last executing test programs:

4.02352105s ago: executing program 2 (id=405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000400ffff14000780080012400000000504001500090000000300010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)

3.881143239s ago: executing program 2 (id=409):
r0 = socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}}, 0x0) (async)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x10000}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000004a00010200000000000000000a"], 0x14}}, 0x0) (async)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000e0ff000000000000000000801e83b4fc00"/120], 0x78)

3.716254859s ago: executing program 2 (id=411):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0xfe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202a0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@remote, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x6, 0x2, 0x2, 0x2, 0x1], 0x1, 0x2}, {0x2, [0x2, 0x3, 0x1, 0x0, 0x0, 0x7], 0x0, 0x2b96a497dd949b72}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r4)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
splice(r3, 0x0, r6, 0x0, 0x10d00, 0xf)
poll(&(0x7f0000002000)=[{r2, 0x93d4}], 0x1, 0x9)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r8, 0x0, 0x0)

2.605873809s ago: executing program 0 (id=422):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000300)=""/145, &(0x7f0000000000)=0x91)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1d}, {&(0x7f0000000400)='gH', 0x2}], 0x2}, 0x40080)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)

2.538629413s ago: executing program 1 (id=423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005640), r0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a0ad49f142e78683719805d0ca47d8d0032786b0ca47ce40da9ab77ffb0013f0b9765c514402413ed160d3c91bb5bf7d7c01f9e780e8d6e1dd82b4eda", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250800000004000480"], 0x18}}, 0x804)

2.517738462s ago: executing program 3 (id=424):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket(0x11, 0xa, 0x40)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0xc04, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

2.424480311s ago: executing program 2 (id=425):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffea7, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
r3 = gettid()
syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/time\x00')
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027fd7000fbdbdf250700000008000300", @ANYBLOB="0a000400"], 0x4c}, 0x1, 0x0, 0x0, 0x8850}, 0x20008090)

2.419491902s ago: executing program 0 (id=426):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00030067656e65766500000c00028008000b40000000011400030067656e65766530000000000000000000"], 0x50}}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6)
pipe(0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x41)

2.3608672s ago: executing program 1 (id=427):
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x3d, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000481}, 0x24000084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b90ab02faadce1b000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32, @ANYBLOB], 0x54}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797af2616c6c65723000000000000008000500070000000a00180003"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24064884)
socket$packet(0x11, 0x3, 0x300) (async)
socket$inet(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x3d, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x15}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000481}, 0x24000084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b90ab02faadce1b000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32, @ANYBLOB], 0x54}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797af2616c6c65723000000000000008000500070000000a00180003"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24064884) (async)

2.220499881s ago: executing program 2 (id=428):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, <r1=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x0, 0x8204, 0xfffffffa, 0x28200000, 0x7, 0x7, 0x8, r1}, 0x20)

1.856253087s ago: executing program 0 (id=431):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) (async)
syz_emit_ethernet(0xbe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r2 = accept4(r0, &(0x7f0000000240)=@can, &(0x7f00000000c0)=0x80, 0x80800)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000380)="9bed8e4ffd78316be0a5f91279c83ca87e2d6d68bcac9c25b3a5da6f40ef1596ba873a3bb885380ff2ee21ff6e36b0adbaeb82bcc4c538a88f2569fab6de03825f470701e781962ac7c246cac3fc4a39c0197162484b8f6d3d3201c5b7b18d83652d2def2cf73c8007c53728b3916aa188b33efb3f5933a7bf1bd32e153082abe7ff4a7185b3e81054601b7bd05850192edcff74f32d5f68", 0x98)
connect$qrtr(r1, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@generic="b6aa883c187282c63edaa1b302338fad461472d9973f4b900698029295938e3a20c23a798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc302dedd15b1829ca499"]}]}, 0x64}}, 0x0) (async)
bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80000) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000190001000000000000000001021800000000fd000000000008000100ac141400040008"], 0x2c}}, 0x0) (async)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
sendto$inet6(r6, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
shutdown(r6, 0x1)

