last executing test programs:

3.515799514s ago: executing program 0 (id=3623):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) (async)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0xfffefffe) (async)
r1 = socket(0x1a, 0x5, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}}, 0x14}}, 0x4000) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000195e"], 0x1c}}, 0x10) (async)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000400)={0x1, 0x1, 0xb0, 0xd67, @vifc_lcl_addr=@remote, @private=0xa010100}, 0x10) (async)
getsockopt(r1, 0x6, 0x2, &(0x7f0000000340)=""/65, &(0x7f00000003c0)=0x41)

3.356827582s ago: executing program 0 (id=3624):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r2)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

1.549560882s ago: executing program 3 (id=3631):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00dd92762f1345cbc5791800000000001f011400000000000510", @ANYRES32, @ANYBLOB="0400002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004054)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r6, 0x5}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$inet(0xa, 0x801, 0x84)
listen(r9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10)
bind$unix(r8, &(0x7f0000000100)=@abs={0x1}, 0x6e)
bind$unix(r8, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e)

1.493849062s ago: executing program 0 (id=3632):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

1.360743048s ago: executing program 1 (id=3633):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000300)=0xb, 0x4) (async, rerun: 64)
sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="757893c668d3f5f042fb71babb99cc9e0bba82a2dfdd49aeeafd2dd129ed417c7fea4e1a1ba261deeccabbdbd42cc6a65ac03ad66091cc1ba986598060c7777381ac0cad7a18ef10cbcdd915c51e5b4c0769730cbf6f74e30d1b1c4967de2a644028d11003dee3d3bc3a9a57d2e6d884ab2adb6b51f45a56f1075d593bb2ec2bbb77bd2ef42a49b53e0d2048ed65a87c671f94d278a4036b148647bb247262b91f70ec31779c161a3091e4426d966d6ac81a0b9b347267a09e0b3debdd90e25b6058922a453e981f5aa12a888982760408000000087691561ab8ca6ae3623c45d9d6f00c6b1b07fb637c1b3785d73d84", 0xf0}, {&(0x7f00000000c0)="0ab7566a30904345f142e1182704ea7540f2c71d7d418f94882a22582b99cf870534834d1eb3b6c8ebdb17b144b5d5f6dbd481cd0bdc65c149faafb24139fe01b6c3d6aa914dabc088a0b680b50c1efb544eebe9ccaa2112f6d2604d35b6c2afed9664b1e1dfcff99387e159c7aaa3", 0x6f}, {&(0x7f0000000080)='\x00', 0x1}, {&(0x7f0000000140)="b5efca4fae7c63c1a5c78ec67fb3fa98f8b38b9fc312e3dece6f37a3d7cd9d0f74d9fcd00a611eeabaffd33a72ade8bbea50f612e0a77d7dfca15d37c53f27c475b247f3c9d10ff20faf3133c31fcb0b1749a711dec6b4d51f43724675f4254468af1cdf24a4e11623b96f3381e382226030d144a15d92ea43b57dceaa10b184c651b92cf4510c666ae9a1e783c315f880e6de39e4f54f780c4d495786b3755f970adc7dd4e31e19dabae0071b0b2e30cd7c0112bf", 0xb5}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000400)="698990d75d08c34924497f353b2293a91f424123e4d27d0479321f4bfeacf6ad83a2f480300ad0e6a6323757ace8af1e005a9ff5fb6171330a4a73baae58686491b6f15156ada68d3b965f724695669275b4f74593644fb1c8d4d78b3ad5011ce4f216d30ba5f4d2cb990135bb92ef9e6dc1dfead5eef6bcdea061ff8637e73eea86fe30cb0ab3a584c9576f6e146c17e65757bdbbe7525fc76d319c9bd64c5f95c9d8adee7289564f29f41696191c00c7435fc63bbd53f3287d81c897dccbf30722b2ff6db3bfbcd3be90413c237c49dd7ade91b6d01db4d7cb8816f7713c0abe0e4134008e3c2f5c174bd6092269ae78512064", 0xf4}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc8c6)

1.358055328s ago: executing program 4 (id=3634):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
getsockname$l2tp(r1, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.24785847s ago: executing program 2 (id=3635):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x40000000015, 0x5, 0x80)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={<r5=>0x0, 0x84, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xa4, @private1}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x7, @private1, 0x8}, @in6={0xa, 0x4e24, 0x4, @empty, 0x4}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000380)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={r5, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x793f, 0x10, 0x9, 0x10001, 0x30, 0x8, 0xf2}, 0x9c)
r6 = socket(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)
r7 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
write(r7, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7)
setsockopt$MRT6_FLUSH(r6, 0x29, 0x24, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000050000000008000100ac1e0101080002006401010108000300", @ANYRES32=r1], 0x34}}, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000a7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x60, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8050}, 0x4040844)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

1.196630608s ago: executing program 3 (id=3636):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$inet(0x2, 0x5, 0x0)
sendfile(r1, r1, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000122)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1}}, 0x10)
ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff)
listen(r5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
r7 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r7)
unshare(0x2c020400)
openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)

1.100727781s ago: executing program 4 (id=3637):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000a0101000000000000000000000008140000001900010000000000000000000a00000ac51c2a8aad9b78666a52e420eb5df39bf430b2a019c15595a8ab7de7777a32d5f4cc1f688d20b4ff28f204fb9ba80766227a3415aa24b65b4b28c5b006c91c8fbaeccb521399c8ce60e2375ef5cc372328765a7d1b3587eab190bd3999c89a90bc819aca93e170b40334d067849a0560f6bffdddee7f9b9dee5016f217dbfc3116ffa695345bf3fdc90b68f5b334f1106d39fd443ebb25c043e528ac15dd2a22163730316f3b6fd61d38de8b"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40)

1.04276544s ago: executing program 2 (id=3638):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0xe0000000, './file0\x00'}})
socket$netlink(0x10, 0x3, 0x9) (async)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0xffff, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83)
ioctl$sock_netdev_private(r11, 0x8924, &(0x7f0000000000)) (async)
ioctl$sock_netdev_private(r11, 0x8924, &(0x7f0000000000))
socket$inet6(0xa, 0x1, 0x0) (async)
r12 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'sit0\x00', <r13=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x24048814)

1.020836198s ago: executing program 1 (id=3639):
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={<r0=>0x0, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x1, 0x1000, 0x1, 0x9, 0x7, 0x4, 0x5, 0x3, 0x10, 0x0, 0x81f, 0x7, 0x1, 0x8000000000000001]}, &(0x7f0000000100)=0x100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={<r1=>r0, 0xfffffffe}, &(0x7f0000000180)=0x8)
r2 = socket$inet(0x2, 0x2, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, 0x2, 0x5})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={<r4=>r2})
r5 = socket$inet(0x2, 0x5879563c10eb7bb7, 0x800)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x18a, 0x100, 0x8008, 0x2, 0x2, 0x158, 0x4, 0x3, r0}, &(0x7f0000000280)=0x20)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
close(r6)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000340)={'veth0_to_bridge\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r7, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="bd740a986266ef0c951b98756b6f8e1886618419"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="a4bc8426adf8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8da61e23bfb722c0a5a9eb7deff80d40"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d92838d752b3"}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20008011)
write$tun(r3, &(0x7f0000000580)={@void, @void, @ipv6=@tcp={0x8, 0x6, "3028d9", 0x2f0, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x4, 0x0, 0x2, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x3b, 0xc, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1]}, @hopopts={0x84, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x31}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @calipso={0x7, 0x48, {0x2, 0x10, 0x7f, 0x9, [0xd5, 0xffffffff, 0x6, 0xea, 0x1, 0xe, 0x4, 0x7]}}]}, @dstopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x14, 0x0, 0x0, 0x0, 0x0, 0x2, 0x64}, @hopopts={0x29, 0xa, '\x00', [@generic={0x4, 0x4e, "8617e461b9162dd82832bcfcb4c8044113e3b0084450e3765485fe2bde16421f2cc483885f8b0ffe68314ba7aafe93997c9ad29ce290b6dd2a479ea5e20c06b436f72befa62f1b15b044196604f8"}]}, @srh={0x33, 0xa, 0x4, 0x5, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x18}]}], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x20, 0xbd, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x5, '{G:'}, @md5sig={0x13, 0x12, "46220a80e9e315b53c647a5df23202d3"}]}}, {"aeaa6cb480fcb06aff48328fc350189b789dba3dde4c4018586841789ab30e292a7e44b5a96ba6ff7d79a0b5c5e19c2b5a0a79f8671b3ea1c3b5addbb09a640feec3086ca0197b606506ec0dc7b4bc8a8f04c07dba406ebdf06b5703173782c345dbca2d0dae7725d98ef061f2fe9e421353824f50a2219b940e291b15c30347c6d1c35dcbe3d4f04311a5213af9058db9cc56bca56c22965b6a3c0e536f6b8c8cc32c58e2efdfd772a2a450bd2b2ab3aa2049a54e0d103e33d2688a8c18163d2ea69dc172d36cc54c0adc85212ddd5b286d79fd1c04ad29cd66c462df43fcf16d9688b283ca83300d9b34ce"}}}}}, 0x318)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000008c0)={r1, 0x8, 0x9, [0x8000, 0x91, 0x1, 0x400, 0x0, 0x4, 0x5, 0x80, 0x1]}, 0x1a)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xdc, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private2, 0x31b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x956, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x2, 0x3}, {0x5, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0x4850)
connect$inet6(r3, &(0x7f0000000c80)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
sendto$llc(r4, &(0x7f0000000cc0)="af251b86df587d7a0e03173cb79bfc670fe1e1c68959b9546b7453728f7970a6b2cb0889f48dd75157321a2375a3ce6fc40ede2b27ac31cabc8d2fd3846f11edc356fbc333587a2af20b30cceb80eb73f42de8689110ba64e5d8e0cd04fc666a42969ae6c04a4cf2bc7afab31c3fde32147339bb00b5b22a94018c8f918fd76b28c513ce162215b014855428a46c330415556421ad4a4ebf6e5f5585b64393ab2fd20a97e918a6e3dd2b73b66376134927d30c31db8cc61e9569117a60ceb0e6bdddb34661ac2be47a8a18f3", 0xcc, 0x800, &(0x7f0000000dc0)={0x1a, 0x305, 0x99, 0xf3, 0x6, 0x5}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000e00), 0x3)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000e40), &(0x7f0000000e80)=0x4)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r4)
sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xac, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004004}, 0x11)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r12, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4009804)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x1, 0x104, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048013}, 0x5)

948.294806ms ago: executing program 3 (id=3640):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xa, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x24}, @ldst={0x2, 0x1, 0x1, 0x1, 0xe, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @exit]}, &(0x7f0000000480)='syzkaller\x00', 0x93, 0x1, &(0x7f00000004c0)=""/1, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xd, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x0, 0x5, 0xc}, {0x5, 0x4, 0xc, 0x8}, {0x3, 0x5, 0xd, 0x7}, {0x5, 0x1, 0x8, 0x1}, {0x1, 0x2, 0x8, 0x4}, {0x4, 0x1, 0xc, 0x7}, {0x1, 0x1, 0xd, 0x5}], 0x10, 0x3ff}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpu.stat\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x26, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x48f, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x1, 0x10}, @ldst={0x0, 0x1, 0x1, 0x5, 0x2, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x82, &(0x7f00000002c0)=""/130, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0xffffffff, 0x6}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000780)=[r7, r8], 0x0, 0x10, 0x10000}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r3) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r5, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xa, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x24}, @ldst={0x2, 0x1, 0x1, 0x1, 0xe, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @exit]}, &(0x7f0000000480)='syzkaller\x00', 0x93, 0x1, &(0x7f00000004c0)=""/1, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xd, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x0, 0x5, 0xc}, {0x5, 0x4, 0xc, 0x8}, {0x3, 0x5, 0xd, 0x7}, {0x5, 0x1, 0x8, 0x1}, {0x1, 0x2, 0x8, 0x4}, {0x4, 0x1, 0xc, 0x7}, {0x1, 0x1, 0xd, 0x5}], 0x10, 0x3ff}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpu.stat\x00', 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x26, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x48f, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x1, 0x10}, @ldst={0x0, 0x1, 0x1, 0x5, 0x2, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x82, &(0x7f00000002c0)=""/130, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0xffffffff, 0x6}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000780)=[r7, r8], 0x0, 0x10, 0x10000}, 0x94) (async)

937.095628ms ago: executing program 4 (id=3641):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={<r2=>0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x8, 0xaa25, 0x6823, 0xa, 0xa07, 0xca, 0xcb3b, 0x0, 0x4, 0x4, 0xfffffffffffffff9, 0x7fff, 0x10, 0x5d, 0x2]}, &(0x7f0000000100)=0x100)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x7, 0x4, 0x4}, &(0x7f0000000200)=0x10)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0)

785.422147ms ago: executing program 4 (id=3642):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r2)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

