last executing test programs:

35.605185567s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

29.59379827s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

23.367103236s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

17.735386054s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

11.304449282s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

4.344948414s ago: executing program 0 (id=3221):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x600, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000003, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x201, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x108}, {0x3, 0x8, 0x0, 0x6, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x2, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2a, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x7, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x0, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

2.053058175s ago: executing program 1 (id=3567):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$SIOCAX25DELUID(r1, 0x8918, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
shutdown(r0, 0x1)

1.996828812s ago: executing program 1 (id=3568):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0xfffffffa, 0x4)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0xd, 0x0, &(0x7f0000001bc0))
shutdown(r0, 0x1)

1.995761944s ago: executing program 1 (id=3569):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000001000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)

1.913859788s ago: executing program 1 (id=3570):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13092abd7000ffdbdf25210000000c000100000200000000000009001f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14)
close(0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
ioctl(r4, 0x3, &(0x7f0000000040)="066a79b75d37629677c3743d103be109c1c43932a3824b83e266a6014bc33290")
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffd3e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(r4, r6, 0x0, 0xffffffff005)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x11)

1.570923094s ago: executing program 1 (id=3572):
r0 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
socket(0x40000000015, 0x5, 0x0) (async)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x64010101}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00006dbffc)=0xffe, 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) (async)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002200)=""/4094, 0xffe}], 0x1}, 0x40)

1.424572697s ago: executing program 2 (id=3573):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
close(r1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async)
close(r0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="25aca93c7fe65939945a0cedb192cac20f80e1c37b1730bd011a98bcca16e61fe62736c5168e306943d48ebd3382ece7ad52031b40e26947d106c375a33f8313"], 0xf8) (async)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32)
listen(r5, 0x0) (rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0)

1.266612686s ago: executing program 1 (id=3574):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @bcast, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default]})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)={0x14, 0x0, 0x4, 0x101, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fba509", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "40c1f0"}]}}}}}}}}, 0x0)

175.858752ms ago: executing program 2 (id=3575):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x8000) (async)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36c3fdb9c3", 0x2f}], 0x1}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000002000000bcbc4a30278f987c5f18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
socket(0x2, 0x6, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
close(0x4)

98.521587ms ago: executing program 2 (id=3576):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000002000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)

96.501198ms ago: executing program 2 (id=3577):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7800, 0x9, 0x1}}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', r3, 0x8000, 0x7800, 0x1, 0x8000, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0xf, [{@rand_addr=0x64010101, 0x20}]}, @ssrr={0x89, 0x17, 0xa6, [@broadcast, @remote, @broadcast, @empty, @private=0xa010121]}]}}}}}) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r7 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0x60000019}) (async)
sendto$inet6(r4, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f000000cf40)='lp\x00', 0x3)
shutdown(r4, 0x1) (async)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000a00)="3912c1d03d9f66103940872256d8995b00c720af0cfa51b2b3b1448411fe107e64af467c85a200ebafdbee2c35b8ad1677fe7bb27ca22acbe83c449484972354b3baa1809633e690474a9154f95bd6874f20a0b290c590d44a9f5cd01414544ad719b82a550f2a7215e33e2dfdc1ce61a75637323b8828c5e5ef1f77b3d93114d46ceddb9d976eea7e20bb95e24e1e8b9974397bb8d73856a38618eac0ab333267fc833503b4df7838f5e522192252f4fd72ae45d21b55414a82ec84ff620a1ee2fe4691573a8afc79adaac5f0618cb457b14013f9e048cdec329a9e3343140213a41330b43e3290ef836c8839b303f0639a7561361247db2646977014051dcf3dc1246225f9aae3ca02943571bb39ecfdfa5b9ebc30a0476103c6133c7da6313848373c719a1f43ba5a765b8aa97caf7717fa063166951aa4e72d5616e6b42d6866fb308970430b2ff44c25b7dde2494389d1717c83f83ac7a632da0472bd6b0295b9f1fd1fc43099b1062bef744785158264f636cbf13926e7fcde7ebc1560a20961df3286df51b246ee7fe9474a8d51498bd90230bc89ea8dccb85035edd01aa93ed2f82297c3c3703990cb5201c7b92a04ea7abf9a36a488369161a9bfa42664d84860974fddbabed7eb509350917a3bbd427fe226bd1dd3420a7d711641babb2e36d9637c0b33a41a3578861d75e7e93c22ee94e9594258dc1883c2d749cad6e03b767555610c200efb5f104f91be7fb2513c97f3f279da2baedf7f91ed97ae33edef2ab348dded9df075b1ca5855866843aff902b6678075cb4a3d988ffd8ed61885400d1bcf6dc38c6be9b6428d4eba30711556510eb41b5c04590f11e393317a4fc988b39ecdbe322344c5ec4ed178e1dd35182a00f3ac345bfeea9936b6a015151332962bd28c5e1dbcdd825d51c78ef6db73170d9cfd47f2ca210ce8c103d37be1c61427bd3cf1bb5bcf9888f6e1631f404ea51f9cd8e0725459f9a531af19e2b533532f0b66fb5e9614d0895d35ccda358ac482a824fe67165bdaedcda5ddd86924c4fe5f22a043f92aed7a105fb54ec323273e660c17b8ae89d1546022320711ae0cab37564fc6b394f39e0b216227fa74b76c2a020d42f167891cbaf960fc0288547f2d31dceff3787135659a65878e5df65ce0004104a665098be576ebaf3733b6ba57e40f40ac74aad7d8b41db0f55513389faa84b1ce0fafed7018bcc5a687118bfab115b7a3163fb22af534406206065acf06066a5fb65f0b928cd25838c0c1a7b06bc42e622f502e515b87426b2a184b593bf35a4d454dc56881bbda1b9350f956e086196447a5052288aa0556e638d292bfd1abad58ef5db98f92694b30c3eda5b25a44688b24eadf579616c034ef688fad705c3dc99aafda0f7bbb591fd20e0ff96e8941188b9676b833aa91ba5ab1cf7acbdf16f14c843dd3cfeedf8e7628051f361ba328496c8a05aa68997257cb505dba270e132c437bc6df39134b0807fea53ecb84714ab0d9d8cda271e15bddac37ae4e0534322d649b74c90499919b771679c7211b4df2c80864809991750f966f52d217f63e80b7142b9205576133469a0a950060cd2fa0c25554b89900ebb6a991954990adeee517e55ff3abe4f3f7c07cb735b80be674d53ccc5bef27421c7bb602c7f22dde056ae0c85086f9850fe6a7dd108fd29c7f99f3d1316da10415b2e4e029762a39369cd8738e0a840690c5e2167099a6c1d59a6cc8827630b699da0d592e01c2db8af46daa48575fc2f4eeca2c3abf26ec776906572e712c6f0c57ec39ab4e004d994a341570a6e117edc13626aeaf794266a0f3103c84ae1300e6928b749cce7a1ba4e7609ceca262324cbc503cde9c897848a015c4d7cdb02cfcdcc53c36b8e4", 0x541}], 0x1}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000840)="4dd5bb8215b36e6f1f123a85931b9615c01b2c07b5d9b477bae53e422f8f9c16b2df519bbf67074a59b908b30b11f6b2509f0d30689cd274108e6a7fa45dc5aa7bdf0ace44fd503aa9dda1afc250f8328d1ec09fdac4bc25f279ccd3d4f75156d5dcd306b7bdc17a997a93f39fc13e023f71e4c52a39fd883e427c08b119aa0bd45a4bb0db9ec757f519217f31284f564fa9223a24f4fce98eb7dc39d5b6d267f063b0dcf1685636b463a5dcb6488c8ac150fb5e62ce484d744fe7bef6ff73a8ddbbf5a13f66dd43ab5a247ef6c27fa9eb964026015d60a6f73d22", 0xdb}, {&(0x7f0000000380)="48dc767c95a5b4d29c913593f20bc52fdf11cb7c85ebde381cf99252bdd475a5f479d9a2e89d8e971eafb34ff92728602e7cf2e95d3dfdfb9a7f352293202b5bbae0fc51b4", 0x45}, {&(0x7f00000016c0)="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", 0x421}], 0x3}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f80)="a29086fca7", 0x5}], 0x1}}], 0x3, 0x8010)
shutdown(r0, 0x1)

798.754µs ago: executing program 2 (id=3578):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x200, @any, 0x0, 0x1}, 0xe)

0s ago: executing program 2 (id=3579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r3], 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0xfffffd15, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x32, 0x53b, 0x70bd2b, 0x25dfdbfb, {0x9}}, 0x70}, 0x1, 0x0, 0x0, 0x3000c891}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000013000500"/20, @ANYRES32=0x0, @ANYBLOB="002c077d034e0444bea600000000000000140003006272696467655f736c6176655f31000008000a0058635f9b0aca672f9deb58924818a3c5c060304fda4db8f028e206906c44ba92a7331fa6f7c591d92f91a71e64469f59e6b313f22ad40d0026c433ccc6de53", @ANYRES32=0x0, @ANYBLOB="0500210000000000"], 0x44}}, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x78, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x78, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

kernel console output (not intermixed with test programs):