1.850397878s ago: executing program 1 (id=432):
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x85)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000100)) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) (async, rerun: 64)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)=0x1) (async, rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e23, @multicast2}, 0x241, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)='ip6gre0\x00', 0x2, 0x6, 0x3})
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async)
setsockopt$inet_udp_int(r1, 0x11, 0x3, &(0x7f0000000280)=0x2793, 0x4)
recvmmsg(r2, &(0x7f00000002c0), 0x0, 0x1, &(0x7f0000000300)={0x0, 0x3938700}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000340)={{r0}, "50873d65ebdd3cb9482df711382bab2d131c1629ac5afa17b7573c075cdf707423cf0a45ebdf2bbe04380e81707f36ece4aca7b5469cc7bc0e41fcb992590512c98cb48155b3b255f24d784456aa20f26dd574ffda2bc173f0da52bf3b88271e8c130564fee91b00b6308b0077d7d87cec8d200ffc05a47dc7200b868bd380ee2b54328fcb20b7a67a31e02041f8c2706714846578a1330aec760b9ea32719128aeee83203b7219127293ad7d71e3e8b0cc3290197e8baf6324098b8a568eda280d1949cc29e29b37117bef8d05c85f35e30838c48b8dac49508a10bd7ed63e065f2fef49659baf094403194dc5c0189b625b073301f7e6f108a2c98e5376c6350abfc1e540123f7047312e7d64347b4d6458705d140b49362f3c3a258c06c55e76d7cda32ddcf36a14881ca1ceecbb419b4494a830cfaadd895d87f300c31c9810f65fa35ab9f9e19243d48f29d5f1048406457a426dace937d6d9caeafa2555a292e6981ad090c413b41ab0e259414e5f5fec5e91b88786ff56f16cb80435d382142e5992ccf2aa5c5fd0090c4e510eeac58270d9154b715cd72caeaeb7b46d69af6f36bba4d1fe3dbddfd698a0070211ab8e2f69d1ef6454eb09718f11a64ba85d813c0c2db5507210bb12125f416a90fb68faaf251c7b27ce64e0432f482939bbb23753845567a1faffaeb84eb47c19d34f6e923dda255fc232bd5152b1b6bd878441e61c0ca3249ce9c05832a5a752aaa431f6fd2e34d3b4b07303d69049258ac043add8a1d74e862f295f21bb7d9052d3f5b668b588f356f0553da00136fdecb83672d8f75a64e78d90880b8b1e4ecbb618588f2027bc0c9e41c8394b09885a55035e1e022fb8a8ea6c85adcb5717053dac47cc5c1637e429e8b7f99b7e4ef3beaa415da8cb17d76e095026c2809e0d7898261e9de6ca27e8f5996d6af9ca22daedbc0e646058d11c8750bdee81c4a99d11f2c2e3ef9369a188690a98d84267fb7cb119dd526d14f276ff06d07f1da95d419643fa37613a79784a2131f6bdc9f82b06298cbf9929d2846c7a25c96180033c5a94331cc86bd522205977535a9d038ae0bb504cc90d4fb4a13a137df95d9102dd957f30acb027304f325ab2c0ac66de1482343fa0c331c63b631c73415e5f4bd14a11f2615f439e0f8d381aad7fac49815572099c0ca4b615463b7382051fba2e59c9fffd2e65d1175e4085ce00b0f63a87ff6768da79f2863386bf51f8a7690ea754315be2de76735afc322ed4b85b793b26609e5485e8c5634b36b2e39bff69fc2b22289fda7ecc7cbee386fda0c3522ff0202aaea702db9a61eef01fad2d5b58e7ac4732ac078176038124ab41b7e29386f793ae2a93d1aa58e8282ec68d3548a0ccb96e71aa7b34da52934c02e01e88fe5687313375b6ab202cbc304ad130519ae996c5d8813c10e78f68d0c6bee12c9260da98427dd2275b88fee8cc6d5cd01fa537c28ecec65775bbdb7a99ad3092e5f14167c2499f909cfbae399705f3310d5c0e05a384f5838c563f0395b2c026a1c3ed50fe0bdcb3f941edfcee4e876b7ac1cbceb9f618c70cf8fb1646f5c62b0cfe8cd6febe13bd0593207232a7f358bcc32c295d7dd9167cac3a124c5541b07e92b78b1c3d983ec88c9502ca7ec43ec419c78eb9b388c6aa49136b1a0ec851468009a620628a478b0daf3d15f9527257ac2cb8f07f4c26a3fa3955130b3b5d78a055319f21a54cdd2a96524789743ea9ceebcd86d29d7d2897dbd6d907dade03b8a42767d1d14db578601bd438feac6fc88e7026dcd31194ea5f972df6df94c1e3caa34d293f2aa2ac28f5f2b981c50c25da8c10ab786b0fadf0ea558d872a228cba2a497dc596d6935528bc2ff13aca472bbad00c6ad1974ab5a6549d3f8ff0a685d08a000f1b5cfdd6323fe056f3436a3fc2832e55441753eef177cef9d7a843cf0b736b302c44f6569c29249b456ba9aea4173df06e6fd64f8740573a27886d865dff98d0f599ce0a896e2d9f53a2dfe1fb291bbac049760c314c5bc4363850266c34cf09c44a2c4e33254868924133be6f8737b0cadd591e5033408141e9b086a6bb76a2c2d605f2e0ce21a28f8ed48323b8127c918f0c0f5ebdc0c49aaf481361b65c45d8b3eb8b77c632f3f5f02c487e96344e80214c7610ef3658eecc9a673583026744f0950a0cb4794fc741091666baceaf32abc7577aade54d18ccafd3f51ff255d15327dcb7778ac627f6dbeb3bd4b4a2aff979df6818cab8ff8151886f3086b78afe538af07784eeca69876c5e61c620e69ac5de9ce1210ce9641e0272305545a0dd064cbb5ec49f098ce0065dca49b2a5d82060e04959b77136ad0160fda6de8d6a1e0fe69d43984783967339e2e52c6d4bc8c1903c2e4441279030eff6f5cfb4123762fa7fd3b74ef8041ee0524d9606bd45429538fb736590de1aad2d9af4b66dfdcb410826994e0505d9d414849d2f7f00284f360fd22112466f9f515041452e140ed9cd820f88b466c6cd253f22e011d75695869e943a85f9d278e1208bd99dd0898c1a31b8a09af94367a4cf290b4f39fa1d07ffd6c867964ab598501b7c6d4229aef42223f6d7a86d6ad7ad6f7e793f0ea5cf4258d9e09af3431da60268185985b391077718b81fd1bf3c13985c754deab8f75729a0be343ab98790f0c382c3cbc15662f6090f4e9a131db8c0554eddf09238d5fec196470a4fcb9fd089493d592d003a8481c86257e17d588865d82fc45483ccc388ee0976fd39e1f0796b220b0170832197bb5762b40e4c49d7180128eab979ab6f82c71f924b8279eafd03d17bb9c430df0f3f8221eb1e09548cad751ba8425e21ab9b63c97cf57a26ed8999866cd5638501044188bb1c108acb3a555b2591b847d8dad30b9c2ef36d1c600a7bddef30e57e445959a091eb5922ac30bccc9b73925121900ede5791ff11421ac83eba7f65aceab9f2c804f19a786ca0e76fc8bcc33efb1a13b71d862359f4a6d4d8b3485906291999776c3623a48e6a64f9e9f643a32f4554b1935898f17f4aaf32471e6ab9c49ae58826d39c8aea3e69a6a38bc2b8d333ba15638a137d2b95782d0f0de5ad7182df047e3fd9f3289561f7b92a15d350c1986834e376b953203be972973d104a67d8c35ad89b3f39ceec327d6c95a5bdc9931953fd26ed54bc87af5883384f8914e9dc0e38521b6df42ac57145777c10a07fd8c99b63729c94125f3089d1c81ec556ae9962c5ffbf19c5b4b1268b2531f4388e7ad032c22e24d52eecd0b05bf7cb25593235b0b25ef543675144c1b398f176f495585946fdfd38e365d988a83af5b4837b77110f398150c810eb91ac0c8a1b43095a1fbe77367e697f41713a05c84f52da0da7faa08a2d737cfdde42d891fac9f345c3f42e1a8496a28a913cf686ea23daaea7c2eb9c529f090f75f0f48a3345939330eeb489329bca9a537b263e1b6774e1f3528bc154ba85d8fe7090c4907506d6583378ec36797ed1e225b5000dac008168c4a40c1793032345615af3ef79b42e6b5efafb255f28867bd44fd0e74bd9b94c04edf6f56d9e2a197f59d8e079bc87818f649af45559f31de9d3f22dd8512f638336e117df22c967eb3f1c0f489f02cdf7fab09a58d648d1e287f60284d851e843fb08ee4eda5c53776b9a06b7c32d22c493cabf07a820540135caec94fdf9e4f6cc09a57b419785140bf462ba0da2649a98bffe363ba5eca5ed8535276394154a03d26c0011c72a4c0d01647e56371a08052c680ca4527c22ac32429ca54c787024ead7100a44ebb2dcf56531c5d9bfe9dda3db1d1e6eac60baf74248373e0b9d8f9bf8fb588dd95e8549e528eda83be7f960aa1802eedf279a3a4c0cab3a8ae6adedd6106fb285017b09b1a1049972e81f534e5ea16ddd1a0c307c064d50b9459d6491c8daeb4f4f17f9e65ad5fd36679a5623f47b83c78b0228dd5eb9968aaa24d682bd8f7fd66eab6c6a52bbd7e8c6a372da8a765fd9a24307ef6a113a41f7b6e6e317c56bfe9fbc1b0f6681ff3f4cf072b836c2029bec9c456604f0253890b8be90204d1fac74b1b5a3a620617c719ade68d605135fa3e952a30c2cd39213a46e64af5cc6cb2eaa2603bff7a656437ee90148d0c2131207326a96a416e9790d4883b951761615142326e7f4fe93666d6dde4cf992ed16a89188d0b8d6d8f97b3e7bfbf8b01ab8eac63a5b9256ec82d3fe05684cc9c7df16d49cbf2695a2ec7226d41705e121b7c994f44f427f2eb8f1227478ab00ff8b98553d9c4fac5c6e7471e2476e176ed1944f861fa97e4f6dcec0005c533e56658d23616b3cc94fb228ef10b9cd6a04685fa2ade43501ca03866b4ff19f61958b6eb9086ae414ac9cd2cb05ddadbbc124a62271a3887c894cf2dc460bae31403e60a366e91fddf42d43e5d05660db81e5b58cbf229c71a4ad2bbd03fa236b098066ef8df4d593f4b362a2bd8baf6d0e8ebff89b421eeacb9cc43eb74ae82ea94314acaadc01efea415c5d27db9534497eac1dfa3dc3d6db7d43cc503be9a5775bd000b824e1e9f55f7002e92fd47eb6e91b1b5b96731d6161a96964b791e555f83e2ffdadffb7a0f065300e272f6705c4e07b42f2f640ada808ea3388698203ddea0c31a98bcaef5393d8328ebd96b3cc810d96f3660f963a125f8f00b60a8819c8e687cd4db51bdf09b7cb58ea2c8cebaf624c5f0378b14922c30713989c819e929baf591ebfe867e15c7bbfb414731095205a0d04670cbbe01119a74b7ac5dd651238cf0441b226b184a520f6ed80583856fe3ce646359e7367ea4bda2866941e92eb78b9271bd973be7a836a09c9a4ecd14249dcce5aa8263d2d23db791f4196af52bc7c50e28273a7568cb6d6be556e24133cdb412ceac40483f9ee3110e5b41222ea52fc67943bd3fcad5b961a390173a6e8965e6b802dd8e8ee332422a04bbe17787a152115c01e08c17e6d14001e41eff54445fb1fd96678def932891d074b11f709efb9baf09ca3850e7f9727f110f426a82f215cc172153c11aaad6c6e09de5fca3ef901788e4b87b0c0b372e003322a142a37ffdd1f201812b20ba3b04c2172e4b655236006ea1d04ca544b3396daf1c84d68e99a65d526b0a3a00b65c2bc99b950c5713dd25877ceaa5c6a1cfb21d24d43bf80f6b1e0f85f4d530d7b99b23af636086e8d9421a7b5ee80c636cc77107a832aa234c3b009f50f85386df53c266e795b2d632c1acadfacadb5641842eb28f5add56ec9b2f4cdf7152ef8c51d230adf6e70d0a46ae4d57026d6627344bf5c07a983513fce1008551681188f788c7c8b11ce32eb54885b41b2e298e6f0265335a1f5548758e0f027a028bcc92df1d52e97576d01421e0332b1353af188d5cde56cfd7740c88d3a85cb7728b945e600ad7e915fba91f9bad883c887b9a0516d3ba0a26aed45ed6d16c8f192ddb131d1c52aad2fdb365f7f2876ec1f034f27b3825e5e0d938f439f08984e57654066bcb7a10cb1cce492bd746021090cc622a94f9ae7d0bcd31e8246b4254094b87f976912b938b20adb24ec38f27fc7e8c5a3a77f2b3184a7ba44378d2351e61585d062eb1c0eb073641e68101a58b802309d6b354b3e8cd35645a57a12d7acd7473ceb1c6f6a03eab9d24e4f4d75f701f379406de1d8baf0451d4c0435694debfdd677e11d31cbc33819c209f3525ad9554ac733380b500f30016a834981fb936c8745c825acab140fc7ae8d1e5ccff5f93302096b6bf0fb304f2428655"}) (async)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000001340)={'batadv0\x00'}) (async, rerun: 32)
r5 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 32)
sendmsg$can_raw(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)=@canfd={{0x2, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "eeab1289dc33630995f4b8be885ee04628ed709063d6ad0de2ae75c9051924103761c4493df45b9a43882bedca9cf58ffc868ca1d8d208ff94e914add7c08dae"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) (async)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000001480)={0x87, @empty, 0x4e23, 0x1, 'nq\x00', 0x10, 0x0, 0x45}, 0x2c) (async, rerun: 64)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f00000014c0)={0x3, 0x3fffc, 0x0, 0x3, 0x4, 0x0, [{0x8000000000000000, 0xc00000000000, 0xffffffffffff0404, '\x00', 0x1000}, {0xffffffffffffffff, 0x2, 0x8, '\x00', 0x81}, {0x9d16, 0x3ff, 0x5, '\x00', 0x2183}, {0x6, 0x0, 0x6, '\x00', 0x800}]}) (async, rerun: 64)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000015c0)={<r7=>r6, 0x2, 0x2, 0x90d})
sendmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f0000001600)=@phonet={0x23, 0x6f, 0x1b, 0x9}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)="5fe426676a4a877ef7c82a337fb0b3c4abd2ff0a596f8b4c7503bc679168dada5a4c52c2631263027cb82cfede5bfa8ace0702db4a6eda0b1542117763ec96c1d28d65445e", 0x45}, {&(0x7f0000001700)="9531ffadf1e92f3e13323477c708456d1e794491c13a78e94753aca197210462a437ce56d6c4136935b94f00bf30cb4ab73d8d499f3bfc498ea969bd7adb8732d282235c896d59a8e45b0970ee25eaa2a31fd49d35ccb184e20411c192c4d59090693a65ab7ba3d8a9043009605e18ab8a4ce4b8be8edc80d3c189dc", 0x7c}], 0x2}}], 0x1, 0x20000050) (async)
sendto(r1, &(0x7f0000001800)="7b9e5bf581d62f52f8f604422d18f8adf54ef3c6d76c87031752e4a518b7243dff6d6c06b9d294199ab4f3276e5a63625a1e32982a9d6d4c55b7cb41f79460a63ef43999d5c3fb0d9649484ecb2590fe2eaa312e5e6ad7e1d9f49a351b629765ccd9d69ee8a87cf0c01da394f60517b8108f5498805e19f0ccd885da293cda67861b670717f670eca37e97d1293fdeff1236da7000391b5c0370410976c010", 0x9f, 0x4c091, &(0x7f00000018c0)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'nr0\x00'}}, 0x80) (async)
ioctl$IMGETCOUNT(r7, 0x80044943, &(0x7f0000001940))
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001980)={'vcan0\x00', <r9=>0x0})
sendmsg$can_j1939(r8, &(0x7f0000001b00)={&(0x7f00000019c0)={0x1d, r9, 0x2, {0x1}, 0xff}, 0x18, &(0x7f0000001ac0)={&(0x7f0000001a00)="ccf41594700cd3f45e7ebc36b0e842e4c3edca53fec43fd035b91c8ddd5f832809d9efbe1f3e6bf1544d641d8f4d7fe52c1244ee8eb574e792e020df3f5960f5b8532d1cde5aca91f9bd208206cc3165f2d240edae9a78b44e7426f687cc5d88fa76e55160415cbfd3445730a807b429f46163a777624ad8abdde0433f5836230c582105059b06cc1acbc3c970f7fcee221e9f429b66a39eb54a5b856e1e6683a4", 0xa1}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001b40), &(0x7f0000001b80)=0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000001f40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f00)={&(0x7f0000001c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_USERDATA={0x81, 0xd, 0x1, 0x0, "c6019694e202494b2d98f624771aa0b9c844fad4a0a1dec6d060ba404ab948ae9d714598d2fc1f213c5f62b99c9e07a3584517ec37337c749ec941143dde431bdf429aa140e0a78a10f8e667fd32824bc9e6ce716238ff23cd79c23556e8e3063475932d9f7b155ec2bb11bb9fa7a6744ca0abf54c0e87c05de941092a"}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xc}]}, @NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5a}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2e0}, 0x1, 0x0, 0x0, 0x885}, 0x4000000)