732.294713ms ago: executing program 3 (id=3643):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x160, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x67, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0xf1, 0x1}, {0x5, 0x5}, {0xee, 0x7}, {0x8}, {0x3, 0x6}, {0xc, 0x1}, {0x6, 0x6}, {0xb3, 0x1}, {0x40, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0xf, 0x6}, {0xdf, 0x4}, {0x2}, {0x2, 0x5}], "8138691f01cfe992"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5}, {0x1, 0x7}, {0x8, 0x2}, {0x9, 0x5}, {0x4}, {0x40, 0x7}, {0xa, 0x6}, {0x9}, {0xd2, 0x2}, {0x3, 0x7}, {0x85, 0x2}, {}, {0x4, 0x5}, {0xf7, 0x7}, {0x5, 0x6}, {0x10, 0x5}, {0x2d, 0x2}, {0x4}, {}, {0x7f, 0x7}], "363653cdb5819224"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{}, {0x6, 0x5}, {0x8a, 0x5}, {0x26, 0x5}, {0x8, 0x3}, {0x18, 0x1}, {0x9}, {0x8, 0x6}, {0x1, 0x2}, {0x3, 0x5}], "965fa76116349e99"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x1}, {0x5, 0x5}, {0x8, 0x7}, {0x40, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0xb, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0xf9, 0x6}, {0x7, 0x2}, {0x85, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0xc4, 0x2}, {0x1, 0x1}, {0xe, 0x4}, {0x0, 0x7}], "292e89466a25d535"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x9, 0x5}, {0x4, 0x6}, {0x1}, {0x4e, 0x6}, {0xb, 0x68}, {0x8, 0x4}, {0x1, 0x5}, {0x2, 0x5}], "90505ab1469dd814"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x6}, {0x8, 0x4}, {0x80, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0xfb, 0x4}, {0x7, 0x6}, {0xc0, 0x6}], "ef25d76b59416662"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5d, 0x2}], "8d9aabd7caaa3f31"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x0, 0x6}, {0x94, 0x2}, {0x2, 0x3}, {0xe6, 0x2}, {0x8, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x9}, {0xc, 0x5}, {0x1, 0x3}, {0x6}], "be0127632ed1167e"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x24040000)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r0, 0xfffffffc) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x160, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x67, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x3}, {0xf1, 0x1}, {0x5, 0x5}, {0xee, 0x7}, {0x8}, {0x3, 0x6}, {0xc, 0x1}, {0x6, 0x6}, {0xb3, 0x1}, {0x40, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0xf, 0x6}, {0xdf, 0x4}, {0x2}, {0x2, 0x5}], "8138691f01cfe992"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5}, {0x1, 0x7}, {0x8, 0x2}, {0x9, 0x5}, {0x4}, {0x40, 0x7}, {0xa, 0x6}, {0x9}, {0xd2, 0x2}, {0x3, 0x7}, {0x85, 0x2}, {}, {0x4, 0x5}, {0xf7, 0x7}, {0x5, 0x6}, {0x10, 0x5}, {0x2d, 0x2}, {0x4}, {}, {0x7f, 0x7}], "363653cdb5819224"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{}, {0x6, 0x5}, {0x8a, 0x5}, {0x26, 0x5}, {0x8, 0x3}, {0x18, 0x1}, {0x9}, {0x8, 0x6}, {0x1, 0x2}, {0x3, 0x5}], "965fa76116349e99"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x1}, {0x5, 0x5}, {0x8, 0x7}, {0x40, 0x3}, {0x0, 0x5}, {0x6, 0x3}, {0xb, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0xf9, 0x6}, {0x7, 0x2}, {0x85, 0x5}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0xc4, 0x2}, {0x1, 0x1}, {0xe, 0x4}, {0x0, 0x7}], "292e89466a25d535"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xd, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x9, 0x5}, {0x4, 0x6}, {0x1}, {0x4e, 0x6}, {0xb, 0x68}, {0x8, 0x4}, {0x1, 0x5}, {0x2, 0x5}], "90505ab1469dd814"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x6}, {0x8, 0x4}, {0x80, 0x1}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0xfb, 0x4}, {0x7, 0x6}, {0xc0, 0x6}], "ef25d76b59416662"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5d, 0x2}], "8d9aabd7caaa3f31"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x0, 0x6}, {0x94, 0x2}, {0x2, 0x3}, {0xe6, 0x2}, {0x8, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x9}, {0xc, 0x5}, {0x1, 0x3}, {0x6}], "be0127632ed1167e"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async)

679.088533ms ago: executing program 1 (id=3644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x2400000001, 0x0)
ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r2, &(0x7f00000002c0)="fe", 0x1, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10)
recvfrom$inet(r2, &(0x7f0000000080)=""/68, 0x44, 0x43, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e000500000084adbd004f6e000004b53ad6a9242ce52c9f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0xa, 0x2400000001, 0x0) (async)
ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) (async)
sendto$inet(r2, &(0x7f00000002c0)="fe", 0x1, 0x20008005, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) (async)
recvfrom$inet(r2, &(0x7f0000000080)=""/68, 0x44, 0x43, 0x0, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r5, 0x0, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e000500000084adbd004f6e000004b53ad6a9242ce52c9f"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async)

659.197979ms ago: executing program 2 (id=3645):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400}, 0x0)

532.572926ms ago: executing program 2 (id=3646):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x200000000000011, 0x2, 0xd)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r4=>0x0})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000580)={@multicast, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x1e0, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x2, 0x6, 0x80000000, 0x1, 0x20, 0x70f0a8a9, 0x4}}, {0xc, 0x2, [0x1, 0x1000, 0x9, 0x7]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x17c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3a7}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x9}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x114, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc62}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7fe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x102989d2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0x1e0}}, 0x80)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

528.402321ms ago: executing program 0 (id=3647):
socket(0x1a, 0x1, 0x5)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

515.015024ms ago: executing program 4 (id=3648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x9, 0x8de3, 0x56b, 0x3}}]}]}}}]}, 0x94}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$rxrpc(r5, 0x0, 0x0, 0x10000, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000070000000000766c616e30000000000000000000000076657468305f746f5f7465616d000000697036677265300000000000000000007465616d3000000000000000000000000180c200000fff00ff000000aaaaaaaaaaaa00ff00ffff006e00004597006e0000009e0000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000009b000002000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0000"]}, 0x1a6)

403.531866ms ago: executing program 3 (id=3649):
r0 = socket(0xa, 0x80000, 0x6)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6ea})

402.995162ms ago: executing program 1 (id=3650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00e\x00\a'], 0x20}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x7d4165c9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r5 = socket(0x1f, 0x803, 0x1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
r10 = socket(0x10, 0x2, 0x0)
write(r10, &(0x7f00000005c0)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46981dc1f5e754b52980622dd60e6c6d41befc301cfd77cc70513a5e0a13e5d1585f42350849a0b8fc6f4458b212f19cfe73995156ab5a949f820000fffac5ddf1115b949ae280227aaae4b22ce0214922db3319978e2f8d8fe5f4ac9fc15df5edf5ece1cf0b72fb485bb79ffe30d605199384bd97b6657c953dc21b783d5432b51b9566504ea9bfa6919e971d71e2300d70d7e4cee45094a6e9b5583a1feb14665c62795493023529be320d538573ac1ad8c75ba412e3ff8f99c1b3a1b868", 0xea)
writev(r9, &(0x7f0000000540)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a066f47dfbe380200ff000000000000000058000b4824ca030064009400ff0325010ebc000000000000008000f0effeffe8090053ffff49bfd2bbdf0542d513c259d8dd0000001000010008", 0x5c}], 0x1)

320.34547ms ago: executing program 0 (id=3651):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a80180001801400030024c0"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x45)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)

258.890885ms ago: executing program 4 (id=3652):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000440)=""/111, 0x4e, <r1=>0x0, &(0x7f0000000280)=""/154, 0x91}}, 0xffffffbf)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611081000000000005000000000000009500000000000000b8547d39d17d8517c35f314d5d78aa2d3ba0666035439b9fce31cc739f18a20953ec537a53e8737ee2a44c2dae1b54d23ba985f52a2ad84af6619698fd1b345d9a95cdec7ba1a77cdbf969419c666540b02f42f91c70335768a3fb5cfc8e78f15dcc1792487a45cb9dd2c775b8e255e1228f64209ad00a9857e80be63ae77923c3ac00e367cc919c70f6f4f967ad2eb6a8f8d81dd74c4ed083e310941882c6c5bfbfcf9b34729e2f3d08ef8520955b5dcef4eee464669f7eb692a4e18d63cb188351c00800000000000000000000000015c419cfb6250e663ba65f30f065fc10847cf1c04654d859a85d9082ae941afd854cbdcf9282e9f196a0aa9bfda0816daf455fc7e770ecfd3e1e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02742e0d50d02ff9782762f86dd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c1}, 0x70)
mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) (async)
mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff)

204.913739ms ago: executing program 2 (id=3653):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000000020b055620000"], 0x10}, 0x0)

204.222342ms ago: executing program 1 (id=3654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT, @ANYRES32, @ANYRESOCT], 0xb8}}, 0x20040014) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

130.050245ms ago: executing program 0 (id=3655):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004000f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffe0}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

121.658331ms ago: executing program 3 (id=3656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040))
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)

492.537µs ago: executing program 2 (id=3657):
r0 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) (async)
recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket$igmp(0x2, 0x3, 0x2) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private=0xffffffff}, 0x10)
recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)

0s ago: executing program 1 (id=3658):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0)
close(r2)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)

kernel console output (not intermixed with test programs):

