.1.896': attribute type 4 has an invalid length.
[   93.743732][ T8603] netlink: 'syz.1.898': attribute type 2 has an invalid length.
[   94.118879][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f144c00: abort rx timeout. Force session deactivation
[   94.704223][ T8636] netlink: 'syz.2.911': attribute type 7 has an invalid length.
[   94.707206][ T8636] netlink: 'syz.2.911': attribute type 8 has an invalid length.
[   94.876195][ T8640] __nla_validate_parse: 30 callbacks suppressed
[   94.876208][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'.
[   94.953274][ T8645] netlink: 'syz.2.915': attribute type 10 has an invalid length.
[   94.991108][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.916'.
[   95.035099][ T8653] netlink: 'syz.0.919': attribute type 4 has an invalid length.
[   95.065393][ T8649] netlink: 'syz.2.917': attribute type 1 has an invalid length.
[   95.084579][ T8649] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.093784][ T8649] bond2: (slave ip6gretap1): making interface the new active one
[   95.096754][ T8649] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   95.118573][ T8650] veth3: entered promiscuous mode
[   95.122322][ T8649] erspan0: entered allmulticast mode
[   95.128725][ T8649] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   95.221631][ T5848] Bluetooth: hci1: command tx timeout
[   95.240869][ T8667] netlink: 'syz.2.923': attribute type 4 has an invalid length.
[   95.254557][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[   96.219232][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'.
[   96.278930][ T8674] Bluetooth: hci1: Opcode 0x080f failed: -4
[   96.286768][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[   96.375598][ T8722] syzkaller0: entered promiscuous mode
[   96.377831][ T8722] syzkaller0: entered allmulticast mode
[   97.366194][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[   97.409393][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[   97.415870][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[   97.461178][ T5848] Bluetooth: hci1: command 0x080f tx timeout
[   97.465724][ T8764] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.952'.
[   97.533588][ T8773] bond0: (slave wlan1): Releasing backup interface
[   97.546988][ T8775] lo speed is unknown, defaulting to 1000
[   97.709734][ T8794] bridge0: left promiscuous mode
[   97.719353][ T8794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.744997][ T8796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.771391][ T8794] tun0: tun_chr_ioctl cmd 1074025672
[   97.775555][ T8794] tun0: ignored: set checksum disabled
[   97.976151][ T8809] tipc: New replicast peer: 255.255.255.255
[   97.979438][ T8809] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.983046][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'.
[   97.987030][ T8809] tipc: Disabling bearer <udp:syz2>
[   98.017272][ T8809] validate_nla: 4 callbacks suppressed
[   98.017281][ T8809] netlink: 'syz.0.967': attribute type 1 has an invalid length.
[   98.221140][ T8840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.246622][ T8840] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.276198][ T8853] openvswitch: netlink: Flow key attr not present in new flow.
[   98.287374][ T8853] IPv6: Can't replace route, no match found
[   98.324501][ T8859] netlink: 'syz.0.984': attribute type 4 has an invalid length.
[   98.362008][ T8861] netlink: 'syz.1.985': attribute type 25 has an invalid length.
[   98.397981][ T8867] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   98.411569][ T8868] rdma_rxe: rxe_newlink: failed to add syzkaller0
[   98.414667][ T8868] netlink: 'syz.2.983': attribute type 21 has an invalid length.
[   98.415685][ T8870] netlink: 'syz.0.989': attribute type 10 has an invalid length.
[   98.425885][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.433180][ T8870] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   98.607015][ T8894] team_slave_0: entered promiscuous mode
[   98.610316][ T8894] team_slave_1: entered promiscuous mode
[   98.613695][ T8894] macsec1: entered promiscuous mode
[   98.616110][ T8894] team0: entered promiscuous mode
[   98.642604][ T8900] netlink: 'syz.0.1001': attribute type 2 has an invalid length.
[   98.659466][ T8900] netlink: 'syz.0.1001': attribute type 12 has an invalid length.
[   98.682619][ T8902] netlink: 'syz.1.1002': attribute type 1 has an invalid length.
[   98.702348][ T8902] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.715165][ T8902] bond4: (slave gretap2): making interface the new active one
[   98.718794][ T8902] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   98.816795][ T8909] lo speed is unknown, defaulting to 1000
[   98.938751][ T8919] syzkaller0: entered promiscuous mode
[   98.940640][ T8919] syzkaller0: entered allmulticast mode
[   99.008265][ T8925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   99.084110][ T8929] netlink: 'syz.1.1013': attribute type 10 has an invalid length.
[   99.087501][ T8929] bond0: (slave wlan1): Releasing backup interface
[   99.238625][ T8935] erspan1: entered promiscuous mode
[   99.349305][ T8944] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  100.043582][ T8974] __nla_validate_parse: 14 callbacks suppressed
[  100.043592][ T8974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1029'.
[  100.077050][ T8976] netlink: 'syz.1.1030': attribute type 10 has an invalid length.
[  100.262457][ T8992] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.288825][ T8992] veth3: entered promiscuous mode
[  100.293258][ T8992] bond5: (slave veth3): Enslaving as an active interface with a down link
[  100.297591][ T8992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1037'.
[  100.304904][ T8992] erspan0: entered allmulticast mode
[  100.309895][ T8992] bond5: (slave erspan0): making interface the new active one
[  100.314905][ T8992] erspan0: entered promiscuous mode
[  100.317142][ T8992] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  100.366968][ T9007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'.
[  100.379134][ T9007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'.
[  100.386701][ T9007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'.
[  100.395370][ T9013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.398097][ T9013] syzkaller0: entered promiscuous mode
[  100.400201][ T9013] syzkaller0: entered allmulticast mode
[  100.408660][ T9013] tipc: Resetting bearer <eth:syzkaller0>
[  100.415159][ T9012] tipc: Resetting bearer <eth:syzkaller0>
[  100.423507][ T9012] tipc: Disabling bearer <eth:syzkaller0>
[  100.634445][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'.
[  100.658320][ T9034] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  100.675390][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1047'.
[  100.749572][ T3579] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[  100.755499][ T9045] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.338368][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.412486][ T9117] ieee802154 phy0 wpan0: encryption failed: -22
[  102.265746][ T9136] bond0: (slave wlan1): Releasing backup interface
[  102.277945][ T9138] syzkaller1: entered promiscuous mode
[  102.280055][ T9138] syzkaller1: entered allmulticast mode
[  102.288464][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'.