allmulticast mode
[  262.368478][T12851] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2013'.
[  262.383054][T12851] batadv4: entered promiscuous mode
[  262.385529][T12851] batadv4: entered allmulticast mode
[  262.398683][T12850] sch_fq: defrate 257 ignored.
[  262.571644][T12852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2013'.
[  262.717635][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  262.722573][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  262.865702][T12879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  262.904101][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'.
[  263.017782][T12899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.359218][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'.
[  263.878292][T12947] macvlan0 (unregistering): left allmulticast mode
[  264.133317][T12962] netlink: 'syz.2.2048': attribute type 1 has an invalid length.
[  264.138078][T12962] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.289379][T12999] syzkaller1: entered promiscuous mode
[  265.291803][T12999] syzkaller1: entered allmulticast mode
[  265.483706][T13003] xt_l2tp: wrong L2TP version: 0
[  265.833605][T13023] __nla_validate_parse: 5 callbacks suppressed
[  265.833623][T13023] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2068'.
[  266.006703][T13039] netlink: 'syz.0.2072': attribute type 1 has an invalid length.
[  266.011936][T13039] netlink: 'syz.0.2072': attribute type 2 has an invalid length.
[  266.015635][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'.
[  266.239671][T13055] netlink: 'syz.1.2076': attribute type 2 has an invalid length.
[  266.245825][T13055] netlink: 'syz.1.2076': attribute type 1 has an invalid length.
[  266.249078][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'.
[  266.261727][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2076'.
[  266.476748][T13064] netlink: 'syz.1.2078': attribute type 2 has an invalid length.
[  266.489882][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'.
[  266.504566][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2079'.
[  266.515837][T13070] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  266.584370][T13083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2083'.
[  266.587509][T13081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2083'.
[  266.667710][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'.
[  266.676451][T13090] delete_channel: no stack
[  266.744127][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'.
[  266.897682][T13104] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  268.048243][T13144] netlink: 'syz.1.2099': attribute type 13 has an invalid length.
[  268.645137][T13179] bridge0: port 1(syz_tun) entered blocking state
[  268.647983][T13179] bridge0: port 1(syz_tun) entered forwarding state
[  268.654149][T13179] 8021q: adding VLAN 0 to HW filter on device team0
[  268.661824][T13179] net_ratelimit: 122 callbacks suppressed
[  268.661833][T13179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.824017][T13190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.157332][T13206] 8021q: adding VLAN 0 to HW filter on device team0
[  269.162612][T13206] batman_adv: batadv0: Interface activated: dummy0
[  269.167837][T13206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.427170][T13216] delete_channel: no stack
[  269.952046][T13244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.146824][T13249] x_tables: duplicate underflow at hook 1
[  270.147653][T13250] x_tables: duplicate underflow at hook 1
[  270.659364][T13274] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  270.995088][T13296] __nla_validate_parse: 14 callbacks suppressed
[  270.995099][T13296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2137'.
[  271.000476][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'.
[  271.003576][T13296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2137'.
[  271.006960][T13296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2137'.
[  271.746215][   T47] hid-generic 0005:15C2:0007.0003: collection stack underflow
[  271.754204][   T47] hid-generic 0005:15C2:0007.0003: item 0 0 0 12 parsing failed
[  271.759939][   T47] hid-generic 0005:15C2:0007.0003: probe with driver hid-generic failed with error -22
[  272.398293][T13354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2156'.
[  272.400669][T13361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2156'.
[  272.437156][T13364] n: renamed from veth1_to_bridge
[  272.761935][T13388] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  273.005460][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'.
[  273.513021][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2172'.
[  273.679727][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2174'.
[  273.743584][T13418] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2173'.
[  274.246732][T13456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.287213][T13461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.508472][T13476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  275.314617][T13498] xt_hashlimit: size too large, truncated to 1048576
[  276.108513][T13508] __nla_validate_parse: 2 callbacks suppressed
[  276.108522][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2200'.
[  276.114218][T13508] netlink: 'syz.0.2200': attribute type 3 has an invalid length.
[  276.117914][T13508] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2200'.
[  276.330924][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'.
[  276.335587][T13530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'.
[  276.448454][T13542] netlink: 'syz.2.2208': attribute type 7 has an invalid length.
[  276.457182][T13542] : entered promiscuous mode
[  276.501099][T13546] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  276.582219][T13550] netlink: 'syz.0.2211': attribute type 1 has an invalid length.
[  276.590124][T13550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2211'.
[  276.600096][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2211'.
[  276.633829][T13552] xt_hashlimit: max too large, truncated to 1048576
[  276.636312][T13552] Cannot find add_set index 3 as target
[  276.675039][T13558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.730426][T13558] bridge_slave_0: left promiscuous mode
[  276.736568][T13558] gretap1: left allmulticast mode
[  276.798216][T13565] netlink: 'syz.0.2217': attribute type 1 has an invalid length.
[  276.819511][T13565] 8021q: adding VLAN 0 to HW filter on device bond1
[  276.828359][T13565] bond1: (slave gretap2): making interface the new active one
[  276.831668][T13565] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  277.081409][T13577] syz_tun: left allmulticast mode
[  277.083290][T13577] bridge0: port 1(syz_tun) entered disabled state
[  277.094371][T13577] bond1: (slave gretap2): Releasing active interface
[  277.105864][T13577] netlink: 'syz.0.2222': attribute type 10 has an invalid length.
[  277.153790][T13581] netlink: 'syz.1.2224': attribute type 2 has an invalid length.
[  277.489329][T13619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'.
[  277.607395][T13629] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  277.637467][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'.
[  277.644718][T13633] bridge0: port 2(syz_tun) entered disabled state
[  277.697565][T13636] delete_channel: no stack
[  278.196646][T13661] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  278.273870][T13671] batman_adv: batadv0: Interface deactivated: dummy0
[  278.299430][T13671] bridge3: entered promiscuous mode
[  278.301418][T13671] bridge3: entered allmulticast mode
[  278.306346][T13671] team0: Port device bridge3 added
[  278.571210][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'.
[  278.608436][T13692] netlink: 'syz.2.2262': attribute type 12 has an invalid length.
[  278.763027][T13693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.394569][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2267'.
[  279.652969][T13716] netlink: 'syz.2.2270': attribute type 1 has an invalid length.
[  279.688289][T13716] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.709812][T13716] bond0: (slave gretap2): making interface the new active one
[  279.714551][T13716] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  279.778041][T13724] netlink: 'syz.1.2272': attribute type 39 has an invalid length.
[  279.795667][T13724] syz_tun (unregistering): left allmulticast mode
[  279.797834][T13724] syz_tun (unregistering): left promiscuous mode
[  279.800056][T13724] bridge0: port 2(syz_tun) entered disabled state
[  280.001625][T13741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.499456][T13763] netlink: 'syz.1.2283': attribute type 1 has an invalid length.
[  280.858993][T13772] SET target dimension over the limit!
[  281.293643][T13822] __nla_validate_parse: 10 callbacks suppressed
[  281.293653][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'.
[  281.332130][T13807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2296'.
[  281.439760][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'.
[  281.453723][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'.
[  281.525542][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'.
[  281.528502][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  281.586294][T13832] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2305'.
[  281.594283][T13832] ipt_REJECT: TCP_RESET invalid for non-tcp
[  281.728976][T13841] xt_hashlimit: size too large, truncated to 1048576
[  282.054895][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'.
[  282.283534][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'.
[  282.347480][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'.
[  282.364259][T13900] netlink: 'syz.1.2326': attribute type 10 has an invalid length.
[  282.403252][T13902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.578674][T13920] SET target dimension over the limit!
[  282.632497][T13920] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  282.757464][T13935] xt_hashlimit: size too large, truncated to 1048576
[  283.289689][T13945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  283.702310][T13979] bridge0: port 1(erspan0) entered blocking state
[  283.704792][T13979] bridge0: port 1(erspan0) entered disabled state
[  283.707443][T13979] erspan0: entered allmulticast mode
[  283.713591][T13979] erspan0: entered promiscuous mode
[  283.716182][T13979] bridge0: port 1(erspan0) entered blocking state
[  283.718456][T13979] bridge0: port 1(erspan0) entered forwarding state
[  283.728167][T13972] DRBG: could not allocate digest TFM handle: hmac(sha384)
[  283.752346][T13980] erspan0: left allmulticast mode
[  283.765664][T13980] erspan0: left promiscuous mode
[  283.767465][T13980] bridge0: port 1(erspan0) entered disabled state
[  283.911956][T14003] netlink: 'syz.0.2355': attribute type 9 has an invalid length.
[  283.921301][T14003] macvlan0: entered promiscuous mode
[  283.923857][T14003] macvlan0: entered allmulticast mode
[  284.199113][T14024] block nbd0: Unsupported socket: shutdown callout must be supported.
[  284.205776][T14025] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.192340][T14053] xt_hashlimit: size too large, truncated to 1048576
[  285.955876][T14066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.004410][T14071] openvswitch: netlink: Flow key attr not present in new flow.
[  286.015018][T14072] netlink: 'syz.2.2374': attribute type 2 has an invalid length.
[  286.453135][T14112] __nla_validate_parse: 15 callbacks suppressed
[  286.453150][T14112] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2388'.
[  286.557688][T14114] ipt_rpfilter: unknown options
[  286.828917][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2392'.
[  286.834629][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'.
[  286.927605][T14126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  287.245341][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2396'.
[  287.605708][T14137] ip6t_srh: unknown srh match flags  4000
[  287.638692][T14135] syzkaller0: entered promiscuous mode
[  287.640859][T14135] syzkaller0: entered allmulticast mode
[  287.806082][T14146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.774861][T14154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.829881][T14154] 8021q: adding VLAN 0 to HW filter on device team0
[  288.870421][T14154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.642949][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2404'.
[  289.643470][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2412'.
[  289.717277][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  289.973730][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'.
[  290.008112][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2417'.
[  290.144055][T14208] xt_hashlimit: size too large, truncated to 1048576
[  290.204191][T14212] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2418'.
[  290.283061][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.287348][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.293145][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.854669][T14223] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  290.921366][T14229] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.906234][T14304] netlink: 'syz.2.2443': attribute type 23 has an invalid length.
[  293.700927][T14315] __nla_validate_parse: 7 callbacks suppressed
[  293.700941][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  293.707341][T14315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  293.711193][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'.
[  293.814366][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2449'.
[  293.976015][T14326] batman_adv: batadv0: Adding interface: dummy0
[  293.978380][T14326] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.010933][T14326] batman_adv: batadv0: Interface activated: dummy0
[  294.123633][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2453'.
[  294.458036][T14360] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.463387][T14360] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.467261][T14360] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.470899][T14360] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.474271][T14360] geneve1: entered promiscuous mode
[  294.476143][T14360] geneve1: entered allmulticast mode
[  294.732640][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'.
[  295.155856][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'.
[  295.158872][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'.
[  295.272788][T14392] netlink: 'syz.0.2476': attribute type 14 has an invalid length.
[  295.339578][T14401] netlink: 'syz.2.2479': attribute type 10 has an invalid length.
[  295.346623][T14401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2479'.
[  295.352944][T14401] dummy0: entered promiscuous mode
[  295.356055][T14401] batman_adv: batadv0: Interface deactivated: dummy0
[  295.359346][T14401] batman_adv: batadv0: Removing interface: dummy0
[  295.364239][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'.
[  295.364875][T14401] bridge0: port 1(dummy0) entered blocking state
[  295.371498][T14401] bridge0: port 1(dummy0) entered disabled state
[  295.374803][T14401] dummy0: entered allmulticast mode
[  295.383158][T14401] bridge0: port 1(dummy0) entered blocking state
[  295.386054][T14401] bridge0: port 1(dummy0) entered forwarding state
[  295.820681][T14428] xt_hashlimit: size too large, truncated to 1048576
[  295.847804][T14430] syzkaller1: tun_chr_ioctl cmd 1074025677
[  295.853165][T14430] syzkaller1: linktype set to 270
[  295.955361][T14436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.057666][T14445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.134862][T14451] x_tables: duplicate underflow at hook 1
[  296.358412][T14462] xt_SECMARK: invalid mode: 0
[  296.358991][T14463] xt_SECMARK: invalid mode: 0
[  296.388501][T14462] xt_bpf: check failed: parse error
[  296.756076][T14495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.862405][T14500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.351977][T14518] netlink: 'syz.0.2516': attribute type 9 has an invalid length.
[  297.357845][T14518] macvlan1: entered promiscuous mode