1.847947447s ago: executing program 3 (id=433):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000200), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}}, 0x0)
socket$kcm(0x29, 0x6, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x60, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x2000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "85"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x40044)

1.604191601s ago: executing program 1 (id=434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0xfffff000) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
shutdown(r0, 0x1) (async)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000280)=0x5, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa000000000000691034000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1.508519181s ago: executing program 1 (id=435):
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
getsockopt$inet_int(r1, 0x0, 0x2d, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

1.243494365s ago: executing program 1 (id=436):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) (async)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0xffff, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x8014) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x40000) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket(0x1e, 0x805, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x10f, 0x20, 0x0, 0x7f) (async)
ioctl$SIOCAX25DELFWD(r7, 0x89eb, &(0x7f0000000000)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

1.242657201s ago: executing program 2 (id=437):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0xd, 0x100, 0xffffffffffffffff, 0x9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000401800b0001006e756d67656e0000240002980800030300000000080001400000000208"], 0x8c}}, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000140)="39020cdfddd50e187659d7b41bf2", 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4e22, 0x40000000, @loopback, 0x13}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r4, 0x0, 0xf, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(r8, 0x40107446, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000200000000120000002000000008618eb7090000008500000005"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r10}, 0x18)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
write$cgroup_int(r11, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20000000000000c1, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)

1.167208537s ago: executing program 3 (id=438):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xac}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ead8976}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94)

720.524335ms ago: executing program 0 (id=440):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x58}}, 0x0)

719.969106ms ago: executing program 4 (id=441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r2], 0x24}}, 0x8) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) (async)
r5 = socket(0x11, 0x3, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000300000000e0001006e657464657673696d00005db95767ada3bc2f000f0002006e657464657673696d3000000800030001000000"], 0x3c}}, 0x48800) (async)
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async, rerun: 32)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (rerun: 32)
sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES16=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r11 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESDEC=r11, @ANYBLOB="74ca84af7a003f46a2f95f9852b2e9c3fca95d10459abbd28dae7457d33cb95a950380e21d3320b5a3d3f04267e09a7eea566f40ba8a047a7c4bc77ae9a4eeec108c9959b0fc03f1c9734a54bc47538c767a50ecf00cb2b68a58c944a138a4cea2f7566f", @ANYRES64=r2, @ANYRES64=r12], 0x48}}, 0x20000000) (async)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r13, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0xffffffffffffff71)
setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r13, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r13, &(0x7f0000004d00), 0x0, 0x20008f50) (async)
setsockopt$sock_int(r13, 0x1, 0xb, 0x0, 0x0) (async)
setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000440)=0x7, 0x4) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0xffffffffffffffb7, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x24, 0x66, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r12, {0xfff3, 0xfff1}, {0x3, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x24040890)

601.476538ms ago: executing program 4 (id=442):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket(0x2, 0x3, 0xff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="00000000000000000000ffffac1414bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000ffffffffffffff7f00000000003000000902008000800000000000000000000001800000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000039640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004000000200017000100000025bd700027bd70002abd700026bd700000000080c60000000a0020", @ANYBLOB="6f3402b288067eeb822ee9998948a790d444de", @ANYRES16=r0], 0x124}, 0x1, 0x0, 0x0, 0xc804}, 0x24040000)

587.984105ms ago: executing program 3 (id=443):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {&(0x7f0000000280)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b052a3105e6fa49014cb2ce5f295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74fd4450e8ff88199f35a0c759aff55639834dc4c945dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb4717ee61e5be16f4c7701cc671d25", 0xf6}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f201f060fe2bafbdf16a0ace97ea54e624ac84ccc7fc7f393c4ece5273773faa8c63f157edf2a0d41a7c6340c630b50b30c42d156fa375b30d31bf6a611fd29e60958434b6f597e0bb9ec6731ad3c9b2ee1dc975565bc1d534aae4c0693aebccc5caa31bf5b1c194f52f63257b81e71d68ab2fd", 0xfeed}, {&(0x7f00000001c0)="f3ba9e8346ddfd46f5ba7fbc25c6aed71214dcfaa44b98dfdbc07b1c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec984cc37874a28db922c628a534fb91191d25f636a589", 0x59}, {&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a4d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3531f795bf2f172d6fb23f3549b9734f2eef416b7698a93335a94b8cda61325b62cda1807b03675c6347b431f2d71baa6bc59e9047069153d70ffba20956e58971501c2d9f299fdfa3a38fa73a5da43ba2506d8704592ee5c19ca0d2075ddc9313d8bd2202a89dae6a689d3900818f892f3f17957cd53023399810da5655e0fd0f0f394c9a8bedc", 0xca}, {&(0x7f0000000500)="0f15ce0e2a894e2afb7a77dc4a4ec84b8109b2c95397d40adb9d5e8df8fd9a3167faa56aa764e61ba1a6cc8fd041bb89bee6d17105e169dd8d68d5b79eb5958574299b9035fbed2942a75e731b7571c29a760623e725792c", 0x58}, {&(0x7f0000000580)="2ee97d629c7e44f81166cb7f6ff136f276b93d54b74333781a4c68225b61bae187918e", 0x23}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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", 0xfe68}, {&(0x7f00000005c0)="23c8f8e7bb8d0ba65b2d53e1b98cbeae874b769afbb97c7f46c8969c2772e02e5d80add492fdba14dee6fbc6f2cdc93b86fb8199b61a03a801c262c343c6bbf5856dc1d3c7dd7eeb196ddcf13456cff281c807953060a280f32e718b432d2031c73f6ca657519e04cf1b39497f7d785fff277a2a5612abf6c830c8b72579207ac0dda5", 0x83}, {&(0x7f0000000780)="ca3fcea77620b98213d60f78fe2e503ccb6662d189d191886f4fe8db857b07f574782f7bb888b8333220361011eec01501a2772a0392eaa06aca70b89b89f7ffd6ad7838ab27f246f9b78fa61a5ee5", 0x4f}], 0xb, 0x8)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x4, 0x6, 0x355de01d12ee3ab7, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x4, 0x6, 0x355de01d12ee3ab7, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv4_getrule={0x0, 0x22, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x3, 0x82, 0x0, 0x0, 0x0, 0xa}, ["", ""]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

383.230195ms ago: executing program 0 (id=444):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000eb0000000b5def00a4ccdf977a5400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000000bca900000000000035090100000000009500000000000000b509020002000000739a04fe00000000b509000085b56f000020000000000000bf8700000000000007080000f8ffffffbfa400003b3e127ccf1b4b0000000007040000f0ffffffb702000008000000182200"/132, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

381.603931ms ago: executing program 4 (id=445):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x2a, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21, 0x0, 0x2005}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d687bf, 0x1}}, @common=@unspec=@quota={{0x38}, {0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x32ad, 0x4)

370.979736ms ago: executing program 3 (id=446):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x6, 0x4, 0x1, 0x6, 0x20, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x8b}]}}, {0x14, 0x1, 0x0, @local}}}, 0x2e)

355.731083ms ago: executing program 4 (id=447):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000080)=""/215, &(0x7f0000000000)=0xd7)

244.319513ms ago: executing program 0 (id=448):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffd}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
listen(r0, 0x0)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r5=>0x0})
r6 = getpid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r5, @ANYBLOB="0c009900090000950000000008005200", @ANYRES32=r6], 0x30}}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20004004)
socket(0x8, 0x1, 0x8000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x880)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r8, @ANYBLOB="0000000007000000c3000940f100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94)

241.408184ms ago: executing program 4 (id=449):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) (async, rerun: 32)
recvmsg$can_raw(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) (async, rerun: 32)
recvmsg$qrtr(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/44, 0x2c}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x140}, 0x38, 0x40010042)

33.384535ms ago: executing program 3 (id=450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000006110280000000000d400e100100001009500000c00000000ba4175a21462887a56cc6ede5452abe42f5ef205f098a9967ad42247a90a2478ea8012dd29da6ba3ff4c"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001800010000000000f8dbdf25020000000001c80900270000060015000200000014001680100008800c00018005"], 0x38}}, 0x0)