[  102.333425][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'.
[  102.391931][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'.
[  102.401613][ T9154] bond5: (slave erspan0): Releasing active interface
[  102.404177][ T9154] erspan0: left promiscuous mode
[  102.419789][ T9154] bond0: (slave team0): Releasing backup interface
[  102.437550][ T9154] bridge_slave_0: left allmulticast mode
[  102.439385][ T9154] bridge_slave_0: left promiscuous mode
[  102.443654][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.449264][ T9154] bridge_slave_1: left allmulticast mode
[  102.452943][ T9154] bridge_slave_1: left promiscuous mode
[  102.454832][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.460181][ T9154] bond0: (slave bond_slave_0): Releasing backup interface
[  102.466448][ T9154] bond0: (slave bond_slave_1): Releasing backup interface
[  102.474631][ T9154] team0: Port device C removed
[  102.479408][ T9160] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  102.487691][ T9154] team0: Port device team_slave_1 removed
[  102.491177][ T9154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.494141][ T9154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.505686][ T9154] bond1: (slave geneve2): Releasing active interface
[  102.515881][ T9154] bond4: (slave gretap2): Releasing active interface
[  102.525981][ T9154] bond5: (slave veth3): Releasing active interface
[  102.540078][ T5864] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.546810][ T5864] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.604542][ T5864] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.609051][ T5864] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.845839][ T9184] lo speed is unknown, defaulting to 1000
[  103.089807][ T9206] validate_nla: 9 callbacks suppressed
[  103.089816][ T9206] netlink: 'syz.0.1102': attribute type 10 has an invalid length.
[  103.097981][ T6026] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[  103.103958][ T6026] wlan1: Failed to join IBSS, beacons forbidden
[  103.108157][ T9206] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.298755][ T9211] netlink: 'syz.1.1101': attribute type 29 has an invalid length.
[  103.550620][ T9219] netlink: 'syz.0.1105': attribute type 4 has an invalid length.
[  103.664754][ T9228] veth4: entered allmulticast mode
[  103.729525][ T9232] openvswitch: netlink: Message has 4 unknown bytes.
[  103.905483][ T9254] netlink: 'syz.2.1119': attribute type 10 has an invalid length.
[  103.911939][ T9254] bond0: (slave wlan1): Releasing backup interface
[  103.946097][ T9257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.949055][ T9258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.983468][ T9256] syzkaller0: entered promiscuous mode
[  103.985951][ T9256] syzkaller0: entered allmulticast mode
[  103.989033][ T9256] tipc: Resetting bearer <eth:syzkaller0>
[  104.139344][ T9255] tipc: Resetting bearer <eth:syzkaller0>
[  104.995203][ T9255] tipc: Disabling bearer <eth:syzkaller0>
[  105.067115][ T9287] netlink: 'syz.2.1130': attribute type 4 has an invalid length.
[  105.105374][ T9291] __nla_validate_parse: 15 callbacks suppressed
[  105.105383][ T9291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1132'.
[  105.171864][ T9299] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1134'.
[  105.260572][ T9305] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1138'.
[  105.265061][ T9305] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1138'.
[  105.268825][ T9305] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1138'.
[  105.355192][ T9314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1142'.
[  105.419875][ T9325] netlink: 'syz.2.1146': attribute type 10 has an invalid length.
[  105.547915][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'.
[  105.574957][ T9340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.582438][ T9340] tipc: Resetting bearer <eth:syzkaller0>
[  105.614522][ T9339] tipc: Disabling bearer <eth:syzkaller0>
[  105.626216][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'.
[  105.630276][ T9342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.683819][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'.
[  105.693715][ T9348] netlink: 732 bytes leftover after parsing attributes in process `syz.2.1157'.
[  105.698783][ T9348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.707437][ T9348] syzkaller0: MTU too low for tipc bearer
[  105.709473][ T9348] tipc: Disabling bearer <eth:syzkaller0>
[  105.713017][ T9348] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  105.725130][ T9352] netlink: 'syz.1.1159': attribute type 6 has an invalid length.
[  105.728147][ T9352] netlink: 'syz.1.1159': attribute type 5 has an invalid length.
[  105.733536][ T9352] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  105.786065][ T9356] netlink: 'syz.1.1161': attribute type 4 has an invalid length.
[  105.906263][ T9368] netlink: 'syz.1.1171': attribute type 25 has an invalid length.
[  105.973327][ T9370] vlan5: entered promiscuous mode
[  105.975472][ T9370] veth0: entered promiscuous mode
[  105.977654][ T9370] vlan5: entered allmulticast mode
[  105.979753][ T9370] veth0: entered allmulticast mode
[  106.545983][   T40] wlan1: Selected IBSS BSSID 2e:e5:68:0a:fa:7f based on configured SSID
[  106.550438][   T40] wlan1: Failed to join IBSS, beacons forbidden
[  106.552638][ T9401] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.647978][ T9397] openvswitch: netlink: Message has 8 unknown bytes.
[  106.898511][ T9440] bond0: (slave wlan1): Releasing backup interface
[  106.960834][ T9449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.974057][ T9449] tipc: Resetting bearer <eth:syzkaller0>
[  107.018770][ T9448] tipc: Disabling bearer <eth:syzkaller0>
[  107.235778][ T9475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.280505][   T40] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[  107.286268][ T9482] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  107.289721][   T40] wlan1: Failed to join IBSS, beacons forbidden
[  107.340786][ T9488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.439348][   T26] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[  107.443554][ T9496] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  107.443729][   T26] wlan1: Failed to join IBSS, beacons forbidden
[  107.979115][ T9522] bridge6: entered promiscuous mode
[  108.234055][ T9543] validate_nla: 5 callbacks suppressed
[  108.234070][ T9543] netlink: 'syz.2.1227': attribute type 10 has an invalid length.
[  108.245428][ T9543] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  108.250275][   T26] wlan1: Selected IBSS BSSID 86:d3:52:30:1b:1b based on configured SSID
[  108.255622][   T26] wlan1: Failed to join IBSS, beacons forbidden
[  108.259558][ T9543] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  108.264317][ T9543] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  108.357572][ T9555] netlink: 'syz.0.1232': attribute type 28 has an invalid length.
[  108.392483][ T9561] netlink: 'syz.2.1233': attribute type 12 has an invalid length.