[  297.359792][T14518] macvlan1: entered allmulticast mode
[  297.636852][T14538] vlan0: entered promiscuous mode
[  297.638739][T14538] bridge0: entered promiscuous mode
[  297.640848][T14538] vlan0: entered allmulticast mode
[  297.642700][T14538] bridge0: entered allmulticast mode
[  297.837728][T14546] netlink: 'syz.0.2524': attribute type 9 has an invalid length.
[  297.841071][T14540] netlink: 'syz.0.2524': attribute type 9 has an invalid length.
[  297.846859][T14540] macvlan4: entered promiscuous mode
[  297.848707][T14540] macvlan4: entered allmulticast mode
[  297.854339][T14546] macvlan6: entered promiscuous mode
[  297.856124][T14546] macvlan6: entered allmulticast mode
[  298.046222][T14562] netlink: 'syz.0.2531': attribute type 23 has an invalid length.
[  298.305514][T14583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  298.384331][T14591] netlink: 'syz.1.2542': attribute type 10 has an invalid length.
[  298.387957][T14591] batman_adv: batadv0: Adding interface: team0
[  298.390328][T14591] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.399771][T14591] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  298.533407][T14601] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  299.782211][T14639] netlink: 'syz.1.2556': attribute type 1 has an invalid length.
[  299.784798][T14639] __nla_validate_parse: 17 callbacks suppressed
[  299.784805][T14639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2556'.
[  299.925482][T14644] xt_TCPMSS: Only works on TCP SYN packets
[  300.127023][T14655] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2563'.
[  300.170672][ T5676] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  300.179502][T14661] netlink: 'syz.2.2566': attribute type 12 has an invalid length.
[  300.223762][T14664] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.171108][T14684] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.188410][T14686] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2575'.
[  301.274608][T14682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  301.346525][T14689] bridge0: port 1(dummy0) entered disabled state
[  301.524400][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'.
[  301.537652][T14707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2582'.
[  301.598038][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2585'.
[  301.864943][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.868752][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.087795][T14725] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.091642][T14725] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.095204][T14725] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.098653][T14725] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.160555][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  302.241379][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'.
[  302.352010][T14740] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2594'.
[  302.356314][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'.
[  302.365864][T14741] openvswitch: netlink: Unknown nsh attribute 0
[  302.368060][T14741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.584183][T14775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  303.776787][T14779] syzkaller1: entered promiscuous mode
[  303.779476][T14779] syzkaller1: entered allmulticast mode
[  304.090156][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  304.278331][T14751] Set syz1 is full, maxelem 65536 reached
[  304.592540][T14811] ipt_rpfilter: unknown options
[  304.876452][T14817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  305.383992][T14825] xt_hashlimit: size too large, truncated to 1048576
[  305.416916][T14828] __nla_validate_parse: 5 callbacks suppressed
[  305.416927][T14828] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2623'.
[  305.646406][T14833] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  305.909527][T14852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2634'.
[  305.913219][T14852] unsupported nlmsg_type 40
[  305.958806][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2632'.
[  305.996138][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'.
[  306.163766][ T5829] Bluetooth: hci2: link tx timeout
[  306.165817][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  306.216985][T14868] dummy0: left allmulticast mode
[  306.219179][T14868] dummy0: left promiscuous mode
[  306.221493][T14868] bridge0: port 1(dummy0) entered disabled state
[  306.227408][T14868] bond0: (slave gretap2): Releasing active interface
[  307.184807][T14889] xt_hashlimit: size too large, truncated to 1048576
[  307.244387][T14893] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2642'.
[  307.347434][T14899] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  307.408468][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'.
[  308.170297][ T5228] Bluetooth: hci2: command 0x0405 tx timeout
[  308.427601][T14952] netlink: 'syz.1.2660': attribute type 2 has an invalid length.
[  308.431119][T14952] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2660'.
[  308.678402][T14954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2661'.
[  308.953987][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'.
[  309.057937][T14969] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2666'.
[  309.078312][T14970] xt_hashlimit: size too large, truncated to 1048576
[  309.341886][T14980] syzkaller1: entered promiscuous mode
[  309.343900][T14980] syzkaller1: entered allmulticast mode
[  309.895767][T14996] xt_hashlimit: size too large, truncated to 1048576
[  310.383873][T15000] netlink: 'syz.1.2675': attribute type 32 has an invalid length.
[  310.717294][T15012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.740830][T15012] D: renamed from syzkaller0
[  310.749012][T15012] tipc: Disabling bearer <eth:syzkaller0>
[  310.770356][T15018] __nla_validate_parse: 1 callbacks suppressed
[  310.770371][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2682'.
[  310.785168][T15018] syzkaller1: entered promiscuous mode
[  310.787437][T15018] syzkaller1: entered allmulticast mode
[  310.812999][T15022] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  310.818914][T15018] syzkaller0: entered promiscuous mode
[  310.823251][T15018] syzkaller0: entered allmulticast mode
[  310.831608][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'.
[  310.904928][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2683'.
[  310.908914][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2683'.
[  310.913322][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2683'.
[  310.917012][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2683'.
[  312.236622][T15038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2687'.
[  312.347952][T15041] netlink: 'syz.1.2688': attribute type 1 has an invalid length.
[  312.445072][T15053] x_tables: duplicate underflow at hook 2
[  312.468258][T15056] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2692'.
[  312.589646][T15060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2693'.
[  312.704336][T15072] netlink: 'syz.2.2696': attribute type 1 has an invalid length.
[  312.707689][T15072] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2696'.
[  313.523732][T15089] xt_l2tp: unknown flags: 10
[  314.140283][T15130] set match dimension is over the limit!
[  314.763520][T15182] xt_hashlimit: size too large, truncated to 1048576
[  314.993978][T15193] xt_hashlimit: size too large, truncated to 1048576
[  315.817806][T15231] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  316.347906][T15254] __nla_validate_parse: 10 callbacks suppressed
[  316.347920][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2752'.
[  316.360328][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2752'.
[  316.363981][T15254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2752'.
[  316.377653][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2752'.
[  316.654046][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.946133][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'.
[  317.070292][T15282] netlink: 'syz.0.2762': attribute type 3 has an invalid length.
[  317.124440][T15284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  317.216673][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'.
[  317.226304][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2764'.
[  317.230562][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2764'.
[  317.234458][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'.
[  317.550343][T15311] xt_hashlimit: size too large, truncated to 1048576
[  317.556052][T15311] warn_alloc: 1 callbacks suppressed
[  317.556060][T15311] syz.1.2771: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  317.565103][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.1.2771 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  317.565119][T15311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.565124][T15311] Call Trace:
[  317.565127][T15311]  <TASK>
[  317.565131][T15311]  dump_stack_lvl+0x189/0x250
[  317.565146][T15311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.565155][T15311]  ? __pfx__printk+0x10/0x10
[  317.565165][T15311]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.565176][T15311]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  317.565186][T15311]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  317.565197][T15311]  warn_alloc+0x214/0x310
[  317.565210][T15311]  ? __pfx_warn_alloc+0x10/0x10
[  317.565223][T15311]  ? __get_vm_area_node+0x28f/0x300
[  317.565233][T15311]  ? htable_create+0xfc/0x7a0
[  317.565245][T15311]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  317.565266][T15311]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  317.565278][T15311]  ? rcu_is_watching+0x15/0xb0
[  317.565288][T15311]  ? htable_create+0xfc/0x7a0
[  317.565297][T15311]  ? htable_create+0xfc/0x7a0
[  317.565306][T15311]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  317.565316][T15311]  ? htable_create+0xfc/0x7a0
[  317.565325][T15311]  ? hashlimit_pernet+0x23/0x240
[  317.565338][T15311]  htable_create+0xfc/0x7a0
[  317.565351][T15311]  hashlimit_mt_check_common+0x719/0xa10
[  317.565371][T15311]  hashlimit_mt_check_v1+0x221/0x360
[  317.565409][T15311]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  317.565422][T15311]  ? xt_find_match+0x1f7/0x250
[  317.565435][T15311]  xt_check_match+0x3d1/0xab0
[  317.565444][T15311]  ? __pfx___mutex_lock+0x10/0x10
[  317.565454][T15311]  ? __pfx_xt_check_match+0x10/0x10
[  317.565465][T15311]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  317.565478][T15311]  ? xt_find_match+0x1f7/0x250
[  317.565490][T15311]  translate_table+0x1553/0x2040
[  317.565509][T15311]  ? __pfx_translate_table+0x10/0x10
[  317.565519][T15311]  ? __might_fault+0xb0/0x130
[  317.565535][T15311]  ? _copy_from_user+0x94/0xb0
[  317.565547][T15311]  do_ip6t_set_ctl+0x970/0xce0
[  317.565560][T15311]  ? rcu_is_watching+0x15/0xb0
[  317.565567][T15311]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  317.565585][T15311]  ? __pfx___mutex_lock+0x10/0x10
[  317.565592][T15311]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  317.565602][T15311]  ? __pfx_futex_wait+0x10/0x10
[  317.565613][T15311]  nf_setsockopt+0x26f/0x290
[  317.565626][T15311]  rawv6_setsockopt+0x23b/0x5b0
[  317.565637][T15311]  ? __lock_acquire+0xab9/0xd20
[  317.565645][T15311]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  317.565656][T15311]  ? aa_sock_opt_perm+0x74/0x110
[  317.565667][T15311]  ? sock_common_setsockopt+0x36/0xc0
[  317.565675][T15311]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  317.565684][T15311]  do_sock_setsockopt+0x25a/0x3e0
[  317.565695][T15311]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  317.565706][T15311]  ? __fget_files+0x2a/0x420
[  317.565719][T15311]  __x64_sys_setsockopt+0x18b/0x220
[  317.565730][T15311]  do_syscall_64+0xfa/0x3b0
[  317.565737][T15311]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.565744][T15311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.565751][T15311]  ? exc_page_fault+0x9f/0xf0
[  317.565763][T15311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.565770][T15311] RIP: 0033:0x7f1a50d8e929
[  317.565778][T15311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.565785][T15311] RSP: 002b:00007f1a51bf3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  317.565793][T15311] RAX: ffffffffffffffda RBX: 00007f1a50fb6160 RCX: 00007f1a50d8e929
[  317.565799][T15311] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b
[  317.565803][T15311] RBP: 00007f1a50e10b39 R08: 00000000000004c0 R09: 0000000000000000
[  317.565808][T15311] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  317.565812][T15311] R13: 0000000000000000 R14: 00007f1a50fb6160 R15: 00007fff51fac948
[  317.565823][T15311]  </TASK>
[  317.565826][T15311] Mem-Info:
[  317.704178][T15311] active_anon:12520 inactive_anon:0 isolated_anon:0
[  317.704178][T15311]  active_file:1204 inactive_file:38305 isolated_file:0
[  317.704178][T15311]  unevictable:1768 dirty:157 writeback:0
[  317.704178][T15311]  slab_reclaimable:9869 slab_unreclaimable:73927
[  317.704178][T15311]  mapped:18063 shmem:2410 pagetables:888
[  317.704178][T15311]  sec_pagetables:0 bounce:0
[  317.704178][T15311]  kernel_misc_reclaimable:0
[  317.704178][T15311]  free:267982 free_pcp:20693 free_cma:0
[  317.721405][T15311] Node 0 active_anon:9840kB inactive_anon:0kB active_file:3484kB inactive_file:146632kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41048kB dirty:316kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6768kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.732971][T15311] Node 1 active_anon:40240kB inactive_anon:0kB active_file:1332kB inactive_file:6588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31204kB dirty:312kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5112kB pagetables:1328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.743608][T15311] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:124kB free_cma:0kB
[  317.752692][T15311] lowmem_reserve[]: 0 812 812 812 812
[  317.754836][T15311] Node 0 DMA32 free:229060kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9840kB inactive_anon:0kB active_file:3484kB inactive_file:146632kB unevictable:3536kB writepending:316kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:36672kB local_pcp:18664kB free_cma:0kB
[  317.764743][T15311] lowmem_reserve[]: 0 0 0 0 0
[  317.766316][T15311] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  317.778746][T15311] lowmem_reserve[]: 0 0 854 854 854
[  317.781259][T15311] Node 1 Normal free:369524kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40240kB inactive_anon:0kB active_file:1332kB inactive_file:6588kB unevictable:3536kB writepending:312kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45540kB local_pcp:22212kB free_cma:0kB
[  317.793290][T15311] lowmem_reserve[]: 0 0 0 0 0
[  317.795270][T15311] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  317.801223][T15311] Node 0 DMA32: 553*4kB (UME) 422*8kB (UM) 457*16kB (UME) 561*32kB (UME) 349*64kB (UME) 128*128kB (UME) 69*256kB (UM) 67*512kB (UME) 33*1024kB (UME) 4*2048kB (UME) 16*4096kB (U) = 229060kB
[  317.807724][T15311] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  317.814489][T15311] Node 1 Normal: 734*4kB (UME) 1023*8kB (UME) 473*16kB (UME) 133*32kB (UME) 201*64kB (UME) 203*128kB (UME) 108*256kB (UME) 67*512kB (UM) 60*1024kB (UM) 8*2048kB (UM) 41*4096kB (UM) = 369504kB
[  317.822176][T15311] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.825819][T15311] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.829612][T15311] 41921 total pagecache pages
[  317.831777][T15311] 0 pages in swap cache
[  317.833548][T15311] Free swap  = 124996kB
[  317.835399][T15311] Total swap = 124996kB
[  317.836996][T15311] 786301 pages RAM
[  317.838214][T15311] 0 pages HighMem/MovableOnly
[  317.839829][T15311] 241078 pages reserved
[  317.841324][T15311] 0 pages cma reserved
[  318.004797][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'.
[  318.068109][T15322] netlink: 'syz.0.2776': attribute type 14 has an invalid length.
[  318.149607][T15333] openvswitch: netlink: Actions may not be safe on all matching packets
[  318.938979][T15354] tipc: Started in network mode