0s ago: executing program 4 (id=451):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5551, 0x2, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8)
close(0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts.
[   84.464438][ T5815] cgroup: Unknown subsys name 'net'
[   84.599825][ T5815] cgroup: Unknown subsys name 'cpuset'
[   84.609212][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.271761][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   89.007290][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   89.016418][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   89.024266][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   89.032735][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   89.040908][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.077181][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.096154][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.105783][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.114333][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.124119][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.133869][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.143440][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.153086][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.160817][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.194305][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.210483][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.227190][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.236423][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.247609][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.267095][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.280925][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.296284][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.304492][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.321499][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.331317][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.670774][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   89.930386][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.938457][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.946809][ T5825] bridge_slave_0: entered allmulticast mode
[   89.954941][ T5825] bridge_slave_0: entered promiscuous mode
[   89.966538][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.973910][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.981275][ T5825] bridge_slave_1: entered allmulticast mode
[   89.988966][ T5825] bridge_slave_1: entered promiscuous mode
[   90.017906][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   90.134638][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.169145][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   90.203306][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.334011][ T5825] team0: Port device team_slave_0 added
[   90.420227][ T5825] team0: Port device team_slave_1 added
[   90.432224][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.440201][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.447648][ T5834] bridge_slave_0: entered allmulticast mode
[   90.455024][ T5834] bridge_slave_0: entered promiscuous mode
[   90.462895][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   90.500299][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.507710][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.514940][ T5834] bridge_slave_1: entered allmulticast mode
[   90.522507][ T5834] bridge_slave_1: entered promiscuous mode
[   90.608198][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   90.620392][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.627871][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.653909][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.666093][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.673259][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.680701][ T5829] bridge_slave_0: entered allmulticast mode
[   90.688167][ T5829] bridge_slave_0: entered promiscuous mode
[   90.698593][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.733973][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.741066][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.767633][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.779573][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.786875][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.794077][ T5829] bridge_slave_1: entered allmulticast mode
[   90.801577][ T5829] bridge_slave_1: entered promiscuous mode
[   90.810777][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.961379][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.973599][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.985218][ T5834] team0: Port device team_slave_0 added
[   91.009329][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.016659][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.023993][ T5831] bridge_slave_0: entered allmulticast mode
[   91.031767][ T5831] bridge_slave_0: entered promiscuous mode
[   91.053811][ T5834] team0: Port device team_slave_1 added
[   91.076759][ T5842] Bluetooth: hci0: command tx timeout
[   91.087834][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.095007][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.102859][ T5831] bridge_slave_1: entered allmulticast mode
[   91.110517][ T5831] bridge_slave_1: entered promiscuous mode
[   91.148408][ T5825] hsr_slave_0: entered promiscuous mode
[   91.155015][ T5825] hsr_slave_1: entered promiscuous mode
[   91.181447][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.189811][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.197306][ T5830] bridge_slave_0: entered allmulticast mode
[   91.204832][ T5830] bridge_slave_0: entered promiscuous mode
[   91.247248][ T5829] team0: Port device team_slave_0 added
[   91.268629][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.275624][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.301770][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.313887][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.322285][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.323515][ T5842] Bluetooth: hci1: command tx timeout
[   91.332789][ T5836] Bluetooth: hci3: command tx timeout
[   91.345274][ T5830] bridge_slave_1: entered allmulticast mode
[   91.353135][ T5830] bridge_slave_1: entered promiscuous mode
[   91.363193][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.375455][ T5829] team0: Port device team_slave_1 added
[   91.395517][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.402800][ T5842] Bluetooth: hci4: command tx timeout
[   91.402809][ T5836] Bluetooth: hci2: command tx timeout
[   91.403164][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.440077][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.478022][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.592132][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.615720][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.623797][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.650968][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.683562][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.708184][ T5831] team0: Port device team_slave_0 added
[   91.737320][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.744299][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.772197][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.809008][ T5834] hsr_slave_0: entered promiscuous mode
[   91.815487][ T5834] hsr_slave_1: entered promiscuous mode
[   91.822137][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   91.828092][ T5834] Cannot create hsr debugfs directory
[   91.844140][ T5831] team0: Port device team_slave_1 added
[   91.851919][ T5830] team0: Port device team_slave_0 added
[   91.861819][ T5830] team0: Port device team_slave_1 added
[   91.952858][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.960264][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.986685][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.010853][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.018102][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.044417][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.076126][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.083115][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.109271][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.133628][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.140968][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.167472][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.211234][ T5829] hsr_slave_0: entered promiscuous mode
[   92.217883][ T5829] hsr_slave_1: entered promiscuous mode
[   92.224062][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   92.229980][ T5829] Cannot create hsr debugfs directory
[   92.403966][ T5830] hsr_slave_0: entered promiscuous mode
[   92.410496][ T5830] hsr_slave_1: entered promiscuous mode
[   92.417525][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   92.423282][ T5830] Cannot create hsr debugfs directory
[   92.482849][ T5831] hsr_slave_0: entered promiscuous mode
[   92.489562][ T5831] hsr_slave_1: entered promiscuous mode
[   92.496990][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   92.502767][ T5831] Cannot create hsr debugfs directory
[   92.642548][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.696554][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.738312][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.778965][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.881779][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.894026][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.909001][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.963847][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.061226][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.081028][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.110399][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.143925][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.156230][ T5842] Bluetooth: hci0: command tx timeout
[   93.203771][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.243304][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.274319][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.300572][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.384292][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.396546][ T5842] Bluetooth: hci3: command tx timeout
[   93.397168][ T5836] Bluetooth: hci1: command tx timeout
[   93.410059][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.424049][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.434848][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.452810][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.476632][ T5836] Bluetooth: hci2: command tx timeout
[   93.476647][ T5842] Bluetooth: hci4: command tx timeout
[   93.504957][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   93.535616][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.545119][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.552575][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.585784][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.592977][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.639006][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   93.679951][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.709983][  T996] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.717193][  T996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.738849][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.746047][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.773007][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   93.799715][  T996] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.807089][  T996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.827062][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.860887][  T996] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.868084][  T996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.905161][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.026873][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   94.100192][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.107419][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.143322][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.150522][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.209211][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.238200][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.362966][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   94.441331][  T996] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.448526][  T996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.498928][  T996] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.506128][  T996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.539084][ T5825] veth0_vlan: entered promiscuous mode