[  108.418373][ T9564] netlink: 'syz.1.1234': attribute type 32 has an invalid length.
[  108.496787][ T9571] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.568853][ T9580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.873411][ T9611] netlink: 'syz.0.1252': attribute type 4 has an invalid length.
[  108.950228][ T9611] netlink: 'syz.0.1252': attribute type 16 has an invalid length.
[  108.953089][ T9611] netlink: 'syz.0.1252': attribute type 17 has an invalid length.
[  109.200391][ T9640] netlink: 'syz.1.1264': attribute type 10 has an invalid length.
[  109.506289][ T9662] netlink: 'syz.2.1274': attribute type 4 has an invalid length.
[  109.726355][ T9674] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  109.838647][ T9683] lo speed is unknown, defaulting to 1000
[  110.219175][ T9694] __nla_validate_parse: 59 callbacks suppressed
[  110.219190][ T9694] netlink: 145532 bytes leftover after parsing attributes in process `syz.0.1283'.
[  112.980578][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1286'.
[  113.316897][ T9737] geneve4: entered allmulticast mode
[  113.521888][ T9752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.533324][ T9752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.757388][ T9770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  113.761736][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1315'.
[  113.856014][ T9774] sctp: [Deprecated]: syz.1.1317 (pid 9774) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.856014][ T9774] Use struct sctp_sack_info instead
[  114.115617][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  114.515088][ T9806] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  114.518111][ T6026] wlan1: Selected IBSS BSSID 66:2b:39:73:55:2e based on configured SSID
[  114.521106][ T6026] wlan1: Failed to join IBSS, beacons forbidden
[  115.287615][ T9825] validate_nla: 1 callbacks suppressed
[  115.287626][ T9825] netlink: 'syz.1.1337': attribute type 4 has an invalid length.
[  115.420656][ T9839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.425666][ T9840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.453027][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.456937][ T9846] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1348'.
[  115.460081][ T9845] netlink: 'syz.0.1347': attribute type 1 has an invalid length.
[  115.477631][ T9845] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.482050][ T9845] netlink: 'syz.0.1347': attribute type 3 has an invalid length.
[  115.484706][ T9845] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1347'.
[  115.488696][ T9850] netlink: 'syz.2.1349': attribute type 1 has an invalid length.
[  115.492341][ T9850] netlink: 'syz.2.1349': attribute type 1 has an invalid length.
[  115.495790][ T9850] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1349'.
[  115.499456][ T9850] unsupported nlmsg_type 40
[  115.505338][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'.
[  115.543736][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1350'.
[  115.547137][ T9854] netlink: 'syz.2.1350': attribute type 7 has an invalid length.
[  115.549880][ T9854] netlink: 'syz.2.1350': attribute type 8 has an invalid length.
[  115.552864][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'.
[  115.558940][ T9854] bridge0: entered promiscuous mode
[  115.562847][ T9854] ip6gretap0: entered promiscuous mode
[  115.565884][ T9854] bridge0: left promiscuous mode
[  115.568265][ T9854] ip6gretap0: left promiscuous mode
[  115.640343][ T9859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'.
[  116.058224][ T9891] netlink: 'syz.1.1365': attribute type 64 has an invalid length.
[  116.127078][ T9899] netlink: 'syz.0.1368': attribute type 1 has an invalid length.
[  116.129754][ T9899] netlink: 'syz.0.1368': attribute type 2 has an invalid length.
[  116.220852][ T9906] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1370'.
[  116.476973][ T9939] netlink: zone id is out of range
[  116.483709][ T9939] netlink: zone id is out of range
[  116.522309][ T9939] netlink: set zone limit has 4 unknown bytes
[  116.617025][ T9954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'.
[  116.837505][ T9972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.845067][ T9972] syzkaller0: entered promiscuous mode
[  116.847384][ T9972] syzkaller0: entered allmulticast mode
[  116.854029][ T9972] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  116.859975][ T9972] tipc: Resetting bearer <eth:syzkaller0>
[  116.866272][ T9971] tipc: Resetting bearer <eth:syzkaller0>
[  116.878575][ T9971] tipc: Disabling bearer <eth:syzkaller0>
[  116.943882][ T9978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1395'.
[  118.456306][T10089] openvswitch: netlink: Message has 4 unknown bytes.
[  119.125617][  T793] lo speed is unknown, defaulting to 1000
[  119.135604][  T793] lo speed is unknown, defaulting to 1000
[  119.665032][T10179] macsec2: entered promiscuous mode
[  119.666706][T10179] macvlan1: entered promiscuous mode
[  119.671074][T10179] macvlan1: left promiscuous mode
[  119.813735][T10195] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  120.485173][T10235] bond0 (unregistering): left promiscuous mode
[  120.487298][T10235] bond_slave_0: left promiscuous mode
[  120.489184][T10235] bond_slave_1: left promiscuous mode
[  120.503625][T10235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.510391][T10235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.517456][T10235] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  120.520817][T10235] bond0 (unregistering): Released all slaves
[  120.529958][ T1181] tipc: Resetting bearer <ib:veth0_to_bond>
[  120.606559][T10238] validate_nla: 8 callbacks suppressed
[  120.606690][T10238] netlink: 'syz.2.1488': attribute type 10 has an invalid length.
[  120.760716][T10252] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  120.794757][T10254] __nla_validate_parse: 21 callbacks suppressed
[  120.794771][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'.
[  120.909389][T10267] batadv0: entered promiscuous mode
[  120.912607][T10267] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  120.916517][T10267] batadv0: left promiscuous mode
[  121.016573][T10267] syzkaller0: entered promiscuous mode
[  121.019049][T10267] syzkaller0: entered allmulticast mode
[  121.729675][T10273] syzkaller1: entered promiscuous mode
[  121.731966][T10273] syzkaller1: entered allmulticast mode
[  121.779844][T10279] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1502'.
[  121.806961][T10278] lo speed is unknown, defaulting to 1000
[  121.882446][T10287] syzkaller1: entered promiscuous mode
[  121.884352][T10287] syzkaller1: entered allmulticast mode
[  121.890521][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'.
[  122.232875][T10329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1521'.
[  122.278176][T10336] netlink: 'syz.1.1522': attribute type 7 has an invalid length.
[  122.282065][T10336] netlink: 'syz.1.1522': attribute type 8 has an invalid length.
[  122.313360][T10339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1524'.