[  318.941635][T15354] tipc: Node identity 080211000001, cluster identity 4711
[  318.944718][T15354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.995414][T15354] tipc: Resetting bearer <eth:syzkaller0>
[  319.095088][T15359] openvswitch: netlink: Key type 10512 is out of range max 32
[  319.248187][T15365] x_tables: unsorted underflow at hook 2
[  319.437956][T15371] syz.1.2795 uses old SIOCAX25GETINFO
[  319.620784][T15375] nbd: socks must be embedded in a SOCK_ITEM attr
[  319.624023][T15375] block nbd0: shutting down sockets
[  319.968109][T15387] bridge0: port 1(syz_tun) entered blocking state
[  319.980627][  T792] tipc: Node number set to 134418688
[  319.983444][T15387] bridge0: port 1(syz_tun) entered disabled state
[  319.986389][T15387] syz_tun: entered allmulticast mode
[  320.138953][T15398] hsr0: left allmulticast mode
[  320.141848][T15398] hsr_slave_0: left allmulticast mode
[  320.144229][T15398] hsr_slave_1: left allmulticast mode
[  320.151264][T15399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  320.416488][ T5228] Bluetooth: hci2: command 0x0405 tx timeout
[  321.663788][T15433] __nla_validate_parse: 7 callbacks suppressed
[  321.663802][T15433] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2816'.
[  321.808654][T15442] netlink: 'syz.2.2817': attribute type 9 has an invalid length.
[  321.814460][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2817'.
[  321.835237][T15442] macvlan4: entered promiscuous mode
[  321.837536][T15442] hsr0: entered promiscuous mode
[  321.839853][T15442] macvlan4: entered allmulticast mode
[  321.842084][T15442] hsr0: entered allmulticast mode
[  321.844091][T15442] hsr_slave_0: entered allmulticast mode
[  321.846471][T15442] hsr_slave_1: entered allmulticast mode
[  322.023013][T15445] sctp: [Deprecated]: syz.1.2819 (pid 15445) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.023013][T15445] Use struct sctp_sack_info instead
[  322.245736][T15467] syzkaller0: entered promiscuous mode
[  322.248412][T15467] syzkaller0: entered allmulticast mode
[  322.792943][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'.
[  322.795843][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'.
[  322.798677][T15489] netlink: 'syz.1.2830': attribute type 4 has an invalid length.
[  322.938879][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[  322.964372][T15508] veth0: entered promiscuous mode
[  323.142512][T15519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.149820][T15519] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  323.155052][T15519] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  323.214560][T15533] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2840'.
[  323.242218][T15537] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20000
[  323.248778][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'.
[  323.326203][T15494] veth0: left promiscuous mode
[  323.409079][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2846'.
[  323.437812][ T5295] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  323.446155][ T5295] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[  323.456964][ T5295] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  323.726992][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'.
[  323.777266][T15580] sctp: [Deprecated]: syz.1.2850 (pid 15580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  323.777266][T15580] Use struct sctp_sack_info instead
[  324.715802][T15612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'.
[  325.440143][T15646] ipvlan0: entered promiscuous mode
[  325.442628][T15646] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  325.445291][T15646] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  325.789698][T15685] SET target dimension over the limit!
[  325.988451][T15706] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.994047][T15706] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.997546][T15706] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.001357][T15706] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.005404][T15706] geneve1: left promiscuous mode
[  326.007527][T15706] geneve1: left allmulticast mode
[  326.021328][T15706] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  326.028019][T15706] bridge3: left promiscuous mode
[  326.029932][T15706] bridge3: left allmulticast mode
[  326.040937][T15706] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.043979][T15706] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.047041][T15706] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.050471][T15706] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.354882][T15728] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  326.358584][T15728] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  326.400974][T15730] hsr0: left allmulticast mode
[  326.403309][T15730] hsr_slave_0: left allmulticast mode
[  326.405722][T15730] hsr_slave_1: left allmulticast mode
[  326.408037][T15730] hsr0: left promiscuous mode
[  326.415592][T15730] macvlan4: left promiscuous mode
[  326.418046][T15730] macvlan4: left allmulticast mode
[  326.553014][T15734] 8021q: adding VLAN 0 to HW filter on device team0
[  326.555543][T15734] batman_adv: batadv0: Interface activated: team0
[  326.558763][T15734] batman_adv: batadv0: Interface activated: dummy0
[  326.562313][T15734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.829933][T15736] xt_CT: You must specify a L4 protocol and not use inversions on it
[  327.259062][T15741] x_tables: duplicate underflow at hook 3
[  327.413357][T15750] __nla_validate_parse: 8 callbacks suppressed
[  327.413376][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'.
[  327.579135][T15756] ipt_rpfilter: unknown options
[  327.967917][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2908'.
[  328.499113][T15782] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2914'.
[  328.778345][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'.
[  328.860132][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2919'.
[  329.127577][T15799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'.
[  329.136597][T15799] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2920'.
[  329.186882][T15810] x_tables: duplicate underflow at hook 2
[  329.301142][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2924'.
[  329.329484][T15822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  329.343504][T15821] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2925'.
[  329.350579][T15822] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2925'.
[  330.397862][T15899] netlink: 'syz.0.2944': attribute type 9 has an invalid length.
[  330.405424][T15899] macvlan7: entered promiscuous mode
[  330.407503][T15899] macvlan7: entered allmulticast mode
[  330.409502][T15899] hsr0: entered allmulticast mode
[  330.411409][T15899] hsr_slave_0: entered allmulticast mode
[  330.413447][T15899] hsr_slave_1: entered allmulticast mode
[  331.202257][T15909] netlink: 'syz.1.2948': attribute type 16 has an invalid length.
[  331.207633][T15908] netlink: 'syz.1.2948': attribute type 16 has an invalid length.
[  331.809962][T15965] netlink: 'syz.1.2964': attribute type 30 has an invalid length.
[  331.809967][T15966] netlink: 'syz.1.2964': attribute type 30 has an invalid length.
[  331.815151][T15966] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  331.818143][T15966] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  331.821029][T15966] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  331.823976][T15966] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  331.829031][T15966] netlink: 'syz.1.2964': attribute type 30 has an invalid length.
[  331.835713][T15965] netlink: 'syz.1.2964': attribute type 30 has an invalid length.
[  331.967929][T15978] netlink: 'syz.1.2968': attribute type 2 has an invalid length.
[  331.976897][T15978] : entered promiscuous mode
[  332.662778][T15986] __nla_validate_parse: 9 callbacks suppressed
[  332.662791][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[  332.837744][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  333.014310][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2974'.
[  333.146951][T16007] can: request_module (can-proto-0) failed.
[  333.351565][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'.
[  333.945871][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2986'.
[  334.094403][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2993'.
[  334.123510][T16057] xt_hashlimit: size too large, truncated to 1048576
[  334.237167][T16058] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2992'.
[  334.903361][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'.
[  335.107516][T16101] xt_cluster: node mask cannot exceed total number of nodes
[  335.791407][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'.
[  335.998373][T16141] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3015'.
[  336.432654][T16156] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  336.820111][T16172] bridge4: entered promiscuous mode
[  336.822773][T16172] bridge4: entered allmulticast mode
[  336.827137][T16172] team0: Port device bridge4 added
[  337.146672][T16179] netlink: 'syz.2.3028': attribute type 7 has an invalid length.
[  337.455138][T16191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  337.725737][T16204] __nla_validate_parse: 12 callbacks suppressed
[  337.725750][T16204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3037'.
[  337.737682][T16204] netlink: 'syz.0.3037': attribute type 7 has an invalid length.
[  337.744213][T16204] netlink: 'syz.0.3037': attribute type 8 has an invalid length.
[  337.746776][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'.
[  338.035119][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'.
[  339.014308][T16257] netlink: 'syz.1.3056': attribute type 12 has an invalid length.
[  339.017324][T16257] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3056'.
[  339.246280][T16269] sctp: [Deprecated]: syz.2.3061 (pid 16269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.246280][T16269] Use struct sctp_sack_info instead
[  339.259194][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'.
[  339.262794][T16269] nbd: illegal input index -381222912
[  339.287126][T16270] netlink: 'syz.0.3060': attribute type 1 has an invalid length.
[  339.604223][T16298] sctp: [Deprecated]: syz.0.3069 (pid 16298) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.604223][T16298] Use struct sctp_sack_info instead
[  339.765772][T16305] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  339.964212][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'.
[  339.967078][T16323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'.
[  339.969863][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'.
[  339.978112][T16323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'.
[  340.037583][T16336] netlink: 'syz.2.3081': attribute type 15 has an invalid length.
[  340.207367][T16347] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3084'.
[  340.228926][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.232202][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.241298][T16346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.861790][T16358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  340.984691][T16365] xt_hashlimit: size too large, truncated to 1048576
[  341.742599][T16394] netlink: 'syz.1.3099': attribute type 4 has an invalid length.
[  341.766998][T16394] batman_adv: batadv0: Interface deactivated: team0
[  341.773484][T16394] batman_adv: batadv0: Interface deactivated: dummy0
[  341.820682][T16394] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  341.824412][T16394] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  341.827742][T16394] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  341.830907][T16394] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  341.845592][T16394] bridge4: left promiscuous mode
[  341.848324][T16394] bridge4: left allmulticast mode
[  341.918973][T16397] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  342.324180][T16431] trusted_key: syz.1.3110 sent an empty control message without MSG_MORE.
[  342.798024][T16451] netlink: 'syz.1.3116': attribute type 9 has an invalid length.
[  342.804306][T16451] __nla_validate_parse: 11 callbacks suppressed
[  342.804321][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'.
[  342.826142][T16451] macvlan0: entered promiscuous mode
[  342.828550][T16451] macvlan0: entered allmulticast mode
[  342.840193][T16451] hsr0: entered allmulticast mode
[  342.842060][T16451] hsr_slave_0: entered allmulticast mode
[  342.846495][T16451] hsr_slave_1: entered allmulticast mode
[  343.248665][T16455] netlink: 566 bytes leftover after parsing attributes in process `syz.0.3118'.
[  343.746480][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3129'.
[  343.751660][T16490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3129'.
[  343.755460][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3129'.
[  343.759223][T16490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3129'.
[  343.869181][T16497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.980651][T16503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3133'.
[  343.991096][T16503] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.009933][T16504] pimreg: entered allmulticast mode
[  344.175627][T16506] bridge0: port 1(erspan0) entered blocking state
[  344.177951][T16506] bridge0: port 1(erspan0) entered disabled state
[  344.191889][T16506] erspan0: entered allmulticast mode
[  344.196286][T16506] erspan0: entered promiscuous mode
[  344.221164][T16506] erspan0: left allmulticast mode
[  344.223339][T16506] erspan0: left promiscuous mode
[  344.225572][T16506] bridge0: port 1(erspan0) entered disabled state
[  344.389684][T16513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3139'.
[  344.863531][T16527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3143'.
[  344.867263][T16526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3143'.
[  345.311884][T16551] 8021q: adding VLAN 0 to HW filter on device team0
[  345.314266][T16551] batman_adv: batadv0: Interface activated: team0
[  345.316934][T16551] batman_adv: batadv0: Interface activated: dummy0
[  345.323790][T16551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.384242][T16562] netlink: 'syz.0.3154': attribute type 4 has an invalid length.
[  345.388508][T16562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  345.491446][T16569] siw: device registration error -23
[  345.598170][T16582] batadv_slave_1: entered promiscuous mode
[  345.605364][T16579] batadv_slave_1: left promiscuous mode
[  346.421331][T16636] SET target dimension over the limit!
[  347.013727][T16684] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  347.107738][T16691] xt_CT: No such helper "syz1"
[  348.318525][T16745] xt_hashlimit: size too large, truncated to 1048576
[  348.464363][T16755] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  348.612879][ T5826] syz_tun (unregistering): left allmulticast mode
[  348.615647][ T5826] bridge0: port 1(syz_tun) entered disabled state
[  349.147714][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  349.150847][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  349.153577][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  349.156706][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  349.159726][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  349.401097][T16784] chnl_net:caif_netlink_parms(): no params data found
[  349.534226][T16784] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.538936][T16784] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.551268][T16784] bridge_slave_0: entered allmulticast mode
[  349.556490][T16784] bridge_slave_0: entered promiscuous mode
[  349.573263][T16784] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.590485][T16784] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.593121][T16784] bridge_slave_1: entered allmulticast mode
[  349.596213][T16784] bridge_slave_1: entered promiscuous mode
[  349.621725][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.626556][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.685856][T16813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.695467][T16784] team0: Port device team_slave_0 added