[   94.585368][ T5825] veth1_vlan: entered promiscuous mode
[   94.618600][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.640319][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.771239][ T5825] veth0_macvtap: entered promiscuous mode
[   94.823057][ T5825] veth1_macvtap: entered promiscuous mode
[   94.875163][ T5829] veth0_vlan: entered promiscuous mode
[   94.915261][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.952956][ T5829] veth1_vlan: entered promiscuous mode
[   94.979732][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.007330][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.043848][  T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.078358][  T996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.142161][  T996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.154154][  T996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.231097][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.239964][ T5836] Bluetooth: hci0: command tx timeout
[   95.294248][ T5831] veth0_vlan: entered promiscuous mode
[   95.305653][ T5829] veth0_macvtap: entered promiscuous mode
[   95.316946][ T5829] veth1_macvtap: entered promiscuous mode
[   95.331118][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.341885][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.374714][ T5831] veth1_vlan: entered promiscuous mode
[   95.415506][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.425104][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.426272][ T5834] veth0_vlan: entered promiscuous mode
[   95.453543][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.466685][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.477008][ T5836] Bluetooth: hci3: command tx timeout
[   95.477065][ T5842] Bluetooth: hci1: command tx timeout
[   95.526913][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.536997][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.556933][ T5842] Bluetooth: hci4: command tx timeout
[   95.559059][ T5836] Bluetooth: hci2: command tx timeout
[   95.567461][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.590425][ T5834] veth1_vlan: entered promiscuous mode
[   95.602405][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.622058][ T5830] veth0_vlan: entered promiscuous mode
[   95.638087][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.719187][ T5831] veth0_macvtap: entered promiscuous mode
[   95.752295][ T5830] veth1_vlan: entered promiscuous mode
[   95.772281][ T5831] veth1_macvtap: entered promiscuous mode
[   95.805105][ T5834] veth0_macvtap: entered promiscuous mode
[   95.845285][ T5834] veth1_macvtap: entered promiscuous mode
[   95.896550][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.905288][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.960523][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.962095][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.977817][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.984824][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.997284][ T5951] tipc: Started in network mode
[   96.002403][ T5951] tipc: Node identity 36cdc1ca4ddd, cluster identity 4711
[   96.010656][ T5951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.025605][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.039520][ T5952] syzkaller0: entered promiscuous mode
[   96.046068][ T5952] syzkaller0: entered allmulticast mode
[   96.069005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.083015][ T5951] tipc: Resetting bearer <eth:syzkaller0>
[   96.119175][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.128793][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.144376][ T5830] veth0_macvtap: entered promiscuous mode
[   96.155951][ T5950] tipc: Resetting bearer <eth:syzkaller0>
[   96.170881][ T5950] tipc: Disabling bearer <eth:syzkaller0>
[   96.205334][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.267372][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.289892][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.318137][ T5830] veth1_macvtap: entered promiscuous mode
[   96.351151][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.365495][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.403160][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.418182][ T5954] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   96.478922][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.529556][ T5958] syzkaller0: entered promiscuous mode
[   96.535180][ T5958] syzkaller0: entered allmulticast mode
[   96.558327][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.566782][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.594734][ T5958] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.608338][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.681508][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.691356][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.702753][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.715722][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.742752][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.754792][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.792709][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.804018][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.933130][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.952556][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.970069][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   97.023095][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[   97.103978][   T24] cfg80211: failed to load regulatory.db
[   97.154480][ T5963] Bluetooth: MGMT ver 1.23
[   97.160734][ T5962] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   97.211452][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.237481][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.317039][ T5836] Bluetooth: hci0: command tx timeout
[   97.332562][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.379616][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.415606][ T5968] dummy0: mtu less than device minimum
[   97.557024][ T5836] Bluetooth: hci3: command tx timeout
[   97.557921][ T5842] Bluetooth: hci1: command tx timeout
[   97.638103][ T5842] Bluetooth: hci2: command tx timeout
[   97.643293][ T5836] Bluetooth: hci4: command tx timeout
[   97.887043][ T5991] Bluetooth: MGMT ver 1.23
[   97.942056][ T5988] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   98.181187][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.397017][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   98.441286][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   98.535290][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'.
[   98.537149][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   98.545419][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.562980][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   98.599034][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.611854][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.648613][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.988264][ T6020] netlink: 180 bytes leftover after parsing attributes in process `syz.4.21'.
[   99.153316][ T6030] netlink: 256 bytes leftover after parsing attributes in process `syz.3.22'.
[   99.754548][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'.
[   99.778261][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.221392][ T6074] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  100.405429][ T6081] ip6t_srh: unknown srh match flags  C404
[  100.504198][ T6083] Cannot find set identified by id 0 to match
[  100.772872][ T6095] Zero length message leads to an empty skb
[  100.912889][ T6093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.141998][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.207803][ T6093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.230019][ T5903] IPVS: starting estimator thread 0...
[  101.346098][ T6113] IPVS: using max 26 ests per chain, 62400 per kthread
[  101.355475][ T6093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.508951][ T6124] netlink: 'syz.3.45': attribute type 23 has an invalid length.
[  101.513192][ T6093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.703898][ T6127] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[  101.755439][  T996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.855267][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.886609][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.943699][  T996] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.978922][ T6139] __nla_validate_parse: 9 callbacks suppressed
[  101.978941][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'.
[  103.005486][ T6191] Bluetooth: MGMT ver 1.23
[  103.023210][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.62'.
[  103.117669][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.62'.
[  103.313582][ T6191] geneve2: entered promiscuous mode
[  103.765706][ T6215] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[  103.865722][ T6221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.72'.
[  103.876172][ T5836] Bluetooth: hci0: command tx timeout
[  103.915761][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'.
[  103.967539][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'.
[  103.976736][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'.
[  104.056678][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'.
[  104.060133][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'.
[  104.088183][   T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.152906][   T37] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.161022][ T5903] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.259719][ T6233] netlink: 56 bytes leftover after parsing attributes in process `syz.0.74'.
[  104.706228][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.076606][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.161261][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.212948][ T6270] bond0: (slave rose0): Enslaving as an active interface with an up link
[  105.989331][ T6316] warning: `syz.3.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  106.235743][ T6326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.411327][ T6331] hsr_slave_0: left promiscuous mode
[  106.467886][ T6331] hsr_slave_1: left promiscuous mode
[  106.517001][ T6337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.584379][ T6337] bridge1: entered allmulticast mode
[  106.776972][ T6342] ªªªªªª: renamed from vlan0 (while UP)
[  106.788534][ T6345] x_tables: duplicate underflow at hook 2
[  107.053471][ T6348] macvlan2: entered promiscuous mode
[  107.058980][ T6348] macvlan2: entered allmulticast mode
[  107.201626][ T6359] trusted_key: syz.1.104 sent an empty control message without MSG_MORE.
[  107.607125][ T6384] netlink: 'syz.2.109': attribute type 16 has an invalid length.
[  107.646069][ T6384] __nla_validate_parse: 6 callbacks suppressed
[  107.646088][ T6384] netlink: 3834 bytes leftover after parsing attributes in process `syz.2.109'.
[  107.688041][ T6388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  107.730401][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[  107.799157][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'.
[  107.860886][  T996] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.905936][  T996] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.212359][  T996] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.255103][  T996] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.599446][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.664391][ T6427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.004792][ T6449] netlink: 44 bytes leftover after parsing attributes in process `syz.1.122'.
[  109.046371][ T6449] netlink: 43 bytes leftover after parsing attributes in process `syz.1.122'.
[  109.067999][ T6449] netlink: 'syz.1.122': attribute type 6 has an invalid length.
[  109.122660][ T6449] netlink: 43 bytes leftover after parsing attributes in process `syz.1.122'.
[  109.176184][ T6425] syzkaller0: entered promiscuous mode
[  109.192828][ T6425] syzkaller0: entered allmulticast mode
[  109.695527][ T6488] netlink: 'syz.1.126': attribute type 10 has an invalid length.
[  110.674818][ T6476] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  110.698571][ T6482] bridge_slave_0: left allmulticast mode
[  110.704486][ T6482] bridge_slave_0: left promiscuous mode