[  122.316667][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1524'.
[  122.385471][T10344] netlink: 'syz.1.1531': attribute type 21 has an invalid length.
[  122.388860][T10344] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1531'.
[  122.395333][T10344] netlink: 'syz.1.1531': attribute type 4 has an invalid length.
[  122.398486][T10344] netlink: 'syz.1.1531': attribute type 5 has an invalid length.
[  122.401933][T10344] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1531'.
[  122.490786][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1527'.
[  122.659093][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'.
[  123.398624][T10443] netlink: 'syz.0.1561': attribute type 10 has an invalid length.
[  123.674204][T10459] (unnamed net_device) (uninitialized): peer notification delay (262152) is not a multiple of miimon (100), value rounded to 262100 ms
[  123.695903][T10459] tun0: tun_chr_ioctl cmd 1074025681
[  124.349731][T10497] netlink: 'syz.0.1582': attribute type 10 has an invalid length.
[  124.367847][T10495] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  124.669503][T10530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.703425][   T33] audit: type=1800 audit(1755252773.807:2): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1589" name="memory.events" dev="tmpfs" ino=2820 res=0 errno=0
[  124.794537][T10549] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  124.887442][T10560] netlink: 'syz.0.1602': attribute type 10 has an invalid length.
[  125.715288][T10616] netlink: 'syz.0.1627': attribute type 1 has an invalid length.
[  125.876510][T10641] __nla_validate_parse: 15 callbacks suppressed
[  125.876520][T10641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1638'.
[  125.883742][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'.
[  125.911175][T10641] bond6: entered promiscuous mode
[  125.913126][T10641] bond6: entered allmulticast mode
[  125.915676][T10641] 8021q: adding VLAN 0 to HW filter on device bond6
[  125.919346][T10642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.923806][T10647] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1639'.
[  125.924013][T10645] syzkaller0: entered promiscuous mode
[  125.929830][T10645] syzkaller0: entered allmulticast mode
[  125.957863][T10641] lo speed is unknown, defaulting to 1000
[  125.960627][T10642] tipc: Resetting bearer <eth:syzkaller0>
[  125.974021][T10642] tipc: Disabling bearer <eth:syzkaller0>
[  126.210515][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1649'.
[  126.266460][T10682] tls_set_device_offload_rx: netdev not found
[  126.329493][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'.
[  126.337751][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1653'.
[  126.413949][T10700] netlink: 'syz.0.1660': attribute type 10 has an invalid length.
[  126.755114][T10724] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.921935][T10742] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1676'.
[  126.930558][T10742] netlink: 'syz.1.1676': attribute type 4 has an invalid length.
[  127.037727][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  127.157691][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'.
[  127.425706][T10772] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  127.433313][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'.
[  127.649913][T10783] netlink: 'syz.2.1691': attribute type 10 has an invalid length.
[  127.729740][T10787] netlink: 'syz.2.1693': attribute type 13 has an invalid length.
[  127.759655][T10787] gretap0: refused to change device tx_queue_len
[  127.764136][T10787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.769262][ T5316] lo speed is unknown, defaulting to 1000
[  127.771931][ T5316] syz2: Port: 1 Link DOWN
[  127.995453][T10811] vlan3: entered allmulticast mode
[  127.997307][T10811] bridge0: entered allmulticast mode
[  127.999394][T10811] bridge4: port 1(vlan3) entered blocking state
[  128.002876][T10811] bridge4: port 1(vlan3) entered disabled state
[  128.006043][T10811] vlan3: entered promiscuous mode
[  128.008081][T10811] bridge0: entered promiscuous mode
[  128.033405][T10811] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  128.043480][T10815] netlink: 'syz.1.1703': attribute type 5 has an invalid length.
[  128.111146][T10820] syzkaller1: entered promiscuous mode
[  128.113456][T10820] syzkaller1: entered allmulticast mode
[  128.825110][T10894] netlink: 'syz.2.1733': attribute type 10 has an invalid length.
[  128.988041][T10919] netlink: 'syz.0.1743': attribute type 5 has an invalid length.
[  129.098140][T10934] syz.1.1748 uses old SIOCAX25GETINFO
[  129.873098][T10952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.912939][T10957] tun0: tun_chr_ioctl cmd 1074025675
[  129.915154][T10957] tun0: persist enabled
[  129.917166][T10957] tun0: tun_chr_ioctl cmd 1074025675
[  129.918958][T10957] tun0: persist enabled
[  129.960462][T10967] netlink: 'syz.2.1760': attribute type 25 has an invalid length.
