last executing test programs:

3m26.233571702s ago: executing program 1 (id=9219):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0)

3m25.654515305s ago: executing program 1 (id=9228):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x2}, 0x8)

3m25.587045682s ago: executing program 1 (id=9230):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0)

3m25.462602524s ago: executing program 1 (id=9234):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe)
shutdown(r0, 0x1)
close(r0)

3m25.392877726s ago: executing program 1 (id=9235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

3m25.108191379s ago: executing program 1 (id=9240):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x2]}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00  \x00'})

3m24.790508017s ago: executing program 32 (id=9240):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x2]}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00  \x00'})

1m11.168156548s ago: executing program 0 (id=11646):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={<r1=>0x0, @local, @local}, &(0x7f0000000500)=0x50)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x0, r1})
r3 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
ioctl(r3, 0x8936, &(0x7f0000000000))

1m9.88734838s ago: executing program 0 (id=11650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m9.701227283s ago: executing program 0 (id=11655):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r0, 0x5)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)

1m8.782097718s ago: executing program 0 (id=11671):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)

1m8.526823077s ago: executing program 0 (id=11674):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4)

1m8.32843339s ago: executing program 0 (id=11677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

53.294568111s ago: executing program 33 (id=11677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

25.700461591s ago: executing program 5 (id=12061):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048e56e0573239361bd8f05c60ff304e7fee8a3221b00", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2)
socket$xdp(0x2c, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

24.542414171s ago: executing program 5 (id=12074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)

24.408391662s ago: executing program 5 (id=12078):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x80}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x100, {0x9, 0x6, "506380", 0x1, 0x6c, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1}}}}}}}, 0x0)

24.292665624s ago: executing program 5 (id=12081):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r2, 0x0, 0x0}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

24.125582781s ago: executing program 5 (id=12083):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x1}}, 0x2e)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

23.971194021s ago: executing program 5 (id=12087):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x200408c0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)

13.334494945s ago: executing program 4 (id=12165):
socket(0x10, 0x803, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

12.932323252s ago: executing program 4 (id=12168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x7, 0xfffffeaf, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

12.702999724s ago: executing program 4 (id=12171):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@random="715803ae5046", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x7fffffff, 0x2}, 0x0, 0x0)

11.798722795s ago: executing program 4 (id=12182):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

11.605095144s ago: executing program 4 (id=12186):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x6f6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

11.498228345s ago: executing program 4 (id=12189):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
unshare(0x62040200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40040)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2)

8.938049611s ago: executing program 34 (id=12087):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x200408c0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)

2.004935583s ago: executing program 2 (id=12279):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.634770582s ago: executing program 2 (id=12284):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

1.568939159s ago: executing program 6 (id=12285):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
close(r2)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

1.408114263s ago: executing program 7 (id=12221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x280200, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

1.389663043s ago: executing program 2 (id=12287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {0x2, 0x2}, {0x7, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080)

1.347430014s ago: executing program 6 (id=12288):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), 0x0, 0x2}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

1.20129398s ago: executing program 6 (id=12289):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324", 0x12}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {0x0}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.195516161s ago: executing program 3 (id=12290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x2, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x3, 0x6, 0x6, 0x12a, 0x2, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x2f, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x4, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x40000002, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0xfffffffe, 0x3ff, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0x0, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x42, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x8, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42be, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x9, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x105, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x401, 0x7, 0xfffffffa, 0x7fffffff, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x8001, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xfff, 0x8, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0x6ca54417, {0x8, 0x2, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x6, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

1.139993296s ago: executing program 2 (id=12291):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0xa6a, 0x6361, 0x805, 0xfffffff8, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480d1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.132952621s ago: executing program 6 (id=12292):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc, 0x4, 0xd}}}}]}, 0x44}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.07909649s ago: executing program 7 (id=12293):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6(0xa, 0x3, 0x5)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800)

1.008304921s ago: executing program 7 (id=12294):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x0, 0x10001, 0xffff, 0x5, 0x5, 0xfec8, 0x5, 0x7f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

880.37599ms ago: executing program 3 (id=12295):
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x74953000)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x2c}}, 0x40080)
socket(0x1, 0xa, 0x3970)

748.391142ms ago: executing program 6 (id=12296):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

704.739137ms ago: executing program 2 (id=12297):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

703.874573ms ago: executing program 3 (id=12298):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x10, 0x1, 0x1, 0x6, 0x1000, 0xec4, 0xb32a, [{0x6, 0x80000001, 0xa2, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20050010}, 0x8800)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

666.690694ms ago: executing program 7 (id=12299):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), 0x0, 0x2}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

541.073009ms ago: executing program 7 (id=12300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r3, 0x8b22, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getaddr={0x20, 0x16, 0x1, 0x10001, 0x25dfdbfe, {0x2, 0x40, 0x2, 0xfe}, [@IFA_FLAGS={0x8, 0x8, 0x280}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
readv(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x3}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfa1, 0x65, 0x0, 0xb, 0x16, 0x0, @rand_addr=0x64010105, @broadcast}, "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"}}, 0xfaf)

444.48757ms ago: executing program 3 (id=12301):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

444.15809ms ago: executing program 6 (id=12302):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
unshare(0x26020480)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0)
read(r0, &(0x7f0000001480)=""/4096, 0x38)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0}, 0x0)

387.123173ms ago: executing program 2 (id=12303):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)

219.902183ms ago: executing program 7 (id=12304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0x0, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

64.35613ms ago: executing program 3 (id=12305):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0)

0s ago: executing program 3 (id=12306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, &(0x7f0000000140)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)

kernel console output (not intermixed with test programs):