[  349.722251][T16784] team0: Port device team_slave_1 added
[  349.782292][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.785468][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.796483][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.802963][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.805935][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.816437][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.853134][T16784] hsr_slave_0: entered promiscuous mode
[  349.855567][T16784] hsr_slave_1: entered promiscuous mode
[  349.857807][T16784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.860667][T16784] Cannot create hsr debugfs directory
[  350.350491][T16784] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  350.356454][T16784] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  350.363440][T16784] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  350.369962][T16784] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  350.459557][T16829] netlink: 'syz.1.3233': attribute type 2 has an invalid length.
[  350.464655][T16784] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.465067][T16829] netlink: 'syz.1.3233': attribute type 1 has an invalid length.
[  350.470875][T16829] netlink: 'syz.1.3233': attribute type 1 has an invalid length.
[  350.487549][T16784] 8021q: adding VLAN 0 to HW filter on device team0
[  350.509181][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.512025][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.528336][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.531277][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.685105][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.718692][T16784] veth0_vlan: entered promiscuous mode
[  350.725731][T16784] veth1_vlan: entered promiscuous mode
[  350.743286][T16784] veth0_macvtap: entered promiscuous mode
[  350.747283][T16784] veth1_macvtap: entered promiscuous mode
[  350.762794][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.776750][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.801672][T16844] batman_adv: batadv0: Interface deactivated: team0
[  350.806659][T16844] batman_adv: batadv0: Interface deactivated: dummy0
[  350.813993][T16844] hsr0: left allmulticast mode
[  350.816076][T16844] hsr_slave_0: left allmulticast mode
[  350.818308][T16844] hsr_slave_1: left allmulticast mode
[  350.821800][T16844] macvlan0: left promiscuous mode
[  350.823981][T16844] macvlan0: left allmulticast mode
[  350.833181][T16784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.836543][T16784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.865717][T16784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.870275][T16784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.994979][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.998477][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.039184][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.055759][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.064934][T16854] xt_hashlimit: size too large, truncated to 1048576
[  352.004981][T16873] __nla_validate_parse: 9 callbacks suppressed
[  352.004999][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'.
[  352.016408][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'.
[  352.457512][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3249'.
[  352.634437][T16897] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  352.695789][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3252'.
[  352.875239][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.118425][T16918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3255'.
[  353.127880][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'.
[  353.134666][T16918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3255'.
[  353.137504][T16918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3255'.
[  353.233293][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  353.237305][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  353.243361][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  353.247042][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  353.249721][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  353.441295][T16919] chnl_net:caif_netlink_parms(): no params data found
[  353.502077][T16919] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.504509][T16919] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.506865][T16919] bridge_slave_0: entered allmulticast mode
[  353.509652][T16919] bridge_slave_0: entered promiscuous mode
[  353.513316][T16919] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.515658][T16919] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.518013][T16919] bridge_slave_1: entered allmulticast mode
[  353.521610][T16919] bridge_slave_1: entered promiscuous mode
[  353.539809][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.544586][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.564242][T16919] team0: Port device team_slave_0 added
[  353.567638][T16919] team0: Port device team_slave_1 added
[  353.601764][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.604116][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.615434][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.620930][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.623250][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.631831][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.636569][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'.
[  353.671653][T16919] hsr_slave_0: entered promiscuous mode
[  353.674418][T16919] hsr_slave_1: entered promiscuous mode
[  353.680570][T16919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  353.683046][T16919] Cannot create hsr debugfs directory
[  354.011580][T16935] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  354.079044][T16939] sctp: [Deprecated]: syz.1.3260 (pid 16939) Use of int in max_burst socket option.
[  354.079044][T16939] Use struct sctp_assoc_value instead
[  354.088095][T16939] Unsupported ieee802154 address type: 0
[  354.149038][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3264'.
[  354.229769][T16951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.604788][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.673320][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.729575][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.831036][   T13] bridge_slave_1: left allmulticast mode
[  354.833735][   T13] bridge_slave_1: left promiscuous mode
[  354.837080][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.844036][   T13] bridge_slave_0: left allmulticast mode
[  354.846448][   T13] bridge_slave_0: left promiscuous mode
[  354.848977][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.177863][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  355.190036][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  355.194808][   T13] bond0 (unregistering): Released all slaves
[  355.290855][ T5829] Bluetooth: hci0: command tx timeout
[  355.475975][   T13] hsr_slave_0: left promiscuous mode
[  355.503574][   T13] hsr_slave_1: left promiscuous mode
[  355.506802][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.510368][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.515034][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.518696][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.556296][   T13] veth1_macvtap: left promiscuous mode
[  355.563784][   T13] veth0_macvtap: left promiscuous mode
[  355.566491][   T13] veth1_vlan: left promiscuous mode
[  355.569078][   T13] veth0_vlan: left promiscuous mode
[  356.075898][   T13] team0 (unregistering): Port device team_slave_1 removed
[  356.119150][   T13] team0 (unregistering): Port device team_slave_0 removed
[  356.546873][T16919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  356.579299][T16919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  356.625505][T16919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  356.632642][T16919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  356.728574][T17015] syzkaller0: entered promiscuous mode
[  356.734405][T17015] syzkaller0: entered allmulticast mode
[  356.822242][T16919] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.861862][T16919] 8021q: adding VLAN 0 to HW filter on device team0
[  356.876195][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.878635][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  356.892054][T15843] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.894697][T15843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.071221][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.097757][T16919] veth0_vlan: entered promiscuous mode
[  357.103694][T16919] veth1_vlan: entered promiscuous mode
[  357.122842][T16919] veth0_macvtap: entered promiscuous mode
[  357.126577][T16919] veth1_macvtap: entered promiscuous mode
[  357.136159][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.147880][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.157286][T16919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.161345][T16919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.164943][T16919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.168785][T16919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.256621][T15843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.260439][T15843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.286063][T15841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.289472][T15841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.674238][T17048] __nla_validate_parse: 11 callbacks suppressed
[  358.674256][T17048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3287'.
[  358.682600][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3287'.
[  358.696928][T17048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3287'.
[  358.749199][T17055] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  358.886189][T17066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3292'.
[  358.889164][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3292'.
[  358.892880][T17066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3292'.
[  358.895723][T17066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3292'.
[  358.909339][T17065] 8021q: adding VLAN 0 to HW filter on device team0
[  358.926004][T17065] batman_adv: batadv0: Interface activated: team0
[  358.929970][T17065] batman_adv: batadv0: Interface activated: dummy0
[  358.941013][T17065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.122388][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.238454][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.315752][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.385693][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.417820][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.422584][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.427279][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.441820][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.447101][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.499257][ T5676] bridge_slave_1: left allmulticast mode
[  359.501480][ T5676] bridge_slave_1: left promiscuous mode
[  359.504628][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.509286][ T5676] bridge_slave_0: left allmulticast mode
[  359.520324][ T5676] bridge_slave_0: left promiscuous mode
[  359.522511][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.709893][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  359.727524][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3294'.
[  359.842820][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  359.848616][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  359.861369][ T5676] bond0 (unregistering): Released all slaves
[  359.876845][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3296'.
[  359.895584][T17085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.909734][T17091] syzkaller0: entered promiscuous mode
[  359.920193][T17091] syzkaller0: entered allmulticast mode
[  359.950164][T17093] batadv_slave_1: entered promiscuous mode
[  359.956225][T17092] batadv_slave_1: left promiscuous mode
[  360.004934][T17073] tipc: Resetting bearer <eth:syzkaller0>
[  360.041333][T17072] tipc: Resetting bearer <eth:syzkaller0>
[  360.061356][T17072] tipc: Disabling bearer <eth:syzkaller0>
[  360.193715][T17069] chnl_net:caif_netlink_parms(): no params data found
[  360.217466][T17108] xt_hashlimit: size too large, truncated to 1048576
[  360.334501][ T5676] hsr_slave_0: left promiscuous mode
[  360.337943][ T5676] hsr_slave_1: left promiscuous mode
[  360.340456][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.343593][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.347515][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.351042][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.366134][ T5676] veth1_macvtap: left promiscuous mode
[  360.368697][ T5676] veth0_macvtap: left promiscuous mode
[  360.371923][ T5676] veth1_vlan: left promiscuous mode
[  360.374190][ T5676] veth0_vlan: left promiscuous mode
[  360.792247][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  360.823090][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  361.146020][T17069] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.148849][T17069] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.156220][T17069] bridge_slave_0: entered allmulticast mode
[  361.166411][T17069] bridge_slave_0: entered promiscuous mode
[  361.179094][T17069] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.189700][T17069] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.192452][T17069] bridge_slave_1: entered allmulticast mode
[  361.195310][T17069] bridge_slave_1: entered promiscuous mode
[  361.211297][T17125] netlink: 'syz.1.3306': attribute type 1 has an invalid length.
[  361.253285][T17069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.258024][T17069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.308059][T17069] team0: Port device team_slave_0 added
[  361.312032][T17069] team0: Port device team_slave_1 added
[  361.336144][T17069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.343638][T17069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.360266][T17069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.372774][T17069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.374945][T17069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.393360][T17069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.438247][T17069] hsr_slave_0: entered promiscuous mode
[  361.441001][T17069] hsr_slave_1: entered promiscuous mode
[  361.443276][T17069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.446770][T17069] Cannot create hsr debugfs directory
[  361.540163][ T5829] Bluetooth: hci0: command tx timeout
[  361.810762][T17069] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  361.832361][T17069] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  361.837841][T17069] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  361.844455][T17069] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  361.873338][T17069] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.875820][T17069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.916342][T17069] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.936529][T17069] 8021q: adding VLAN 0 to HW filter on device team0
[  361.951677][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.983046][T15841] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.986040][T15841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.021939][T15841] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.025114][T15841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.288684][T17069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.344022][T17069] veth0_vlan: entered promiscuous mode
[  362.361920][T17069] veth1_vlan: entered promiscuous mode
[  362.402919][T17069] veth0_macvtap: entered promiscuous mode
[  362.408046][T17069] veth1_macvtap: entered promiscuous mode