84.434488][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.453137][T13937] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20004
[  284.563542][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2238'.
[  284.575840][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2238'.
[  284.709688][T13951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.730498][T13952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.751778][T13951] syzkaller0: entered promiscuous mode
[  284.757294][T13951] syzkaller0: entered allmulticast mode
[  284.763403][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  284.801539][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'.
[  284.802029][T13958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.839663][T13950] tipc: Resetting bearer <eth:syzkaller0>
[  284.973378][T13950] tipc: Disabling bearer <eth:syzkaller0>
[  285.033661][T13970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.055099][T13970] syzkaller0: entered promiscuous mode
[  285.061676][T13970] syzkaller0: entered allmulticast mode
[  285.143563][T13970] tipc: Resetting bearer <eth:syzkaller0>
[  285.167783][T13969] tipc: Resetting bearer <eth:syzkaller0>
[  285.209611][T13969] tipc: Disabling bearer <eth:syzkaller0>
[  285.287620][T13985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.432822][T13994] xt_hashlimit: max too large, truncated to 1048576
[  285.475807][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2254'.
[  285.501835][T14005] bridge0: port 1(ipvlan1) entered blocking state
[  285.517874][T14005] bridge0: port 1(ipvlan1) entered disabled state
[  285.528101][T14005] ipvlan1: entered allmulticast mode
[  285.537960][T14005] bridge0: entered allmulticast mode
[  285.551845][T14005] ipvlan1: left allmulticast mode
[  285.558212][T14005] bridge0: left allmulticast mode
[  285.607783][T14008] syzkaller0: entered promiscuous mode
[  285.618656][T14008] syzkaller0: entered allmulticast mode
[  285.629139][T14008] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20000
[  285.638270][T14008] x_tables: ip_tables: tcp match: only valid for protocol 6
[  285.709376][T14012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.760932][T14018] netlink: 'syz.2.2263': attribute type 1 has an invalid length.
[  285.796027][T14016] tipc: Resetting bearer <eth:syzkaller0>
[  285.800761][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  285.972014][T14027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.026350][T14032] ieee802154 phy1 wpan1: encryption failed: -22
[  286.034156][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2269'.
[  286.095786][T14030] netlink: 'syz.4.2268': attribute type 9 has an invalid length.
[  286.113486][T14030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2268'.
[  286.186295][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2271'.
[  286.215744][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2271'.
[  286.598479][T14064] xt_CT: You must specify a L4 protocol and not use inversions on it
[  286.843873][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  286.882480][T14082] netlink: 'syz.0.2284': attribute type 1 has an invalid length.
[  286.975439][T14093] Bluetooth: hci1: too big key_count value 32778
[  287.028364][T14099] netlink: 'syz.2.2286': attribute type 2 has an invalid length.
[  287.043863][T14086] 8021q: adding VLAN 0 to HW filter on device bond9
[  287.055540][T14086] bond8: (slave bond9): making interface the new active one
[  287.063157][T14099] netlink: 'syz.2.2286': attribute type 8 has an invalid length.
[  287.077143][T14086] bond8: (slave bond9): Enslaving as an active interface with an up link
[  287.085546][T14099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2286'.
[  287.115854][T14104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.333664][T14107] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  287.404751][T14119] netlink: 'syz.1.2291': attribute type 13 has an invalid length.
[  287.675582][T14134] netlink: 'syz.4.2299': attribute type 23 has an invalid length.
[  287.677566][T14124] syzkaller0: entered promiscuous mode
[  287.690219][T14124] syzkaller0: entered allmulticast mode
[  287.810569][T14138] pimreg: entered allmulticast mode
[  287.882004][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  287.950068][T14137] pimreg: left allmulticast mode
[  288.022400][T14135] syzkaller1: entered promiscuous mode
[  288.037663][T14135] syzkaller1: entered allmulticast mode
[  288.051041][T14155] nbd: must specify at least one socket
[  288.344640][T14175] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  288.402740][T14167] bridge0: port 1(bridge_slave_0) entered learning state
[  288.505588][T14184] __nla_validate_parse: 2 callbacks suppressed
[  288.505610][T14184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2309'.
[  288.734404][T14194] ip6t_srh: unknown srh invflags 4000
[  288.830276][T14194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.874631][T14191] xt_hashlimit: overflow, try lower: 3/0
[  288.920468][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  289.143051][T14216] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  289.151359][T14216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.163362][T14217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.274161][T14223] lo speed is unknown, defaulting to 1000
[  289.283992][T14223] lo speed is unknown, defaulting to 1000
[  289.287185][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'.
[  289.293226][T14223] lo speed is unknown, defaulting to 1000
[  289.313938][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'.
[  289.369883][T14223] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  289.505726][T14232] lo speed is unknown, defaulting to 1000
[  289.518017][T14234] ipt_rpfilter: unknown options
[  289.554772][T14223] lo speed is unknown, defaulting to 1000
[  289.577010][T14223] lo speed is unknown, defaulting to 1000
[  289.591156][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2328'.
[  289.636447][T14223] lo speed is unknown, defaulting to 1000
[  289.679825][T14237] 8021q: adding VLAN 0 to HW filter on device bond3
[  289.722076][T14242] 8021q: adding VLAN 0 to HW filter on device bond3
[  289.729601][T14242] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  289.743351][T14242] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  289.771491][T14223] lo speed is unknown, defaulting to 1000
[  289.794752][T14235] lo speed is unknown, defaulting to 1000
[  289.840952][T14223] lo speed is unknown, defaulting to 1000
[  289.961606][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  289.988071][T14248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.898368][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'.
[  290.907254][T14292] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  291.003483][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  291.025766][T14301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2341'.
[  291.046620][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'.
[  291.142967][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'.
[  291.482601][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  292.044526][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  292.203836][T14280] syzkaller0: entered promiscuous mode
[  292.209464][T14280] syzkaller0: entered allmulticast mode
[  292.366683][T14319] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  292.376118][T14320] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  292.461067][T14317] xt_connbytes: Forcing CT accounting to be enabled
[  292.638855][T14338] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  293.043883][T14360] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002
[  293.080947][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  293.109700][T14369] sctp: [Deprecated]: syz.3.2357 (pid 14369) Use of int in max_burst socket option.
[  293.109700][T14369] Use struct sctp_assoc_value instead
[  293.140442][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2360'.
[  293.205594][T14368] netlink: 'syz.4.2360': attribute type 6 has an invalid length.
[  293.439229][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'.
[  293.713932][T14390] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.2367'.
[  294.077885][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  294.110781][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  294.120659][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  294.162937][T14408] IPVS: Error connecting to the multicast addr
[  294.286567][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2374'.
[  294.509939][T14435] ip6t_rpfilter: unknown options
[  294.612019][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2379'.
[  294.630968][T14441] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2379'.
[  294.966973][T14469] netlink: 'syz.2.2388': attribute type 29 has an invalid length.
[  295.100995][T14475] bridge0: port 3(team0) entered disabled state
[  295.161834][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  295.198079][T14482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2392'.
[  295.386023][T14494] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  295.397415][T14494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.428636][T14475] team0 (unregistering): left allmulticast mode
[  295.462073][T14475] team_slave_0: left allmulticast mode
[  295.472570][T14475] team_slave_1: left allmulticast mode
[  295.478103][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'.
[  295.489165][T14475] team0 (unregistering): left promiscuous mode
[  295.496001][T14475] team_slave_0: left promiscuous mode
[  295.520347][T14475] team_slave_1: left promiscuous mode
[  295.533142][T14475] bridge0: port 3(team0) entered disabled state
[  295.587849][T14475] team0 (unregistering): Port device team_slave_0 removed
[  295.609496][T14475] team0 (unregistering): Port device team_slave_1 removed
[  295.626728][T14475] team0 (unregistering): Port device bridge2 removed
[  295.654468][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'.
[  295.713077][T14484] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  295.896500][ T5837] Bluetooth: hci4: link tx timeout
[  295.902162][ T5837] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  296.204337][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  296.269495][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.303928][T14492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.495957][T14495] geneve2: entered promiscuous mode
[  296.502059][T14495] geneve2: entered allmulticast mode
[  296.526824][    T9] lo speed is unknown, defaulting to 1000
[  296.543109][ T8915] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.543268][    T9] syz2: Port: 1 Link DOWN
[  296.572683][ T8915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.593359][ T8915] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  296.634392][ T8915] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.680164][ T8915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.721834][ T8915] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  296.744708][T14541] geneve1: entered promiscuous mode
[  296.762016][T14541] geneve1: entered allmulticast mode
[  296.770456][ T8915] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.829358][ T8915] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  296.866434][ T8915] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.890240][ T8915] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  296.961914][ T8915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.980264][ T8915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.111026][T14563] netlink: 'syz.3.2412': attribute type 3 has an invalid length.
[  297.182460][T14573] netlink: 'syz.1.2414': attribute type 1 has an invalid length.
[  297.200730][T14573] netlink: 'syz.1.2414': attribute type 3 has an invalid length.
[  297.210089][T14573] netlink: 'syz.1.2414': attribute type 7 has an invalid length.
[  297.230394][T14573] netlink: 'syz.1.2414': attribute type 8 has an invalid length.
[  297.240580][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  297.255182][T14577] netlink: 'syz.4.2416': attribute type 2 has an invalid length.
[  297.261200][T14573] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2414'.
[  297.285640][T14573] NCSI netlink: No device for ifindex 131092
[  297.314969][T14584] netlink: 'syz.2.2418': attribute type 1 has an invalid length.
[  297.503439][T14594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  297.625878][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.636345][T14605] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  297.661244][T14593] dvmrp6: left allmulticast mode
[  297.676244][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.706022][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.716597][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.725247][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.733207][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.740649][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.748647][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.782995][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.796121][T14597] xt_addrtype: ipv6 does not support BROADCAST matching
[  297.963702][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  298.280807][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  298.933462][T14633] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  298.951479][T14633] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  298.964923][T14641] wireguard: wg1: Could not create IPv4 socket
[  298.982845][T14641] wg1: entered promiscuous mode
[  299.005552][T14641] wg1: entered allmulticast mode
[  299.010937][T14642] vcan0: entered allmulticast mode
[  299.021044][T14642] sctp: [Deprecated]: syz.4.2437 (pid 14642) Use of struct sctp_assoc_value in delayed_ack socket option.
[  299.021044][T14642] Use struct sctp_sack_info instead
[  299.321079][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  299.421186][T14660] __nla_validate_parse: 3 callbacks suppressed
[  299.421208][T14660] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2443'.
[  299.515387][T14656] bond8: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  299.561858][T14656] bond8 (unregistering): Released all slaves
[  299.603202][T14666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'.
[  299.720322][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  300.360630][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  300.537529][T14702] x_tables: duplicate underflow at hook 3
[  300.758586][T14718] ip6gre2: entered allmulticast mode
[  300.893931][T14725] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2
[  300.934786][T14725] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€
[  301.111561][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2458'.
[  301.130137][T14736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2458'.
[  301.184228][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'.
[  301.400759][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  301.450735][T14752] netlink: 'syz.1.2462': attribute type 11 has an invalid length.
[  301.664140][T14763] IPVS: set_ctl: invalid protocol: 84 224.0.0.1:20000
[  301.724020][T14763] ieee802154 phy1 wpan1: encryption failed: -22
[  301.976009][T14788] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2468'.
[  301.976070][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'.
[  302.038268][T14779] netlink: 'syz.2.2468': attribute type 5 has an invalid length.
[  302.212063][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'.
[  302.240439][T14804] netlink: 'syz.2.2475': attribute type 10 has an invalid length.
[  302.444901][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  302.477096][T14817] xt_connbytes: Forcing CT accounting to be enabled
[  302.571476][T14825] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2479'.
[  302.608932][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.635383][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'.
[  302.755075][T14842] netlink: 'syz.2.2482': attribute type 1 has an invalid length.
[  302.873264][T14842] veth11: entered allmulticast mode
[  303.481026][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  303.673849][T14878] lo speed is unknown, defaulting to 1000
[  304.065426][T14903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.090684][T14903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  304.163226][T14919] netlink: 'syz.4.2496': attribute type 1 has an invalid length.
[  304.173090][T14919] netlink: 'syz.4.2496': attribute type 2 has an invalid length.
[  304.193854][T14903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.205168][T14903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  304.369115][T14903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.381639][T14903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  304.506767][T14903] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ
[  304.520716][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  304.536809][T14903] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.548649][T14930] __nla_validate_parse: 6 callbacks suppressed
[  304.548669][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2499'.
[  304.580683][T14903] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  304.848616][ T8915] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  304.873712][ T8915] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  304.904078][T14950] netlink: 'syz.1.2504': attribute type 11 has an invalid length.
[  305.018680][ T8915] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  305.029455][ T8915] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  305.076918][ T8915] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  305.105834][ T8915] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  305.269138][ T8915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  305.300259][ T8915] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  305.660574][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  306.216172][T14988] bond2: left promiscuous mode
[  306.221425][T14988] gre1: left promiscuous mode
[  306.245368][T14988] bridge4: left promiscuous mode
[  306.258023][T14988] geneve2: left promiscuous mode
[  306.277458][T14988] gretap1: left promiscuous mode
[  306.299112][T14988] geneve3: left promiscuous mode
[  306.315033][T14988] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  306.367812][T14988] team1: left promiscuous mode
[  306.405209][T14988] team2: left promiscuous mode
[  306.488276][ T8915] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.530538][ T8915] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  306.538864][ T8915] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.594396][ T8915] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.610489][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  306.650816][ T8915] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  306.659144][ T8915] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.691938][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'.
[  306.743300][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2518'.