(UME) 69*512kB (UME) 28*1024kB (UM) 3*2048kB (M) 307*4096kB (UM) = 1364464kB
[  403.701103][T25327] team0: Port device team_slave_0 added
[  403.727907][   T13] IPVS: stop unused estimator thread 0...
[  403.733639][T25327] team0: Port device team_slave_1 added
[  403.743439][T25516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  403.759424][T25516] Node 1 Normal: 191*4kB (U) 52*8kB (UME) 44*16kB (UME) 67*32kB (UME) 17*64kB (UME) 7*128kB (UME) 5*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3892860kB
[  403.813782][T25516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.824507][ T5835] Bluetooth: hci3: command tx timeout
[  403.884939][T25516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.908772][T25327] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.927858][T25516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.939517][T25327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.965985][T25327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.983582][T25327] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.991065][T25327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.995917][T25516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.046774][T25327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.078519][T25516] 44703 total pagecache pages
[  404.089842][T25516] 0 pages in swap cache
[  404.103690][T25516] Free swap  = 124996kB
[  404.115543][T25516] Total swap = 124996kB
[  404.126526][T25516] 2097051 pages RAM
[  404.142792][T25516] 0 pages HighMem/MovableOnly
[  404.151517][T25516] 424117 pages reserved
[  404.156276][T25516] 0 pages cma reserved
[  404.208091][T25327] hsr_slave_0: entered promiscuous mode
[  404.227906][T25327] hsr_slave_1: entered promiscuous mode
[  404.239059][T25327] debugfs: 'hsr0' already exists in 'hsr'
[  404.246139][T25327] Cannot create hsr debugfs directory
[  404.669696][T25560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9325'.
[  404.706809][T25560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9325'.
[  404.798272][T25327] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  404.852158][T25327] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  404.916197][T25327] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  404.939771][T25327] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  405.013614][T25579] lo: entered allmulticast mode
[  405.189625][T25592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9337'.
[  405.268265][ T5835] block nbd3: Receive control failed (result -107)
[  405.288630][T25327] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.312496][T25327] 8021q: adding VLAN 0 to HW filter on device team0
[  405.350672][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.357847][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.410194][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.417375][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.585816][T25608] syzkaller1: entered promiscuous mode
[  405.594761][T25608] syzkaller1: entered allmulticast mode
[  405.667597][T25615] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9348'.
[  405.895664][ T5835] Bluetooth: hci3: command tx timeout
[  405.996520][T25327] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.048466][T25634] netlink: 'syz.0.9354': attribute type 12 has an invalid length.
[  406.056501][T25634] netlink: 'syz.0.9354': attribute type 29 has an invalid length.
[  406.067455][T25634] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9354'.
[  406.095133][T25634] netlink: 'syz.0.9354': attribute type 1 has an invalid length.
[  406.482782][   T43] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1
[  406.502420][   T43] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max
[  406.516341][   T43] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4
[  406.523767][   T43] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5
[  406.531607][   T43] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd
[  406.542128][   T43] hid-generic 0005:0C45:1012.0001: unexpected long global item
[  406.551676][   T43] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[  406.771943][T25327] veth0_vlan: entered promiscuous mode
[  406.793922][T25327] veth1_vlan: entered promiscuous mode
[  406.840260][T25327] veth0_macvtap: entered promiscuous mode
[  406.876274][T25327] veth1_macvtap: entered promiscuous mode
[  406.889272][T25669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9367'.
[  406.913685][T25327] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.938108][T25327] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.961243][ T1166] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.983976][ T1166] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.041711][ T1166] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.057199][ T1166] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.187297][T25678] syzkaller1: entered promiscuous mode
[  407.192979][T25678] syzkaller1: entered allmulticast mode
[  407.211745][T25680] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  407.397914][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.453458][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.511805][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.521277][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.805317][T25698] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9377'.
[  408.436833][T25710] veth0: entered promiscuous mode
[  408.447705][T25709] veth0: left promiscuous mode
[  409.640994][T25747] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  409.810558][T25756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9404'.
[  409.820524][T25756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9404'.
[  410.167938][T25772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9412'.
[  410.535961][T25784] syzkaller1: entered promiscuous mode
[  410.542144][T25784] syzkaller1: entered allmulticast mode
[  410.842743][T25798] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  411.389540][T25826] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.650784][T25826] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.802823][T25826] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.907228][T25826] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.002842][   T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.069310][   T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.132105][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.187818][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.237413][T25859] syzkaller1: entered promiscuous mode
[  412.250670][T25859] syzkaller1: entered allmulticast mode
[  412.797569][T25876] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  413.162157][T25889] netlink: 'syz.0.9462': attribute type 29 has an invalid length.
[  413.204021][T25889] netlink: 'syz.0.9462': attribute type 29 has an invalid length.
[  413.243469][T25889] netlink: 500 bytes leftover after parsing attributes in process `syz.0.9462'.
[  413.263140][T25889] unsupported nla_type 58
[  413.470934][T25899] syzkaller1: entered promiscuous mode
[  413.487424][T25899] syzkaller1: entered allmulticast mode
[  413.497555][T25901] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  413.655367][T25908] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9471'.
[  413.709417][T25908] 0ªî{X¹¦: entered promiscuous mode
[  414.169849][T25707] Set syz1 is full, maxelem 65536 reached
[  414.380794][   T30] audit: type=1800 audit(1762273687.184:5): pid=25932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9481" name="memory.events" dev="tmpfs" ino=9716 res=0 errno=0
[  415.007110][T25978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9501'.
[  415.381820][T25999] sctp: [Deprecated]: syz.4.9512 (pid 25999) Use of int in max_burst socket option.
[  415.381820][T25999] Use struct sctp_assoc_value instead
[  415.555469][T26013] syzkaller1: entered promiscuous mode
[  415.562819][T26013] syzkaller1: entered allmulticast mode
[  415.912916][T26036] smc: net device gre0 applied user defined pnetid SYZ1
[  415.958261][T26036] smc: net device gre0 erased user defined pnetid SYZ1
[  416.096015][T26048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9531'.
[  416.107448][T26048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9531'.
[  416.928948][T26094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9549'.
[  416.954856][T26094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9549'.
[  417.431998][T26123] : renamed from hsr0 (while UP)
[  417.440733][T26118] xt_CT: No such helper "pptp"
[  417.865756][T26149] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9567'.
[  417.899259][T26149] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9567'.
[  417.948711][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9567'.
[  417.973291][T26159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9569'.
[  419.101247][T26194] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9578'.
[  420.207987][T26253] netlink: 'syz.2.9603': attribute type 11 has an invalid length.
[  420.288132][T26257] syzkaller1: entered promiscuous mode
[  420.313481][T26257] syzkaller1: entered allmulticast mode
[  420.567038][T26276] geneve2: entered promiscuous mode
[  420.585152][T26276] geneve2: entered allmulticast mode
[  420.598455][   T50] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  420.621365][   T50] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  420.642187][T26277] syzkaller1: entered promiscuous mode
[  420.668321][T26277] syzkaller1: entered allmulticast mode
[  420.681768][   T50] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  420.712001][T26276] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.725313][T26283] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  421.245178][T26309] __nla_validate_parse: 4 callbacks suppressed
[  421.245195][T26309] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9629'.
[  421.523914][T26327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'.
[  421.689053][T26338] veth0: entered promiscuous mode
[  421.696936][T26337] veth0: left promiscuous mode
[  421.971216][T26350] ªªªªªªZ7nz>RAÌ: left promiscuous mode
[  421.978573][T26350] tunl0: left promiscuous mode
[  421.983607][T26350] gre0: left promiscuous mode
[  421.990107][T26350] gretap0: left promiscuous mode
[  422.001805][T26350] erspan0: left promiscuous mode
[  422.011979][T26350] ip_vti0: left promiscuous mode
[  422.858555][T26369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9654'.
[  422.886439][T26350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.901884][T26369] nbd: couldn't find a device at index 0
[  422.965191][T26350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.297190][T26350] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  423.387800][T26350] geneve2: left promiscuous mode
[  423.439649][T26350] sit2: left promiscuous mode
[  423.457752][T26350] vlan0: left allmulticast mode
[  423.462652][T26350] veth0_vlan: left allmulticast mode
[  423.468777][T26350] vlan0: left promiscuous mode
[  423.474182][T26350] macvtap1: left promiscuous mode
[  423.487373][T26350] vxlan0: left promiscuous mode
[  423.494127][T26350] gtp0: left promiscuous mode
[  423.539910][   T60] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.555690][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.574119][   T60] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  423.585098][   T60] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.593976][   T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.608224][   T60] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  423.618404][   T60] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.628512][   T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.637490][   T60] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  423.654419][   T60] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  423.663372][   T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.681789][   T60] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  423.922935][T26276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.939135][T26276] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  423.972646][T26404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9666'.
[  424.025779][T26276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.037305][T26276] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  424.152241][T26276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.166048][T26276] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  424.353625][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  424.370797][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  424.381222][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  424.391968][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  424.436421][T26418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  424.476003][T26418] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  424.484288][T26418] gretap2: entered promiscuous mode
[  424.490098][T26418] gretap2: entered allmulticast mode
[  424.498519][ T1166] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  424.510774][ T1166] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  424.547590][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  424.562693][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  424.940707][T26447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9686'.
[  425.137166][T26462] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9693'.
[  425.548367][T26472] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9699'.
[  425.563412][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9700'.
[  425.697794][T26477] netlink: 'syz.2.9701': attribute type 4 has an invalid length.
[  425.827146][T26480] netlink: 'syz.5.9703': attribute type 10 has an invalid length.
[  425.884485][T26480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9703'.
[  425.919635][T26480] batadv0: entered promiscuous mode
[  425.939641][T26480] batadv0: entered allmulticast mode
[  425.966853][T26480] bridge0: port 3(batadv0) entered blocking state
[  425.988648][T26480] bridge0: port 3(batadv0) entered disabled state
[  426.013540][T26492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9709'.
[  426.028560][T26480] bridge0: port 3(batadv0) entered blocking state
[  426.035169][T26480] bridge0: port 3(batadv0) entered forwarding state
[  426.181500][T26496] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  426.325500][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  426.334803][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  426.888547][T26541] syzkaller1: entered promiscuous mode
[  426.904438][T26541] syzkaller1: entered allmulticast mode
[  426.917022][T26539] bridge_slave_0: left allmulticast mode
[  426.923445][T26539] bridge_slave_0: left promiscuous mode
[  426.957543][T26539] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.997716][T26539] bridge_slave_1: left allmulticast mode
[  427.018345][T26549] nbd: nbd2 already in use
[  427.023591][T26549] block nbd2: NBD_DISCONNECT
[  427.025339][T26539] bridge_slave_1: left promiscuous mode
[  427.033167][T26549] block nbd2: Send disconnect failed -32
[  427.041944][T26549] block nbd2: shutting down sockets
[  427.042373][T26539] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.140643][T26539] bond0: (slave bond_slave_0): Releasing backup interface
[  427.169830][T26539] bond0: (slave bond_slave_1): Releasing backup interface
[  427.195546][T26539] team0: Port device team_slave_0 removed