[  110.711317][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.725637][ T6482] bridge_slave_1: left allmulticast mode
[  110.731666][ T6482] bridge_slave_1: left promiscuous mode
[  110.740293][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.752407][ T6482] bond0: (slave bond_slave_0): Releasing backup interface
[  110.765153][ T6482] bond0: (slave bond_slave_1): Releasing backup interface
[  110.781905][ T6482] team0: Port device team_slave_0 removed
[  110.794457][ T6482] team0: Port device team_slave_1 removed
[  110.801496][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.809438][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.818707][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.826376][ T6482] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.835528][ T6482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  110.868800][ T6488] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  110.890154][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.905135][ T6488] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  111.193793][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.130'.
[  111.831025][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'.
[  111.852982][ T6525] syzkaller0: entered promiscuous mode
[  111.881639][ T6525] syzkaller0: entered allmulticast mode
[  113.742528][ T6541] batadv_slave_1: entered promiscuous mode
[  113.748741][ T6541] batadv_slave_1: left promiscuous mode
[  113.766090][ T6562] C: renamed from lo (while UP)
[  113.798498][ T6562] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  113.992964][ T6597] netlink: 88 bytes leftover after parsing attributes in process `syz.2.143'.
[  114.122688][ T6603] wg1 speed is unknown, defaulting to 1000
[  114.155944][ T6603] wg1 speed is unknown, defaulting to 1000
[  114.164266][ T6603] wg1 speed is unknown, defaulting to 1000
[  114.212407][ T6603] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  114.242149][ T6603] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  114.310065][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'.
[  114.352700][ T6616] xt_TCPMSS: Only works on TCP SYN packets
[  115.342886][ T6608] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  115.359324][ T6603] wg1 speed is unknown, defaulting to 1000
[  115.383506][ T6603] wg1 speed is unknown, defaulting to 1000
[  115.429766][ T6603] wg1 speed is unknown, defaulting to 1000
[  115.491522][ T6603] wg1 speed is unknown, defaulting to 1000
[  115.534988][ T6603] wg1 speed is unknown, defaulting to 1000
[  115.595501][ T6624] tipc: Started in network mode
[  115.627654][ T6624] tipc: Node identity ce0a738b1658, cluster identity 4711
[  115.652212][ T6624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.679595][ T6627] syz_tun: entered allmulticast mode
[  115.691603][ T6631] syzkaller0: entered promiscuous mode
[  115.725404][ T6631] syzkaller0: entered allmulticast mode
[  115.765039][ T6626] syz_tun: left allmulticast mode
[  115.846628][ T6624] tipc: Resetting bearer <eth:syzkaller0>
[  115.919108][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[  116.037185][ T6623] tipc: Disabling bearer <eth:syzkaller0>
[  116.188059][ T6655] syz_tun: entered allmulticast mode
[  116.212168][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'.
[  116.377008][ T6655] syz_tun (unregistering): left allmulticast mode
[  116.498512][ T6673] syzkaller1: entered promiscuous mode
[  116.510262][ T6673] syzkaller1: entered allmulticast mode
[  116.916043][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.068832][ T6692] sctp: [Deprecated]: syz.2.166 (pid 6692) Use of int in maxseg socket option.
[  117.068832][ T6692] Use struct sctp_assoc_value instead
[  117.274626][ T6700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.168'.
[  117.704205][ T6716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'.
[  117.720729][ T6716] netlink: 64 bytes leftover after parsing attributes in process `syz.1.171'.
[  117.810912][ T6714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.960801][ T6714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.084679][ T6714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.162848][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'.
[  118.184574][ T6714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.328255][ T6732] netlink: 'syz.2.174': attribute type 4 has an invalid length.
[  118.342967][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.351734][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.400022][ T1149] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.438441][ T1149] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.447326][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'.
[  119.766380][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.776746][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  120.250859][ T6774] bond1 (unregistering): Released all slaves
[  120.629651][ T6796] netlink: 3 bytes leftover after parsing attributes in process `syz.1.192'.
[  120.940910][ T6796] batadv1: entered promiscuous mode
[  120.946557][ T6796] batadv1: entered allmulticast mode
[  121.557206][ T6826] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  121.618251][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[  121.650315][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'.
[  121.926087][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  121.933632][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  122.024701][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'.
[  122.076887][ T6843] netlink: 'syz.3.200': attribute type 13 has an invalid length.
[  122.328383][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.336270][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.469547][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.487387][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.516397][ T5842] Bluetooth: hci4: command 0x0405 tx timeout
[  122.830933][   T37] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.865932][   T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.895871][   T37] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.948073][ T6861] netlink: 'syz.0.203': attribute type 10 has an invalid length.
[  122.951759][   T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.976096][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.203'.
[  123.036553][ T6861] batadv0: entered promiscuous mode
[  123.049309][ T6861] batadv0: entered allmulticast mode
[  123.064490][ T6861] bridge0: port 3(batadv0) entered blocking state
[  123.079773][ T6861] bridge0: port 3(batadv0) entered disabled state
[  123.099365][ T6861] bridge0: port 3(batadv0) entered blocking state
[  123.106070][ T6861] bridge0: port 3(batadv0) entered forwarding state
[  123.162157][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'.
[  123.235341][   T37] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.285858][   T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.288183][ T6874] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[  123.294820][   T37] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.321846][ T6881] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20004
[  123.397390][   T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.477304][ T6863] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  123.487273][ T6863] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  124.855028][ T6938] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  125.054746][ T6939] bridge1: entered allmulticast mode
[  125.428839][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'.
[  125.544457][ T6968] netlink: 'syz.4.225': attribute type 1 has an invalid length.
[  125.556415][ T6968] netlink: 'syz.4.225': attribute type 2 has an invalid length.
[  125.874665][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.228'.
[  125.915193][ T6979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.930837][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'.
[  125.953460][ T6975] netlink: 'syz.4.228': attribute type 7 has an invalid length.
[  125.977484][ T6975] netlink: 'syz.4.228': attribute type 8 has an invalid length.
[  126.009628][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'.
[  126.051840][ T6975] veth1_to_bridge: entered promiscuous mode
[  126.063493][ T6975] gretap0: entered promiscuous mode
[  126.073597][ T6975] veth1_to_bridge: left promiscuous mode
[  126.089208][ T6975] gretap0: left promiscuous mode
[  126.131688][ T6988] netlink: 'syz.3.230': attribute type 1 has an invalid length.
[  126.236760][ T6988] netlink: 'syz.3.230': attribute type 2 has an invalid length.
[  126.671180][ T7004] wg1 speed is unknown, defaulting to 1000
[  127.311433][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[  127.360641][ T7038] netlink: 'syz.4.239': attribute type 1 has an invalid length.
[  127.405875][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'.
[  127.531890][ T7049] netlink: 'syz.1.240': attribute type 13 has an invalid length.
[  128.782037][   T30] audit: type=1800 audit(1760946608.244:2): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.245" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  128.807296][ T7058] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  128.817151][ T7058] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  128.827080][ T7058] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.900826][  T938] wg1 speed is unknown, defaulting to 1000
[  128.915991][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.956363][  T938] syz0: Port: 1 Link DOWN
[  128.998098][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.017914][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.041479][ T7053] wg1 speed is unknown, defaulting to 1000
[  129.050213][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.196275][ T7057] wg1 speed is unknown, defaulting to 1000
[  129.197940][ T7107] netlink: 'syz.1.249': attribute type 5 has an invalid length.
[  129.244787][ T7101] tipc: Started in network mode
[  129.251032][ T7101] tipc: Node identity 7af513d6095e, cluster identity 4711
[  129.266484][ T7101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.279999][ T7104] syzkaller0: entered promiscuous mode
[  129.285990][ T7104] syzkaller0: entered allmulticast mode
[  129.502070][ T7104] tipc: Resetting bearer <eth:syzkaller0>
[  129.568135][ T7104] tipc: Disabling bearer <eth:syzkaller0>
[  129.590539][ T7113] netlink: 'syz.2.250': attribute type 12 has an invalid length.
[  129.603974][ T7113] netlink: 148 bytes leftover after parsing attributes in process `syz.2.250'.
[  129.854439][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'.
[  129.870230][ T7129] lo: entered allmulticast mode
[  129.984272][ T7100] ipvlan2: entered promiscuous mode
[  130.087549][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'.
[  130.276612][ T7127] wg1 speed is unknown, defaulting to 1000
[  130.376016][ T7149] veth3: entered promiscuous mode
[  131.034446][ T5916] IPVS: starting estimator thread 0...
[  131.157857][ T7180] IPVS: using max 24 ests per chain, 57600 per kthread
[  131.311699][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.372068][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'.
[  131.388452][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.671654][ T7200] wg1 speed is unknown, defaulting to 1000
[  131.706173][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[  132.376390][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'.
[  132.498533][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[  132.526875][ T7233] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.538933][ T7243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.679312][ T7248] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  132.710811][ T7243] syzkaller0: entered promiscuous mode
[  132.745659][ T7243] syzkaller0: entered allmulticast mode
[  132.898576][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[  132.908607][ T7239] tipc: Resetting bearer <eth:syzkaller0>
[  132.962345][ T7239] tipc: Disabling bearer <eth:syzkaller0>
[  132.986043][ T7261] veth0_to_bond: entered allmulticast mode
[  133.125291][ T7267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'.
[  133.174102][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.282'.
[  133.219125][ T7269] validate_nla: 1 callbacks suppressed
[  133.219144][ T7269] netlink: 'syz.4.283': attribute type 8 has an invalid length.
[  133.278286][ T7271] syzkaller0: entered promiscuous mode
[  133.283826][ T7271] syzkaller0: entered allmulticast mode
[  133.318127][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'.
[  134.499855][ T7295] wg1 speed is unknown, defaulting to 1000
[  134.721031][ T7320] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  134.752783][ T7326] --map-set only usable from mangle table