[  306.744349][ T8915] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.775976][ T8915] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  306.800332][ T8915] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.853524][T15012] 8021q: adding VLAN 0 to HW filter on device bond4
[  306.953889][T15012] netlink: 'syz.3.2518': attribute type 3 has an invalid length.
[  306.995521][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'.
[  307.084288][T15030] netlink: 'syz.4.2522': attribute type 4 has an invalid length.
[  307.155049][T15016] bond4 (unregistering): Released all slaves
[  307.183861][ T8915] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.201137][ T8915] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  307.209666][ T8915] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  307.640347][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  308.685726][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  309.571053][T15061] netlink: 'syz.4.2531': attribute type 18 has an invalid length.
[  309.720678][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  309.751151][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'.
[  309.876861][T15081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2534'.
[  310.020774][T15088] netlink: 'syz.0.2538': attribute type 11 has an invalid length.
[  310.042239][T15088] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2538'.
[  310.258798][T15095] netlink: 'syz.3.2541': attribute type 4 has an invalid length.
[  310.499619][T15116] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2544'.
[  310.538420][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'.
[  310.548856][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'.
[  310.617012][T15123] netlink: 'syz.3.2549': attribute type 1 has an invalid length.
[  310.630729][T15123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.760896][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  311.061874][T15147] gre0: entered promiscuous mode
[  311.067029][T15147] gre0: entered allmulticast mode
[  311.415675][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'.
[  311.425495][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'.
[  311.478558][T15154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2557'.
[  311.512216][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'.
[  311.565861][T15158] ip6t_rpfilter: unknown options
[  311.668216][T15164] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  311.801683][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  312.203246][T15199] vlan2: entered allmulticast mode
[  312.208455][T15199] gretap0: entered allmulticast mode
[  312.253577][T15201] netlink: 'syz.0.2576': attribute type 1 has an invalid length.
[  312.422921][T15211] addrtype_mt_checkentry_v1: 23 callbacks suppressed
[  312.422944][T15211] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  312.576468][T15222] netlink: 'syz.1.2582': attribute type 33 has an invalid length.
[  312.765661][T15232] pimreg: entered allmulticast mode
[  312.818907][T15233] syzkaller0: entered promiscuous mode
[  312.846332][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  312.852568][T15233] syzkaller0: entered allmulticast mode
[  313.644545][T15275] lo speed is unknown, defaulting to 1000
[  313.757495][T15282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.880498][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  313.974986][T15292] xt_CT: No such helper "snmp_trap"
[  314.923051][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  314.999514][T15361] __nla_validate_parse: 15 callbacks suppressed
[  314.999607][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2621'.
[  315.026457][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2621'.
[  315.219928][T15378] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  315.476041][T15395] syzkaller1: entered promiscuous mode
[  315.507826][T15395] syzkaller1: entered allmulticast mode
[  315.523119][T15400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2631'.
[  315.532751][T15400] tipc: Invalid UDP bearer configuration
[  315.532821][T15400] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  315.648483][T15408] lo speed is unknown, defaulting to 1000
[  315.771603][T15421] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2638'.
[  315.787790][T15425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2639'.
[  315.960850][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  316.175658][T15450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.189763][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'.
[  316.210246][ T7472] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.223947][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'.
[  316.246302][ T7472] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.266097][ T7472] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.286269][ T7472] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.773538][T15486] dvmrp6: entered allmulticast mode
[  316.815308][T15485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2656'.
[  317.002452][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  317.212658][T15514] netlink: 'syz.4.2663': attribute type 13 has an invalid length.
[  317.240637][T15514] netlink: 'syz.4.2663': attribute type 17 has an invalid length.
[  317.328474][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.338486][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.395435][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'.
[  317.460776][T15514] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.472068][T15514] 8021q: adding VLAN 0 to HW filter on device team0
[  317.483020][T15514] batman_adv: batadv0: Interface activated: dummy0
[  317.489751][T15514] batadv0: mtu less than device minimum
[  317.497972][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.509661][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.521335][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.533787][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.545957][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.558060][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.570309][T15514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.631110][T15533] gre1: entered promiscuous mode
[  317.636140][T15533] gre1: entered allmulticast mode
[  317.970942][T15542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  318.042654][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  318.079105][T15559] xt_SECMARK: invalid mode: 9
[  318.275961][T15563] gretap0: entered promiscuous mode
[  318.283003][T15563] vlan2: entered promiscuous mode
[  318.313916][T15567] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2677'.
[  318.454931][T15583] delete_channel: no stack
[  318.566310][T15589] netlink: 'syz.3.2686': attribute type 5 has an invalid length.
[  318.706835][T15601] netlink: 'syz.4.2690': attribute type 6 has an invalid length.
[  318.824904][T15607] bridge8: entered allmulticast mode
[  318.857540][T15606] netlink: 'syz.0.2692': attribute type 9 has an invalid length.
[  319.080535][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  319.246769][T15629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.511728][T15645] netlink: 'syz.0.2703': attribute type 1 has an invalid length.
[  319.685662][T15645] 8021q: adding VLAN 0 to HW filter on device bond10
[  319.738381][T15656] 8021q: adding VLAN 0 to HW filter on device bond10
[  319.751008][T15656] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  319.767685][T15656] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  319.842862][T15640] veth9: entered promiscuous mode
[  319.852307][T15640] bond10: (slave veth9): Enslaving as an active interface with a down link
[  319.864003][T15645] 8021q: adding VLAN 0 to HW filter on device bond10
[  320.121041][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  320.329600][T15697] netlink: 'syz.0.2714': attribute type 1 has an invalid length.
[  320.345434][T15697] __nla_validate_parse: 8 callbacks suppressed
[  320.345533][T15697] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2714'.
[  320.378952][T15700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.410854][T15708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.421971][T15696] syzkaller0: entered promiscuous mode
[  320.433222][T15700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.447333][T15696] syzkaller0: entered allmulticast mode
[  321.160806][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  322.201549][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  323.228794][T15762] netlink: 'syz.4.2730': attribute type 1 has an invalid length.
[  323.240449][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  323.241305][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'.
[  323.295787][T15768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'.
[  323.305020][T15762] 8021q: adding VLAN 0 to HW filter on device bond8
[  323.320536][T15766] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2731'.
[  323.363389][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'.
[  323.419613][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2733'.
[  323.500614][T15772] syzkaller0: entered promiscuous mode
[  323.506197][T15772] syzkaller0: entered allmulticast mode
[  323.871946][T15801] gre1: entered allmulticast mode
[  324.010688][T15808] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  324.051455][T15808] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  324.109614][T15808] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  324.131776][T15808] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  324.146364][T15818] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  324.157427][T15808] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  324.172731][T15808] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  324.208992][T15808] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  324.224401][T15808] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  324.253971][T15821] xt_CT: You must specify a L4 protocol and not use inversions on it
[  324.263980][T15808] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  324.269927][T15808] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  324.290204][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  324.331947][T15823] xt_l2tp: invalid flags combination: 0
[  324.499440][T15839] x_tables: duplicate underflow at hook 2
[  324.583346][T15842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2750'.
[  325.055458][T15867] C: renamed from team_slave_0
[  325.083010][T15867] netlink: 'syz.3.2758': attribute type 1 has an invalid length.
[  325.105483][T15867] net_ratelimit: 13 callbacks suppressed
[  325.105572][T15867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  325.321678][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  325.356400][T15890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.549095][T15901] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2766'.
[  325.835155][T15917] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  325.849698][T15919] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  326.135529][T15931] vlan2: entered promiscuous mode
[  326.164706][T15931] bond0: entered promiscuous mode
[  326.173107][T15931] bond0: (slave vlan2): Opening slave failed
[  326.265161][T15944] tipc: Resetting bearer <eth:vlan0>
[  326.290868][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  326.420909][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  326.509628][T15958] netlink: 'syz.3.2784': attribute type 13 has an invalid length.
[  326.533518][T15958] gretap0: refused to change device tx_queue_len
[  326.540428][T15958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  326.659293][T15964] netlink: 'syz.2.2788': attribute type 1 has an invalid length.
[  326.667348][T15964] netlink: 'syz.2.2788': attribute type 2 has an invalid length.
[  326.675336][T15964] netlink: 'syz.2.2788': attribute type 1 has an invalid length.
[  326.701092][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  326.713376][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'.
[  327.245015][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  327.295388][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'.
[  327.306519][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2799'.
[  327.447499][T16003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2799'.
[  327.531900][T16014] Cannot find add_set index 0 as target
[  327.881436][ T5831] Bluetooth: hci2: command tx timeout
[  328.094503][T16042] syzkaller0: entered promiscuous mode
[  328.110161][T16042] syzkaller0: entered allmulticast mode
[  328.295241][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  328.561678][T16062] netlink: 'syz.0.2814': attribute type 2 has an invalid length.
[  328.631260][T16064] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2815'.
[  328.726566][T16066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.741566][T16066] syzkaller0: entered promiscuous mode
[  328.747097][T16066] syzkaller0: entered allmulticast mode
[  328.815115][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  328.826831][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  328.835005][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  328.845158][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  328.852954][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  328.882125][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  328.889598][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  328.898180][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  328.899687][T16075] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  328.922978][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  328.924370][T16075] bond11 (unregistering): Released all slaves
[  328.940740][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  328.972442][T16066] tipc: Resetting bearer <eth:syzkaller0>
[  328.991742][T16065] tipc: Resetting bearer <eth:syzkaller0>
[  329.046067][T16065] tipc: Disabling bearer <eth:syzkaller0>
[  329.191778][T16077] lo speed is unknown, defaulting to 1000
[  329.216133][T16093] netlink: 'syz.3.2824': attribute type 1 has an invalid length.
[  329.228153][T16093] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2824'.
[  329.331127][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  329.543990][T16112] netlink: 'syz.1.2829': attribute type 1 has an invalid length.
[  329.549310][T16077] chnl_net:caif_netlink_parms(): no params data found
[  329.701959][T16120] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2832'.
[  329.704409][T16112] bond7: entered promiscuous mode
[  329.716591][T16112] bond7: entered allmulticast mode
[  329.723335][T16112] 8021q: adding VLAN 0 to HW filter on device bond7
[  329.790678][ T8921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.813979][ T8921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.825456][ T8921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  329.874106][T16115] macvlan2: entered promiscuous mode
[  329.883830][T16115] macvlan2: entered allmulticast mode
[  329.910519][T16115] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  330.025029][T16140] netlink: 'syz.0.2836': attribute type 8 has an invalid length.
[  330.088889][T16147] netlink: 'syz.1.2838': attribute type 19 has an invalid length.
[  330.118363][ T8921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.129886][ T8921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.143313][ T8921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  330.361019][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  330.411183][T16077] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.419650][T16077] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.432761][T16077] bridge_slave_0: entered allmulticast mode
[  330.449580][T16077] bridge_slave_0: entered promiscuous mode
[  330.486040][ T8921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.496892][ T8921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.507846][ T8921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  330.525219][T16158] x_tables: duplicate entry at hook 1
[  330.532143][T16158] sctp: [Deprecated]: syz.1.2839 (pid 16158) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.532143][T16158] Use struct sctp_sack_info instead
[  330.603586][T16077] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.614299][T16077] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.622810][T16077] bridge_slave_1: entered allmulticast mode
[  330.631945][T16077] bridge_slave_1: entered promiscuous mode
[  330.778684][ T8921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.828241][ T8921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.885077][ T8921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  331.040478][ T5831] Bluetooth: hci2: command tx timeout
[  331.054227][T16077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.094910][T16077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.207552][T16077] team0: Port device team_slave_0 added
[  331.231831][T16077] team0: Port device team_slave_1 added
[  331.365173][T16176] delete_channel: no stack
[  331.378435][T16176] netlink: 'syz.3.2847': attribute type 1 has an invalid length.
[  331.396537][T16077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.410471][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.436606][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  331.441432][T16178] x_tables: duplicate underflow at hook 1
[  331.477384][T16077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.524138][T16176] 8021q: adding VLAN 0 to HW filter on device bond4
[  331.624198][T16180] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  331.635223][ T7472] nci: nci_rx_work: unknown MT 0x7
[  331.645070][T16180] bond5 (unregistering): Released all slaves
[  331.674619][T16077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.683711][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.710729][T16077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.728257][T16176] bond4: (slave veth0_to_bond): making interface the new active one
[  331.751219][T16176] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  331.894843][T16201] netlink: 'syz.3.2849': attribute type 1 has an invalid length.
[  331.952951][ T8921] bond3: left allmulticast mode
[  331.958414][ T8921] bond3: left promiscuous mode
[  331.964929][ T8921] bridge0: port 3(bond3) entered disabled state
[  331.975961][ T8921] bridge_slave_0: left allmulticast mode
[  331.982073][ T8921] bridge_slave_0: left promiscuous mode
[  331.987846][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.063903][ T8921] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface
[  332.074660][ T8921] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - aa:55:0c:21:9a:61 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  332.108634][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'.
[  332.301475][ T8921] bond4 (unregistering): (slave gretap2): Releasing backup interface
[  332.318562][T16210] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2852'.
[  332.366833][ T8921] dvmrp1 (unregistering): left allmulticast mode
[  332.384780][ T8921] dvmrp0 (unregistering): left allmulticast mode
[  332.448161][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  332.705353][ T8921] bond7 (unregistering): (slave bridge5): Releasing backup interface