[  427.213343][T26539] team0: Port device team_slave_1 removed
[  427.219720][T26539] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.230138][T26539] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.261470][T26539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  427.393666][T26558] syzkaller1: entered promiscuous mode
[  427.399889][T26558] syzkaller1: entered allmulticast mode
[  427.444840][T26564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9741'.
[  427.818514][T26583] tipc: Enabled bearer <udp:s>, priority 10
[  428.201598][T26608] netlink: 'syz.2.9762': attribute type 10 has an invalid length.
[  429.735378][T26678] sock: sock_set_timeout: `syz.3.9794' (pid 26678) tries to set negative timeout
[  429.943525][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9800'.
[  430.153199][T26704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9807'.
[  430.202049][T26708] netlink: 'syz.5.9806': attribute type 12 has an invalid length.
[  430.245020][T26708] netlink: 'syz.5.9806': attribute type 29 has an invalid length.
[  430.252876][T26708] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9806'.
[  430.283393][T26708] netlink: 'syz.5.9806': attribute type 2 has an invalid length.
[  430.292978][T26708] netlink: 23 bytes leftover after parsing attributes in process `syz.5.9806'.
[  430.418825][T26725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9812'.
[  430.432103][T26725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9812'.
[  430.457057][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'.
[  430.619289][T26735] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9817'.
[  430.750484][T26745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9822'.
[  431.326556][T26776] netlink: 'syz.4.9836': attribute type 17 has an invalid length.
[  431.602457][T26793] netlink: 'syz.3.9845': attribute type 1 has an invalid length.
[  431.618364][T26790] bridge0: port 1(syz_tun) entered blocking state
[  431.626190][T26790] bridge0: port 1(syz_tun) entered disabled state
[  431.632841][T26790] syz_tun: entered allmulticast mode
[  431.642294][T26790] syz_tun: entered promiscuous mode
[  432.376529][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 60 seconds
[  432.394603][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 60 seconds
[  432.405719][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 60 seconds
[  432.417259][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 60 seconds
[  432.779653][T26870] __nla_validate_parse: 7 callbacks suppressed
[  432.779672][T26870] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9877'.
[  434.272200][T26962] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9919'.
[  434.297122][T26377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.344658][T26967] netlink: 'syz.4.9922': attribute type 12 has an invalid length.
[  434.352611][T26967] netlink: 'syz.4.9922': attribute type 29 has an invalid length.
[  434.365716][T26967] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9922'.
[  434.386937][T26967] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9922'.
[  434.729775][T26986] Bluetooth: MGMT ver 1.23
[  435.247762][T27012] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  435.280687][T27012] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  435.509350][T27026] netlink: 'syz.2.9951': attribute type 1 has an invalid length.
[  435.520995][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9951'.
[  436.391422][T27080] sctp: [Deprecated]: syz.3.9976 (pid 27080) Use of struct sctp_assoc_value in delayed_ack socket option.
[  436.391422][T27080] Use struct sctp_sack_info instead
[  436.744239][T27102] netlink: 'syz.5.9987': attribute type 2 has an invalid length.
[  437.324081][T27125] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.9996'.
[  437.924193][T27154] !
: renamed from dummy0
[  438.332539][T27174] sctp: [Deprecated]: syz.0.10022 (pid 27174) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.332539][T27174] Use struct sctp_sack_info instead
[  438.770887][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10031'.
[  439.018152][T27211] atomic_op ffff88807280e198 conn xmit_atomic 0000000000000000
[  439.083479][T27216] netlink: 'syz.3.10041': attribute type 10 has an invalid length.
[  439.092694][T27216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10041'.
[  439.166304][T27216] !
: entered promiscuous mode
[  439.181570][T27216] bridge0: port 1(
0!
) entered blocking state
[  439.195741][T27216] bridge0: port 1(
0!
) entered disabled state
[  439.216638][T27216] !
: entered allmulticast mode
[  439.250795][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10043'.
[  439.501537][T27235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10049'.
[  439.514512][T27233] netlink: 'syz.5.10048': attribute type 4 has an invalid length.
[  439.612945][   T30] audit: type=1800 audit(1762273712.404:6): pid=27244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10051" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=10273 res=0 errno=0
[  439.983660][T27264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10059'.
[  440.543792][T27281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  440.631192][T27289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10069'.
[  440.809381][T27298] trusted_key: syz.5.10072 sent an empty control message without MSG_MORE.
[  440.860887][T27300] netlink: 'syz.0.10074': attribute type 11 has an invalid length.
[  441.661272][T27350] syzkaller1: entered promiscuous mode
[  441.668179][T27350] syzkaller1: entered allmulticast mode
[  441.931803][T27367] netlink: 'syz.2.10102': attribute type 29 has an invalid length.
[  441.973562][T27367] netlink: 'syz.2.10102': attribute type 29 has an invalid length.
[  441.989378][T27367] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10102'.
[  442.096415][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10105'.
[  442.102436][T27376] netlink: 'syz.2.10106': attribute type 7 has an invalid length.
[  442.131481][T27376] netlink: 'syz.2.10106': attribute type 7 has an invalid length.
[  442.243812][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10109'.
[  442.272345][T27383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10108'.
[  444.156389][T27453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.652401][   T50] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  444.743667][T27469] __nla_validate_parse: 2 callbacks suppressed
[  444.743684][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10147'.
[  444.787689][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10147'.
[  444.866009][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10148'.
[  444.884762][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10148'.
[  444.908627][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10148'.
[  444.928710][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10148'.
[  445.264980][  T983] tipc: Node number set to 4269801492
[  445.694255][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10170'.
[  445.715981][T27519] chnl_net:caif_netlink_parms(): no params data found
[  446.126290][T27537] netlink: 'syz.3.10178': attribute type 21 has an invalid length.
[  446.144944][T27537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10178'.
[  446.171196][T27537] netlink: 'syz.3.10178': attribute type 21 has an invalid length.
[  446.184736][T27537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10178'.
[  446.196553][T27542] xt_bpf: check failed: parse error
[  446.309744][T27548] netlink: 51 bytes leftover after parsing attributes in process `syz.2.10182'.
[  446.322982][T27551] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.364916][T27551] bridge_slave_1 (unregistering): left allmulticast mode
[  446.372096][T27551] bridge_slave_1 (unregistering): left promiscuous mode
[  446.380062][T27551] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.407351][ T3453] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8
[  447.228421][T27597] batadv_slave_1: entered promiscuous mode
[  447.237254][T27596] batadv_slave_1: left promiscuous mode
[  447.397600][   T50] nci: nci_ntf_packet: unknown ntf opcode 0x303
[  449.011408][T27709] netlink: 'syz.4.10250': attribute type 19 has an invalid length.
[  449.021367][T27709] netlink: 'syz.4.10250': attribute type 19 has an invalid length.
[  449.192749][T27717] netlink: 'syz.0.10255': attribute type 22 has an invalid length.
[  449.266671][T27717] netlink: 'syz.0.10255': attribute type 22 has an invalid length.
[  449.790775][T27750] __nla_validate_parse: 7 callbacks suppressed
[  449.790793][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10269'.
[  449.795380][T27748] netlink: 'syz.0.10267': attribute type 16 has an invalid length.
[  449.820745][T27750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10269'.
[  449.830152][T27750] netlink: 'syz.2.10269': attribute type 20 has an invalid length.
[  449.839024][T27748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10267'.
[  449.885617][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10269'.
[  449.907250][T27750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10269'.
[  449.917908][T27750] netlink: 'syz.2.10269': attribute type 20 has an invalid length.
[  449.950042][T27758] netlink: 'syz.0.10273': attribute type 12 has an invalid length.
[  449.995607][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10273'.
[  450.027163][T27758] netlink: 'syz.0.10273': attribute type 12 has an invalid length.
[  450.046527][T27758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10273'.
[  450.149619][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  450.435171][T27789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10286'.
[  450.890960][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10296'.
[  450.928600][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10296'.
[  451.338102][T27839] netlink: 'syz.2.10309': attribute type 7 has an invalid length.
[  451.996233][T27876] pim6reg1: entered promiscuous mode
[  452.001799][T27876] pim6reg1: entered allmulticast mode
[  452.166105][ T1166] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.175865][ T1166] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.195900][ T1166] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.204290][ T1166] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.360922][T27895] syzkaller1: tun_chr_ioctl cmd 1074025677
[  452.368628][T27895] syzkaller1: Refused to change device type
[  453.464199][T27964] syzkaller1: entered promiscuous mode
[  453.471199][T27964] syzkaller1: entered allmulticast mode
[  454.773035][T28051] validate_nla: 4 callbacks suppressed
[  454.773053][T28051] netlink: 'syz.2.10398': attribute type 29 has an invalid length.
[  454.793529][T28051] netlink: 'syz.2.10398': attribute type 29 has an invalid length.
[  454.803760][T28049] __nla_validate_parse: 13 callbacks suppressed
[  454.803777][T28049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10397'.
[  454.805852][T28051] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10398'.
[  455.076440][T28061] bond3: entered allmulticast mode
[  455.082102][T28061] 8021q: adding VLAN 0 to HW filter on device bond3
[  455.092504][T28061] bridge0: port 2(bond3) entered blocking state
[  455.100226][T28061] bridge0: port 2(bond3) entered disabled state
[  455.111137][T28061] bond3: entered promiscuous mode
[  455.118497][T28061] bridge0: port 2(bond3) entered blocking state
[  455.125035][T28061] bridge0: port 2(bond3) entered forwarding state
[  455.372401][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10413'.
[  455.412921][T28088] xt_hashlimit: size too large, truncated to 1048576
[  455.796708][ T1166] bridge0: port 2(bond3) entered disabled state
[  455.828553][T28093] syzkaller1: entered promiscuous mode
[  455.834221][T28093] syzkaller1: entered allmulticast mode
[  455.924257][T28096] netlink: 'syz.4.10416': attribute type 14 has an invalid length.
[  455.932828][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10416'.
[  455.943057][T28096] netlink: 'syz.4.10416': attribute type 14 has an invalid length.
[  455.951753][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10416'.
[  456.652553][   T60] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x41
[  457.706312][T28208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10463'.
[  457.772125][T28208] 8021q: adding VLAN 0 to HW filter on device bond3
[  457.824168][T28218] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10463'.
[  458.053317][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10474'.
[  458.063267][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10474'.
[  458.129583][T28233] syzkaller1: entered promiscuous mode
[  458.148466][T28233] syzkaller1: entered allmulticast mode
[  458.353636][T28248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10481'.
[  458.428211][T28252] netlink: 'syz.4.10484': attribute type 15 has an invalid length.
[  458.450914][ T3453] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  458.451047][T28252] netlink: 'syz.4.10484': attribute type 15 has an invalid length.
[  458.467926][ T3453] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  458.489312][ T3453] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  458.507499][ T3453] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  458.906139][T28283] netlink: 'syz.0.10496': attribute type 9 has an invalid length.
[  458.919622][T28283] netlink: 'syz.0.10496': attribute type 9 has an invalid length.
[  459.644253][T28312] netlink: 'syz.2.10507': attribute type 1 has an invalid length.
[  459.752259][T28312] bond4: entered promiscuous mode
[  459.757993][T28312] 8021q: adding VLAN 0 to HW filter on device bond4
[  459.859381][T28314] bond4: (slave bridge5): making interface the new active one
[  459.883182][T28314] bridge5: entered promiscuous mode
[  459.894152][T28314] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  460.022820][T28327] netlink: 'syz.3.10513': attribute type 10 has an invalid length.
[  460.067389][T28327] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  460.116181][T28333] netlink: 'syz.4.10516': attribute type 5 has an invalid length.
[  460.329587][T28354] netlink: 'syz.0.10520': attribute type 4 has an invalid length.
[  460.342705][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  460.529824][T28367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  460.538798][T28367] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  462.459128][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 90 seconds
[  462.470188][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 90 seconds
[  462.483233][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 90 seconds
[  462.494696][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 90 seconds
[  462.546341][T28446] xt_hashlimit: size too large, truncated to 1048576
[  463.308738][T28458] __nla_validate_parse: 4 callbacks suppressed
[  463.308756][T28458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10565'.
[  463.354528][T28458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10565'.
[  463.384660][T28458] netlink: 'syz.2.10565': attribute type 6 has an invalid length.
[  463.426308][T28458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10565'.
[  463.470971][T28458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10565'.
[  463.555436][T28458] netlink: 'syz.2.10565': attribute type 6 has an invalid length.
[  463.800352][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10576'.
[  463.892342][T28482] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  464.377757][T28507] pim6reg1: entered promiscuous mode