[  362.428086][T17069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.443372][T17069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.462617][T17069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.468864][T17069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.476785][T17069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.489702][T17069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.565100][T15839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.567688][T15839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.585044][T15841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.587617][T15841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.627364][T17190] xt_hashlimit: size too large, truncated to 1048576
[  363.472473][T15720] hid-generic 0005:16BF:5505.0005: unknown main item tag 0x0
[  363.475681][T15720] hid-generic 0005:16BF:5505.0005: unknown main item tag 0x0
[  363.491293][T15720] hid-generic 0005:16BF:5505.0005: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  363.834213][T17225] __nla_validate_parse: 6 callbacks suppressed
[  363.834225][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'.
[  364.409653][T17097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.451532][T17241] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3323'.
[  364.455396][T17241] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  365.216512][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.222930][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.226232][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.231046][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.234296][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.263070][T17249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.355198][T17256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.358700][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.369472][T17256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.375417][T17256] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.405468][T17250] chnl_net:caif_netlink_parms(): no params data found
[  365.447745][T17255] bridge_slave_0: left allmulticast mode
[  365.458136][T17255] bridge_slave_0: left promiscuous mode
[  365.460331][T17255] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.512287][T17250] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.514723][T17250] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.517741][T17250] bridge_slave_0: entered allmulticast mode
[  365.521350][T17250] bridge_slave_0: entered promiscuous mode
[  365.528564][T17250] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.532886][T17250] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.535426][T17250] bridge_slave_1: entered allmulticast mode
[  365.538384][T17250] bridge_slave_1: entered promiscuous mode
[  365.574997][T17250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.589580][T17250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.661236][T17250] team0: Port device team_slave_0 added
[  365.666394][T17250] team0: Port device team_slave_1 added
[  365.689862][T17250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.692909][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.704179][T17250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.716483][T17250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.721871][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.740291][T17250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.812972][T17250] hsr_slave_0: entered promiscuous mode
[  365.816102][T17250] hsr_slave_1: entered promiscuous mode
[  365.819167][T17250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  365.822606][T17250] Cannot create hsr debugfs directory
[  365.909368][T17097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.964174][T17097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.046126][T17097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.165433][T17097] bridge_slave_1: left allmulticast mode
[  366.167380][T17097] bridge_slave_1: left promiscuous mode
[  366.169552][T17097] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.174062][T17097] bridge_slave_0: left allmulticast mode
[  366.175998][T17097] bridge_slave_0: left promiscuous mode
[  366.177954][T17097] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.186402][T17275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'.
[  366.487450][T17097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.495247][T17097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.502393][T17097] bond0 (unregistering): Released all slaves
[  366.595286][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3333'.
[  366.826001][T17097] hsr_slave_0: left promiscuous mode
[  366.828368][T17097] hsr_slave_1: left promiscuous mode
[  366.830892][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.833533][T17097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.839021][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.841789][T17097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.856796][T17097] veth1_macvtap: left promiscuous mode
[  366.858822][T17097] veth0_macvtap: left promiscuous mode
[  366.860939][T17097] veth1_vlan: left promiscuous mode
[  366.862967][T17097] veth0_vlan: left promiscuous mode
[  367.290439][ T5228] Bluetooth: hci0: command tx timeout
[  367.440377][T17097] team0 (unregistering): Port device team_slave_1 removed
[  367.468096][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'.
[  367.486394][T17097] team0 (unregistering): Port device team_slave_0 removed
[  368.102923][T17250] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  368.109982][T17250] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  368.126373][T17250] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  368.162852][T17250] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  368.303422][T17250] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.329700][T17250] 8021q: adding VLAN 0 to HW filter on device team0
[  368.349733][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.352183][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.372772][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.375153][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.512181][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.528242][T17343] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  368.569288][T17250] veth0_vlan: entered promiscuous mode
[  368.579958][T17250] veth1_vlan: entered promiscuous mode
[  368.607991][T17250] veth0_macvtap: entered promiscuous mode
[  368.614309][T17250] veth1_macvtap: entered promiscuous mode
[  368.623360][T17250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.648391][T17250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.656393][T17250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.659240][T17250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.663128][T17250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.666067][T17250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.675502][T17350] lo speed is unknown, defaulting to 1000
[  368.683991][T17350] lo speed is unknown, defaulting to 1000
[  368.689528][T17350] lo speed is unknown, defaulting to 1000
[  368.703506][T17350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  368.750641][T15839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.753143][T15839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.773147][T17350] lo speed is unknown, defaulting to 1000
[  368.792107][T17350] lo speed is unknown, defaulting to 1000
[  368.817988][T17350] lo speed is unknown, defaulting to 1000
[  368.818371][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.823857][T17350] lo speed is unknown, defaulting to 1000
[  368.832101][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.991806][T17367] __nla_validate_parse: 2 callbacks suppressed
[  368.991818][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'.
[  368.996821][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'.
[  368.999770][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3354'.
[  369.033021][T17369] veth0: entered promiscuous mode
[  369.044602][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3355'.
[  369.050540][T17369] veth0 (unregistering): left promiscuous mode
[  369.441212][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'.
[  369.441212][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'.
[  370.143353][T17403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3360'.
[  370.331270][T17408] batman_adv: batadv0: Interface deactivated: team0
[  370.360851][T17408] batman_adv: batadv0: Interface deactivated: dummy0
[  370.373190][    T9] lo speed is unknown, defaulting to 1000
[  370.377747][    T9] syz2: Port: 1 Link DOWN
[  370.493532][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.337796][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.342456][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.346414][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.350840][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.354543][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.395894][T17423] lo speed is unknown, defaulting to 1000
[  371.613638][T17423] chnl_net:caif_netlink_parms(): no params data found
[  371.944898][T17423] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.952760][T17423] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.961803][T17423] bridge_slave_0: entered allmulticast mode
[  372.010207][T17423] bridge_slave_0: entered promiscuous mode
[  372.014676][T17423] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.016933][T17423] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.019218][T17423] bridge_slave_1: entered allmulticast mode
[  372.033221][T17423] bridge_slave_1: entered promiscuous mode
[  372.083293][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.087860][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.167416][T17423] team0: Port device team_slave_0 added
[  372.174612][T17423] team0: Port device team_slave_1 added
[  372.208061][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.220298][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.228261][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.235909][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.238083][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.246709][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.283025][T17423] hsr_slave_0: entered promiscuous mode
[  372.291538][T17423] hsr_slave_1: entered promiscuous mode
[  372.293725][T17423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.296386][T17423] Cannot create hsr debugfs directory
[  372.298517][T17443] netlink: 'syz.1.3371': attribute type 5 has an invalid length.
[  372.333838][T17445] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3372'.
[  372.334059][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.362099][T17443] ip6erspan1: entered promiscuous mode
[  372.528159][T17445] bond0 (unregistering): Released all slaves
[  372.563896][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.680891][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.690972][T17460] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3375'.
[  372.693850][T17460] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3375'.
[  372.846013][ T5676] bridge_slave_1: left allmulticast mode
[  372.851282][ T5676] bridge_slave_1: left promiscuous mode
[  372.853369][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.857847][ T5676] bridge_slave_0: left allmulticast mode
[  372.859848][ T5676] bridge_slave_0: left promiscuous mode
[  372.863347][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.213212][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.226072][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.231585][ T5676] bond0 (unregistering): Released all slaves
[  373.370760][ T5829] Bluetooth: hci0: command tx timeout
[  373.575363][ T5676] hsr_slave_0: left promiscuous mode
[  373.577967][ T5676] hsr_slave_1: left promiscuous mode
[  373.585609][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.592369][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.595311][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.597943][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.612529][ T5676] veth1_macvtap: left promiscuous mode
[  373.614713][ T5676] veth0_macvtap: left promiscuous mode
[  373.618519][ T5676] veth1_vlan: left promiscuous mode
[  373.620413][ T5676] veth0_vlan: left promiscuous mode
[  373.922236][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  373.947349][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  374.202368][T17423] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  374.218249][T17423] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  374.229878][T17423] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  374.253954][T17423] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  374.348717][T17489] lo speed is unknown, defaulting to 1000
[  374.514131][T17496] pim6reg: entered allmulticast mode
[  374.520950][T17489] __nla_validate_parse: 5 callbacks suppressed
[  374.520960][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3386'.
[  374.526856][T17423] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.548002][T17423] 8021q: adding VLAN 0 to HW filter on device team0
[  374.559015][T15843] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.562051][T15843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.610847][T15839] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.613320][T15839] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.659100][T17423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  374.709239][T17502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[  374.856359][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.921912][T17423] veth0_vlan: entered promiscuous mode
[  374.947502][T17423] veth1_vlan: entered promiscuous mode
[  375.003077][T17423] veth0_macvtap: entered promiscuous mode
[  375.028043][T17423] veth1_macvtap: entered promiscuous mode
[  375.053104][T17520] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3393'.
[  375.082062][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.094906][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.115290][T17423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.118751][T17423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.123847][T17423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.127561][T17423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.223146][T15841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.226251][T15841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.261686][T15839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.265500][T15839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.354085][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'.
[  375.948435][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'.
[  375.957743][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'.
[  375.968359][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'.
[  375.978212][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'.
[  375.988825][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3406'.
[  376.058383][T17590] pim6reg13: entered allmulticast mode
[  376.068829][T17590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3407'.
[  376.071882][T17590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3407'.
[  376.248924][T17597] netlink: 'syz.1.3409': attribute type 9 has an invalid length.
[  376.258879][T17597] macvlan1: entered promiscuous mode
[  376.262110][T17597] macvlan1: entered allmulticast mode
[  376.264495][T17597] hsr0: entered allmulticast mode
[  376.266732][T17597] hsr_slave_0: entered allmulticast mode
[  376.269173][T17597] hsr_slave_1: entered allmulticast mode
[  376.616299][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.504643][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  377.508032][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  377.517570][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.521720][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.524521][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.549901][T17609] lo speed is unknown, defaulting to 1000
[  377.551104][T17612] sctp: [Deprecated]: syz.1.3414 (pid 17612) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.551104][T17612] Use struct sctp_sack_info instead
[  377.683250][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.698712][T17616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  377.710970][T17616] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  377.750547][T17609] chnl_net:caif_netlink_parms(): no params data found