[  332.714221][ T8921] bridge5 (unregistering): left promiscuous mode
[  332.934440][ T8921] bond0 (unregistering): left promiscuous mode
[  332.942553][ T8921] bond_slave_0: left promiscuous mode
[  332.948602][ T8921] bond_slave_1: left promiscuous mode
[  332.955025][ T8921] dummy0: left promiscuous mode
[  332.964549][ T8921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.977145][ T8921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.988970][ T8921] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  333.002063][ T8921] bond0 (unregistering): Released all slaves
[  333.080339][ T5831] Bluetooth: hci2: command tx timeout
[  333.144045][ T8921] bond1 (unregistering): Released all slaves
[  333.288018][ T8921] bond2 (unregistering): Released all slaves
[  333.394045][ T8921] bond3 (unregistering): Released all slaves
[  333.483676][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  333.506285][ T8921] bond4 (unregistering): (slave bond5): Releasing backup interface
[  333.515484][ T8921] bond4 (unregistering): Released all slaves
[  333.623101][ T8921] bond5 (unregistering): Released all slaves
[  333.726506][ T8921] bond6 (unregistering): Released all slaves
[  333.832906][ T8921] bond7 (unregistering): Released all slaves
[  333.934562][ T8921] bond8 (unregistering): Released all slaves
[  333.948920][ T8921] bond9 (unregistering): (slave veth5): Releasing backup interface
[  333.957653][ T8921] bond9 (unregistering): Released all slaves
[  333.977525][ T8921] bond10 (unregistering): Released all slaves
[  334.025129][T16077] hsr_slave_0: entered promiscuous mode
[  334.033125][T16077] hsr_slave_1: entered promiscuous mode
[  334.521352][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  335.160298][ T5831] Bluetooth: hci2: command tx timeout
[  335.560912][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  335.744406][ T8921] : left promiscuous mode
[  335.874675][ T8921] : left promiscuous mode
[  335.965053][T16236] openvswitch: netlink: Duplicate or invalid key (type 0).
[  335.973126][T16236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.026677][ T8921] tipc: Disabling bearer <udp:syz2>
[  336.056057][ T8921] tipc: Disabling bearer <eth:syzkaller0>
[  336.083075][T16239] netlink: 'syz.3.2862': attribute type 83 has an invalid length.
[  336.096586][ T8921] tipc: Left network mode
[  336.116825][T16239] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2862'.
[  336.172252][ T8921] IPVS: stopping master sync thread 11619 ...
[  336.224058][T16239] lo: entered allmulticast mode
[  336.241635][T16245] netlink: 'syz.1.2865': attribute type 9 has an invalid length.
[  336.310762][T16252] netlink: 'syz.1.2865': attribute type 9 has an invalid length.
[  336.600455][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  336.673357][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'.
[  336.980335][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2873'.
[  337.115237][T16293] wg1: entered promiscuous mode
[  337.140381][T16293] wg1: entered allmulticast mode
[  337.240392][ T5831] Bluetooth: hci2: command tx timeout
[  337.357146][T16303] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2880'.
[  337.405582][T16077] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  337.419188][T16077] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  337.442849][T16305] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  337.462147][T16077] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  337.501359][T16077] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  337.644101][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  337.711555][ T8921] batadv0: left promiscuous mode
[  337.722167][ T8921] hsr_slave_0: left promiscuous mode
[  337.731123][ T8921] hsr_slave_1: left promiscuous mode
[  337.737533][ T8921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.748077][ T8921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.305120][ T8921] team0 (unregistering): Port device team_slave_1 removed
[  338.345769][ T8921] team0 (unregistering): Port device team_slave_0 removed
[  338.682928][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  338.826730][T16346] netlink: 'syz.4.2891': attribute type 3 has an invalid length.
[  338.846760][T16077] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.888517][T16349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2892'.
[  338.899799][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'.
[  338.918585][T16077] 8021q: adding VLAN 0 to HW filter on device team0
[  338.995128][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2894'.
[  339.021272][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2894'.
[  339.102720][T16358] xt_TPROXY: Can be used only with -p tcp or -p udp
[  339.114167][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2895'.
[  339.143846][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.151174][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.206703][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.213925][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.293747][T16367] C: renamed from lo (while UP)
[  339.431196][T16372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.469059][T16372] syzkaller0: entered promiscuous mode
[  339.477049][T16372] syzkaller0: entered allmulticast mode
[  339.504803][T16372] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  339.587779][T16372] tipc: Resetting bearer <eth:syzkaller0>
[  339.613567][T16371] tipc: Resetting bearer <eth:syzkaller0>
[  339.637439][T16371] tipc: Disabling bearer <eth:syzkaller0>
[  339.673238][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2902'.
[  339.708671][T16383] bond8: entered promiscuous mode
[  339.714688][T16383] bond8: entered allmulticast mode
[  339.721241][T16383] 8021q: adding VLAN 0 to HW filter on device bond8
[  339.728290][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  339.809624][T16383] macvlan4: entered promiscuous mode
[  339.837843][T16383] macvlan4: entered allmulticast mode
[  339.857574][T16383] bond0: (slave macvlan4): Opening slave failed
[  339.951124][T16393] syzkaller0: entered promiscuous mode
[  339.956746][T16393] syzkaller0: entered allmulticast mode
[  340.069601][T16403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'.
[  340.092252][T16403] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2907'.
[  340.111292][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'.
[  340.207547][T16077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.289252][T16409] IPVS: length: 239 != 24
[  340.423402][T16077] veth0_vlan: entered promiscuous mode
[  340.469540][T16077] veth1_vlan: entered promiscuous mode
[  340.590697][T16077] veth0_macvtap: entered promiscuous mode
[  340.603274][T16077] veth1_macvtap: entered promiscuous mode
[  340.622645][T16432] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  340.677172][T16077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  340.726454][T16077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.764659][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  340.789091][ T7472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.816568][ T7472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.844894][ T7472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.942029][T16439] bond5: option mode: invalid value (7)
[  340.950761][T16439] bond5 (unregistering): Released all slaves
[  340.985444][ T7472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.198347][ T8921] IPVS: stop unused estimator thread 0...
[  341.281105][ T8915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.289526][ T8915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.304261][T16457] openvswitch: netlink: Missing key (keys=40, expected=100)
[  341.316219][T16457] netlink: 'syz.1.2924': attribute type 75 has an invalid length.
[  341.389794][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.401627][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.805147][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  342.092655][T16489] netlink: 'syz.0.2931': attribute type 10 has an invalid length.
[  342.149564][T16489] team0: Port device dummy0 added
[  342.174381][T16494] veth0: entered promiscuous mode
[  342.218784][T16494] veth0 (unregistering): left promiscuous mode
[  342.434941][T16506] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  342.841250][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  343.094624][T16541] vxcan0: tx drop: invalid sa for name 0x0000080000000001
[  343.163240][T16527] team0 (unregistering): Port device team_slave_0 removed
[  343.186071][T16527] team0 (unregistering): Port device team_slave_1 removed
[  343.372151][T16548] netlink: 'syz.4.2950': attribute type 4 has an invalid length.
[  343.425342][T16556] __nla_validate_parse: 3 callbacks suppressed
[  343.425365][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2953'.
[  343.465954][ T8915] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.484880][ T8915] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.512119][ T8915] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.535886][ T8915] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.557353][T16560] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2954'.
[  343.585313][T16561] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2955'.
[  343.826940][T16577] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2961'.
[  343.923310][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  344.048477][T16594] openvswitch: netlink: IP tunnel dst address not specified
[  344.112167][T16595] pim6reg1: entered promiscuous mode
[  344.127799][T16595] pim6reg1: entered allmulticast mode
[  344.127880][T16597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'.
[  344.140331][T16595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2966'.
[  344.166357][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2967'.
[  344.177142][T16601] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  344.354815][T16612] netlink: 6532 bytes leftover after parsing attributes in process `syz.2.2971'.
[  344.900660][T16642] x_tables: duplicate underflow at hook 1
[  344.923303][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  344.967995][T16646] netlink: 'syz.1.2978': attribute type 21 has an invalid length.
[  344.996421][T16646] netlink: 'syz.1.2978': attribute type 1 has an invalid length.
[  345.178358][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'.
[  345.190647][T16664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'.
[  345.208730][T16664] geneve4: entered promiscuous mode
[  345.214316][T16664] geneve4: entered allmulticast mode
[  345.513330][T16670] syzkaller0: entered promiscuous mode
[  345.526670][T16670] syzkaller0: entered allmulticast mode
[  345.963722][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  346.476332][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.486895][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.500662][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.517634][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.529329][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.961188][T16741] sit0: entered promiscuous mode
[  346.970311][T16741] netlink: 'syz.1.3002': attribute type 1 has an invalid length.
[  347.009969][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  347.162096][T16750] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.170022][T16750] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.652664][T16718] chnl_net:caif_netlink_parms(): no params data found
[  348.006864][T16718] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.035056][T16718] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.047314][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  348.051672][T16718] bridge_slave_0: entered allmulticast mode
[  348.065172][T16718] bridge_slave_0: entered promiscuous mode
[  348.078484][T16718] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.106543][T16718] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.132411][T16718] bridge_slave_1: entered allmulticast mode
[  348.154930][T16718] bridge_slave_1: entered promiscuous mode
[  348.216187][T16825] netlink: 'syz.2.3024': attribute type 1 has an invalid length.
[  348.284370][ T8916] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  348.308405][ T8916] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  348.357317][T16718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.382328][T16718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.472102][T16829] bond1 (unregistering): Released all slaves
[  348.518766][T16846] netlink: 'syz.3.3028': attribute type 21 has an invalid length.
[  348.533498][T16846] __nla_validate_parse: 11 callbacks suppressed
[  348.533519][T16846] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3028'.
[  348.552287][ T8916] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  348.562330][ T8916] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  348.610370][ T5831] Bluetooth: hci1: command tx timeout
[  348.699366][ T8916] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  348.711025][ T8916] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  348.728176][T16718] team0: Port device team_slave_0 added
[  348.743243][T16718] team0: Port device team_slave_1 added
[  348.765667][T16851] tipc: Started in network mode
[  348.771525][T16851] tipc: Node identity c2284c4e667a, cluster identity 4711
[  348.783552][T16851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.945033][T16851] syzkaller0: entered promiscuous mode
[  348.951036][T16851] syzkaller0: entered allmulticast mode
[  348.958720][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  348.967036][T16718] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.975948][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.005593][T16718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.043626][ T8916] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  349.053921][ T8916] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  349.074725][T16718] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.083148][T16718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.111596][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  349.114122][T16718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.201976][T16578] tipc: Resetting bearer <eth:syzkaller0>
[  349.210337][T16868] vcan0: entered allmulticast mode
[  349.231245][T16850] tipc: Resetting bearer <eth:syzkaller0>
[  350.122597][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  350.680256][ T5831] Bluetooth: hci1: command tx timeout
[  350.764391][T16850] tipc: Disabling bearer <eth:syzkaller0>
[  350.807562][T16876] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  350.824774][T16880] netlink: 'syz.3.3035': attribute type 29 has an invalid length.
[  350.835776][    T9] tipc: Node number set to 2756856910
[  350.953602][T16718] hsr_slave_0: entered promiscuous mode
[  350.970519][T16718] hsr_slave_1: entered promiscuous mode
[  350.982247][T16718] debugfs: 'hsr0' already exists in 'hsr'
[  350.989525][T16718] Cannot create hsr debugfs directory
[  351.141110][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'.
[  351.150869][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3039'.
[  351.162514][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  351.211996][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'.
[  351.262138][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'.
[  351.280357][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3039'.
[  351.519159][ T8916] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  351.529375][ T8916] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface
[  351.897404][ T8916] team0: Port device geneve0 removed
[  352.201029][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  352.620338][ T8916] bond0 (unregistering): Released all slaves
[  352.634348][ T8916] bond1 (unregistering): Released all slaves
[  352.750204][ T8916] bond2 (unregistering): Released all slaves
[  352.760207][ T5831] Bluetooth: hci1: command tx timeout
[  352.857806][ T8916] bond3 (unregistering): Released all slaves
[  352.872302][ T8916] bond4 (unregistering): Released all slaves
[  352.979471][ T8916] bond5 (unregistering): Released all slaves
[  352.994471][ T8916] bond6 (unregistering): Released all slaves
[  353.007953][ T8916] bond7 (unregistering): Released all slaves
[  353.022011][ T8916] bond8 (unregistering): (slave bond9): Releasing backup interface
[  353.033156][ T8916] bond8 (unregistering): Released all slaves
[  353.137685][ T8916] bond9 (unregistering): Released all slaves
[  353.243513][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  353.261404][ T8916] bond10 (unregistering): (slave veth9): Releasing active interface
[  353.271546][ T8916] bond10 (unregistering): Released all slaves
[  353.599185][T16929] delete_channel: no stack
[  353.910684][T16951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3055'.
[  353.929264][T16943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.999359][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.026540][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.033258][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.042039][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.048248][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.054465][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.063064][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.069238][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.076028][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.082747][T16956] xt_TCPMSS: Only works on TCP SYN packets
[  354.175782][T16718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  354.193917][T16718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  354.215000][T16718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  354.241605][T16718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  354.282466][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  354.467872][T16976] netlink: 'syz.4.3063': attribute type 2 has an invalid length.
[  354.489778][T16976] netlink: 'syz.4.3063': attribute type 1 has an invalid length.
[  354.536882][T16718] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.622558][T16718] 8021q: adding VLAN 0 to HW filter on device team0
[  354.677793][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.685070][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.734938][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.742227][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.843299][ T5831] Bluetooth: hci1: command tx timeout
[  354.902853][ T8916] �9: left promiscuous mode
[  355.154424][ T8916] tipc: Left network mode
[  355.229910][ T8916] IPVS: stopping backup sync thread 7976 ...
[  355.323299][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  355.337829][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3075'.
[  355.355248][T16718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.404184][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'.
[  355.506213][T17021] team0: entered promiscuous mode
[  355.530582][T17021] team0: entered allmulticast mode
[  355.759000][T17048] netlink: 'syz.3.3082': attribute type 1 has an invalid length.
[  355.771101][T17045] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.979177][T17055] bond5: (slave ip6gretap1): making interface the new active one