[  464.403451][T28507] pim6reg1: entered allmulticast mode
[  464.712530][T28516] syzkaller1: entered promiscuous mode
[  464.718140][T28516] syzkaller1: entered allmulticast mode
[  464.933786][T28530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10593'.
[  465.216731][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10600'.
[  466.121698][T28595] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.10620'.
[  466.147247][T28601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10623'.
[  466.158867][T28601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10623'.
[  466.567128][T28622] netlink: 'syz.5.10633': attribute type 9 has an invalid length.
[  466.575180][T28622] netlink: 'syz.5.10633': attribute type 11 has an invalid length.
[  466.583199][T28622] netlink: 'syz.5.10633': attribute type 12 has an invalid length.
[  466.593886][T28622] openvswitch: netlink: Message has 4 unknown bytes.
[  466.820234][T28638] syzkaller1: entered promiscuous mode
[  466.827071][T28638] syzkaller1: entered allmulticast mode
[  466.873665][T28641] netlink: 'syz.4.10640': attribute type 1 has an invalid length.
[  467.373783][T28667] netlink: 'syz.4.10651': attribute type 39 has an invalid length.
[  467.848814][T28685] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  468.136883][ T5835] Bluetooth: hci3: command tx timeout
[  468.227781][T28706] netlink: 'syz.2.10667': attribute type 12 has an invalid length.
[  469.349606][T28779] netlink: 'syz.2.10692': attribute type 30 has an invalid length.
[  469.400857][   T60] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  469.875153][T28806] __nla_validate_parse: 4 callbacks suppressed
[  469.875173][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10706'.
[  469.891204][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10706'.
[  469.920178][T28810] netlink: 'syz.5.10707': attribute type 4 has an invalid length.
[  469.930722][T28811] syzkaller1: entered promiscuous mode
[  469.937322][T28811] syzkaller1: entered allmulticast mode
[  469.964257][T28810] netlink: 'syz.5.10707': attribute type 4 has an invalid length.
[  470.288090][T28824] vlan2: entered promiscuous mode
[  470.297824][T28824] bridge0: entered promiscuous mode
[  470.563422][T28836] batadv_slave_1: entered allmulticast mode
[  470.613457][T28836] dvmrp6: entered allmulticast mode
[  470.633276][T28835] batadv_slave_1: left allmulticast mode
[  471.664876][T28899] netlink: 'syz.5.10745': attribute type 1 has an invalid length.
[  471.819305][T28905] bond1: (slave gretap3): making interface the new active one
[  471.828158][T28905] bond1: (slave gretap3): Enslaving as an active interface with an up link
[  472.001790][T28922] tipc: Resetting bearer <eth:syzkaller0>
[  472.092463][T28915] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland
[  472.173339][T28927] netlink: 'syz.3.10754': attribute type 3 has an invalid length.
[  472.589779][T28948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10760'.
[  472.746807][T28954] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10764'.
[  473.072658][T28961] scsi_nl_rcv_msg: discarding partial skb
[  473.505722][T28996] dvmrp0: entered allmulticast mode
[  473.569736][T29003] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  473.578323][T29003] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  473.586399][T29003] tipc: Resetting bearer <eth:syzkaller0>
[  473.628152][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10789'.
[  473.644009][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10789'.
[  473.717432][T29011] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  473.740016][T29011] bond4: (slave lo): Enslaving as a backup interface with an up link
[  473.748568][T29011] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  473.849686][T29018] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10793'.
[  474.483980][T29042] policy can only be matched on NF_INET_PRE_ROUTING
[  474.484002][T29042] unable to load match
[  474.914286][T29071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10816'.
[  475.121489][T29087] netlink: 'syz.0.10823': attribute type 1 has an invalid length.
[  475.157408][T29087] 8021q: adding VLAN 0 to HW filter on device bond7
[  475.258763][T29087] bond7: (slave gretap1): making interface the new active one
[  475.268532][T29087] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  475.562657][T29109] netlink: 'syz.3.10831': attribute type 1 has an invalid length.
[  475.920304][T29123] netlink: 'syz.0.10837': attribute type 13 has an invalid length.
[  476.965188][T29109] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  477.161521][T29123] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.177205][T29123] bridge0: port 2(bridge_slave_1) entered listening state
[  477.217474][T29123] 8021q: adding VLAN 0 to HW filter on device team0
[  477.242074][T29123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.829451][T29168] netlink: 'syz.2.10850': attribute type 1 has an invalid length.
[  477.910112][ T5835] Bluetooth: hci3: link tx timeout
[  477.917735][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  477.967856][T29174] bond5: (slave bridge6): making interface the new active one
[  477.996553][T29174] bond5: (slave bridge6): Enslaving as an active interface with an up link
[  478.320519][ T5199] udevd[5199]: worker [23442] /devices/virtual/block/nbd1 is taking a long time
[  478.348336][T29195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10860'.
[  478.772270][T29217] netlink: 'syz.3.10869': attribute type 1 has an invalid length.
[  478.868391][T29220] syzkaller1: entered promiscuous mode
[  478.874117][T29220] syzkaller1: entered allmulticast mode
[  478.992821][T29224] bond1: (slave bridge4): making interface the new active one
[  479.031275][T29224] bond1: (slave bridge4): Enslaving as an active interface with an up link
[  479.259786][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10877'.
[  479.311690][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10877'.
[  479.314807][   T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  479.364516][   T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  479.373376][   T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  479.399086][   T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  479.789126][T29268] ip6gre1: entered promiscuous mode
[  479.798888][T29268] ip6gre1: entered allmulticast mode
[  479.809915][T29265] lo: Caught tx_queue_len zero misconfig
[  479.974875][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  480.037681][T29283] netem: change failed
[  480.720928][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10918'.
[  480.831927][T29328] team1: entered promiscuous mode
[  480.842453][T29328] team1: entered allmulticast mode
[  480.852898][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10920'.
[  480.868718][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10920'.
[  480.990234][T29341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  481.806619][T29388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  481.813980][T29388] IPv6: NLM_F_CREATE should be set when creating new route
[  482.345446][T29410] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10950'.
[  483.113667][T29457] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  483.293430][T29461] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  483.636356][T29492] netlink: 'syz.0.10986': attribute type 1 has an invalid length.
[  483.680361][T29492] netlink: 'syz.0.10986': attribute type 1 has an invalid length.
[  483.746842][T29496] netlink: 184 bytes leftover after parsing attributes in process `syz.5.10988'.
[  483.964075][T29504] vxcan1 speed is unknown, defaulting to 1000
[  484.439179][T29504] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  484.678255][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11005'.
[  484.707865][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11005'.
[  485.011058][T29504] hsr0 speed is unknown, defaulting to 1000
[  486.029697][T29588] netlink: 'syz.3.11025': attribute type 15 has an invalid length.
[  486.045488][T29591] macvtap1: entered promiscuous mode
[  486.050818][T29591] vlan0: entered promiscuous mode
[  486.087195][T29591] macvtap1: entered allmulticast mode
[  486.104584][T29591] vlan0: entered allmulticast mode
[  486.124968][T29591] veth0_vlan: entered allmulticast mode
[  486.141994][T29599] sctp: [Deprecated]: syz.3.11031 (pid 29599) Use of int in maxseg socket option.
[  486.141994][T29599] Use struct sctp_assoc_value instead
[  486.179856][T29595] macvtap2: entered promiscuous mode
[  486.186485][T29595] macvtap2: entered allmulticast mode
[  486.349644][T29607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  486.372684][T29613] netlink: 240 bytes leftover after parsing attributes in process `syz.5.11032'.
[  486.835236][T29639] block nbd4: Unsupported socket: should be TCP or UNIX.
[  487.012778][T29646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  487.633740][T29676] tipc: Failed to remove unknown binding: 66,1,1/3758096386:1741952357/1741952359
[  487.645572][T29676] tipc: Failed to remove unknown binding: 66,1,1/3758096386:1741952357/1741952359
[  487.850877][T29682] x_tables: duplicate underflow at hook 4
[  488.083970][T29689] netlink: 'syz.4.11068': attribute type 26 has an invalid length.
[  488.112294][T29689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11068'.
[  488.139567][T29689] netlink: 'syz.4.11068': attribute type 26 has an invalid length.
[  488.162928][T29689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11068'.
[  488.343498][T29702] syzkaller1: entered promiscuous mode
[  488.354465][T29702] syzkaller1: entered allmulticast mode
[  488.379788][T29706] netlink: 'syz.4.11077': attribute type 4 has an invalid length.
[  488.914906][T29742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11092'.
[  490.066072][T29783] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11105'.
[  490.163719][T29789] netlink: 'syz.5.11108': attribute type 1 has an invalid length.
[  490.318113][T29795] xt_CT: You must specify a L4 protocol and not use inversions on it
[  490.635310][T29821] netlink: 'syz.3.11121': attribute type 13 has an invalid length.
[  490.665826][T29825] netlink: 'syz.5.11123': attribute type 1 has an invalid length.
[  490.720815][T29824] syzkaller1: entered promiscuous mode
[  490.729161][T29824] syzkaller1: entered allmulticast mode
[  490.947918][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11130'.
[  490.948196][T29842] netlink: 'syz.5.11131': attribute type 29 has an invalid length.
[  490.957905][T29840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11130'.
[  490.969735][T29842] netlink: 'syz.5.11131': attribute type 29 has an invalid length.
[  490.988461][T29842] netlink: 500 bytes leftover after parsing attributes in process `syz.5.11131'.
[  491.128294][T29846] vxcan1 speed is unknown, defaulting to 1000
[  491.547020][T29846] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  491.901989][T29885] ªªªªªªZ7nz>RAÌ: Caught tx_queue_len zero misconfig
[  491.926147][T29877] netlink: 'syz.4.11144': attribute type 13 has an invalid length.
[  492.102087][T29891] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11150'.
[  492.295913][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11152'.
[  492.356511][T29901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11154'.
[  492.385341][T29901] netlink: 'syz.4.11154': attribute type 20 has an invalid length.
[  492.432274][T29901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11154'.
[  492.472398][T29901] netlink: 'syz.4.11154': attribute type 20 has an invalid length.
[  492.498046][T29846] hsr0 speed is unknown, defaulting to 1000
[  492.540443][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 120 seconds
[  492.551517][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 120 seconds
[  492.564032][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 120 seconds
[  492.575164][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 120 seconds
[  492.941024][T29926] netlink: 'syz.4.11163': attribute type 1 has an invalid length.
[  493.169426][T29932] bond5: (slave gretap2): making interface the new active one
[  493.201352][T29932] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  493.913594][T29971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11183'.
[  494.091714][T29984] netlink: 'syz.3.11188': attribute type 1 has an invalid length.
[  494.114015][T29984] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11188'.
[  495.362450][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11215'.
[  496.172229][T30088] validate_nla: 1 callbacks suppressed
[  496.172248][T30088] netlink: 'syz.4.11230': attribute type 21 has an invalid length.
[  496.187119][T30090] syzkaller1: entered promiscuous mode
[  496.189292][T30088] netlink: 'syz.4.11230': attribute type 22 has an invalid length.
[  496.192792][T30090] syzkaller1: entered allmulticast mode
[  496.201974][T30088] netlink: 'syz.4.11230': attribute type 23 has an invalid length.
[  496.216364][T30088] netlink: 'syz.4.11230': attribute type 25 has an invalid length.
[  496.226819][T30088] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11230'.
[  496.510316][T30102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11238'.
[  496.555258][T30102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11238'.
[  496.752423][T30117] netlink: 'syz.4.11240': attribute type 13 has an invalid length.
[  497.319759][T30149] netlink: 'syz.3.11257': attribute type 10 has an invalid length.
[  497.358248][T30149] !
: left allmulticast mode
[  497.362974][T30149] !
: left promiscuous mode
[  497.370294][T30149] bridge0: port 1(
0!
) entered disabled state
[  497.380257][T30150] netlink: 'syz.3.11257': attribute type 10 has an invalid length.
[  497.419047][T30149] team0: Failed to send options change via netlink (err -105)
[  497.439447][T30149] team0: Port device 
0!
 added
[  497.486228][T30150] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  497.566737][T30150] team0: Failed to send options change via netlink (err -105)
[  497.608838][T30165] netlink: 'syz.0.11261': attribute type 13 has an invalid length.
[  497.619904][T30150] team0: Failed to send port change of device 
0!
 via netlink (err -105)
[  497.641606][T30150] team0: Port device 
0!
 removed
[  497.663334][T30150] bond0: (slave 
0!
): Enslaving as an active interface with an up link
[  497.678814][T30166] lo: Caught tx_queue_len zero misconfig
[  497.770907][T30165] tipc: Resetting bearer <eth:syzkaller0>
[  497.975987][T30172] syzkaller0: entered promiscuous mode
[  497.981610][T30172] syzkaller0: entered allmulticast mode
[  499.496407][T30195] netlink: 'syz.2.11269': attribute type 1 has an invalid length.
[  500.715248][T30195] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  501.326338][T30228] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  501.393600][T30232] __nla_validate_parse: 4 callbacks suppressed
[  501.393617][T30232] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11282'.
[  501.424175][T30232] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11282'.
[  501.878726][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11297'.
[  501.888463][T30266] Unsupported xt match
[  501.888478][T30266] unable to load match
[  502.208160][T30281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11305'.
[  502.231528][T30285] syzkaller1: entered promiscuous mode
[  502.244447][T30285] syzkaller1: entered allmulticast mode