[  130.359564][T11002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.782276][T10972] syz.2.1763 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  130.786060][T10972] CPU: 0 UID: 0 PID: 10972 Comm: syz.2.1763 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  130.786071][T10972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.786076][T10972] Call Trace:
[  130.786080][T10972]  <TASK>
[  130.786083][T10972]  dump_stack_lvl+0x189/0x250
[  130.786098][T10972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.786107][T10972]  ? __pfx__printk+0x10/0x10
[  130.786123][T10972]  dump_header+0xd3/0x480
[  130.786135][T10972]  oom_kill_process+0x387/0x920
[  130.786145][T10972]  out_of_memory+0xf09/0x12a0
[  130.786157][T10972]  ? __pfx_out_of_memory+0x10/0x10
[  130.786168][T10972]  mem_cgroup_out_of_memory+0x145/0x240
[  130.786176][T10972]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  130.786187][T10972]  ? _raw_spin_unlock+0x28/0x50
[  130.786195][T10972]  ? memcg1_oom_prepare+0x37f/0x450
[  130.786205][T10972]  try_charge_memcg+0xdff/0x1290
[  130.786221][T10972]  ? __pfx_try_charge_memcg+0x10/0x10
[  130.786237][T10972]  charge_memcg+0x9f/0x180
[  130.786247][T10972]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  130.786255][T10972]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  130.786266][T10972]  __read_swap_cache_async+0x28c/0x510
[  130.786279][T10972]  swap_cluster_readahead+0x4cf/0x5f0
[  130.786289][T10972]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  130.786301][T10972]  ? get_vma_policy+0x27c/0x3c0
[  130.786313][T10972]  swapin_readahead+0x17d/0xb50
[  130.786320][T10972]  ? __pfx_filemap_get_entry+0x10/0x10
[  130.786331][T10972]  ? __pfx_swapin_readahead+0x10/0x10
[  130.786344][T10972]  ? __filemap_get_folio+0x9a6/0xaf0
[  130.786355][T10972]  ? swap_cache_get_folio+0xae/0x3b0
[  130.786364][T10972]  do_swap_page+0x525/0x5ac0
[  130.786375][T10972]  ? __lock_acquire+0xab9/0xd20
[  130.786390][T10972]  ? do_swap_page+0x184/0x5ac0
[  130.786398][T10972]  ? __pfx_do_swap_page+0x10/0x10
[  130.786406][T10972]  ? __lock_acquire+0xab9/0xd20
[  130.786416][T10972]  ? __pfx_default_wake_function+0x10/0x10
[  130.786427][T10972]  ? ___pte_offset_map+0x1cf/0x250
[  130.786438][T10972]  ? pte_offset_map_rw_nolock+0xea/0x160
[  130.786448][T10972]  __handle_mm_fault+0xe55/0x5440
[  130.786456][T10972]  ? __lock_acquire+0xab9/0xd20
[  130.786471][T10972]  ? __pfx___handle_mm_fault+0x10/0x10
[  130.786486][T10972]  ? lock_vma_under_rcu+0xdf/0x3d0
[  130.786495][T10972]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  130.786508][T10972]  handle_mm_fault+0x40a/0x8e0
[  130.786521][T10972]  do_user_addr_fault+0xa81/0x1390
[  130.786535][T10972]  ? rcu_is_watching+0x15/0xb0
[  130.786543][T10972]  ? trace_page_fault_user+0x84/0x1e0
[  130.786554][T10972]  exc_page_fault+0x76/0xf0
[  130.786584][T10972]  asm_exc_page_fault+0x26/0x30
[  130.786593][T10972] RIP: 0033:0x7f5a1bd8eb8a
[  130.786601][T10972] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90
[  130.786608][T10972] RSP: 002b:00007ffe00736ef0 EFLAGS: 00010206
[  130.786615][T10972] RAX: 0000000000000000 RBX: 00007f5a1bfb5fa0 RCX: 0000000000000000
[  130.786620][T10972] RDX: f66b60f9b9b10100 RSI: 0000000000000000 RDI: 0000555560434808
[  130.786625][T10972] RBP: 00007f5a1bfb7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  130.786629][T10972] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001fe93
[  130.786633][T10972] R13: 00007f5a1bfb6180 R14: ffffffffffffffff R15: 00007ffe00737030
[  130.786646][T10972]  </TASK>
[  130.786649][T10972] memory: usage 307200kB, limit 307200kB, failcnt 299
[  130.900864][T10972] memory+swap: usage 307320kB, limit 9007199254740988kB, failcnt 0
[  130.903649][T10972] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[  130.906463][T10972] Memory cgroup stats for /syz2:
[  130.906684][T10972] cache 4096
[  130.910054][T10972] rss 0
[  130.911324][T10972] rss_huge 0
[  130.912750][T10972] shmem 0
[  130.914012][T10972] mapped_file 0
[  130.919207][T10972] dirty 0
[  130.920540][T10972] writeback 0
[  130.922445][T10972] workingset_refault_anon 2
[  130.924990][T10972] workingset_refault_file 0
[  130.926939][T10972] swap 122880
[  130.928380][T10972] swapcached 16384
[  130.929980][T10972] pgpgin 40505
[  130.931938][T10972] pgpgout 40500
[  130.933420][T10972] pgfault 86694
[  130.934923][T10972] pgmajfault 10
[  130.936412][T10972] inactive_anon 0
[  130.937992][T10972] active_anon 16384
[  130.939611][T10972] inactive_file 0
[  130.941644][T10972] active_file 4096
[  130.943225][T10972] unevictable 0
[  130.944689][T10972] hierarchical_memory_limit 314572800
[  130.946905][T10972] hierarchical_memsw_limit 9223372036854771712
[  130.949474][T10972] total_cache 4096
[  130.951587][T10972] total_rss 0
[  130.953279][T10972] total_rss_huge 0
[  130.955083][T10972] total_shmem 0
[  130.956275][T10972] total_mapped_file 0
[  130.957688][T10972] total_dirty 0
[  130.959135][T10972] total_writeback 0
[  130.960777][T10972] total_workingset_refault_anon 2
[  130.966650][T10972] total_workingset_refault_file 0
[  130.968715][T10972] total_swap 122880
[  130.970316][T10972] total_swapcached 16384
[  130.975969][T10972] total_pgpgin 40505
[  130.989750][T10972] total_pgpgout 40500
[  130.991702][T10972] total_pgfault 86694
[  130.993363][T10972] total_pgmajfault 10
[  130.995010][T10972] total_inactive_anon 0
[  130.996707][T10972] total_active_anon 16384
[  130.998183][T10972] total_inactive_file 0
[  130.999612][T10972] total_active_file 4096
[  131.001215][T10972] total_unevictable 0
[  131.002649][T10972] anon_cost 0
[  131.003858][T10972] file_cost 0
[  131.005118][T10972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1763,pid=10972,uid=0
[  131.010249][T10972] Memory cgroup out of memory: Killed process 10972 (syz.2.1763) total-vm:98180kB, anon-rss:948kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  131.022433][T10982] syz.2.1763 (10982) used greatest stack depth: 17168 bytes left
[  131.183005][T11022] netlink: 'syz.1.1780': attribute type 4 has an invalid length.