[  355.987996][T17055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  355.997460][T17055] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  356.006591][T17055] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  356.066654][T16718] veth0_vlan: entered promiscuous mode
[  356.195724][T16718] veth1_vlan: entered promiscuous mode
[  356.259822][T17076] netlink: 'syz.2.3084': attribute type 10 has an invalid length.
[  356.356856][T17080] netlink: 'syz.2.3084': attribute type 10 has an invalid length.
[  356.370550][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  356.466816][ T8916] hsr_slave_0: left promiscuous mode
[  356.485554][ T8916] hsr_slave_1: left promiscuous mode
[  356.636413][T17093] sctp: [Deprecated]: syz.1.3091 (pid 17093) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.636413][T17093] Use struct sctp_sack_info instead
[  356.667594][T17092] sctp: [Deprecated]: syz.1.3091 (pid 17092) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.667594][T17092] Use struct sctp_sack_info instead
[  357.286853][ T8916] team0 (unregistering): Port device dummy0 removed
[  357.401486][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  357.435331][T17080] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  357.540522][T16718] veth0_macvtap: entered promiscuous mode
[  357.574033][T16718] veth1_macvtap: entered promiscuous mode
[  357.703621][T16718] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.758386][T16718] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.797523][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.815043][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.839613][T17107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3095'.
[  357.871508][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3094'.
[  357.874090][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.910116][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.173337][T16578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.184376][T16578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.202605][ T8916] IPVS: stop unused estimator thread 0...
[  358.303285][T16582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.341006][T16582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.445567][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  358.448543][T17128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.494599][T17129] syzkaller0: entered promiscuous mode
[  358.520885][T17129] syzkaller0: entered allmulticast mode
[  358.550459][T17128] tipc: Resetting bearer <eth:syzkaller0>
[  358.593650][T17128] tipc: Disabling bearer <eth:syzkaller0>
[  358.824323][T17144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3105'.
[  359.074731][T17152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3107'.
[  359.123710][T17156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'.
[  359.188739][T17156] netlink: 'syz.2.3109': attribute type 10 has an invalid length.
[  359.233375][T17156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3109'.
[  359.352452][T17156] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  359.485272][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  359.739713][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  359.753395][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  359.761831][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  359.805386][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  359.816673][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.026649][T17200] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.067051][T17195] syzkaller0: entered promiscuous mode
[  360.077012][T17195] syzkaller0: entered allmulticast mode
[  360.096278][T17195] sch_tbf: burst 33 is lower than device syzkaller0 mtu (1514) !
[  360.157245][T17204] openvswitch: netlink: Duplicate or invalid key (type 0).
[  360.177537][T17204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.517450][T17214] netlink: 'syz.2.3125': attribute type 6 has an invalid length.
[  360.531353][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  360.629632][T17179] chnl_net:caif_netlink_parms(): no params data found
[  360.864456][T17238] netlink: 'syz.1.3131': attribute type 27 has an invalid length.
[  360.942066][T17179] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.949506][T17179] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.959271][T17179] bridge_slave_0: entered allmulticast mode
[  360.968814][T17179] bridge_slave_0: entered promiscuous mode
[  360.986080][T17179] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.996353][T17179] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.005963][T17179] bridge_slave_1: entered allmulticast mode
[  361.017359][T17179] bridge_slave_1: entered promiscuous mode
[  361.135926][T17253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.281713][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'.
[  361.429785][T17179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.566652][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  361.581056][T17179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.711884][T17179] team0: Port device team_slave_0 added
[  361.755534][T17179] team0: Port device team_slave_1 added
[  361.807269][T17285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.853271][T17290] ipvlan2: entered promiscuous mode
[  361.882092][ T5831] Bluetooth: hci4: command tx timeout
[  361.995456][T17179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.010226][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.069575][T17179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.136405][T17179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.155207][T17179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  362.208662][T17179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.466572][T17179] hsr_slave_0: entered promiscuous mode
[  362.477161][T17179] hsr_slave_1: entered promiscuous mode
[  362.492873][T17179] debugfs: 'hsr0' already exists in 'hsr'
[  362.498658][T17179] Cannot create hsr debugfs directory
[  362.515387][T17315] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  362.530819][T17315] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  362.550848][T17322] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3152'.
[  362.569586][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3153'.
[  362.589105][T17320] netlink: 'syz.2.3151': attribute type 4 has an invalid length.
[  362.592802][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3153'.
[  362.609643][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  362.653163][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  362.786709][T17334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3154'.
[  363.013412][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3159'.
[  363.057691][T16578] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  363.092657][T16578] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  363.116895][T16578] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  363.236873][T17179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.262157][T16578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  363.434374][T17179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.596098][T17179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.640487][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  363.691233][T17179] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.901215][T17383] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  363.915265][T17383] bond1 (unregistering): Released all slaves
[  363.962644][ T5831] Bluetooth: hci4: command tx timeout
[  363.979458][T17179] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  363.999378][T17179] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  364.012212][T17179] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  364.025857][T17179] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  364.089449][T17397] __nla_validate_parse: 9 callbacks suppressed
[  364.089471][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'.
[  364.178425][T17179] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.217905][T17179] 8021q: adding VLAN 0 to HW filter on device team0
[  364.237583][T16578] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.244834][T16578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.249796][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'.
[  364.286904][T16578] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.294164][T16578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.314540][T17401] netlink: 'syz.0.3175': attribute type 12 has an invalid length.
[  364.683871][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  364.696593][T17427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.708479][T17426] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.726926][T17424] syzkaller0: entered promiscuous mode
[  364.732745][T17424] syzkaller0: entered allmulticast mode
[  364.749607][T17427] sch_tbf: burst 4 is lower than device wg0 mtu (1420) !
[  364.801728][T17426] tipc: Resetting bearer <eth:syzkaller0>
[  364.817877][T17423] tipc: Resetting bearer <eth:syzkaller0>
[  364.824361][T17429] netlink: 'syz.4.3183': attribute type 1 has an invalid length.
[  364.849461][T17423] tipc: Disabling bearer <eth:syzkaller0>
[  364.881697][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3183'.
[  364.932793][T17429] 8021q: adding VLAN 0 to HW filter on device bond9
[  364.988211][T17179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.040953][T17436] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.105177][T17179] veth0_vlan: entered promiscuous mode
[  365.143259][T17179] veth1_vlan: entered promiscuous mode
[  365.175481][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'.
[  365.287379][T17446] syzkaller1: entered promiscuous mode
[  365.293947][T17446] syzkaller1: entered allmulticast mode
[  365.301816][T17446] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  365.309886][T17446] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3188'.
[  365.346872][T17446] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  365.356315][T17446] netlink: 'syz.4.3188': attribute type 3 has an invalid length.
[  365.374029][T17446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3188'.
[  365.394594][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3189'.
[  365.422352][T17179] veth0_macvtap: entered promiscuous mode
[  365.439291][T17179] veth1_macvtap: entered promiscuous mode
[  365.522863][T17456] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3190'.
[  365.582283][T17179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.606030][T17179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.722376][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  365.759697][T17471] netlink: 'syz.2.3195': attribute type 1 has an invalid length.
[  365.823829][T17472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3193'.
[  366.040616][ T5831] Bluetooth: hci4: command tx timeout
[  366.215194][T17488] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3198'.
[  366.238614][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.262538][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.380906][T17480] bond1: (slave gretap1): making interface the new active one
[  366.391106][T17480] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  366.418271][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.443828][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.453655][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.462771][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.483053][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  366.521760][T17493] geneve4: entered promiscuous mode
[  366.531460][T17493] geneve4: entered allmulticast mode
[  366.555111][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.564185][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.575863][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  366.589856][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.609764][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.632179][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  366.737904][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  366.756525][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.765999][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  366.784342][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  366.804649][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  366.874055][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  366.892804][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  366.913114][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  367.154979][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.169767][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.280450][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.301875][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.802318][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  367.906634][T17571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.126132][ T5831] Bluetooth: hci4: command tx timeout
[  368.617656][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  368.631219][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  368.660100][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  368.684101][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  368.695338][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  368.840559][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  368.965917][T17619] syzkaller1: entered allmulticast mode
[  369.382230][T17650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  369.397690][T17650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  369.410457][T17650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  369.422553][T17650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  369.434975][T17650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  369.571064][T17595] chnl_net:caif_netlink_parms(): no params data found
[  369.629421][T17659] netlink: 'syz.1.3238': attribute type 35 has an invalid length.
[  369.644452][T17663] netlink: 'syz.2.3240': attribute type 26 has an invalid length.
[  369.882661][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  370.011746][T17595] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.019108][T17595] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.028905][T17595] bridge_slave_0: entered allmulticast mode
[  370.037165][T17595] bridge_slave_0: entered promiscuous mode
[  370.079262][T17595] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.086666][T17595] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.097317][T17595] bridge_slave_1: entered allmulticast mode
[  370.106270][T17595] bridge_slave_1: entered promiscuous mode
[  370.187201][T17695] lo: entered promiscuous mode
[  370.213238][T17695] tunl0: entered promiscuous mode
[  370.225145][T17695] gre0: entered promiscuous mode
[  370.272404][T17695] gretap0: entered promiscuous mode
[  370.296790][T17695] erspan0: entered promiscuous mode
[  370.308230][T17695] ip_vti0: entered promiscuous mode
[  370.358566][T17704] netlink: 'syz.1.3254': attribute type 24 has an invalid length.
[  370.370555][T17595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.430990][T17595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.495719][T17709] netlink: 'syz.0.3255': attribute type 1 has an invalid length.
[  370.509723][T17709] __nla_validate_parse: 13 callbacks suppressed
[  370.509745][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'.
[  370.641006][T17595] team0: Port device team_slave_0 added
[  370.651555][T17595] team0: Port device team_slave_1 added
[  370.699885][T17718] netlink: 'syz.3.3258': attribute type 33 has an invalid length.
[  370.764171][ T5831] Bluetooth: hci5: command tx timeout
[  370.835655][T17718] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  370.853986][T17718] bond1 (unregistering): Released all slaves
[  370.883632][T17726] --map-set only usable from mangle table
[  370.897659][T17595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.905953][T17595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.936187][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  370.936264][T17595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.012622][T17595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.040132][T17727] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3260'.
[  371.059671][T17595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.108009][T17727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3260'.
[  371.150179][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3260'.
[  371.159548][T17595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.163116][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3264'.
[  371.458314][T17595] hsr_slave_0: entered promiscuous mode
[  371.464311][T17751] netlink: 'syz.2.3267': attribute type 21 has an invalid length.
[  371.471660][T17595] hsr_slave_1: entered promiscuous mode
[  371.473866][T17751] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3267'.
[  371.478551][T17595] debugfs: 'hsr0' already exists in 'hsr'
[  371.499261][T17595] Cannot create hsr debugfs directory
[  371.655165][T17760] netlink: 408 bytes leftover after parsing attributes in process `syz.2.3272'.
[  371.767941][ T7467] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  371.785866][ T7467] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  371.855778][ T7467] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  371.917288][ T7467] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  371.965273][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  371.987086][T17595] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  372.037192][T17595] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  372.076196][T17595] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  372.144727][T17595] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  372.259398][T17595] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  372.269564][T17595] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  372.279837][T17595] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  372.290721][T17595] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  372.424564][T17595] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.451178][T17595] 8021q: adding VLAN 0 to HW filter on device team0
[  372.467789][T16578] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.475006][T16578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.489006][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.496204][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.831975][T17595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.846790][ T5831] Bluetooth: hci5: command tx timeout
[  372.932917][T17802] netlink: 'syz.0.3284': attribute type 4 has an invalid length.
[  373.005892][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  373.120252][T17811] IPVS: set_ctl: invalid protocol: 192 127.0.0.1:20003
[  373.183321][T17817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.332187][T17825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3290'.
[  373.372823][T17827] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3291'.