[  502.436743][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11312'.
[  502.459680][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11312'.
[  502.484647][T30288] nbd2: detected capacity change from 0 to 63
[  502.517074][T30295] block nbd2: NBD_DISCONNECT
[  502.523041][T30295] block nbd2: Disconnected due to user request.
[  502.566762][T30295] block nbd2: shutting down sockets
[  502.573500][T30300] syzkaller0: entered promiscuous mode
[  502.579493][T25332] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.590398][T30300] syzkaller0: entered allmulticast mode
[  502.607320][T25332] Buffer I/O error on dev nbd2, logical block 0, async page read
[  502.627834][T30300] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  502.678095][   T56] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  502.688462][   T56] Buffer I/O error on dev nbd2, logical block 1, async page read
[  502.698641][   T56] Buffer I/O error on dev nbd2, logical block 2, async page read
[  502.714718][   T56] Buffer I/O error on dev nbd2, logical block 3, async page read
[  502.723764][T25332] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.743138][T25332] Buffer I/O error on dev nbd2, logical block 0, async page read
[  502.752623][T25332] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.763207][T25332] Buffer I/O error on dev nbd2, logical block 1, async page read
[  502.771750][T25332] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.789545][T25332] Buffer I/O error on dev nbd2, logical block 2, async page read
[  502.814554][T25332] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.823675][T25332] Buffer I/O error on dev nbd2, logical block 3, async page read
[  502.833017][T25332] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.842460][T25332] Buffer I/O error on dev nbd2, logical block 0, async page read
[  502.850677][T25332] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.864956][T25332] Buffer I/O error on dev nbd2, logical block 1, async page read
[  502.873756][T25332] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.884590][T25332] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  502.897118][T25332] ldm_validate_partition_table(): Disk read failed.
[  502.909843][T25332] Dev nbd2: unable to read RDB block 0
[  502.922694][T25332]  nbd2: unable to read partition table
[  502.957204][T25332] ldm_validate_partition_table(): Disk read failed.
[  502.968371][T25332] Dev nbd2: unable to read RDB block 0
[  503.011685][T25332]  nbd2: unable to read partition table
[  503.014252][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11321'.
[  503.064268][T30320] bridge_slave_1: left allmulticast mode
[  503.090903][T30320] bridge_slave_1: left promiscuous mode
[  503.109904][T30320] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.152516][T30320] bridge_slave_0: left allmulticast mode
[  503.166552][T30320] bridge_slave_0: left promiscuous mode
[  503.166838][T30326] netlink: 'syz.2.11323': attribute type 1 has an invalid length.
[  503.176886][T30320] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.184744][T30326] netlink: 'syz.2.11323': attribute type 4 has an invalid length.
[  503.195169][T30326] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11323'.
[  503.323051][T30331] tipc: Resetting bearer <eth:syzkaller0>
[  503.796486][T30362] netlink: 'syz.5.11332': attribute type 4 has an invalid length.
[  503.875085][T30367] netlink: 'syz.5.11332': attribute type 4 has an invalid length.
[  504.124250][T30375] netlink: 'syz.2.11336': attribute type 10 has an invalid length.
[  504.153878][T30375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11336'.
[  504.166622][T30377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11338'.
[  504.233739][T30375] team0: Port device geneve0 added
[  504.306383][   T50] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  504.334090][   T50] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  504.380356][   T50] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  504.413406][   T50] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  504.592859][T30396] netlink: 'syz.2.11343': attribute type 1 has an invalid length.
[  504.807572][T30414] gre0: Caught tx_queue_len zero misconfig
[  507.241751][T30519] netlink: 'syz.2.11379': attribute type 13 has an invalid length.
[  507.269938][T30519] netlink: 'syz.2.11379': attribute type 17 has an invalid length.
[  507.323838][T30522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  507.487792][T30519] bridge0: port 1(syz_tun) entered blocking state
[  507.494415][T30519] bridge0: port 1(syz_tun) entered forwarding state
[  507.509742][T30519] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.520986][T30519] 8021q: adding VLAN 0 to HW filter on device team0
[  507.540151][T30519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  507.625057][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.175273][T30566] nbd4: detected capacity change from 0 to 63
[  508.183784][T30569] block nbd4: NBD_DISCONNECT
[  508.192985][T30569] block nbd4: Disconnected due to user request.
[  508.203626][T30569] block nbd4: shutting down sockets
[  508.225501][    C0] blk_print_req_error: 136 callbacks suppressed
[  508.225523][    C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.240934][    C0] buffer_io_error: 138 callbacks suppressed
[  508.240950][    C0] Buffer I/O error on dev nbd4, logical block 0, async page read
[  508.256705][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.260158][    C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.265876][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  508.274834][    C0] Buffer I/O error on dev nbd4, logical block 2, async page read
[  508.283721][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.299388][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  508.307270][T25332] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.318098][T25332] Buffer I/O error on dev nbd4, logical block 0, async page read
[  508.326374][T25332] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.336178][T25332] Buffer I/O error on dev nbd4, logical block 1, async page read
[  508.344151][T25332] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.355533][T25332] Buffer I/O error on dev nbd4, logical block 2, async page read
[  508.363505][T25332] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.373103][T25332] Buffer I/O error on dev nbd4, logical block 3, async page read
[  508.382745][T25332] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.398926][T25332] Buffer I/O error on dev nbd4, logical block 0, async page read
[  508.408163][T25332] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.419003][T25332] Buffer I/O error on dev nbd4, logical block 1, async page read
[  508.431540][T25332] ldm_validate_partition_table(): Disk read failed.
[  508.441307][T25332] Dev nbd4: unable to read RDB block 0
[  508.451365][T25332]  nbd4: unable to read partition table
[  508.493321][T25332] ldm_validate_partition_table(): Disk read failed.
[  508.502607][T25332] Dev nbd4: unable to read RDB block 0
[  508.511658][T25332]  nbd4: unable to read partition table
[  508.633983][T30581] __nla_validate_parse: 4 callbacks suppressed
[  508.634000][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11403'.
[  508.788587][T30588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11406'.
[  508.806120][T30588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11406'.
[  508.977908][T30594] syzkaller1: entered promiscuous mode
[  508.983537][T30594] syzkaller1: entered allmulticast mode
[  509.275809][T30614] vxcan1 speed is unknown, defaulting to 1000
[  509.487670][T30614] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  510.051624][T30614] hsr0 speed is unknown, defaulting to 1000
[  510.113838][T30644] netlink: 14544 bytes leftover after parsing attributes in process `syz.5.11429'.
[  510.237963][T30648] vxcan1 speed is unknown, defaulting to 1000
[  510.335266][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11433'.
[  510.379212][T30652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11433'.
[  510.649364][T30659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11437'.
[  510.662834][T30661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11436'.
[  510.669427][T30648] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  510.706680][T30663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11438'.
[  511.303339][T30687] bond0: Caught tx_queue_len zero misconfig
[  511.580860][T30696] netlink: 'syz.4.11450': attribute type 13 has an invalid length.
[  511.605228][T30696] netlink: 'syz.4.11450': attribute type 17 has an invalid length.
[  511.651869][T30696] tunl0: left promiscuous mode
[  511.666809][T30696] 0ªî{X¹¦: left promiscuous mode
[  511.722443][T30699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  511.965046][T30696] bond0: left promiscuous mode
[  511.969912][T30696] bond_slave_0: left promiscuous mode
[  511.975965][T30696] bond_slave_1: left promiscuous mode
[  511.981605][T30696] bridge0: left promiscuous mode
[  511.984602][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.990675][T30696] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.030983][T30696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  512.066910][T30707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11453'.
[  512.106097][T30648] hsr0 speed is unknown, defaulting to 1000
[  512.106334][T30702] syzkaller1: entered promiscuous mode
[  512.118828][T30702] syzkaller1: entered allmulticast mode
[  512.967284][T30736] tipc: Failed to remove unknown binding: 66,1,1/3758096386:3400074301/3400074303
[  513.592791][T30764] netlink: 'syz.3.11474': attribute type 13 has an invalid length.
[  513.614456][T30764] netlink: 'syz.3.11474': attribute type 17 has an invalid length.
[  513.712494][T30766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  513.795451][T30735] tipc: Failed to remove unknown binding: 66,1,1/3758096386:3400074301/3400074303
[  513.816254][T30735] tipc: Failed to remove unknown binding: 66,1,1/3758096386:3400074301/3400074303
[  513.879132][T30772] __nla_validate_parse: 3 callbacks suppressed
[  513.879151][T30772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11477'.
[  513.920196][T30764] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.929593][T30764] 8021q: adding VLAN 0 to HW filter on device team0
[  513.941241][T30764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  513.970061][T26377] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  513.987787][T26377] syz0: Port: 1 Link ACTIVE
[  514.062304][T26377] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  514.249095][T30785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11481'.
[  514.319543][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11479'.
[  514.359699][T30791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11482'.
[  514.412667][T30793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11482'.
[  515.818302][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11485'.
[  515.919101][T30807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11487'.
[  516.011974][T30810] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11488'.
[  516.243979][T30822] netdevsim netdevsim5: Direct firmware load for lookup_extent_enter failed with error -2
[  516.256838][T30822] netdevsim netdevsim5: Falling back to sysfs fallback for: lookup_extent_enter
[  516.407728][T30829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11495'.
[  517.885516][T30861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11509'.
[  519.192485][T30918] syzkaller1: entered promiscuous mode
[  519.220160][T30918] syzkaller1: entered allmulticast mode
[  519.609051][T30927] syzkaller0: entered promiscuous mode
[  519.615387][T30927] syzkaller0: entered allmulticast mode
[  519.652100][T30932] __nla_validate_parse: 2 callbacks suppressed
[  519.652121][T30932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11537'.
[  519.907293][T30946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11542'.
[  521.334814][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.421307][T30960] syzkaller1: entered promiscuous mode
[  521.440569][T30960] syzkaller1: entered allmulticast mode
[  521.844546][T30979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11554'.
[  522.026719][T30988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11557'.
[  522.410018][T31005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11564'.
[  522.439204][T31006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11565'.
[  522.628969][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 150 seconds
[  522.642675][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 150 seconds
[  522.656149][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 150 seconds
[  522.667661][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 150 seconds
[  524.049212][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11571'.
[  524.397694][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11582'.
[  524.438310][T31050] netlink: 'syz.0.11582': attribute type 11 has an invalid length.
[  524.466337][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11582'.
[  524.504019][T31050] netlink: 'syz.0.11582': attribute type 11 has an invalid length.
[  524.636852][T31061] syzkaller1: entered promiscuous mode
[  524.647220][T31061] syzkaller1: entered allmulticast mode
[  525.213784][T31080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11592'.
[  525.430771][T31088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11595'.
[  525.891221][T31100] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11600'.
[  526.957778][T31133] sctp: [Deprecated]: syz.0.11607 (pid 31133) Use of int in maxseg socket option.
[  526.957778][T31133] Use struct sctp_assoc_value instead
[  527.569071][T31135] lo: Caught tx_queue_len zero misconfig
[  527.656224][T31137] tipc: New replicast peer: 255.255.255.255
[  527.664883][T31137] tipc: Enabled bearer <udp:syz0>, priority 10
[  527.912032][T31153] batman_adv: batadv0: Adding interface: dummy0
[  527.929392][T31153] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  527.990871][T31153] batman_adv: batadv0: Interface activated: dummy0
[  528.050795][T31159] batadv0: mtu less than device minimum
[  528.060250][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.072505][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.084452][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.096499][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.108376][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.120228][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.132176][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.144017][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.155918][T31159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  528.188629][T31165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11618'.
[  529.264649][T31207] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11634'.
[  529.601762][T31221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11640'.
[  529.881405][T31227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11641'.
[  530.116550][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11643'.
[  531.500546][T31233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11641'.
[  531.698894][T31255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11650'.
[  532.298424][T31279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11661'.
[  532.415959][T31285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11664'.