[  131.432926][T11038] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.451107][T11038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.495420][T11038] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.499297][T11038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.550007][T11038] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.559149][T11038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.634596][T11038] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.638679][T11038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.719988][ T5879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.724541][ T5879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.735989][ T5879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.738758][ T5879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.765842][ T5879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.768496][ T5879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.786225][ T5879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.789032][ T5879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.805418][T11037] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.809063][T11037] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.827935][ T5879] ==================================================================
[  131.830629][ T5879] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1360
[  131.833192][ T5879] Read of size 8 at addr ffff888126081eb0 by task kworker/u8:3/5879
[  131.837304][ T5879] 
[  131.838311][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  131.838326][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.838333][ T5879] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  131.838347][ T5879] Call Trace:
[  131.838351][ T5879]  <TASK>
[  131.838355][ T5879]  dump_stack_lvl+0x189/0x250
[  131.838365][ T5879]  ? __kasan_check_byte+0x12/0x40
[  131.838375][ T5879]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.838383][ T5879]  ? lock_release+0x4b/0x3e0
[  131.838394][ T5879]  ? __virt_addr_valid+0x4a5/0x5c0
[  131.838403][ T5879]  print_report+0xca/0x240
[  131.838410][ T5879]  ? __mutex_lock+0x147/0x1360
[  131.838419][ T5879]  kasan_report+0x118/0x150
[  131.838427][ T5879]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.838435][ T5879]  ? __mutex_lock+0x147/0x1360
[  131.838445][ T5879]  __mutex_lock+0x147/0x1360
[  131.838454][ T5879]  ? __mutex_lock+0x5b6/0x1360
[  131.838463][ T5879]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  131.838471][ T5879]  ? __pfx___mutex_lock+0x10/0x10
[  131.838480][ T5879]  ? __lock_acquire+0xab9/0xd20
[  131.838491][ T5879]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  131.838501][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  131.838507][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  131.838514][ T5879]  process_scheduled_works+0xae1/0x17b0
[  131.838524][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  131.838533][ T5879]  worker_thread+0x8a0/0xda0
[  131.838544][ T5879]  kthread+0x711/0x8a0
[  131.838577][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  131.838584][ T5879]  ? __pfx_kthread+0x10/0x10
[  131.838593][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  131.838599][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.838607][ T5879]  ? __pfx_kthread+0x10/0x10
[  131.838615][ T5879]  ret_from_fork+0x3fc/0x770
[  131.838623][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  131.838630][ T5879]  ? __switch_to_asm+0x39/0x70
[  131.838639][ T5879]  ? __switch_to_asm+0x33/0x70
[  131.838647][ T5879]  ? __pfx_kthread+0x10/0x10
[  131.838655][ T5879]  ret_from_fork_asm+0x1a/0x30
[  131.838666][ T5879]  </TASK>
[  131.838669][ T5879] 
[  131.920001][ T5879] Allocated by task 11038:
[  131.921913][ T5879]  kasan_save_track+0x3e/0x80
[  131.923945][ T5879]  __kasan_kmalloc+0x93/0xb0
[  131.925950][ T5879]  __kmalloc_noprof+0x27a/0x4f0
[  131.928021][ T5879]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  131.930656][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  131.932836][ T5879]  register_netdevice+0x1608/0x1ae0
[  131.935048][ T5879]  nsim_create+0xae8/0xf10
[  131.936952][ T5879]  __nsim_dev_port_add+0x6b6/0xb10
[  131.939145][ T5879]  nsim_dev_port_add_all+0x37/0xf0
[  131.941262][ T5879]  nsim_dev_reload_up+0x451/0x780
[  131.943364][ T5879]  devlink_reload+0x4ec/0x8d0
[  131.945283][ T5879]  devlink_nl_reload_doit+0xb35/0xd50
[  131.947538][ T5879]  genl_family_rcv_msg_doit+0x215/0x300
[  131.949858][ T5879]  genl_rcv_msg+0x60e/0x790
[  131.951783][ T5879]  netlink_rcv_skb+0x208/0x470
[  131.953836][ T5879]  genl_rcv+0x28/0x40
[  131.955542][ T5879]  netlink_unicast+0x82f/0x9e0
[  131.957518][ T5879]  netlink_sendmsg+0x805/0xb30
[  131.959431][ T5879]  __sock_sendmsg+0x21c/0x270
[  131.961098][ T5879]  ____sys_sendmsg+0x505/0x830
[  131.962789][ T5879]  ___sys_sendmsg+0x21f/0x2a0
[  131.964754][ T5879]  __x64_sys_sendmsg+0x19b/0x260
[  131.966825][ T5879]  do_syscall_64+0xfa/0x3b0
[  131.968753][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.971194][ T5879] 
[  131.972226][ T5879] Freed by task 11037:
[  131.973978][ T5879]  kasan_save_track+0x3e/0x80
[  131.976033][ T5879]  kasan_save_free_info+0x46/0x50
[  131.978200][ T5879]  __kasan_slab_free+0x5b/0x80
[  131.980273][ T5879]  kfree+0x18e/0x440
[  131.981971][ T5879]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  131.984696][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  131.986841][ T5879]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  131.989579][ T5879]  unregister_netdevice_queue+0x33c/0x380
[  131.991971][ T5879]  nsim_destroy+0x1dd/0x670
[  131.993889][ T5879]  __nsim_dev_port_del+0x14d/0x1b0
[  131.996081][ T5879]  nsim_dev_reload_destroy+0x288/0x490
[  131.998422][ T5879]  nsim_dev_reload_down+0x8a/0xc0
[  132.000589][ T5879]  devlink_reload+0x1b6/0x8d0
[  132.002417][ T5879]  devlink_nl_reload_doit+0xb35/0xd50
[  132.004692][ T5879]  genl_family_rcv_msg_doit+0x215/0x300
[  132.007058][ T5879]  genl_rcv_msg+0x60e/0x790
[  132.009023][ T5879]  netlink_rcv_skb+0x208/0x470