[  373.404745][T17827] 8021q: VLANs not supported on ip_vti0
[  373.424174][T17831] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3291'.
[  373.449588][T17830] C: renamed from lo
[  373.532083][T17595] veth0_vlan: entered promiscuous mode
[  373.578072][T17595] veth1_vlan: entered promiscuous mode
[  373.616698][T17840] netlink: 'syz.3.3295': attribute type 83 has an invalid length.
[  373.633708][T17595] veth0_macvtap: entered promiscuous mode
[  373.675503][T17595] veth1_macvtap: entered promiscuous mode
[  373.738083][T17595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.785163][T17845] netlink: 'syz.2.3298': attribute type 62 has an invalid length.
[  373.797775][T17595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.854114][T16582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.892757][T16582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.925999][T16582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.978976][T16582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.046355][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  374.349154][T16582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.372567][T16582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.484424][ T7467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.506287][ T7467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.628254][T17889] netlink: 'syz.0.3310': attribute type 1 has an invalid length.
[  374.803411][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.812392][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.823306][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.832779][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.852791][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.897433][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.906432][T17901] netlink: 'syz.3.3314': attribute type 29 has an invalid length.
[  374.921642][ T5831] Bluetooth: hci5: command tx timeout
[  375.080375][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  375.388269][T17916] bond1: entered promiscuous mode
[  375.396069][T17916] bond1: entered allmulticast mode
[  375.403701][T17916] 8021q: adding VLAN 0 to HW filter on device bond1
[  376.019333][T17935] netlink: 'syz.2.3322': attribute type 3 has an invalid length.
[  376.032541][T17935] __nla_validate_parse: 9 callbacks suppressed
[  376.032561][T17935] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3322'.
[  376.068993][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.070405][T17942] netlink: 'syz.2.3322': attribute type 1 has an invalid length.
[  376.096201][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.106214][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.118065][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.126002][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  376.136992][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.230334][T17942] bond2: entered promiscuous mode
[  376.235775][T17942] bond2: entered allmulticast mode
[  376.244342][T17942] 8021q: adding VLAN 0 to HW filter on device bond2
[  376.581512][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3326'.
[  377.004478][ T5831] Bluetooth: hci5: command tx timeout
[  377.016623][T17983] netlink: 'syz.3.3331': attribute type 1 has an invalid length.
[  377.055510][T17950] syz.4.3324: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  377.089573][T17950] CPU: 1 UID: 0 PID: 17950 Comm: syz.4.3324 Not tainted syzkaller #0 PREEMPT(full) 
[  377.089604][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  377.089616][T17950] Call Trace:
[  377.089624][T17950]  <TASK>
[  377.089632][T17950]  dump_stack_lvl+0x189/0x250
[  377.089676][T17950]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.089701][T17950]  ? __pfx__printk+0x10/0x10
[  377.089720][T17950]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  377.089746][T17950]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  377.089773][T17950]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  377.089800][T17950]  warn_alloc+0x214/0x310
[  377.089836][T17950]  ? __pfx_warn_alloc+0x10/0x10
[  377.089875][T17950]  ? __get_vm_area_node+0x28f/0x300
[  377.089901][T17950]  ? bpf_uprobe_multi_link_attach+0x54b/0xee0
[  377.089930][T17950]  __vmalloc_node_range_noprof+0x690/0x12d0
[  377.089990][T17950]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  377.090016][T17950]  ? bpf_uprobe_multi_link_attach+0x54b/0xee0
[  377.090040][T17950]  ? rcu_is_watching+0x15/0xb0
[  377.090060][T17950]  ? bpf_uprobe_multi_link_attach+0x54b/0xee0
[  377.090081][T17950]  __kvmalloc_node_noprof+0x674/0x910
[  377.090109][T17950]  ? bpf_uprobe_multi_link_attach+0x54b/0xee0
[  377.090127][T17950]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  377.090151][T17950]  ? kfree+0x19a/0x6d0
[  377.090171][T17950]  ? bpf_uprobe_multi_link_attach+0x527/0xee0
[  377.090199][T17950]  bpf_uprobe_multi_link_attach+0x54b/0xee0
[  377.090237][T17950]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  377.090255][T17950]  ? __fget_files+0x2a/0x420
[  377.090277][T17950]  ? __fget_files+0x2a/0x420
[  377.090294][T17950]  ? __fget_files+0x2a/0x420
[  377.090316][T17950]  ? bpf_prog_attach_check_attach_type+0x453/0x540
[  377.090345][T17950]  link_create+0x673/0x850
[  377.090371][T17950]  __sys_bpf+0x6be/0x860
[  377.090393][T17950]  ? __pfx___sys_bpf+0x10/0x10
[  377.090435][T17950]  ? rcu_is_watching+0x15/0xb0
[  377.090466][T17950]  __x64_sys_bpf+0x7c/0x90
[  377.090494][T17950]  do_syscall_64+0xfa/0xfa0
[  377.090519][T17950]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.090545][T17950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.090563][T17950]  ? clear_bhb_loop+0x60/0xb0
[  377.090586][T17950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.090604][T17950] RIP: 0033:0x7fe33f58f749
[  377.090622][T17950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.090638][T17950] RSP: 002b:00007fe340425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.090667][T17950] RAX: ffffffffffffffda RBX: 00007fe33f7e5fa0 RCX: 00007fe33f58f749
[  377.090681][T17950] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c
[  377.090693][T17950] RBP: 00007fe33f613f91 R08: 0000000000000000 R09: 0000000000000000
[  377.090705][T17950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.090716][T17950] R13: 00007fe33f7e6038 R14: 00007fe33f7e5fa0 R15: 00007ffe2da77068
[  377.090750][T17950]  </TASK>
[  377.389397][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  377.408238][T17950] Mem-Info:
[  377.412080][T17950] active_anon:4771 inactive_anon:0 isolated_anon:0
[  377.412080][T17950]  active_file:3142 inactive_file:40004 isolated_file:0
[  377.412080][T17950]  unevictable:768 dirty:77 writeback:0
[  377.412080][T17950]  slab_reclaimable:12075 slab_unreclaimable:114927
[  377.412080][T17950]  mapped:29168 shmem:1366 pagetables:1138
[  377.412080][T17950]  sec_pagetables:0 bounce:0
[  377.412080][T17950]  kernel_misc_reclaimable:0
[  377.412080][T17950]  free:1300875 free_pcp:19098 free_cma:0
[  377.412951][T17983] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  377.459696][T17950] Node 0 active_anon:19084kB inactive_anon:0kB active_file:12568kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116672kB dirty:304kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14828kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.502780][T17950] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.533632][T17950] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  377.566127][T17950] lowmem_reserve[]: 0 2505 2505 2505 2505
[  377.572137][T17950] Node 0 DMA32 free:1276388kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19084kB inactive_anon:0kB active_file:12568kB inactive_file:159808kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:60688kB local_pcp:38360kB free_cma:0kB
[  377.606363][T17950] lowmem_reserve[]: 0 0 0 0 0
[  377.611495][T17950] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  377.649187][T17950] lowmem_reserve[]: 0 0 0 0 0
[  377.654112][T17950] Node 1 Normal free:3899592kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15348kB local_pcp:6612kB free_cma:0kB
[  377.688276][T17950] lowmem_reserve[]: 0 0 0 0 0
[  377.693237][T17950] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  377.706529][T17950] Node 0 DMA32: 586*4kB (UME) 89*8kB (UME) 217*16kB (UME) 107*32kB (UM) 21*64kB (ME) 5*128kB (UM) 192*256kB (UM) 107*512kB (UME) 51*1024kB (UM) 3*2048kB (UME) 268*4096kB (UM) = 1271968kB
[  377.726322][T17950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  377.738127][T17950] Node 1 Normal: 81*4kB (UME) 41*8kB (UME) 33*16kB (UME) 165*32kB (UME) 47*64kB (UME) 12*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3899644kB
[  377.758734][T17950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  377.784469][T17950] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.794297][T17950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  377.804050][T17950] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.814236][T17950] 44508 total pagecache pages
[  377.818940][T17950] 0 pages in swap cache
[  377.888625][T17940] chnl_net:caif_netlink_parms(): no params data found
[  377.903283][T17950] Free swap  = 124996kB
[  377.907897][T17950] Total swap = 124996kB
[  377.912440][T17950] 2097051 pages RAM
[  377.916266][T17950] 0 pages HighMem/MovableOnly
[  377.939290][T17950] 424121 pages reserved
[  377.943728][T17950] 0 pages cma reserved
[  377.988903][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3333'.
[  378.200193][ T5831] Bluetooth: hci0: command tx timeout
[  378.206975][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  378.235611][T16582] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  378.305622][T18015] Bluetooth: MGMT ver 1.23
[  378.696220][T16582] bond4 (unregistering): (slave gretap1): Releasing active interface
[  378.767561][ T1301] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.811998][T16582] dvmrp0 (unregistering): left allmulticast mode
[  378.828428][T16582] dvmrp6 (unregistering): left allmulticast mode
[  379.233765][T16582] bond4 (unregistering): (slave bridge6): Releasing active interface
[  379.240575][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  379.575085][T16582] bond0 (unregistering): Released all slaves
[  379.588455][T16582] bond1 (unregistering): Released all slaves
[  379.697079][T16582] bond2 (unregistering): Released all slaves
[  379.710728][T16582] bond3 (unregistering): Released all slaves
[  379.724368][T16582] bond4 (unregistering): Released all slaves
[  379.833892][T16582] bond5 (unregistering): Released all slaves
[  379.848034][T16582] bond6 (unregistering): Released all slaves
[  379.958890][T16582] bond7 (unregistering): Released all slaves
[  380.075831][T16582] bond8 (unregistering): Released all slaves
[  380.190445][T18033] wg1 speed is unknown, defaulting to 1000
[  380.239430][T18033] wg1 speed is unknown, defaulting to 1000
[  380.281178][ T5831] Bluetooth: hci0: command tx timeout
[  380.293218][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  380.307187][T18033] wg1 speed is unknown, defaulting to 1000
[  380.314232][T16582] : left promiscuous mode
[  380.341414][T18033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  380.509383][T18033] wg1 speed is unknown, defaulting to 1000
[  380.517245][T16582] tipc: Left network mode
[  380.635014][T17940] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.655412][T17940] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.685335][T17940] bridge_slave_0: entered allmulticast mode
[  380.702351][T17940] bridge_slave_0: entered promiscuous mode
[  380.715926][T17940] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.726533][T17940] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.734090][T17940] bridge_slave_1: entered allmulticast mode
[  380.741873][T17940] bridge_slave_1: entered promiscuous mode
[  380.748633][T18033] wg1 speed is unknown, defaulting to 1000
[  380.878506][T18033] wg1 speed is unknown, defaulting to 1000
[  380.882734][T17940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.927815][T17940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.944835][T18033] wg1 speed is unknown, defaulting to 1000
[  380.954788][T16582] mac80211_hwsim hwsim3 wlan0 (unregistering): left promiscuous mode
[  381.051939][T18033] wg1 speed is unknown, defaulting to 1000
[  381.091824][T17940] team0: Port device team_slave_0 added
[  381.107492][T18033] wg1 speed is unknown, defaulting to 1000
[  381.112568][T17940] team0: Port device team_slave_1 added
[  381.180867][T18033] wg1 speed is unknown, defaulting to 1000
[  381.324212][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  381.337233][T18033] wg1 speed is unknown, defaulting to 1000
[  381.376889][T17940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.396659][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.485055][T17940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.524447][T17940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.542374][T17940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.591512][T17940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.607170][T16582] batadv_slave_0: left promiscuous mode
[  381.785795][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3353'.
[  382.361559][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  382.371768][ T5831] Bluetooth: hci0: command tx timeout
[  382.379856][T16582] vcan0 (unregistering): left allmulticast mode
[  382.429303][T18095] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3353'.
[  382.580883][T18114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'.
[  382.608599][T17940] hsr_slave_0: entered promiscuous mode
[  382.651030][T17940] hsr_slave_1: entered promiscuous mode
[  382.685709][T17940] debugfs: 'hsr0' already exists in 'hsr'
[  382.710627][T18124] xt_recent: Unsupported userspace flags (000000b1)
[  382.736550][T17940] Cannot create hsr debugfs directory
[  382.834597][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'.
[  382.845923][T18133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'.
[  382.961323][T18132] vxcan2: entered allmulticast mode
[  383.058224][T18133] vxcan2: entered allmulticast mode
[  383.231500][T18150] xt_hashlimit: max too large, truncated to 1048576
[  383.401352][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  383.412041][T16582] IPVS: stop unused estimator thread 0...
[  383.587487][T18166] syzkaller0: entered promiscuous mode
[  383.606695][T18166] syzkaller0: entered allmulticast mode
[  383.754066][T18174] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3374'.
[  383.767301][T18174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3374'.
[  383.998029][T18178] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3376'.
[  384.231977][T17940] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  384.251137][T18195] syzkaller0: entered promiscuous mode
[  384.256831][T18195] syzkaller0: entered allmulticast mode
[  384.264097][T17940] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  384.289379][T17940] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  384.306429][T17940] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  384.320496][T18195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.346243][T18194] tipc: Resetting bearer <eth:syzkaller0>
[  384.367573][T18194] tipc: Disabling bearer <eth:syzkaller0>
[  384.440738][ T5831] Bluetooth: hci0: command tx timeout
[  384.442115][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  384.495812][T18209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3385'.
[  384.564336][T17940] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.594454][T17940] 8021q: adding VLAN 0 to HW filter on device team0
[  384.608722][T16582] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.615987][T16582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.636521][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.643813][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.676756][T18212] ip6gre1: entered allmulticast mode
[  384.899194][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3390'.
[  385.365156][T17940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.481329][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  385.497809][T17940] veth0_vlan: entered promiscuous mode
[  385.524228][T17940] veth1_vlan: entered promiscuous mode
[  385.615186][T17940] veth0_macvtap: entered promiscuous mode
[  385.632538][T17940] veth1_macvtap: entered promiscuous mode
[  385.678340][T17940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.714032][T17940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.742705][T16584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.754857][T16584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.770469][T16584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.794452][T16584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.892175][T18267] netlink: 'syz.4.3400': attribute type 1 has an invalid length.
[  385.931639][T16584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.940095][T16584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.031276][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.065056][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.524099][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  387.444107][T18367] __nla_validate_parse: 9 callbacks suppressed
[  387.444130][T18367] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3426'.
[  387.468516][T18367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3426'.
[  387.561071][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  387.648579][T18380] netlink: 'syz.4.3429': attribute type 13 has an invalid length.
[  387.832340][T18380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  388.107848][T18398] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  388.135087][T18398] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  388.381665][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3439'.
[  388.462335][T18412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.489751][T18412] ipt_ECN: cannot use operation on non-tcp rule
[  388.564058][T18423] macvtap1: entered allmulticast mode
[  388.569516][T18423] veth0_macvtap: entered allmulticast mode
[  388.605617][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  388.647391][T18428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.073624][T18454] netlink: 'syz.4.3451': attribute type 3 has an invalid length.
[  389.082732][T18454] netlink: 'syz.4.3451': attribute type 1 has an invalid length.
[  389.184542][T18463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  389.244659][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'.
[  389.264005][T18450] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.436601][T18450] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.445970][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3456'.
[  389.472209][T18473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3456'.
[  389.641010][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  389.794257][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'.
[  389.859124][T18490] openvswitch: netlink: Key type 132 is out of range max 32
[  389.970401][T18504] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  390.014283][T18506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3465'.