[  533.073138][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11674'.
[  533.257738][T31323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11677'.
[  533.288592][ T3453] smc: removing ib device syz2
[  534.131024][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11692'.
[  534.165554][T31361] vlan3: entered allmulticast mode
[  534.170704][T31361] hsr0: entered allmulticast mode
[  534.175932][T31361] hsr_slave_0: entered allmulticast mode
[  534.181587][T31361] hsr_slave_1: entered allmulticast mode
[  534.583075][T31380] syzkaller0: entered promiscuous mode
[  534.597174][T31380] syzkaller0: entered allmulticast mode
[  534.648932][T31383] tipc: Started in network mode
[  534.653830][T31383] tipc: Node identity 9aec66e96ca1, cluster identity 4711
[  534.669346][T31383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.670105][T31386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11703'.
[  534.716468][T31383] syzkaller0: entered promiscuous mode
[  534.722031][T31383] syzkaller0: entered allmulticast mode
[  534.728752][T31383] tipc: Resetting bearer <eth:syzkaller0>
[  534.779114][   T12] tipc: Resetting bearer <eth:syzkaller0>
[  535.765020][    T9] tipc: Node number set to 4132267753
[  536.116284][T31389] netlink: 22 bytes leftover after parsing attributes in process `syz.5.11704'.
[  536.126882][T31382] tipc: Resetting bearer <eth:syzkaller0>
[  536.179079][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11705'.
[  537.516967][T31382] tipc: Disabling bearer <eth:syzkaller0>
[  537.740953][T31413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11712'.
[  537.751316][T31413] nbd: couldn't find a device at index 0
[  537.863954][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11716'.
[  537.874203][T31421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11714'.
[  538.043201][T31423] netlink: 'syz.3.11717': attribute type 4 has an invalid length.
[  538.062217][T31423] netlink: 'syz.3.11717': attribute type 4 has an invalid length.
[  538.184132][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11723'.
[  538.279895][T31443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11725'.
[  538.363053][T31446] macsec1: entered promiscuous mode
[  538.371205][T31446] macsec1: entered allmulticast mode
[  538.378400][T31446] bond3: (slave macsec1): Error -34 calling dev_set_mtu
[  538.614507][    C0] net_ratelimit: 10 callbacks suppressed
[  538.614525][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.969520][T31486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11742'.
[  538.981101][T31486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11742'.
[  539.017055][  T855] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 60 sec
[  539.729196][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11748'.
[  541.519901][T31552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11769'.
[  541.603496][T31555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11770'.
[  542.020711][T31569] smc: adding net device geneve0 with user defined pnetid SYZ0
[  542.455609][    C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c
[  542.679402][T31617] : entered promiscuous mode
[  542.694739][T31618] netlink: 'syz.4.11791': attribute type 1 has an invalid length.
[  542.804502][T31618] macvlan3: entered promiscuous mode
[  542.812789][T31618] macvlan3: entered allmulticast mode
[  542.836094][T31618] bond6: entered promiscuous mode
[  542.842569][T31618] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  542.882464][T31618] bond6: left promiscuous mode
[  543.124417][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.171504][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.184175][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.221108][   T36] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  543.361065][T31645] syzkaller0: refused to change device tx_queue_len
[  543.411675][T31647] __nla_validate_parse: 3 callbacks suppressed
[  543.411693][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11801'.
[  543.735348][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  544.116849][T31690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11815'.
[  544.243199][T31698] tipc: Started in network mode
[  544.248313][T31698] tipc: Node identity 1aa2ee830fa, cluster identity 4711
[  544.255633][T31698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.307282][T31698] syzkaller0: entered promiscuous mode
[  544.312789][T31698] syzkaller0: entered allmulticast mode
[  544.320408][T31698] tipc: Resetting bearer <eth:syzkaller0>
[  544.340867][T31696] tipc: Resetting bearer <eth:syzkaller0>
[  545.328165][T26382] tipc: Node number set to 352513667
[  545.788073][T31696] tipc: Disabling bearer <eth:syzkaller0>
[  546.021610][T31727] batadv_slave_0: entered promiscuous mode
[  546.039320][T31726] batadv_slave_0: left promiscuous mode
[  546.216993][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  546.418722][T31738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11831'.
[  546.440085][T31740] sctp: [Deprecated]: syz.4.11832 (pid 31740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  546.440085][T31740] Use struct sctp_sack_info instead
[  546.650610][T31751] netlink: 'syz.3.11837': attribute type 1 has an invalid length.
[  546.716961][T31751] bond2: entered promiscuous mode
[  546.723438][T31751] 8021q: adding VLAN 0 to HW filter on device bond2
[  546.773781][T31751] bond2: (slave bridge7): making interface the new active one
[  546.812358][T31751] bridge7: entered promiscuous mode
[  546.822193][T31751] bond2: (slave bridge7): Enslaving as an active interface with an up link
[  546.849634][T31761] syzkaller1: entered promiscuous mode
[  546.858962][T31761] syzkaller1: entered allmulticast mode
[  547.031616][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11845'.
[  547.049775][T31769] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11844'.
[  547.059719][T31773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  547.162168][T31778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11848'.
[  547.247892][T31784] netlink: 'syz.5.11851': attribute type 12 has an invalid length.
[  547.256032][T31784] netlink: 'syz.5.11851': attribute type 29 has an invalid length.
[  547.263947][T31784] netlink: 148 bytes leftover after parsing attributes in process `syz.5.11851'.
[  547.273363][T31784] netlink: 'syz.5.11851': attribute type 2 has an invalid length.
[  547.281358][T31784] netlink: 23 bytes leftover after parsing attributes in process `syz.5.11851'.
[  547.422001][T31792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11855'.
[  547.469986][T31794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11856'.
[  547.910765][T31816] bond7: entered allmulticast mode
[  547.932876][T31816] ip6gretap2: entered allmulticast mode
[  547.939201][T31816] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link
[  548.639658][T31842] __nla_validate_parse: 3 callbacks suppressed
[  548.639675][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11876'.
[  548.748969][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  548.759365][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  548.772474][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  548.786269][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  548.794142][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  548.912294][T31849] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  548.947086][T31856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11882'.
[  549.224830][T31869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11888'.
[  549.457006][T31878] syz_tun: left allmulticast mode
[  549.472305][T31878] syz_tun: left promiscuous mode
[  549.497384][T31878] bridge0: port 1(syz_tun) entered disabled state
[  549.512383][T31878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  549.531175][T31881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11890'.
[  549.548260][T31881] team0: No ports can be present during mode change
[  549.763505][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11896'.
[  549.807600][T31849] hsr0 speed is unknown, defaulting to 1000
[  549.989347][T31715] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  550.000488][T31715] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  550.011872][T31715] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  550.121918][T31849] chnl_net:caif_netlink_parms(): no params data found
[  550.148519][T31903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.202917][T31903] syzkaller0: entered promiscuous mode
[  550.209058][T31903] syzkaller0: entered allmulticast mode
[  550.217733][T31903] tipc: Resetting bearer <eth:syzkaller0>
[  550.300218][T31902] tipc: Resetting bearer <eth:syzkaller0>
[  550.867575][ T5835] Bluetooth: hci5: command tx timeout
[  551.842985][T31902] tipc: Disabling bearer <eth:syzkaller0>
[  551.936074][T31849] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.963788][T31849] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.987706][T31849] bridge_slave_0: entered allmulticast mode
[  552.022751][T31849] bridge_slave_0: entered promiscuous mode
[  552.039223][T31849] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.053318][T31849] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.059474][T31943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11911'.
[  552.062551][T31849] bridge_slave_1: entered allmulticast mode
[  552.077352][T31849] bridge_slave_1: entered promiscuous mode
[  552.141348][T31943] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  552.152345][T31943] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  552.228647][T31849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.259046][T31849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.277406][T31949] macvlan0: entered promiscuous mode
[  552.282901][T31949] macvlan0: entered allmulticast mode
[  552.290373][T31949] bond4: (slave macvlan0): Error -98 calling set_mac_address
[  552.414272][T31955] netlink: 528 bytes leftover after parsing attributes in process `syz.5.11913'.
[  552.438934][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11913'.
[  552.709417][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 180 seconds
[  552.720412][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 180 seconds
[  552.732114][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 180 seconds
[  552.743146][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 180 seconds
[  552.939502][ T5835] Bluetooth: hci5: command tx timeout
[  553.445582][T31968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11917'.
[  554.014192][T31849] team0: Port device team_slave_0 added
[  554.033072][T31849] team0: Port device team_slave_1 added
[  554.287856][T31987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11926'.
[  554.313474][T31849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.321156][T31849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.375051][T31849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.388905][T31849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.397883][T31849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.427684][T31849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.440864][T31986] syzkaller0: entered promiscuous mode
[  554.446732][T31986] syzkaller0: entered allmulticast mode
[  554.709961][T31849] hsr_slave_0: entered promiscuous mode
[  554.722833][T31849] hsr_slave_1: entered promiscuous mode
[  554.927698][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  555.019691][ T5835] Bluetooth: hci5: command tx timeout
[  555.282922][T32034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11943'.
[  555.336524][T32036] bridge: RTM_NEWNEIGH with invalid ether address
[  555.632734][T31849] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  555.698314][T32053] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11952'.
[  555.719908][T32051] tipc: New replicast peer: 255.255.255.255
[  555.730422][T32051] tipc: Enabled bearer <udp:syz0>, priority 10
[  555.738489][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11951'.
[  555.776414][T31849] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  555.800326][T31849] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  555.841661][T32057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11952'.
[  555.852694][T31849] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  556.111688][T32081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11956'.
[  556.125992][T32077] syzkaller0: entered promiscuous mode
[  556.148484][T32077] syzkaller0: entered allmulticast mode
[  556.253483][T31849] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.330652][T31849] 8021q: adding VLAN 0 to HW filter on device team0
[  556.371415][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.378634][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.430355][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.437577][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.520782][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  556.807901][T32121] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11964'.
[  556.862319][T31849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.032035][T26382] hid-generic 0005:0002:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  557.097751][ T5835] Bluetooth: hci5: command tx timeout
[  557.223885][T32136] fido_id[32136]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory
[  557.444266][T31849] veth0_vlan: entered promiscuous mode
[  557.501681][T31849] veth1_vlan: entered promiscuous mode
[  557.578306][T31849] veth0_macvtap: entered promiscuous mode
[  557.618070][T31849] veth1_macvtap: entered promiscuous mode
[  557.700815][T31849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.748675][T31849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  557.776882][T31715] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.739033][T31715] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.749358][T31715] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.775616][T32175] batman_adv: batadv0: Interface deactivated: dummy0
[  558.782361][T32175] batman_adv: batadv0: Removing interface: dummy0
[  558.807862][T32175] batadv0: left promiscuous mode
[  558.834141][T32175] bridge0: port 3(batadv0) entered disabled state
[  558.874269][T32175] bridge_slave_0: left allmulticast mode
[  558.895271][T32198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11982'.
[  558.900313][T32175] bridge_slave_0: left promiscuous mode
[  558.918068][T32175] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.937010][T32175] bridge_slave_1: left allmulticast mode
[  558.943447][T32175] bridge_slave_1: left promiscuous mode
[  558.951155][T32175] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.969989][T32175] bond0: (slave bond_slave_0): Releasing backup interface
[  558.990932][T32175] bond0: (slave bond_slave_1): Releasing backup interface
[  559.027434][T32175] team0: Port device team_slave_0 removed
[  559.044210][T32175] team0: Port device team_slave_1 removed
[  559.051173][T32175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.059811][T32175] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.069172][T32175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.077567][T32175] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.086519][T32175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  559.135724][T31715] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.214018][T32204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11984'.