[  377.806259][T17609] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.809058][T17609] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.812005][T17609] bridge_slave_0: entered allmulticast mode
[  377.815088][T17609] bridge_slave_0: entered promiscuous mode
[  377.819573][T17609] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.822253][T17609] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.824879][T17609] bridge_slave_1: entered allmulticast mode
[  377.828137][T17609] bridge_slave_1: entered promiscuous mode
[  377.847425][T17609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.852763][T17609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.873168][T17609] team0: Port device team_slave_0 added
[  377.876670][T17609] team0: Port device team_slave_1 added
[  377.893879][T17609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.896152][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.904801][T17609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.909172][T17609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.912242][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.920775][T17609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.952332][T17609] hsr_slave_0: entered promiscuous mode
[  377.954879][T17609] hsr_slave_1: entered promiscuous mode
[  377.957000][T17609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  377.959432][T17609] Cannot create hsr debugfs directory
[  378.085308][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.093706][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.143277][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.262678][ T5676] bridge_slave_1: left allmulticast mode
[  378.265002][ T5676] bridge_slave_1: left promiscuous mode
[  378.267323][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.280196][ T5676] bridge_slave_0: left allmulticast mode
[  378.282115][ T5676] bridge_slave_0: left promiscuous mode
[  378.284165][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.709100][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.719292][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.724586][ T5676] bond0 (unregistering): Released all slaves
[  379.088131][ T5676] hsr_slave_0: left promiscuous mode
[  379.105957][ T5676] hsr_slave_1: left promiscuous mode
[  379.108737][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.120112][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.123958][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.126938][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.157548][ T5676] veth1_macvtap: left promiscuous mode
[  379.159856][ T5676] veth0_macvtap: left promiscuous mode
[  379.164783][ T5676] veth1_vlan: left promiscuous mode
[  379.166989][ T5676] veth0_vlan: left promiscuous mode
[  379.614793][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  379.624316][ T5829] Bluetooth: hci0: command tx timeout
[  379.643073][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  380.044405][T17609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  380.056099][T17609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  380.066985][T17609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  380.079936][T17609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  380.188090][T17609] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.212229][T17609] 8021q: adding VLAN 0 to HW filter on device team0
[  380.221520][T15841] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.223873][T15841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  380.235754][T15841] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.238108][T15841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.298067][T17609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  380.302612][T17609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  380.436275][T17688] __nla_validate_parse: 5 callbacks suppressed
[  380.436289][T17688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3433'.
[  380.480515][T17609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  380.514990][T17609] veth0_vlan: entered promiscuous mode
[  380.519636][T17609] veth1_vlan: entered promiscuous mode
[  380.536657][T17694] lo: entered allmulticast mode
[  380.539466][T17694] lo: left allmulticast mode
[  380.563812][T17609] veth0_macvtap: entered promiscuous mode
[  380.590854][T17609] veth1_macvtap: entered promiscuous mode
[  380.602994][T17609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.620145][T17609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.632714][T17609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.636289][T17609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.639816][T17609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.645332][T17609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.687742][T17702] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  380.790387][T15841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.797469][T15841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.860621][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.864150][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.462917][T17716] netlink: 'syz.2.3442': attribute type 83 has an invalid length.
[  382.078517][T17757] syzkaller1: entered promiscuous mode
[  382.087015][T17757] syzkaller1: entered allmulticast mode
[  382.294160][ T5857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.152796][T17771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3459'.
[  383.460759][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.465821][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.469630][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.474301][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.478674][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.514603][ T5857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.552334][T17790] lo speed is unknown, defaulting to 1000
[  383.708260][T17790] chnl_net:caif_netlink_parms(): no params data found
[  383.789731][T17790] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.793063][T17790] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.796281][T17790] bridge_slave_0: entered allmulticast mode
[  383.800903][T17790] bridge_slave_0: entered promiscuous mode
[  383.804991][T17790] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.807636][T17790] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.810291][T17790] bridge_slave_1: entered allmulticast mode
[  383.814347][T17790] bridge_slave_1: entered promiscuous mode
[  383.852135][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.858696][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.887099][T17790] team0: Port device team_slave_0 added
[  383.906103][ T5857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.918681][T17790] team0: Port device team_slave_1 added
[  383.938376][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.941155][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.949296][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.975181][ T5857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.986113][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.989227][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.999862][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.064654][T17790] hsr_slave_0: entered promiscuous mode
[  384.067591][T17790] hsr_slave_1: entered promiscuous mode
[  384.069871][T17790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.072552][T17790] Cannot create hsr debugfs directory
[  384.149237][T17800] netlink: 'syz.2.3464': attribute type 21 has an invalid length.
[  384.155668][T17800] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3464'.
[  384.173462][T17800] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3464'.
[  384.189514][ T5857] bridge_slave_1: left allmulticast mode
[  384.192138][ T5857] bridge_slave_1: left promiscuous mode
[  384.196773][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.205770][ T5857] bridge_slave_0: left allmulticast mode
[  384.208534][ T5857] bridge_slave_0: left promiscuous mode
[  384.211744][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.547580][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.555294][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.561063][ T5857] bond0 (unregistering): Released all slaves
[  384.817893][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'.
[  384.964460][ T5857] hsr_slave_0: left promiscuous mode
[  384.969544][ T5857] hsr_slave_1: left promiscuous mode
[  384.975064][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.977672][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.980787][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.983261][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.995273][ T5857] veth1_macvtap: left promiscuous mode
[  384.997224][ T5857] veth0_macvtap: left promiscuous mode
[  384.999144][ T5857] veth1_vlan: left promiscuous mode
[  385.001437][ T5857] veth0_vlan: left promiscuous mode
[  385.395517][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  385.424815][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  385.534565][ T5829] Bluetooth: hci0: command tx timeout
[  385.662778][T17817] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3471'.
[  386.023197][T17790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  386.040710][T17790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  386.061055][T17790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  386.073752][T17790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  386.144748][T17840] netlink: 'syz.1.3476': attribute type 29 has an invalid length.
[  386.148326][T17840] netlink: 'syz.1.3476': attribute type 29 has an invalid length.
[  386.153953][T17840] netlink: 488 bytes leftover after parsing attributes in process `syz.1.3476'.
[  386.236004][T17790] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.239296][T17846] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3478'.
[  386.246813][T17846] ip6erspan1: left promiscuous mode
[  386.254256][T17846] hsr0: left allmulticast mode
[  386.256029][T17846] hsr_slave_0: left allmulticast mode
[  386.257881][T17846] hsr_slave_1: left allmulticast mode
[  386.259917][T17846] macvlan1: left promiscuous mode
[  386.262881][T17846] macvlan1: left allmulticast mode
[  386.289330][T17790] 8021q: adding VLAN 0 to HW filter on device team0
[  386.305029][T15839] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.307497][T15839] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.312817][T15839] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.315331][T15839] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.461891][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.498055][T17790] veth0_vlan: entered promiscuous mode
[  386.522080][T17790] veth1_vlan: entered promiscuous mode
[  386.573630][T17790] veth0_macvtap: entered promiscuous mode
[  386.592521][T17790] veth1_macvtap: entered promiscuous mode
[  386.611673][T17867] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  386.632794][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.641084][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.647342][T17790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.656974][T17790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.663705][T17790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.668020][T17790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.768991][ T7578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.771874][ T7578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.799052][ T7578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.803401][ T7578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.921404][T17881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.949851][T17883] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3490'.
[  386.954999][T17883] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  387.126658][T17887] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3491'.
[  387.170859][T17887] bond0 (unregistering): (slave veth3): Releasing active interface
[  387.173685][T17887] erspan0: entered promiscuous mode
[  387.176428][T17887] bond0 (unregistering): (slave erspan0): Releasing active interface
[  387.179984][T17887] bond0 (unregistering): Released all slaves
[  387.347025][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3493'.
[  387.367327][T17894] macsec0: entered allmulticast mode
[  387.369669][T17894] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  387.383712][T17894] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  387.925560][T17931] xt_hashlimit: size too large, truncated to 1048576
[  387.992291][T17933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3503'.
[  388.088500][T17935] vlan0: entered promiscuous mode
[  388.173732][T17937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3505'.
[  388.548736][T17958] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3512'.
[  388.672723][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.806961][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'.
[  389.899220][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  389.910422][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  389.914593][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  389.921375][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  389.925075][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.974856][T17974] lo speed is unknown, defaulting to 1000
[  390.233575][T17974] chnl_net:caif_netlink_parms(): no params data found
[  390.279614][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.356373][T17974] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.359580][T17974] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.363038][T17974] bridge_slave_0: entered allmulticast mode
[  390.367167][T17974] bridge_slave_0: entered promiscuous mode
[  390.372164][T17974] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.375402][T17974] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.378771][T17974] bridge_slave_1: entered allmulticast mode
[  390.383260][T17974] bridge_slave_1: entered promiscuous mode
[  390.463346][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.477530][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.485287][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.536020][T17974] team0: Port device team_slave_0 added
[  390.569744][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.594383][T17974] team0: Port device team_slave_1 added
[  390.669691][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.680151][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.699897][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.713737][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.717916][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.749151][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.884651][T17974] hsr_slave_0: entered promiscuous mode
[  390.897868][T17974] hsr_slave_1: entered promiscuous mode
[  390.907128][T17974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.909723][T17974] Cannot create hsr debugfs directory
[  390.967371][ T5676] bridge_slave_1: left allmulticast mode
[  390.969758][ T5676] bridge_slave_1: left promiscuous mode
[  390.975759][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.988228][ T5676] bridge_slave_0: left allmulticast mode
[  390.990642][ T5676] bridge_slave_0: left promiscuous mode
[  390.992500][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.356487][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.366711][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.371939][ T5676] bond0 (unregistering): Released all slaves
[  391.789333][ T5676] hsr_slave_0: left promiscuous mode
[  391.792216][ T5676] hsr_slave_1: left promiscuous mode
[  391.794893][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.797892][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.802442][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.805406][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.814979][ T5676] veth1_macvtap: left promiscuous mode
[  391.816909][ T5676] veth0_macvtap: left promiscuous mode