[  134.886878][ T7330] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  135.206290][ T7338] wg1: entered promiscuous mode
[  135.213547][ T7338] wg1: entered allmulticast mode
[  135.422221][ T7354] netlink: 14 bytes leftover after parsing attributes in process `syz.2.302'.
[  135.426481][ T7356] netlink: 14 bytes leftover after parsing attributes in process `syz.2.302'.
[  135.439416][ T7355] nbd: must specify a size in bytes for the device
[  135.461440][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'.
[  135.586285][ T7354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.597997][ T7354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.610032][ T7354] bond0 (unregistering): Released all slaves
[  135.682616][ T7359] netlink: 'syz.4.303': attribute type 1 has an invalid length.
[  136.088826][ T7375] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20003
[  136.168594][ T7380] netlink: 'syz.4.308': attribute type 10 has an invalid length.
[  136.201673][ T7380] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  136.243761][ T7380] team0: Failed to send options change via netlink (err -105)
[  136.267748][ T7380] team0: Port device dummy0 added
[  136.484024][ T7397] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  136.503835][ T7397] SET target dimension over the limit!
[  137.297466][ T7413] wg1 speed is unknown, defaulting to 1000
[  137.410204][ T7421] wg1 speed is unknown, defaulting to 1000
[  137.608929][ T7435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'.
[  137.955683][ T7444] vlan2: entered promiscuous mode
[  137.990228][ T7444] vlan2: entered allmulticast mode
[  137.995551][ T7444] hsr_slave_1: entered allmulticast mode
[  138.024859][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'.
[  138.044806][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.053538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  138.235764][ T7464] netlink: 156 bytes leftover after parsing attributes in process `syz.2.327'.
[  138.297119][ T7468] netlink: 'syz.4.329': attribute type 10 has an invalid length.
[  138.691259][ T7486] netlink: 364 bytes leftover after parsing attributes in process `syz.2.335'.
[  138.855975][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[  141.994148][ T7503] wg1 speed is unknown, defaulting to 1000
[  142.335735][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[  142.509162][ T7551] syzkaller1: tun_chr_ioctl cmd 1074025677
[  142.515221][ T7551] syzkaller1: Linktype set failed because interface is up
[  142.529831][   T44] syzkaller1: tun_net_xmit 90
[  142.684042][ T7543] can: request_module (can-proto-4) failed.
[  142.717639][ T7562] netlink: 520 bytes leftover after parsing attributes in process `syz.0.351'.
[  142.732803][ T7561] wg1 speed is unknown, defaulting to 1000
[  142.833280][ T7562] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[  142.855282][ T7562] netlink: 'syz.0.351': attribute type 1 has an invalid length.
[  142.880233][ T7571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'.
[  142.929616][   T44] syzkaller1: tun_net_xmit 90
[  143.010046][ T7571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.356'.
[  143.129451][ T7575] netlink: 'syz.3.357': attribute type 1 has an invalid length.
[  143.144730][ T7575] netlink: 'syz.3.357': attribute type 1 has an invalid length.
[  143.172068][ T7575] netlink: 'syz.3.357': attribute type 1 has an invalid length.
[  143.186418][ T7575] netlink: 'syz.3.357': attribute type 4 has an invalid length.
[  143.209664][ T7575] netlink: 188 bytes leftover after parsing attributes in process `syz.3.357'.
[  143.229127][ T7575] NCSI netlink: No device for ifindex 3321692160
[  143.357468][ T7581] !
: renamed from dummy0 (while UP)
[  143.399589][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'.
[  143.444820][ T7582] wg1 speed is unknown, defaulting to 1000
[  143.492375][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[  143.728935][ T7584] netlink: 'syz.3.360': attribute type 16 has an invalid length.
[  143.737314][ T7584] netlink: 'syz.3.360': attribute type 17 has an invalid length.
[  143.843737][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.852971][ T7584] 8021q: adding VLAN 0 to HW filter on device team0
[  143.873527][ T7584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.996672][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[  144.021649][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'.
[  144.181761][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[  144.339600][ T7614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.709845][ T7635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  144.729544][ T7636] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  144.760120][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.082766][ T7656] netlink: 'syz.2.378': attribute type 10 has an invalid length.
[  145.135205][ T7663] netlink: 25 bytes leftover after parsing attributes in process `syz.4.381'.
[  145.202397][ T7663] netlink: 'syz.4.381': attribute type 4 has an invalid length.
[  145.215365][ T7671] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[  145.330210][ T7674] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  145.373908][ T7675] netlink: 'syz.1.382': attribute type 15 has an invalid length.
[  145.483266][ T7678] wg1 speed is unknown, defaulting to 1000
[  145.556199][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.676287][ T1149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.710254][ T1149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.776115][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.866291][ T7689] wg1 speed is unknown, defaulting to 1000
[  147.023168][ T7744] netlink: 'syz.2.393': attribute type 15 has an invalid length.
[  147.343626][ T7773] netlink: 'syz.1.401': attribute type 24 has an invalid length.
[  147.788678][ T7807] Bluetooth: MGMT ver 1.23
[  148.205957][ T7825] __nla_validate_parse: 34 callbacks suppressed
[  148.205978][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'.
[  148.407809][ T7835] x_tables: duplicate underflow at hook 3
[  148.603640][ T7839] netlink: 'syz.1.419': attribute type 10 has an invalid length.
[  149.101293][ T7855] netlink: 'syz.2.425': attribute type 1 has an invalid length.
[  149.140788][ T7855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.425'.
[  149.217909][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[  149.238220][ T7859] bridge0: port 3(batadv0) entered disabled state
[  149.251238][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'.
[  149.364925][ T7859] bridge_slave_1: left allmulticast mode
[  149.370820][ T7859] bridge_slave_1: left promiscuous mode
[  149.386081][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.409287][ T7859] bridge_slave_0: left allmulticast mode
[  149.419306][ T7859] bridge_slave_0: left promiscuous mode
[  149.425674][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.476047][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  149.493863][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.429'.
[  149.696696][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[  149.828687][ T7888] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.876080][ T5842] Bluetooth: hci4: command 0x0405 tx timeout
[  150.085228][ T7875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.430'.
[  150.094504][ T7898] geneve2: entered promiscuous mode
[  150.100080][ T7898] geneve2: entered allmulticast mode
[  150.115710][ T7875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.430'.
[  150.138129][ T7875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.153147][ T7875] syzkaller0: entered promiscuous mode
[  150.159045][ T7875] syzkaller0: entered allmulticast mode
[  150.197466][ T7875] tipc: Resetting bearer <eth:syzkaller0>
[  150.224942][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[  150.296009][ T7874] tipc: Disabling bearer <eth:syzkaller0>
[  150.309673][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.437'.
[  150.343757][ T7906] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.358381][ T7906] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.608258][ T7906] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.648856][ T7906] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.783916][ T7911] netlink: 'syz.3.438': attribute type 12 has an invalid length.
[  150.834296][ T7906] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.861778][ T7906] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.901039][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'.
[  151.021772][ T7906] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.045926][ T7906] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.111875][ T7937] xt_hashlimit: max too large, truncated to 1048576
[  151.278544][   T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.301205][   T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.313168][ T7942] syzkaller1: entered promiscuous mode
[  151.331708][ T7942] syzkaller1: entered allmulticast mode
[  151.442140][ T1149] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.456665][ T1149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.524555][ T1149] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.547370][ T1149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.558553][ T7948] wg1 speed is unknown, defaulting to 1000
[  151.584752][ T7906] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.599183][ T7906] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.617847][ T1149] ==================================================================
[  151.625984][ T1149] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  151.633562][ T1149] Read of size 8 at addr ffff88801bb10ab0 by task kworker/u8:6/1149
[  151.641559][ T1149] 
[  151.643932][ T1149] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  151.643956][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  151.643971][ T1149] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  151.644018][ T1149] Call Trace:
[  151.644028][ T1149]  <TASK>
[  151.644037][ T1149]  dump_stack_lvl+0x189/0x250
[  151.644060][ T1149]  ? __kasan_check_byte+0x12/0x40
[  151.644087][ T1149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.644108][ T1149]  ? lock_release+0x4b/0x3e0
[  151.644139][ T1149]  ? __virt_addr_valid+0x4a5/0x5c0
[  151.644163][ T1149]  print_report+0xca/0x240
[  151.644188][ T1149]  ? __mutex_lock+0x147/0x1350
[  151.644208][ T1149]  kasan_report+0x118/0x150
[  151.644232][ T1149]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.644265][ T1149]  ? __mutex_lock+0x147/0x1350
[  151.644290][ T1149]  __mutex_lock+0x147/0x1350
[  151.644313][ T1149]  ? __mutex_lock+0x5bb/0x1350
[  151.644336][ T1149]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  151.644371][ T1149]  ? __pfx___mutex_lock+0x10/0x10
[  151.644395][ T1149]  ? __lock_acquire+0xab9/0xd20
[  151.644428][ T1149]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  151.644465][ T1149]  ? process_scheduled_works+0x9ef/0x17b0
[  151.644493][ T1149]  ? process_scheduled_works+0x9ef/0x17b0
[  151.644523][ T1149]  process_scheduled_works+0xae1/0x17b0
[  151.644567][ T1149]  ? __pfx_process_scheduled_works+0x10/0x10
[  151.644605][ T1149]  worker_thread+0x8a0/0xda0
[  151.644636][ T1149]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.644672][ T1149]  ? __kthread_parkme+0x7b/0x200
[  151.644708][ T1149]  kthread+0x711/0x8a0
[  151.644730][ T1149]  ? __pfx_worker_thread+0x10/0x10
[  151.644760][ T1149]  ? __pfx_kthread+0x10/0x10
[  151.644787][ T1149]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.644816][ T1149]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.644834][ T1149]  ? __pfx_kthread+0x10/0x10
[  151.644855][ T1149]  ret_from_fork+0x4bc/0x870
[  151.644884][ T1149]  ? __pfx_ret_from_fork+0x10/0x10
[  151.644915][ T1149]  ? __switch_to_asm+0x39/0x70
[  151.644939][ T1149]  ? __switch_to_asm+0x33/0x70
[  151.644962][ T1149]  ? __pfx_kthread+0x10/0x10
[  151.644983][ T1149]  ret_from_fork_asm+0x1a/0x30
[  151.645017][ T1149]  </TASK>
[  151.645026][ T1149] 
[  151.860512][ T1149] Allocated by task 7906:
[  151.864862][ T1149]  kasan_save_track+0x3e/0x80
[  151.869563][ T1149]  __kasan_kmalloc+0x93/0xb0
[  151.874179][ T1149]  __kmalloc_noprof+0x411/0x7f0
[  151.879059][ T1149]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  151.885241][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  151.890474][ T1149]  register_netdevice+0x1608/0x1ae0
[  151.896122][ T1149]  nsim_create+0xae8/0xf10
[  151.900549][ T1149]  __nsim_dev_port_add+0x6b6/0xb10
[  151.905665][ T1149]  nsim_dev_port_add_all+0x37/0xf0
[  151.910782][ T1149]  nsim_dev_reload_up+0x451/0x780