[  559.319545][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.341414][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.462819][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.472880][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.540722][T32215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  559.628501][T32215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  559.713854][T32219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  561.144101][T32223] pim6reg1: entered promiscuous mode
[  561.156013][T32223] pim6reg1: entered allmulticast mode
[  561.178246][T32233] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11993'.
[  561.382017][T32243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11997'.
[  561.393253][T32243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11997'.
[  562.728520][T32312] netlink: 'syz.6.12016': attribute type 1 has an invalid length.
[  562.751701][T32308] syzkaller0: entered promiscuous mode
[  562.758695][T32308] syzkaller0: entered allmulticast mode
[  562.785299][T32315] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  564.563642][T32312] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  567.670004][ T5199] udevd[5199]: worker [23442] /devices/virtual/block/nbd1 timeout; kill it
[  567.723097][ T5199] udevd[5199]: seq 16127 '/devices/virtual/block/nbd1' killed
[  568.003446][T32348] syzkaller0: entered promiscuous mode
[  568.020295][T32348] syzkaller0: entered allmulticast mode
[  568.037844][T32358] syzkaller0: entered promiscuous mode
[  568.051115][T32358] syzkaller0: entered allmulticast mode
[  568.358985][T32363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12031'.
[  569.850699][T32378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12034'.
[  570.088223][T32372] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.275061][T32400] netlink: 'syz.5.12039': attribute type 33 has an invalid length.
[  570.283870][T32400] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12039'.
[  570.337953][T32401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12039'.
[  570.434164][T32372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.453783][T32372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.161489][   T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  571.180781][   T12] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0
[  571.222762][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  571.268754][   T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  571.314939][   T12] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0
[  571.323842][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  571.436366][T32417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.485703][   T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  571.513590][   T36] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0
[  571.533330][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  571.651242][T32422] syzkaller0: entered promiscuous mode
[  571.657639][T32422] syzkaller0: entered allmulticast mode
[  571.664130][T32422] tipc: Resetting bearer <eth:syzkaller0>
[  571.685246][T32450] syzkaller0: entered promiscuous mode
[  571.703831][T32450] syzkaller0: entered allmulticast mode
[  571.895012][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.910043][T32436] syzkaller0: entered promiscuous mode
[  571.927628][T32436] syzkaller0: entered allmulticast mode
[  571.969270][T32411] tipc: Resetting bearer <eth:syzkaller0>
[  573.540667][T32411] tipc: Disabling bearer <eth:syzkaller0>
[  575.387293][T32499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12053'.
[  575.451296][T32499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12053'.
[  575.795378][T32516] netlink: 'syz.6.12057': attribute type 1 has an invalid length.
[  575.923600][T32529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12058'.
[  576.178365][T32532] syzkaller1: entered promiscuous mode
[  576.183995][T32532] syzkaller1: entered allmulticast mode
[  576.209953][T32540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12064'.
[  576.299082][T32545] GUP no longer grows the stack in syz.6.12066 (32545): 200000003000-20000000a000 (200000001000)
[  576.317458][T32545] CPU: 0 UID: 0 PID: 32545 Comm: syz.6.12066 Not tainted syzkaller #0 PREEMPT(full) 
[  576.317486][T32545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  576.317498][T32545] Call Trace:
[  576.317505][T32545]  <TASK>
[  576.317514][T32545]  dump_stack_lvl+0x189/0x250
[  576.317549][T32545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.317574][T32545]  ? __pfx__printk+0x10/0x10
[  576.317590][T32545]  ? find_vma+0xe7/0x160
[  576.317628][T32545]  __get_user_pages+0x2470/0x2a00
[  576.317662][T32545]  ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10
[  576.317711][T32545]  ? rcu_is_watching+0x15/0xb0
[  576.317736][T32545]  __gup_longterm_locked+0xde4/0x1660
[  576.317764][T32545]  ? try_grab_folio_fast+0x1bf/0x6a0
[  576.317796][T32545]  ? gup_fast_fallback+0x1b86/0x22d0
[  576.317819][T32545]  gup_fast_fallback+0x1d65/0x22d0
[  576.317880][T32545]  ? __pfx_gup_fast_fallback+0x10/0x10
[  576.317900][T32545]  ? __mutex_lock+0x335/0x1350
[  576.317932][T32545]  ? is_valid_gup_args+0x11f/0x200
[  576.317956][T32545]  ? get_user_pages_fast+0x4d/0xb0
[  576.317981][T32545]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  576.318011][T32545]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  576.318037][T32545]  ? wait_for_space+0x248/0x2d0
[  576.318058][T32545]  iov_iter_get_pages2+0x5e/0xa0
[  576.318085][T32545]  __se_sys_vmsplice+0x548/0x10d0
[  576.318114][T32545]  ? futex_private_hash_put+0x4b/0x280
[  576.318145][T32545]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  576.318167][T32545]  ? __pfx_futex_wake+0x10/0x10
[  576.318188][T32545]  ? restore_signal_shadow_stack+0x3b7/0x480
[  576.318217][T32545]  ? __ia32_sys_rt_sigreturn+0x743/0x860
[  576.318295][T32545]  ? do_syscall_64+0xbe/0xfa0
[  576.318324][T32545]  do_syscall_64+0xfa/0xfa0
[  576.318347][T32545]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.318370][T32545]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.318389][T32545]  ? clear_bhb_loop+0x60/0xb0
[  576.318410][T32545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.318426][T32545] RIP: 0033:0x7f9630b8f6c9
[  576.318443][T32545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.318460][T32545] RSP: 002b:00007f9631a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  576.318479][T32545] RAX: ffffffffffffffda RBX: 00007f9630de5fa0 RCX: 00007f9630b8f6c9
[  576.318492][T32545] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  576.318503][T32545] RBP: 00007f9630c11f91 R08: 0000000000000000 R09: 0000000000000000
[  576.318515][T32545] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  576.318526][T32545] R13: 00007f9630de6038 R14: 00007f9630de5fa0 R15: 00007fff4b475fe8
[  576.318557][T32545]  </TASK>
[  576.466460][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12068'.
[  576.647821][T32552] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  576.753172][T32552] team1: entered promiscuous mode
[  576.796204][T32552] team1: entered allmulticast mode
[  576.897510][T32562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12071'.
[  576.922552][T32561] netlink: 'syz.4.12072': attribute type 4 has an invalid length.
[  576.958883][T32561] netlink: 'syz.4.12072': attribute type 4 has an invalid length.
[  577.027659][T32567] netlink: 'syz.3.12073': attribute type 6 has an invalid length.
[  577.399306][T32580] svc: failed to register nfsdv3 RPC service (errno 111).
[  577.410359][T32580] svc: failed to register nfsaclv3 RPC service (errno 111).
[  577.757166][T32599] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  577.880458][T32604] syzkaller0: entered promiscuous mode
[  577.906185][T32604] syzkaller0: entered allmulticast mode
[  579.558516][T32620] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  579.598315][T32627] syzkaller0: entered promiscuous mode
[  579.603815][T32627] syzkaller0: entered allmulticast mode
[  579.807905][T32641] syzkaller0: entered promiscuous mode
[  579.820380][T32641] syzkaller0: entered allmulticast mode
[  580.046393][T32599] hsr0 speed is unknown, defaulting to 1000
[  580.070819][T32644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12098'.
[  580.400808][T32668] syzkaller0: entered promiscuous mode
[  580.403425][T32672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12104'.
[  580.407426][T32668] syzkaller0: entered allmulticast mode
[  580.435027][T32672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12104'.
[  580.513116][T32672] netlink: 156 bytes leftover after parsing attributes in process `syz.6.12104'.
[  580.721768][T32685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12108'.
[  580.789175][T32691] netlink: 'syz.4.12111': attribute type 3 has an invalid length.
[  580.798368][T32691] netlink: 'syz.4.12111': attribute type 3 has an invalid length.
[  580.865914][T32693] netlink: 'syz.6.12112': attribute type 12 has an invalid length.
[  581.241800][T32708] pim6reg1: entered promiscuous mode
[  581.247315][T32708] pim6reg1: entered allmulticast mode
[  581.255902][T32710] tipc: Failed to obtain node identity
[  581.261395][T32710] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  581.382304][T32714] syzkaller0: entered promiscuous mode
[  581.389555][T32714] syzkaller0: entered allmulticast mode
[  581.826886][T32730] syzkaller0: entered promiscuous mode
[  581.832517][T32730] syzkaller0: entered allmulticast mode
[  581.954146][T32735] siw: device registration error -23
[  581.989932][T32737] netlink: 'syz.2.12129': attribute type 83 has an invalid length.
[  582.113386][T32746] syzkaller0: entered promiscuous mode
[  582.120440][T32746] syzkaller0: entered allmulticast mode
[  582.393922][T32760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.466632][T32760] syzkaller0: entered promiscuous mode
[  582.472628][T32760] syzkaller0: entered allmulticast mode
[  582.484844][T32760] tipc: Resetting bearer <eth:syzkaller0>
[  582.491645][T32759] tipc: Resetting bearer <eth:syzkaller0>
[  582.776865][   T56] block nbd1: Possible stuck request ffff888025577000: control (read@0,1024B). Runtime 210 seconds
[  582.787668][   T56] block nbd1: Possible stuck request ffff8880255771c0: control (read@1024,1024B). Runtime 210 seconds
[  582.799102][   T56] block nbd1: Possible stuck request ffff888025577380: control (read@2048,1024B). Runtime 210 seconds
[  582.810178][   T56] block nbd1: Possible stuck request ffff888025577540: control (read@3072,1024B). Runtime 210 seconds
[  583.727628][  T307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12144'.
[  584.202056][T32759] tipc: Disabling bearer <eth:syzkaller0>
[  584.214973][ T5835] Bluetooth: hci5: command tx timeout
[  584.225318][  T321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  584.299538][  T323] syzkaller0: entered promiscuous mode
[  584.305875][  T323] syzkaller0: entered allmulticast mode
[  584.312091][  T323] tipc: Resetting bearer <eth:syzkaller0>
[  584.426423][  T327] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.434053][  T327] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.441848][  T334] netlink: 'syz.4.12149': attribute type 1 has an invalid length.
[  584.525909][  T327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  584.540773][  T327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  584.656931][  T311] tipc: Resetting bearer <eth:syzkaller0>
[  586.243357][  T311] tipc: Disabling bearer <eth:syzkaller0>
[  586.252622][  T334] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  586.275476][  T336] gretap4: entered promiscuous mode
[  586.292862][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.302547][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.352016][  T344] syzkaller0: entered promiscuous mode
[  586.369452][  T344] syzkaller0: entered allmulticast mode
[  586.392050][  T352] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  586.401480][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.414492][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.454730][  T371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12152'.
[  586.938286][T32406] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  586.945931][T32406] syz0: Port: 1 Link DOWN
[  586.961895][  T374] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  586.973706][T32403] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  586.983432][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  587.023463][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  587.066053][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  587.139274][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  587.970784][  T394] netlink: 'syz.3.12160': attribute type 1 has an invalid length.
[  588.021667][  T394] 8021q: adding VLAN 0 to HW filter on device bond4
[  588.073212][  T398] bond4: (slave veth11): Enslaving as an active interface with a down link
[  588.091088][  T400] netlink: 'syz.2.12162': attribute type 1 has an invalid length.
[  588.154062][  T400] bond6: entered promiscuous mode
[  588.160372][  T400] 8021q: adding VLAN 0 to HW filter on device bond6
[  588.176235][  T406] netlink: 'syz.6.12164': attribute type 1 has an invalid length.
[  588.200046][  T394] veth13: entered promiscuous mode
[  588.217370][  T394] bond4: (slave veth13): Enslaving as an active interface with a down link
[  588.267372][  T398] vlan4: entered allmulticast mode
[  588.272524][  T398] bond4: entered allmulticast mode
[  588.292970][  T398] bond4: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  588.361254][  T406] 8021q: adding VLAN 0 to HW filter on device bond1
[  588.372581][  T406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12164'.
[  588.396944][  T409] 8021q: adding VLAN 0 to HW filter on device bond1
[  588.419221][  T409] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  588.430702][  T409] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  588.482681][  T420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12167'.
[  588.498479][  T412] veth3: entered promiscuous mode
[  588.507721][  T412] bond1: (slave veth3): Enslaving as an active interface with a down link
[  588.518067][  T406] 8021q: adding VLAN 0 to HW filter on device bond1
[  588.641219][  T423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  588.649450][  T423] syzkaller0: entered promiscuous mode
[  588.655307][  T423] syzkaller0: entered allmulticast mode
[  588.685910][  T423] tipc: Resetting bearer <eth:syzkaller0>
[  588.701945][  T426] veth3: left promiscuous mode
[  588.710577][  T422] tipc: Resetting bearer <eth:syzkaller0>
[  588.740187][  T422] tipc: Disabling bearer <eth:syzkaller0>
[  588.748979][  T428] netlink: 'syz.3.12170': attribute type 1 has an invalid length.
[  588.776747][  T428] 8021q: adding VLAN 0 to HW filter on device bond5
[  588.815439][  T428] 8021q: adding VLAN 0 to HW filter on device bond5
[  588.823293][  T428] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  588.835484][  T428] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  588.887436][  T430] veth15: entered promiscuous mode
[  588.896276][  T430] bond5: (slave veth15): Enslaving as an active interface with a down link
[  588.918939][  T430] vlan4: entered allmulticast mode
[  588.924092][  T430] bond5: entered allmulticast mode
[  589.146023][  T437] syzkaller0: entered promiscuous mode
[  589.151602][  T437] syzkaller0: entered allmulticast mode