[  390.060142][T18516] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  390.183035][T18523] netlink: 'syz.2.3469': attribute type 1 has an invalid length.
[  390.266531][T18524] bond3 (unregistering): Released all slaves
[  390.385449][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.609351][T18542] syzkaller0: entered promiscuous mode
[  390.633690][T18542] syzkaller0: entered allmulticast mode
[  390.680932][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  390.989669][T18556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3474'.
[  391.202653][T18574] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  391.352269][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3482'.
[  391.680093][T18606] bond1: option arp_all_targets: invalid value (18446744073709551613)
[  391.694074][T18606] bond1 (unregistering): Released all slaves
[  391.721979][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  391.831746][T18616] netlink: 'syz.1.3487': attribute type 1 has an invalid length.
[  391.872984][T18620] netlink: 'syz.2.3488': attribute type 10 has an invalid length.
[  391.873837][T18616] bond1: entered promiscuous mode
[  391.889772][T18616] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.905043][T18620] bridge_slave_1: left allmulticast mode
[  391.912160][T18620] bridge_slave_1: left promiscuous mode
[  391.918247][T18620] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.939448][T18620] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  391.984445][T18616] bond1: (slave bridge1): making interface the new active one
[  391.993466][T18616] bridge1: entered promiscuous mode
[  392.001775][T18616] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  392.061385][T18629] sock: sock_timestamping_bind_phc: sock not bind to device
[  392.111466][T18629] syzkaller1: entered allmulticast mode
[  392.536036][T18646] wg1 speed is unknown, defaulting to 1000
[  392.761244][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  392.786700][T18669] __nla_validate_parse: 3 callbacks suppressed
[  392.786723][T18669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3502'.
[  392.866515][T18673] IPv6: NLM_F_CREATE should be specified when creating new route
[  392.984374][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3503'.
[  393.048064][T18674] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  393.116598][T18673] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3503'.
[  393.181587][T18673] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  393.385004][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'.
[  393.576247][T18703] bond0: (slave dummy0): Releasing backup interface
[  393.649477][T18703] batman_adv: batadv0: Adding interface: dummy0
[  393.684968][T18703] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.746934][T18703] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  393.802738][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  393.923764][T18724] 8021q: VLANs not supported on vcan0
[  394.200300][ T5831] Bluetooth: hci0: command tx timeout
[  394.219757][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3520'.
[  394.292742][T18737] netlink: 'syz.4.3520': attribute type 20 has an invalid length.
[  394.384099][T16582] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.410301][T16582] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.453965][T16582] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.485676][T16582] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.508108][T18755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.555854][T18755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.581663][T18757] netlink: 'syz.2.3524': attribute type 1 has an invalid length.
[  394.691433][T18757] 8021q: adding VLAN 0 to HW filter on device bond3
[  394.746384][T18757] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3524'.
[  394.815587][T18757] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2
[  394.845627][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  394.982120][T18763] 8021q: adding VLAN 0 to HW filter on device bond3
[  395.021798][T18763] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  395.148128][T18763] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  395.438101][T18766] veth3: entered promiscuous mode
[  395.470193][T18766] bond3: (slave veth3): Enslaving as an active interface with a down link
[  395.486463][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3529'.
[  395.513748][T18757] vlan0: entered allmulticast mode
[  395.519093][T18757] bond3: entered allmulticast mode
[  395.545644][T18799] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  395.554793][T18799] netlink: 'syz.3.3529': attribute type 32 has an invalid length.
[  395.684137][T18769] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  395.694235][T18805] openvswitch: netlink: Flow key attribute not present in set flow.
[  395.881279][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  396.089390][T18823] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  396.089476][ T8192] IPVS: starting estimator thread 0...
[  396.191305][T18827] IPVS: using max 28 ests per chain, 67200 per kthread
[  396.278968][T18836] netlink: 'syz.3.3540': attribute type 2 has an invalid length.
[  396.299896][T18836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3540'.
[  396.581297][T18853] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  396.796931][T18868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3549'.
[  396.837470][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  396.846955][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[  396.921954][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  396.935886][T18872] ip_vti0: entered promiscuous mode
[  396.949778][T18872] ip_vti0: entered allmulticast mode
[  397.543543][T18907] bond1: option resend_igmp: invalid value (32767)
[  397.578501][T18907] bond1: option resend_igmp: allowed values 0 - 255
[  397.606975][T18916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.625153][T18907] bond1 (unregistering): Released all slaves
[  397.767171][T18928] syzkaller1: entered promiscuous mode
[  397.781066][T18928] syzkaller1: entered allmulticast mode
[  397.901087][T18930] tipc: Started in network mode
[  397.918110][T18930] tipc: Node identity 4a82a7a368eb, cluster identity 4711
[  397.934592][T18930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.964065][T18930] syzkaller0: entered promiscuous mode
[  397.969612][T18930] syzkaller0: entered allmulticast mode
[  397.985290][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  398.067361][ T8188] IPVS: starting estimator thread 0...
[  398.095596][T18944] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  398.117198][T18936] tipc: Resetting bearer <eth:syzkaller0>
[  398.161800][T18945] IPVS: using max 29 ests per chain, 69600 per kthread
[  398.212165][T18936] tipc: Disabling bearer <eth:syzkaller0>
[  398.240212][T18950] __nla_validate_parse: 4 callbacks suppressed
[  398.240233][T18950] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3575'.
[  398.262573][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3579'.
[  398.270792][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3575'.
[  398.734085][T18977] ksmbd: Unknown IPC event: 3, ignore.
[  398.757309][T18981] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3586'.
[  398.899109][T18991] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3588'.
[  398.964213][T18991] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3588'.
[  399.005802][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  399.062803][T19000] syzkaller0: entered promiscuous mode
[  399.068374][T19000] syzkaller0: entered allmulticast mode
[  399.182258][T19006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3592'.
[  399.589605][T19030] syzkaller0: entered allmulticast mode
[  399.831218][T19044] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  400.042780][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  400.177237][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.195971][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.216277][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.239508][T19066] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20004
[  400.248475][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.280749][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.287844][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.320785][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.338240][T19068] IPv6: addrconf: prefix option has invalid lifetime
[  400.432654][T19082] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  400.478111][T19081] team0: Device ip6gre2 is of different type
[  400.626309][T19099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3620'.
[  401.081410][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  401.106691][T19126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3624'.
[  401.434346][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3627'.
[  402.124026][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  402.726379][T19136] netlink: 'syz.4.3629': attribute type 1 has an invalid length.
[  403.161637][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  403.357554][T19175] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3640'.
[  403.398816][T19175] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3640'.
[  403.417066][T19172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'.
[  403.552823][T19187] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3642'.
[  403.793786][T19203] netlink: 'syz.4.3648': attribute type 1 has an invalid length.
[  403.835399][T19203] netlink: 'syz.4.3648': attribute type 3 has an invalid length.
[  403.846564][T19203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3648'.
[  404.202979][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  404.323400][T19234] net_ratelimit: 25 callbacks suppressed
[  404.323423][T19234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.382618][T19236] 
[  404.385009][T19236] ======================================================
[  404.392048][T19236] WARNING: possible circular locking dependency detected
[  404.398845][T19230] netlink: 'syz.0.3655': attribute type 13 has an invalid length.
[  404.399074][T19236] syzkaller #0 Not tainted
[  404.411300][T19236] ------------------------------------------------------
[  404.418351][T19236] syz.2.3657/19236 is trying to acquire lock:
[  404.424436][T19236] ffffffff8f4264d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  404.433782][T19236] 
[  404.433782][T19236] but task is already holding lock:
[  404.441165][T19236] ffff888144f14970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  404.450493][T19236] 
[  404.450493][T19236] which lock already depends on the new lock.
[  404.450493][T19236] 
[  404.460898][T19236] 
[  404.460898][T19236] the existing dependency chain (in reverse order) is:
[  404.469907][T19236] 
[  404.469907][T19236] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  404.477905][T19236]        lock_acquire+0x120/0x360
[  404.482939][T19236]        _raw_spin_lock_bh+0x36/0x50
[  404.488227][T19236]        nr_rt_device_down+0x12a/0x720
[  404.493690][T19236]        nr_device_event+0x137/0x150
[  404.498975][T19236]        notifier_call_chain+0x1b6/0x3e0
[  404.504605][T19236]        netif_close_many+0x29c/0x410
[  404.509981][T19236]        netif_close+0x158/0x210
[  404.514922][T19236]        dev_close+0x10a/0x220
[  404.519681][T19236]        bpq_device_event+0x377/0x6a0
[  404.525053][T19236]        notifier_call_chain+0x1b6/0x3e0
[  404.530683][T19236]        netif_close_many+0x29c/0x410
[  404.536060][T19236]        netif_close+0x158/0x210
[  404.540999][T19236]        dev_close+0x10a/0x220
[  404.545762][T19236]        bond_setup_by_slave+0x5f/0x3f0
[  404.551315][T19236]        bond_enslave+0x6ca/0x38a0
[  404.556426][T19236]        bond_do_ioctl+0x635/0x9b0
[  404.561532][T19236]        dev_ifsioc+0x90b/0xf00
[  404.566384][T19236]        dev_ioctl+0x7b4/0x1150
[  404.571237][T19236]        sock_do_ioctl+0x22c/0x300
[  404.576347][T19236]        sock_ioctl+0x576/0x790
[  404.581197][T19236]        __se_sys_ioctl+0xfc/0x170
[  404.586359][T19236]        do_syscall_64+0xfa/0xfa0
[  404.591389][T19236]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.597800][T19236] 
[  404.597800][T19236] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  404.605620][T19236]        lock_acquire+0x120/0x360
[  404.610642][T19236]        _raw_spin_lock_bh+0x36/0x50
[  404.615934][T19236]        nr_rt_device_down+0xa9/0x720
[  404.621303][T19236]        nr_device_event+0x137/0x150
[  404.626588][T19236]        notifier_call_chain+0x1b6/0x3e0
[  404.632242][T19236]        netif_close_many+0x29c/0x410
[  404.637628][T19236]        netif_close+0x158/0x210
[  404.642593][T19236]        dev_close+0x10a/0x220
[  404.647363][T19236]        bpq_device_event+0x377/0x6a0
[  404.652736][T19236]        notifier_call_chain+0x1b6/0x3e0
[  404.658373][T19236]        netif_close_many+0x29c/0x410
[  404.663754][T19236]        netif_close+0x158/0x210
[  404.668704][T19236]        dev_close+0x10a/0x220
[  404.673467][T19236]        bond_setup_by_slave+0x5f/0x3f0
[  404.679023][T19236]        bond_enslave+0x6ca/0x38a0
[  404.684140][T19236]        bond_do_ioctl+0x635/0x9b0
[  404.689257][T19236]        dev_ifsioc+0x90b/0xf00
[  404.694114][T19236]        dev_ioctl+0x7b4/0x1150
[  404.698969][T19236]        sock_do_ioctl+0x22c/0x300
[  404.704084][T19236]        sock_ioctl+0x576/0x790
[  404.708934][T19236]        __se_sys_ioctl+0xfc/0x170
[  404.714043][T19236]        do_syscall_64+0xfa/0xfa0
[  404.719067][T19236]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.725477][T19236] 
[  404.725477][T19236] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  404.733385][T19236]        validate_chain+0xb9b/0x2140
[  404.738674][T19236]        __lock_acquire+0xab9/0xd20
[  404.743875][T19236]        lock_acquire+0x120/0x360
[  404.748894][T19236]        _raw_spin_lock_bh+0x36/0x50
[  404.754182][T19236]        nr_remove_neigh+0x25/0xe0
[  404.759300][T19236]        nr_add_node+0x1d9f/0x2570
[  404.764410][T19236]        nr_rt_ioctl+0xc12/0xd50
[  404.769346][T19236]        sock_do_ioctl+0xdc/0x300
[  404.774377][T19236]        sock_ioctl+0x576/0x790
[  404.779223][T19236]        __se_sys_ioctl+0xfc/0x170
[  404.784330][T19236]        do_syscall_64+0xfa/0xfa0
[  404.789357][T19236]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.795768][T19236] 
[  404.795768][T19236] other info that might help us debug this:
[  404.795768][T19236] 
[  404.805995][T19236] Chain exists of:
[  404.805995][T19236]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  404.805995][T19236] 
[  404.819811][T19236]  Possible unsafe locking scenario:
[  404.819811][T19236] 
[  404.827256][T19236]        CPU0                    CPU1
[  404.832614][T19236]        ----                    ----
[  404.837972][T19236]   lock(&nr_node->node_lock);
[  404.842734][T19236]                                lock(nr_node_list_lock);
[  404.849846][T19236]                                lock(&nr_node->node_lock);
[  404.857125][T19236]   lock(nr_neigh_list_lock);
[  404.861797][T19236] 
[  404.861797][T19236]  *** DEADLOCK ***
[  404.861797][T19236] 
[  404.869933][T19236] 1 lock held by syz.2.3657/19236:
[  404.875031][T19236]  #0: ffff888144f14970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  404.884784][T19236] 
[  404.884784][T19236] stack backtrace:
[  404.890684][T19236] CPU: 0 UID: 0 PID: 19236 Comm: syz.2.3657 Not tainted syzkaller #0 PREEMPT(full) 
[  404.890716][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  404.890728][T19236] Call Trace:
[  404.890735][T19236]  <TASK>
[  404.890743][T19236]  dump_stack_lvl+0x189/0x250
[  404.890773][T19236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.890798][T19236]  ? __pfx__printk+0x10/0x10
[  404.890814][T19236]  ? stack_trace_save+0x9c/0xe0
[  404.890844][T19236]  print_circular_bug+0x2ee/0x310
[  404.890869][T19236]  check_noncircular+0x134/0x160
[  404.890895][T19236]  validate_chain+0xb9b/0x2140
[  404.890927][T19236]  __lock_acquire+0xab9/0xd20
[  404.890947][T19236]  ? nr_remove_neigh+0x25/0xe0
[  404.890969][T19236]  lock_acquire+0x120/0x360
[  404.890985][T19236]  ? nr_remove_neigh+0x25/0xe0
[  404.891011][T19236]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  404.891031][T19236]  ? nr_remove_neigh+0x25/0xe0
[  404.891048][T19236]  _raw_spin_lock_bh+0x36/0x50
[  404.891065][T19236]  ? nr_remove_neigh+0x25/0xe0
[  404.891082][T19236]  nr_remove_neigh+0x25/0xe0
[  404.891100][T19236]  nr_add_node+0x1d9f/0x2570
[  404.891118][T19236]  ? dev_get_by_name+0x21/0x200
[  404.891135][T19236]  ? dev_get_by_name+0x21/0x200
[  404.891150][T19236]  ? dev_get_by_name+0x21/0x200
[  404.891165][T19236]  ? nr_call_to_digi+0x136/0x1b0
[  404.891182][T19236]  nr_rt_ioctl+0xc12/0xd50
[  404.891202][T19236]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  404.891217][T19236]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.891240][T19236]  ? apparmor_capable+0x137/0x1b0
[  404.891258][T19236]  ? capable+0x89/0xe0
[  404.891273][T19236]  ? nr_ioctl+0x1b1/0x3b0
[  404.891287][T19236]  sock_do_ioctl+0xdc/0x300
[  404.891307][T19236]  ? __pfx_sock_do_ioctl+0x10/0x10
[  404.891329][T19236]  sock_ioctl+0x576/0x790
[  404.891346][T19236]  ? __pfx_sock_ioctl+0x10/0x10
[  404.891364][T19236]  ? __fget_files+0x3a0/0x420
[  404.891377][T19236]  ? __fget_files+0x2a/0x420
[  404.891391][T19236]  ? bpf_lsm_file_ioctl+0x9/0x20
[  404.891406][T19236]  ? __pfx_sock_ioctl+0x10/0x10
[  404.891423][T19236]  __se_sys_ioctl+0xfc/0x170
[  404.891441][T19236]  do_syscall_64+0xfa/0xfa0
[  404.891460][T19236]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.891479][T19236]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.891493][T19236]  ? clear_bhb_loop+0x60/0xb0
[  404.891509][T19236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.891522][T19236] RIP: 0033:0x7f9836b8f749
[  404.891536][T19236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.891549][T19236] RSP: 002b:00007f9837a72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  404.891565][T19236] RAX: ffffffffffffffda RBX: 00007f9836de5fa0 RCX: 00007f9836b8f749
[  404.891576][T19236] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005
[  404.891585][T19236] RBP: 00007f9836c13f91 R08: 0000000000000000 R09: 0000000000000000
[  404.891595][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.891603][T19236] R13: 00007f9836de6038 R14: 00007f9836de5fa0 R15: 00007fff5f0d8988
[  404.891619][T19236]  </TASK>
[  404.905468][T19239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3658'.
[  405.242884][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  406.282591][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  407.321098][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  408.361501][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  409.400539][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  410.451249][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  411.490515][    C1] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  412.522270][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>
[  413.560802][    C0] tipc: Duplicate 7259cac1 using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan1>