[  151.915826][ T1149]  devlink_reload+0x4ec/0x8d0
[  151.920543][ T1149]  devlink_nl_reload_doit+0xb35/0xd50
[  151.925928][ T1149]  genl_family_rcv_msg_doit+0x215/0x300
[  151.931482][ T1149]  genl_rcv_msg+0x60e/0x790
[  151.935998][ T1149]  netlink_rcv_skb+0x208/0x470
[  151.940798][ T1149]  genl_rcv+0x28/0x40
[  151.944804][ T1149]  netlink_unicast+0x82f/0x9e0
[  151.949579][ T1149]  netlink_sendmsg+0x805/0xb30
[  151.954357][ T1149]  __sock_sendmsg+0x21c/0x270
[  151.959047][ T1149]  ____sys_sendmsg+0x505/0x830
[  151.963833][ T1149]  ___sys_sendmsg+0x21f/0x2a0
[  151.968515][ T1149]  __x64_sys_sendmsg+0x19b/0x260
[  151.973457][ T1149]  do_syscall_64+0xfa/0xfa0
[  151.978052][ T1149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.983951][ T1149] 
[  151.986283][ T1149] Freed by task 7906:
[  151.990267][ T1149]  kasan_save_track+0x3e/0x80
[  151.994950][ T1149]  __kasan_save_free_info+0x46/0x50
[  152.000164][ T1149]  __kasan_slab_free+0x5c/0x80
[  152.004936][ T1149]  kfree+0x19a/0x6d0
[  152.008840][ T1149]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  152.015105][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.020232][ T1149]  unregister_netdevice_many_notify+0x1860/0x2390
[  152.026660][ T1149]  unregister_netdevice_queue+0x33c/0x380
[  152.032395][ T1149]  nsim_destroy+0x1dd/0x670
[  152.036926][ T1149]  __nsim_dev_port_del+0x14d/0x1b0
[  152.042053][ T1149]  nsim_dev_port_add_all+0xae/0xf0
[  152.047175][ T1149]  nsim_dev_reload_up+0x451/0x780
[  152.052208][ T1149]  devlink_reload+0x4ec/0x8d0
[  152.056897][ T1149]  devlink_nl_reload_doit+0xb35/0xd50
[  152.062376][ T1149]  genl_family_rcv_msg_doit+0x215/0x300
[  152.067961][ T1149]  genl_rcv_msg+0x60e/0x790
[  152.072472][ T1149]  netlink_rcv_skb+0x208/0x470
[  152.077248][ T1149]  genl_rcv+0x28/0x40
[  152.081235][ T1149]  netlink_unicast+0x82f/0x9e0
[  152.086017][ T1149]  netlink_sendmsg+0x805/0xb30
[  152.090827][ T1149]  __sock_sendmsg+0x21c/0x270
[  152.095520][ T1149]  ____sys_sendmsg+0x505/0x830
[  152.100303][ T1149]  ___sys_sendmsg+0x21f/0x2a0
[  152.104994][ T1149]  __x64_sys_sendmsg+0x19b/0x260
[  152.109943][ T1149]  do_syscall_64+0xfa/0xfa0
[  152.114453][ T1149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.120359][ T1149] 
[  152.122688][ T1149] Last potentially related work creation:
[  152.128413][ T1149]  kasan_save_stack+0x3e/0x60
[  152.133099][ T1149]  kasan_record_aux_stack+0xbd/0xd0
[  152.138340][ T1149]  insert_work+0x3d/0x330
[  152.142681][ T1149]  __queue_work+0xbaf/0xfb0
[  152.147204][ T1149]  queue_work_on+0x181/0x270
[  152.151816][ T1149]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  152.157469][ T1149]  udp_tunnel_push_rx_port+0x180/0x200
[  152.162942][ T1149]  geneve_offload_rx_ports+0xd7/0x160
[  152.168336][ T1149]  geneve_netdevice_event+0x6a/0x80
[  152.173533][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.178655][ T1149]  call_netdevice_notifiers+0x88/0xc0
[  152.184051][ T1149]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  152.190216][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.195351][ T1149]  register_netdevice+0x1608/0x1ae0
[  152.200571][ T1149]  nsim_create+0xae8/0xf10
[  152.205042][ T1149]  __nsim_dev_port_add+0x6b6/0xb10
[  152.210167][ T1149]  nsim_dev_port_add_all+0x37/0xf0
[  152.215294][ T1149]  nsim_dev_reload_up+0x451/0x780
[  152.220326][ T1149]  devlink_reload+0x4ec/0x8d0
[  152.225049][ T1149]  devlink_nl_reload_doit+0xb35/0xd50
[  152.230449][ T1149]  genl_family_rcv_msg_doit+0x215/0x300
[  152.236036][ T1149]  genl_rcv_msg+0x60e/0x790
[  152.240579][ T1149]  netlink_rcv_skb+0x208/0x470
[  152.245352][ T1149]  genl_rcv+0x28/0x40
[  152.249340][ T1149]  netlink_unicast+0x82f/0x9e0
[  152.254112][ T1149]  netlink_sendmsg+0x805/0xb30
[  152.258898][ T1149]  __sock_sendmsg+0x21c/0x270
[  152.263588][ T1149]  ____sys_sendmsg+0x505/0x830
[  152.268378][ T1149]  ___sys_sendmsg+0x21f/0x2a0
[  152.273055][ T1149]  __x64_sys_sendmsg+0x19b/0x260
[  152.277993][ T1149]  do_syscall_64+0xfa/0xfa0
[  152.282519][ T1149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.288420][ T1149] 
[  152.290750][ T1149] Second to last potentially related work creation:
[  152.297329][ T1149]  kasan_save_stack+0x3e/0x60
[  152.302032][ T1149]  kasan_record_aux_stack+0xbd/0xd0
[  152.307245][ T1149]  insert_work+0x3d/0x330
[  152.311589][ T1149]  __queue_work+0xcd2/0xfb0
[  152.316124][ T1149]  queue_work_on+0x181/0x270
[  152.320762][ T1149]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  152.326412][ T1149]  udp_tunnel_push_rx_port+0x180/0x200
[  152.331885][ T1149]  vxlan_offload_rx_ports+0x139/0x200
[  152.337261][ T1149]  vxlan_netdevice_event+0x111/0x470
[  152.342564][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.347688][ T1149]  call_netdevice_notifiers+0x88/0xc0
[  152.353068][ T1149]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  152.359236][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.364358][ T1149]  register_netdevice+0x1608/0x1ae0
[  152.369559][ T1149]  nsim_create+0xae8/0xf10
[  152.374001][ T1149]  __nsim_dev_port_add+0x6b6/0xb10
[  152.379115][ T1149]  nsim_dev_port_add_all+0x37/0xf0
[  152.384230][ T1149]  nsim_dev_reload_up+0x451/0x780
[  152.389256][ T1149]  devlink_reload+0x4ec/0x8d0
[  152.393945][ T1149]  devlink_nl_reload_doit+0xb35/0xd50
[  152.399329][ T1149]  genl_family_rcv_msg_doit+0x215/0x300
[  152.404890][ T1149]  genl_rcv_msg+0x60e/0x790
[  152.409396][ T1149]  netlink_rcv_skb+0x208/0x470
[  152.414170][ T1149]  genl_rcv+0x28/0x40
[  152.418165][ T1149]  netlink_unicast+0x82f/0x9e0
[  152.422937][ T1149]  netlink_sendmsg+0x805/0xb30
[  152.427716][ T1149]  __sock_sendmsg+0x21c/0x270
[  152.432404][ T1149]  ____sys_sendmsg+0x505/0x830
[  152.437177][ T1149]  ___sys_sendmsg+0x21f/0x2a0
[  152.441857][ T1149]  __x64_sys_sendmsg+0x19b/0x260
[  152.446804][ T1149]  do_syscall_64+0xfa/0xfa0
[  152.451314][ T1149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.457208][ T1149] 
[  152.459532][ T1149] The buggy address belongs to the object at ffff88801bb10a00
[  152.459532][ T1149]  which belongs to the cache kmalloc-256 of size 256
[  152.473596][ T1149] The buggy address is located 176 bytes inside of
[  152.473596][ T1149]  freed 256-byte region [ffff88801bb10a00, ffff88801bb10b00)
[  152.487426][ T1149] 
[  152.489757][ T1149] The buggy address belongs to the physical page:
[  152.496204][ T1149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bb10
[  152.504971][ T1149] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  152.513475][ T1149] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  152.521464][ T1149] page_type: f5(slab)
[  152.525474][ T1149] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001efb480 dead000000000005
[  152.534064][ T1149] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  152.542653][ T1149] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001efb480 dead000000000005
[  152.551332][ T1149] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  152.560009][ T1149] head: 00fff00000000001 ffffea00006ec401 00000000ffffffff 00000000ffffffff
[  152.568685][ T1149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  152.577379][ T1149] page dumped because: kasan: bad access detected
[  152.583801][ T1149] page_owner tracks the page as allocated
[  152.589511][ T1149] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 92948530816, free_ts 92890112408
[  152.610886][ T1149]  post_alloc_hook+0x240/0x2a0
[  152.615663][ T1149]  get_page_from_freelist+0x2365/0x2440
[  152.621216][ T1149]  __alloc_frozen_pages_noprof+0x181/0x370
[  152.627038][ T1149]  alloc_pages_mpol+0x232/0x4a0
[  152.631900][ T1149]  allocate_slab+0x96/0x3a0
[  152.636415][ T1149]  ___slab_alloc+0xe94/0x18a0
[  152.641102][ T1149]  __slab_alloc+0x65/0x100
[  152.645709][ T1149]  __kmalloc_noprof+0x471/0x7f0
[  152.650570][ T1149]  __register_sysctl_table+0xba1/0x1340
[  152.656122][ T1149]  neigh_sysctl_register+0x9a2/0xa80
[  152.661422][ T1149]  addrconf_sysctl_register+0xb3/0x1c0
[  152.666885][ T1149]  ipv6_add_dev+0xd46/0x1370
[  152.671572][ T1149]  addrconf_notify+0x794/0x1010
[  152.676428][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.681551][ T1149]  register_netdevice+0x1608/0x1ae0
[  152.686754][ T1149]  macvlan_common_newlink+0x120a/0x1980
[  152.692311][ T1149] page last free pid 5834 tgid 5834 stack trace:
[  152.698640][ T1149]  __free_frozen_pages+0xbc4/0xd30
[  152.703776][ T1149]  __slab_free+0x2e7/0x390
[  152.708203][ T1149]  qlist_free_all+0x97/0x140
[  152.712808][ T1149]  kasan_quarantine_reduce+0x148/0x160
[  152.718281][ T1149]  __kasan_slab_alloc+0x22/0x80
[  152.723235][ T1149]  kmem_cache_alloc_node_noprof+0x433/0x710
[  152.729138][ T1149]  __alloc_skb+0x112/0x2d0
[  152.733656][ T1149]  rtmsg_ifinfo_build_skb+0x84/0x260
[  152.738951][ T1149]  rtnetlink_event+0x1b7/0x270
[  152.743739][ T1149]  notifier_call_chain+0x1b6/0x3e0
[  152.748865][ T1149]  netif_change_name+0x5e9/0x960
[  152.753809][ T1149]  do_setlink+0x9f6/0x41c0
[  152.758238][ T1149]  rtnl_newlink+0x1619/0x1c80
[  152.762954][ T1149]  rtnetlink_rcv_msg+0x7cf/0xb70
[  152.767918][ T1149]  netlink_rcv_skb+0x208/0x470
[  152.772786][ T1149]  netlink_unicast+0x82f/0x9e0
[  152.777557][ T1149] 
[  152.779887][ T1149] Memory state around the buggy address:
[  152.785516][ T1149]  ffff88801bb10980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  152.793602][ T1149]  ffff88801bb10a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.801795][ T1149] >ffff88801bb10a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  152.809859][ T1149]                                      ^
[  152.815494][ T1149]  ffff88801bb10b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  152.823559][ T1149]  ffff88801bb10b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  152.831654][ T1149] ==================================================================
[  152.857949][ T1149] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  152.865240][ T1149] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  152.874743][ T1149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  152.884870][ T1149] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  152.892211][ T1149] Call Trace:
[  152.895519][ T1149]  <TASK>
[  152.898473][ T1149]  dump_stack_lvl+0x99/0x250
[  152.903110][ T1149]  ? __asan_memcpy+0x40/0x70
[  152.907769][ T1149]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.918377][ T1149]  ? __pfx__printk+0x10/0x10
[  152.923001][ T1149]  vpanic+0x237/0x6d0
[  152.927006][ T1149]  ? __pfx_vpanic+0x10/0x10
[  152.931525][ T1149]  ? preempt_schedule+0xae/0xc0
[  152.936398][ T1149]  ? __pfx_preempt_schedule+0x10/0x10
[  152.941820][ T1149]  panic+0xb9/0xc0
[  152.945558][ T1149]  ? __pfx_panic+0x10/0x10
[  152.950092][ T1149]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  152.956024][ T1149]  ? __mutex_lock+0x147/0x1350
[  152.960807][ T1149]  check_panic_on_warn+0x89/0xb0
[  152.965844][ T1149]  ? __mutex_lock+0x147/0x1350
[  152.970613][ T1149]  end_report+0x78/0x160
[  152.974862][ T1149]  kasan_report+0x129/0x150
[  152.979375][ T1149]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.985456][ T1149]  ? __mutex_lock+0x147/0x1350
[  152.990225][ T1149]  __mutex_lock+0x147/0x1350
[  152.994913][ T1149]  ? __mutex_lock+0x5bb/0x1350
[  152.999686][ T1149]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  153.005961][ T1149]  ? __pfx___mutex_lock+0x10/0x10
[  153.011010][ T1149]  ? __lock_acquire+0xab9/0xd20
[  153.015887][ T1149]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  153.021986][ T1149]  ? process_scheduled_works+0x9ef/0x17b0
[  153.027724][ T1149]  ? process_scheduled_works+0x9ef/0x17b0
[  153.033463][ T1149]  process_scheduled_works+0xae1/0x17b0
[  153.039138][ T1149]  ? __pfx_process_scheduled_works+0x10/0x10
[  153.045151][ T1149]  worker_thread+0x8a0/0xda0
[  153.049844][ T1149]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.056199][ T1149]  ? __kthread_parkme+0x7b/0x200
[  153.061160][ T1149]  kthread+0x711/0x8a0
[  153.065247][ T1149]  ? __pfx_worker_thread+0x10/0x10
[  153.070373][ T1149]  ? __pfx_kthread+0x10/0x10
[  153.074973][ T1149]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.080183][ T1149]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.085454][ T1149]  ? __pfx_kthread+0x10/0x10
[  153.090051][ T1149]  ret_from_fork+0x4bc/0x870
[  153.094661][ T1149]  ? __pfx_ret_from_fork+0x10/0x10
[  153.099785][ T1149]  ? __switch_to_asm+0x39/0x70
[  153.104559][ T1149]  ? __switch_to_asm+0x33/0x70
[  153.109333][ T1149]  ? __pfx_kthread+0x10/0x10
[  153.113931][ T1149]  ret_from_fork_asm+0x1a/0x30
[  153.118720][ T1149]  </TASK>
[  153.122042][ T1149] Kernel Offset: disabled
[  153.126366][ T1149] Rebooting in 86400 seconds..