[  391.818865][ T5676] veth1_vlan: left promiscuous mode
[  391.822076][ T5676] veth0_vlan: left promiscuous mode
[  392.011132][ T5829] Bluetooth: hci0: command tx timeout
[  392.162610][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  392.189961][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  392.810824][T17974] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  392.826509][T17974] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  392.835099][T17974] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  392.843756][T17974] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  392.934378][T18063] __nla_validate_parse: 1 callbacks suppressed
[  392.934395][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'.
[  392.942695][T17974] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.959379][T17974] 8021q: adding VLAN 0 to HW filter on device team0
[  392.968094][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.971292][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.981859][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.984876][ T7582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.033659][T17974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  393.182075][T18070] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3535'.
[  393.259247][T17974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.318732][T17974] veth0_vlan: entered promiscuous mode
[  393.342838][T17974] veth1_vlan: entered promiscuous mode
[  393.362497][T17974] veth0_macvtap: entered promiscuous mode
[  393.366655][T17974] veth1_macvtap: entered promiscuous mode
[  393.381338][T17974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.387481][T17974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.397557][T17974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.401533][T17974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.404440][T17974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.407716][T17974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.471082][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.473920][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.501230][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.504194][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.644581][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'.
[  393.988725][T18116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3542'.
[  394.175866][T18127] ieee802154 phy0 wpan0: encryption failed: -90
[  394.549682][T18130] netlink: 'syz.2.3545': attribute type 4 has an invalid length.
[  394.713820][T18139] vlan0: left promiscuous mode
[  394.979560][T18142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3549'.
[  395.114272][T18146] lo speed is unknown, defaulting to 1000
[  395.217283][T18146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3551'.
[  395.227586][T18146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3551'.
[  395.319870][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'.
[  395.357277][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'.
[  395.368536][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'.
[  395.638765][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.859596][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  396.863619][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  396.866499][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  396.869941][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  396.873544][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  396.893816][T18177] lo speed is unknown, defaulting to 1000
[  396.991033][T18177] chnl_net:caif_netlink_parms(): no params data found
[  397.084481][T18177] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.087731][T18177] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.091484][T18177] bridge_slave_0: entered allmulticast mode
[  397.095517][T18177] bridge_slave_0: entered promiscuous mode
[  397.100619][T18177] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.103797][T18177] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.106979][T18177] bridge_slave_1: entered allmulticast mode
[  397.111492][T18177] bridge_slave_1: entered promiscuous mode
[  397.149676][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.159167][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.195058][T18177] team0: Port device team_slave_0 added
[  397.203344][T18177] team0: Port device team_slave_1 added
[  397.332131][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.344788][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.350240][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.366690][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.379267][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.382821][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.393940][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.427394][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.475871][T18177] hsr_slave_0: entered promiscuous mode
[  397.479103][T18177] hsr_slave_1: entered promiscuous mode
[  397.482279][T18177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  397.485522][T18177] Cannot create hsr debugfs directory
[  397.545062][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.678677][ T5676] bridge_slave_1: left allmulticast mode
[  397.682449][ T5676] bridge_slave_1: left promiscuous mode
[  397.684566][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.689906][ T5676] bridge_slave_0: left allmulticast mode
[  397.692214][ T5676] bridge_slave_0: left promiscuous mode
[  397.694166][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.106131][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.120622][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.132029][ T5676] bond0 (unregistering): Released all slaves
[  398.211479][T18216] __nla_validate_parse: 4 callbacks suppressed
[  398.211496][T18216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3571'.
[  398.562315][T18227] syzkaller0: entered promiscuous mode
[  398.564164][T18227] syzkaller0: entered allmulticast mode
[  398.894053][ T5228] Bluetooth: hci0: command tx timeout
[  399.665313][ T5676] hsr_slave_0: left promiscuous mode
[  399.667473][ T5676] hsr_slave_1: left promiscuous mode
[  399.669709][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.672542][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  399.675427][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  399.678139][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  399.696271][ T5676] veth1_macvtap: left promiscuous mode
[  399.698213][ T5676] veth0_macvtap: left promiscuous mode
[  399.702280][ T5676] veth1_vlan: left promiscuous mode
[  399.703989][ T5676] veth0_vlan: left promiscuous mode
[  400.010934][T18254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.017101][T18254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3579'.
[  400.189912][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  400.234027][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  400.606759][T18234] 
[  400.607752][T18234] ======================================================
[  400.610541][T18234] WARNING: possible circular locking dependency detected
[  400.613132][T18234] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  400.617169][T18234] ------------------------------------------------------
[  400.620044][T18234] syz.1.3574/18234 is trying to acquire lock:
[  400.622606][T18234] ffffffff8f6753b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  400.626109][T18234] 
[  400.626109][T18234] but task is already holding lock:
[  400.628977][T18234] ffffffff8f675358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  400.632957][T18234] 
[  400.632957][T18234] which lock already depends on the new lock.
[  400.632957][T18234] 
[  400.636844][T18234] 
[  400.636844][T18234] the existing dependency chain (in reverse order) is:
[  400.639822][T18234] 
[  400.639822][T18234] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  400.642552][T18234]        lock_acquire+0x120/0x360
[  400.644378][T18234]        _raw_spin_lock_bh+0x36/0x50
[  400.646176][T18234]        nr_rt_ioctl+0x390/0xd50
[  400.647840][T18234]        sock_do_ioctl+0xdc/0x300
[  400.649547][T18234]        sock_ioctl+0x576/0x790
[  400.651213][T18234]        __se_sys_ioctl+0xfc/0x170
[  400.653062][T18234]        do_syscall_64+0xfa/0x3b0
[  400.654926][T18234]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.657641][T18234] 
[  400.657641][T18234] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  400.660948][T18234]        lock_acquire+0x120/0x360
[  400.663190][T18234]        _raw_spin_lock_bh+0x36/0x50
[  400.665526][T18234]        nr_rt_ioctl+0x193/0xd50
[  400.667696][T18234]        sock_do_ioctl+0xdc/0x300
[  400.669906][T18234]        sock_ioctl+0x576/0x790
[  400.672040][T18234]        __se_sys_ioctl+0xfc/0x170
[  400.674310][T18234]        do_syscall_64+0xfa/0x3b0
[  400.676511][T18234]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.679287][T18234] 
[  400.679287][T18234] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  400.682618][T18234]        validate_chain+0xb9b/0x2140
[  400.684929][T18234]        __lock_acquire+0xab9/0xd20
[  400.687058][T18234]        lock_acquire+0x120/0x360
[  400.689190][T18234]        _raw_spin_lock_bh+0x36/0x50
[  400.691383][T18234]        nr_rt_device_down+0xa9/0x720
[  400.693764][T18234]        nr_device_event+0x137/0x150
[  400.695719][T18234]        notifier_call_chain+0x1b6/0x3e0
[  400.697720][T18234]        __dev_notify_flags+0x18d/0x2e0
[  400.699590][T18234]        netif_change_flags+0xe8/0x1a0
[  400.701403][T18234]        dev_change_flags+0x130/0x260
[  400.703499][T18234]        dev_ioctl+0x7b4/0x1150
[  400.705626][T18234]        sock_do_ioctl+0x22c/0x300
[  400.707839][T18234]        sock_ioctl+0x576/0x790
[  400.709963][T18234]        __se_sys_ioctl+0xfc/0x170
[  400.712207][T18234]        do_syscall_64+0xfa/0x3b0
[  400.714405][T18234]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.717136][T18234] 
[  400.717136][T18234] other info that might help us debug this:
[  400.717136][T18234] 
[  400.720859][T18234] Chain exists of:
[  400.720859][T18234]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  400.720859][T18234] 
[  400.726311][T18234]  Possible unsafe locking scenario:
[  400.726311][T18234] 
[  400.729408][T18234]        CPU0                    CPU1
[  400.731690][T18234]        ----                    ----
[  400.734028][T18234]   lock(nr_neigh_list_lock);
[  400.736039][T18234]                                lock(&nr_node->node_lock);
[  400.739207][T18234]                                lock(nr_neigh_list_lock);
[  400.742295][T18234]   lock(nr_node_list_lock);
[  400.744323][T18234] 
[  400.744323][T18234]  *** DEADLOCK ***
[  400.744323][T18234] 
[  400.747610][T18234] 2 locks held by syz.1.3574/18234:
[  400.749861][T18234]  #0: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  400.753692][T18234]  #1: ffffffff8f675358 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  400.757992][T18234] 
[  400.757992][T18234] stack backtrace:
[  400.760544][T18234] CPU: 0 UID: 0 PID: 18234 Comm: syz.1.3574 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  400.760564][T18234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  400.760573][T18234] Call Trace:
[  400.760582][T18234]  <TASK>
[  400.760591][T18234]  dump_stack_lvl+0x189/0x250
[  400.760612][T18234]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.760627][T18234]  ? __pfx__printk+0x10/0x10
[  400.760646][T18234]  ? print_lock_name+0xde/0x100
[  400.760664][T18234]  print_circular_bug+0x2ee/0x310
[  400.760683][T18234]  check_noncircular+0x134/0x160
[  400.760700][T18234]  validate_chain+0xb9b/0x2140
[  400.760716][T18234]  ? rt6_disable_ip+0x6b3/0x720
[  400.760736][T18234]  ? __lock_acquire+0xab9/0xd20
[  400.760748][T18234]  __lock_acquire+0xab9/0xd20
[  400.760762][T18234]  ? nr_rt_device_down+0xa9/0x720
[  400.760774][T18234]  lock_acquire+0x120/0x360
[  400.760785][T18234]  ? nr_rt_device_down+0xa9/0x720
[  400.760798][T18234]  ? nr_rt_device_down+0xa9/0x720
[  400.760810][T18234]  _raw_spin_lock_bh+0x36/0x50
[  400.760827][T18234]  ? nr_rt_device_down+0xa9/0x720
[  400.760838][T18234]  nr_rt_device_down+0xa9/0x720
[  400.760850][T18234]  ? do_raw_spin_unlock+0x4d/0x240
[  400.760867][T18234]  nr_device_event+0x137/0x150
[  400.760884][T18234]  notifier_call_chain+0x1b6/0x3e0
[  400.760902][T18234]  __dev_notify_flags+0x18d/0x2e0
[  400.760919][T18234]  ? __pfx___dev_notify_flags+0x10/0x10
[  400.760932][T18234]  ? __dev_change_flags+0x4cc/0x6d0
[  400.760948][T18234]  ? __pfx___dev_change_flags+0x10/0x10
[  400.760964][T18234]  ? dev_ioctl+0x7a4/0x1150
[  400.760977][T18234]  ? full_name_hash+0x92/0xe0
[  400.760998][T18234]  netif_change_flags+0xe8/0x1a0
[  400.761025][T18234]  dev_change_flags+0x130/0x260
[  400.761043][T18234]  dev_ioctl+0x7b4/0x1150
[  400.761057][T18234]  sock_do_ioctl+0x22c/0x300
[  400.761070][T18234]  ? __pfx_sock_do_ioctl+0x10/0x10
[  400.761080][T18234]  ? __lock_acquire+0xab9/0xd20
[  400.761096][T18234]  sock_ioctl+0x576/0x790
[  400.761115][T18234]  ? __pfx_sock_ioctl+0x10/0x10
[  400.761132][T18234]  ? __fget_files+0x2a/0x420
[  400.761181][T18234]  ? __fget_files+0x3a0/0x420
[  400.761196][T18234]  ? __fget_files+0x2a/0x420
[  400.761213][T18234]  ? bpf_lsm_file_ioctl+0x9/0x20
[  400.761227][T18234]  ? __pfx_sock_ioctl+0x10/0x10
[  400.761244][T18234]  __se_sys_ioctl+0xfc/0x170
[  400.761257][T18234]  do_syscall_64+0xfa/0x3b0
[  400.761270][T18234]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.761282][T18234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.761295][T18234]  ? exc_page_fault+0x9f/0xf0
[  400.761314][T18234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.761327][T18234] RIP: 0033:0x7f1a50d8e929
[  400.761340][T18234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.761351][T18234] RSP: 002b:00007f1a51c35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  400.761365][T18234] RAX: ffffffffffffffda RBX: 00007f1a50fb5fa0 RCX: 00007f1a50d8e929
[  400.761375][T18234] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007
[  400.761382][T18234] RBP: 00007f1a50e10b39 R08: 0000000000000000 R09: 0000000000000000
[  400.761391][T18234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.761400][T18234] R13: 0000000000000000 R14: 00007f1a50fb5fa0 R15: 00007fff51fac948
[  400.761415][T18234]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  400.971000][ T5228] Bluetooth: hci0: command tx timeout
[  400.971121][T18253] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3579'.
[  400.975900][T18253] tc_dump_action: action bad kind
[  401.284306][ T5676] bridge_slave_1: left allmulticast mode
[  401.286337][ T5676] bridge_slave_1: left promiscuous mode
[  401.288430][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.291806][ T5676] bridge_slave_0: left allmulticast mode
[  401.293764][ T5676] bridge_slave_0: left promiscuous mode
[  401.296212][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.363812][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  401.368260][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  401.372477][ T5676] bond0 (unregistering): Released all slaves
[  401.475036][ T5676] hsr_slave_0: left promiscuous mode
[  401.477850][ T5676] hsr_slave_1: left promiscuous mode
[  401.480561][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.483954][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.568728][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  401.589975][ T5676] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
14:17:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000029d9 RDI=00000000000029da RBP=00000000000003f8 RSP=ffffc900029ff030
R8 =ffff888108868237 R9 =1ffff1102110d046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78f5 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1a51c356c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f848386cfc8 CR3=000000003d3e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1a50e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=439c145b7b5aa600 RBX=ffffffff81975d58 RCX=439c145b7b5aa600 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000002222e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8482a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