[  132.011054][ T5879]  genl_rcv+0x28/0x40
[  132.012797][ T5879]  netlink_unicast+0x82f/0x9e0
[  132.014858][ T5879]  netlink_sendmsg+0x805/0xb30
[  132.016957][ T5879]  __sock_sendmsg+0x21c/0x270
[  132.018982][ T5879]  ____sys_sendmsg+0x505/0x830
[  132.021033][ T5879]  ___sys_sendmsg+0x21f/0x2a0
[  132.023013][ T5879]  __x64_sys_sendmsg+0x19b/0x260
[  132.024924][ T5879]  do_syscall_64+0xfa/0x3b0
[  132.026799][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.029245][ T5879] 
[  132.030237][ T5879] Last potentially related work creation:
[  132.032628][ T5879]  kasan_save_stack+0x3e/0x60
[  132.034608][ T5879]  kasan_record_aux_stack+0xbd/0xd0
[  132.036780][ T5879]  insert_work+0x3d/0x330
[  132.038633][ T5879]  __queue_work+0xbaf/0xfb0
[  132.040587][ T5879]  queue_work_on+0x181/0x270
[  132.042602][ T5879]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  132.045031][ T5879]  udp_tunnel_push_rx_port+0x180/0x200
[  132.047343][ T5879]  geneve_offload_rx_ports+0xd7/0x160
[  132.049653][ T5879]  geneve_netdevice_event+0x6a/0x80
[  132.051848][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  132.053988][ T5879]  call_netdevice_notifiers+0x88/0xc0
[  132.056145][ T5879]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  132.058694][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  132.060822][ T5879]  register_netdevice+0x1608/0x1ae0
[  132.062916][ T5879]  nsim_create+0xae8/0xf10
[  132.064759][ T5879]  __nsim_dev_port_add+0x6b6/0xb10
[  132.066743][ T5879]  nsim_dev_port_add_all+0x37/0xf0
[  132.068685][ T5879]  nsim_dev_reload_up+0x451/0x780
[  132.070755][ T5879]  devlink_reload+0x4ec/0x8d0
[  132.072651][ T5879]  devlink_nl_reload_doit+0xb35/0xd50
[  132.074821][ T5879]  genl_family_rcv_msg_doit+0x215/0x300
[  132.076741][ T5879]  genl_rcv_msg+0x60e/0x790
[  132.078320][ T5879]  netlink_rcv_skb+0x208/0x470
[  132.080067][ T5879]  genl_rcv+0x28/0x40
[  132.081384][ T5879]  netlink_unicast+0x82f/0x9e0
[  132.082959][ T5879]  netlink_sendmsg+0x805/0xb30
[  132.084663][ T5879]  __sock_sendmsg+0x21c/0x270
[  132.086466][ T5879]  ____sys_sendmsg+0x505/0x830
[  132.088328][ T5879]  ___sys_sendmsg+0x21f/0x2a0
[  132.089920][ T5879]  __x64_sys_sendmsg+0x19b/0x260
[  132.091649][ T5879]  do_syscall_64+0xfa/0x3b0
[  132.093478][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.095583][ T5879] 
[  132.096492][ T5879] Second to last potentially related work creation:
[  132.098995][ T5879]  kasan_save_stack+0x3e/0x60
[  132.100568][ T5879]  kasan_record_aux_stack+0xbd/0xd0
[  132.102297][ T5879]  insert_work+0x3d/0x330
[  132.103968][ T5879]  __queue_work+0xcd2/0xfb0
[  132.105655][ T5879]  queue_work_on+0x181/0x270
[  132.107202][ T5879]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  132.109078][ T5879]  udp_tunnel_push_rx_port+0x180/0x200
[  132.111003][ T5879]  vxlan_offload_rx_ports+0x139/0x200
[  132.112974][ T5879]  vxlan_netdevice_event+0x111/0x470
[  132.115036][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  132.116985][ T5879]  call_netdevice_notifiers+0x88/0xc0
[  132.119055][ T5879]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  132.121454][ T5879]  notifier_call_chain+0x1b6/0x3e0
[  132.123112][ T5879]  register_netdevice+0x1608/0x1ae0
[  132.124833][ T5879]  nsim_create+0xae8/0xf10
[  132.126269][ T5879]  __nsim_dev_port_add+0x6b6/0xb10
[  132.127934][ T5879]  nsim_dev_port_add_all+0x37/0xf0
[  132.129594][ T5879]  nsim_dev_reload_up+0x451/0x780
[  132.131207][ T5879]  devlink_reload+0x4ec/0x8d0
[  132.132975][ T5879]  devlink_nl_reload_doit+0xb35/0xd50
[  132.135061][ T5879]  genl_family_rcv_msg_doit+0x215/0x300
[  132.137275][ T5879]  genl_rcv_msg+0x60e/0x790
[  132.139068][ T5879]  netlink_rcv_skb+0x208/0x470
[  132.140977][ T5879]  genl_rcv+0x28/0x40
[  132.142358][ T5879]  netlink_unicast+0x82f/0x9e0
[  132.144181][ T5879]  netlink_sendmsg+0x805/0xb30
[  132.145793][ T5879]  __sock_sendmsg+0x21c/0x270
[  132.147245][ T5879]  ____sys_sendmsg+0x505/0x830
[  132.148754][ T5879]  ___sys_sendmsg+0x21f/0x2a0
[  132.150267][ T5879]  __x64_sys_sendmsg+0x19b/0x260
[  132.151932][ T5879]  do_syscall_64+0xfa/0x3b0
[  132.153543][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.155915][ T5879] 
[  132.156885][ T5879] The buggy address belongs to the object at ffff888126081e00
[  132.156885][ T5879]  which belongs to the cache kmalloc-256 of size 256
[  132.162011][ T5879] The buggy address is located 176 bytes inside of
[  132.162011][ T5879]  freed 256-byte region [ffff888126081e00, ffff888126081f00)
[  132.166765][ T5879] 
[  132.167749][ T5879] The buggy address belongs to the physical page:
[  132.170264][ T5879] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126080
[  132.173708][ T5879] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  132.177057][ T5879] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  132.180078][ T5879] page_type: f5(slab)
[  132.181699][ T5879] raw: 057ff00000000040 ffff88801a441b40 dead000000000122 0000000000000000
[  132.185045][ T5879] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  132.188296][ T5879] head: 057ff00000000040 ffff88801a441b40 dead000000000122 0000000000000000
[  132.191264][ T5879] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  132.194188][ T5879] head: 057ff00000000001 ffffea0004982001 00000000ffffffff 00000000ffffffff
[  132.196954][ T5879] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  132.200070][ T5879] page dumped because: kasan: bad access detected
[  132.202649][ T5879] page_owner tracks the page as allocated
[  132.204776][ T5879] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2020(__GFP_HIGH|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10974, tgid 10972 (syz.2.1763), ts 130816174174, free_ts 130338073858
[  132.213097][ T5879]  post_alloc_hook+0x240/0x2a0
[  132.215094][ T5879]  get_page_from_freelist+0x21e4/0x22c0
[  132.217329][ T5879]  __alloc_frozen_pages_noprof+0x181/0x370
[  132.219702][ T5879]  alloc_pages_mpol+0x232/0x4a0
[  132.221710][ T5879]  allocate_slab+0x8a/0x370
[  132.223397][ T5879]  ___slab_alloc+0xbeb/0x1410
[  132.225186][ T5879]  __kmalloc_cache_noprof+0x296/0x3d0
[  132.227308][ T5879]  try_to_inc_max_seq+0x1e7/0x1270
[  132.229011][ T5879]  try_to_shrink_lruvec+0xb02/0xb50
[  132.230739][ T5879]  shrink_lruvec+0x49c/0x2980
[  132.232292][ T5879]  shrink_node+0xa4e/0x3760
[  132.233816][ T5879]  do_try_to_free_pages+0x668/0x1960
[  132.235660][ T5879]  try_to_free_mem_cgroup_pages+0x2fa/0x7e0
[  132.237629][ T5879]  try_charge_memcg+0xa40/0x1290
[  132.239271][ T5879]  __memcg_kmem_charge_page+0xe1/0x240
[  132.241073][ T5879]  __alloc_frozen_pages_noprof+0x1b5/0x370
[  132.243010][ T5879] page last free pid 11003 tgid 11003 stack trace:
[  132.245157][ T5879]  __free_frozen_pages+0xbc4/0xd30
[  132.246861][ T5879]  pagetable_dtor_free+0x2d2/0x3b0
[  132.248892][ T5879]  __mmdrop+0xb5/0x570
[  132.250580][ T5879]  exit_mm+0x1da/0x2c0
[  132.252266][ T5879]  do_exit+0x648/0x2300
[  132.254000][ T5879]  do_group_exit+0x21c/0x2d0
[  132.255566][ T5879]  __x64_sys_exit_group+0x3f/0x40
[  132.257228][ T5879]  x64_sys_call+0x21f7/0x2200
[  132.258820][ T5879]  do_syscall_64+0xfa/0x3b0
[  132.260334][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.262301][ T5879] 
[  132.263120][ T5879] Memory state around the buggy address:
[  132.265094][ T5879]  ffff888126081d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  132.268001][ T5879]  ffff888126081e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.270944][ T5879] >ffff888126081e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  132.274184][ T5879]                                      ^
[  132.276466][ T5879]  ffff888126081f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  132.279405][ T5879]  ffff888126081f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  132.282357][ T5879] ==================================================================
[  132.300645][ T5879] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  132.302932][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  132.306749][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.309951][ T5879] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  132.312268][ T5879] Call Trace:
[  132.313356][ T5879]  <TASK>
[  132.314323][ T5879]  dump_stack_lvl+0x99/0x250
[  132.315849][ T5879]  ? __asan_memcpy+0x40/0x70
[  132.317575][ T5879]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.319648][ T5879]  ? __pfx__printk+0x10/0x10
[  132.321483][ T5879]  vpanic+0x281/0x750
[  132.323037][ T5879]  ? preempt_schedule+0xae/0xc0
[  132.324928][ T5879]  ? __pfx_vpanic+0x10/0x10
[  132.326596][ T5879]  ? preempt_schedule_common+0x83/0xd0
[  132.328560][ T5879]  ? preempt_schedule+0xae/0xc0
[  132.330214][ T5879]  ? __pfx_preempt_schedule+0x10/0x10
[  132.332051][ T5879]  panic+0xb9/0xc0
[  132.333430][ T5879]  ? __pfx_panic+0x10/0x10
[  132.335176][ T5879]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  132.337453][ T5879]  ? __mutex_lock+0x147/0x1360
[  132.339256][ T5879]  check_panic_on_warn+0x89/0xb0
[  132.340942][ T5879]  ? __mutex_lock+0x147/0x1360
[  132.342504][ T5879]  end_report+0x78/0x160
[  132.343873][ T5879]  kasan_report+0x129/0x150
[  132.345283][ T5879]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.347149][ T5879]  ? __mutex_lock+0x147/0x1360
[  132.348651][ T5879]  __mutex_lock+0x147/0x1360
[  132.350108][ T5879]  ? __mutex_lock+0x5b6/0x1360
[  132.351709][ T5879]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  132.353728][ T5879]  ? __pfx___mutex_lock+0x10/0x10
[  132.355360][ T5879]  ? __lock_acquire+0xab9/0xd20
[  132.356951][ T5879]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  132.359282][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  132.361257][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  132.363078][ T5879]  process_scheduled_works+0xae1/0x17b0
[  132.364813][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  132.366676][ T5879]  worker_thread+0x8a0/0xda0
[  132.368279][ T5879]  kthread+0x711/0x8a0
[  132.369786][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  132.371653][ T5879]  ? __pfx_kthread+0x10/0x10
[  132.373120][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.374810][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.376479][ T5879]  ? __pfx_kthread+0x10/0x10
[  132.378185][ T5879]  ret_from_fork+0x3fc/0x770
[  132.380147][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  132.382249][ T5879]  ? __switch_to_asm+0x39/0x70
[  132.384214][ T5879]  ? __switch_to_asm+0x33/0x70
[  132.386307][ T5879]  ? __pfx_kthread+0x10/0x10
[  132.388292][ T5879]  ret_from_fork_asm+0x1a/0x30
[  132.390366][ T5879]  </TASK>
[  132.392530][ T5879] Kernel Offset: disabled
[  132.394392][ T5879] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:13:01  Registers:
info registers vcpu 0

CPU#0
RAX=ffffea00048b4b80 RBX=000000000000001b RCX=ffff88810602b980 RDX=0000000000000000
RSI=000000000000001b RDI=000000000000001f RBP=ffffc90007817568 RSP=ffffc900078172d8
R8 =ffffea00048b4b87 R9 =1ffffd4000916970 R10=dffffc0000000000 R11=fffff94000916971
R12=1ffff11007073b52 R13=dffffc0000000000 R14=000000000000001b R15=0000000000000150
RIP=ffffffff81bfaeb0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556c0c2500 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5a1bfb7dac CR3=000000010f1fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5a1bf87498 00007f5a1bf87470 XMM03=00007f5a1bf874a8 00007f5a1bf874a0
XMM04=00007f5a1caed100 00007f5a1bf87460 XMM05=00007f5a1bf87478 00007f5a1bf874c0
XMM06=00007f5a1bf874b8 00007f5a1bf874b0 XMM07=00007f5a1bf874a8 00007f5a1bf874a0
XMM08=0000000000000000 00007f5a1be12ee7 XMM09=0000000000000000 00007f5a1be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003eff130
R8 =ffff8881070b0237 R9 =1ffff11020e16046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f7 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555560434808 CR3=0000000028244000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5a1be12e53
XMM06=0000000000000000 00007f5a1be12e4d XMM07=0000000000000000 00007f5a1be12e61
XMM08=0000000000000000 00007f5a1be12ee7 XMM09=0000000000000000 00007f5a1be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