[  589.392500][  T447] syzkaller0: entered promiscuous mode
[  589.399262][  T447] syzkaller0: entered allmulticast mode
[  589.410400][  T447] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  589.619095][  T453] syzkaller0: entered promiscuous mode
[  589.624702][  T453] syzkaller0: entered allmulticast mode
[  590.074435][  T475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12190'.
[  590.100443][  T475] macvtap1: entered promiscuous mode
[  590.105955][  T475] bond0: entered promiscuous mode
[  590.110993][  T475] bond_slave_0: entered promiscuous mode
[  590.117415][  T475] bond_slave_1: entered promiscuous mode
[  590.123259][  T475] ip6gretap1: entered promiscuous mode
[  590.130443][  T475] macvtap1: entered allmulticast mode
[  590.137060][  T475] bond0: entered allmulticast mode
[  590.142294][  T475] bond_slave_0: entered allmulticast mode
[  590.148493][  T475] bond_slave_1: entered allmulticast mode
[  590.154697][  T475] ip6gretap1: entered allmulticast mode
[  590.162440][  T475] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  590.174196][  T477] vlan3: entered promiscuous mode
[  590.179606][  T477] vlan3: entered allmulticast mode
[  590.186068][  T477] hsr_slave_1: entered allmulticast mode
[  590.197814][  T478] bond0: left allmulticast mode
[  590.202802][  T478] bond_slave_0: left allmulticast mode
[  590.208969][  T478] bond_slave_1: left allmulticast mode
[  590.215731][  T478] ip6gretap1: left allmulticast mode
[  590.221035][  T478] bond0: left promiscuous mode
[  590.226507][  T478] bond_slave_0: left promiscuous mode
[  590.232133][  T478] bond_slave_1: left promiscuous mode
[  590.237955][  T478] ip6gretap1: left promiscuous mode
[  590.252943][  T480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  590.261337][  T480] syzkaller0: entered promiscuous mode
[  590.267586][  T480] syzkaller0: entered allmulticast mode
[  590.309414][  T480] tipc: Resetting bearer <eth:syzkaller0>
[  590.317041][  T479] tipc: Resetting bearer <eth:syzkaller0>
[  590.339758][  T479] tipc: Disabling bearer <eth:syzkaller0>
[  590.360874][  T481] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  590.621083][  T491] syzkaller0: entered promiscuous mode
[  590.627987][  T491] syzkaller0: entered allmulticast mode
[  590.640270][  T491] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  590.777460][  T495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12196'.
[  590.871087][  T502] syzkaller0: entered promiscuous mode
[  590.884583][  T502] syzkaller0: entered allmulticast mode
[  590.990057][  T481] hsr0 speed is unknown, defaulting to 1000
[  591.652754][  T538] netlink: 'syz.2.12208': attribute type 10 has an invalid length.
[  591.699245][  T537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  591.704345][  T540] tipc: Started in network mode
[  591.713916][  T540] tipc: Node identity 7ee958080d92, cluster identity 4711
[  591.721329][  T540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.739052][  T540] syzkaller0: entered promiscuous mode
[  591.744669][  T540] syzkaller0: entered allmulticast mode
[  591.756176][  T540] tipc: Resetting bearer <eth:syzkaller0>
[  591.763661][  T539] tipc: Resetting bearer <eth:syzkaller0>
[  591.778675][  T539] tipc: Disabling bearer <eth:syzkaller0>
[  591.926216][  T544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  591.933824][  T544] syzkaller0: entered promiscuous mode
[  591.939847][  T544] syzkaller0: entered allmulticast mode
[  591.961363][  T544] tipc: Resetting bearer <eth:syzkaller0>
[  591.967394][  T544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.975822][  T544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.988210][  T543] tipc: Resetting bearer <eth:syzkaller0>
[  592.002630][  T543] tipc: Disabling bearer <eth:syzkaller0>
[  592.133175][  T548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.146788][  T548] syzkaller0: entered promiscuous mode
[  592.152285][  T548] syzkaller0: entered allmulticast mode
[  592.161944][  T548] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  592.179358][  T550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.187405][  T550] syzkaller0: entered promiscuous mode
[  592.193044][  T550] syzkaller0: entered allmulticast mode
[  592.200994][  T548] tipc: Resetting bearer <eth:syzkaller0>
[  592.220315][  T550] tipc: Resetting bearer <eth:syzkaller0>
[  592.228955][  T547] tipc: Resetting bearer <eth:syzkaller0>
[  592.260026][  T547] tipc: Disabling bearer <eth:syzkaller0>
[  592.269849][  T549] tipc: Resetting bearer <eth:syzkaller0>
[  592.286231][  T549] tipc: Disabling bearer <eth:syzkaller0>
[  592.306952][  T552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.315189][  T552] syzkaller0: entered promiscuous mode
[  592.320801][  T552] syzkaller0: entered allmulticast mode
[  592.356554][  T552] tipc: Resetting bearer <eth:syzkaller0>
[  592.367834][  T551] tipc: Resetting bearer <eth:syzkaller0>
[  592.405546][  T551] tipc: Disabling bearer <eth:syzkaller0>
[  592.440946][  T557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.449037][  T558] syzkaller0: entered promiscuous mode
[  592.455045][  T558] syzkaller0: entered allmulticast mode
[  592.462634][  T557] syzkaller0: entered promiscuous mode
[  592.469167][  T557] syzkaller0: entered allmulticast mode
[  592.530897][  T557] tipc: Resetting bearer <eth:syzkaller0>
[  592.541410][  T555] tipc: Resetting bearer <eth:syzkaller0>
[  592.559737][  T555] tipc: Disabling bearer <eth:syzkaller0>
[  592.775885][  T568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  593.057539][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  593.062407][  T577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.073018][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  593.081644][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  593.092547][  T577] syzkaller0: entered promiscuous mode
[  593.099347][  T577] syzkaller0: entered allmulticast mode
[  593.106603][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  593.114211][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  593.125800][  T578] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  593.148153][  T577] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  593.277816][  T577] tipc: Resetting bearer <eth:syzkaller0>
[  593.333720][  T576] tipc: Resetting bearer <eth:syzkaller0>
[  593.436712][  T576] tipc: Disabling bearer <eth:syzkaller0>
[  593.700539][  T588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.710452][  T588] syzkaller0: entered promiscuous mode
[  593.735265][  T588] syzkaller0: entered allmulticast mode
[  593.759422][  T588] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  593.818028][  T588] tipc: Resetting bearer <eth:syzkaller0>
[  593.869303][  T586] tipc: Resetting bearer <eth:syzkaller0>
[  593.905242][  T586] tipc: Disabling bearer <eth:syzkaller0>
[  593.918464][  T593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.935919][  T593] syzkaller0: entered promiscuous mode
[  593.941447][  T593] syzkaller0: entered allmulticast mode
[  594.006638][  T593] tipc: Resetting bearer <eth:syzkaller0>
[  594.031525][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  594.042590][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  594.051719][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  594.071843][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  594.080261][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  594.103813][  T592] tipc: Resetting bearer <eth:syzkaller0>
[  594.118132][  T592] tipc: Disabling bearer <eth:syzkaller0>
[  594.150137][  T596] ªªªªªªZ7nz>RAÌ speed is unknown, defaulting to 1000
[  594.211366][  T603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  594.236853][  T603] syzkaller0: entered promiscuous mode
[  594.242347][  T603] syzkaller0: entered allmulticast mode
[  594.280671][  T603] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  594.320979][  T603] tipc: Resetting bearer <eth:syzkaller0>
[  594.331865][  T605] syzkaller0: entered promiscuous mode
[  594.338218][  T605] syzkaller0: entered allmulticast mode
[  594.347765][  T607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  594.357208][  T602] tipc: Resetting bearer <eth:syzkaller0>
[  594.376396][  T602] tipc: Disabling bearer <eth:syzkaller0>
[  594.424250][  T607] syzkaller0: entered promiscuous mode
[  594.430382][  T607] syzkaller0: entered allmulticast mode
[  594.458518][  T607] tipc: Resetting bearer <eth:syzkaller0>
[  594.498238][  T606] tipc: Resetting bearer <eth:syzkaller0>
[  594.542616][  T606] tipc: Disabling bearer <eth:syzkaller0>
[  594.919621][  T596] hsr0 speed is unknown, defaulting to 1000
[  594.927429][T32408] hsr0 speed is unknown, defaulting to 1000
[  594.933379][T32408] syz1: Port: 1 Link DOWN
[  594.938630][  T351] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.960042][  T351] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  594.969559][  T351] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  594.978886][  T351] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  594.988548][  T351] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  595.006008][  T351] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  595.020269][  T351] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.030465][  T351] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  595.039213][  T351] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  595.048190][  T621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.055640][  T626] syzkaller0: entered promiscuous mode
[  595.057217][  T625] xt_ecn: cannot match TCP bits for non-tcp packets
[  595.061115][  T626] syzkaller0: entered allmulticast mode
[  595.077581][  T351] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.087348][  T351] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  595.097500][  T351] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  595.138084][  T621] tipc: Resetting bearer <eth:syzkaller0>
[  595.158516][  T620] tipc: Resetting bearer <eth:syzkaller0>
[  595.178189][  T620] tipc: Disabling bearer <eth:syzkaller0>
[  595.331421][  T596] chnl_net:caif_netlink_parms(): no params data found
[  595.430979][  T638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.467125][  T638] syzkaller0: entered promiscuous mode
[  595.472706][  T638] syzkaller0: entered allmulticast mode
[  595.482977][  T596] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.491439][  T596] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.502142][  T596] bridge_slave_0: entered allmulticast mode
[  595.510314][  T596] bridge_slave_0: entered promiscuous mode
[  595.519988][  T596] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.527486][  T596] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.535031][  T596] bridge_slave_1: entered allmulticast mode
[  595.542241][  T596] bridge_slave_1: entered promiscuous mode
[  595.591227][  T638] tipc: Resetting bearer <eth:syzkaller0>
[  595.600464][  T596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.610780][  T643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.620027][  T637] tipc: Resetting bearer <eth:syzkaller0>
[  595.634829][  T637] tipc: Disabling bearer <eth:syzkaller0>
[  595.646888][  T596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.657203][  T643] syzkaller0: entered promiscuous mode
[  595.662672][  T643] syzkaller0: entered allmulticast mode
[  595.720582][  T596] team0: Port device team_slave_0 added
[  595.731235][  T643] tipc: Resetting bearer <eth:syzkaller0>
[  595.748857][  T596] team0: Port device team_slave_1 added
[  595.760641][  T642] tipc: Resetting bearer <eth:syzkaller0>
[  595.786065][  T642] tipc: Disabling bearer <eth:syzkaller0>
[  595.849704][  T596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.862079][  T596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.890909][  T596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.907879][  T596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.915285][  T596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.942084][  T596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.038812][  T596] hsr_slave_0: entered promiscuous mode
[  596.046068][  T596] hsr_slave_1: entered promiscuous mode
[  596.052169][  T596] debugfs: 'hsr0' already exists in 'hsr'
[  596.058695][  T596] Cannot create hsr debugfs directory
[  596.136159][   T52] Bluetooth: hci6: command tx timeout
[  596.138541][  T657] netlink: 'syz.3.12253': attribute type 1 has an invalid length.
[  596.165497][  T658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12254'.
[  596.241487][  T657] 8021q: adding VLAN 0 to HW filter on device bond7
[  596.250845][  T657] bond6: (slave bond7): making interface the new active one
[  596.252722][  T662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12253'.
[  596.269749][  T657] bond6: (slave bond7): Enslaving as an active interface with an up link
[  596.286017][  T662] 8021q: adding VLAN 0 to HW filter on device bond6
[  596.421771][  T596] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  596.431584][  T596] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  596.446180][  T596] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  596.456708][  T596] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  596.532101][  T673] syzkaller0: entered promiscuous mode
[  596.541249][  T673] syzkaller0: entered allmulticast mode
[  596.602217][  T596] 8021q: adding VLAN 0 to HW filter on device bond0
[  596.626521][  T596] 8021q: adding VLAN 0 to HW filter on device team0
[  596.640884][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.648087][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  596.666716][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.673892][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.770633][  T678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12257'.
[  597.045375][  T596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  597.160012][  T697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12263'.
[  597.188934][  T697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12263'.
[  597.218936][  T697] batadv0: entered promiscuous mode
[  597.236305][  T697] dummy0: entered promiscuous mode
[  597.243520][  T697] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  597.259892][  T697] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network
[  597.439160][  T707] syzkaller0: entered promiscuous mode
[  597.445277][  T707] syzkaller0: entered allmulticast mode
[  597.494075][  T711] syzkaller0: entered promiscuous mode
[  597.510780][  T711] syzkaller0: entered allmulticast mode
[  597.527469][  T707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  597.552218][  T706] tipc: Resetting bearer <eth:syzkaller0>
[  598.214578][   T52] Bluetooth: hci6: command tx timeout
[  598.535700][T25682] tipc: Node number set to 1937463304
[  599.112118][  T706] tipc: Disabling bearer <eth:syzkaller0>
[  599.126514][  T715] syzkaller0: entered promiscuous mode
[  599.132041][  T715] syzkaller0: entered allmulticast mode
[  599.177845][  T596] veth0_vlan: entered promiscuous mode
[  599.212607][  T596] veth1_vlan: entered promiscuous mode
[  599.363467][  T742] syzkaller0: entered promiscuous mode
[  599.370173][  T742] syzkaller0: entered allmulticast mode
[  599.378418][  T596] veth0_macvtap: entered promiscuous mode
[  599.476629][  T596] veth1_macvtap: entered promiscuous mode
[  599.502193][  T596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  599.571844][  T596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  599.598722][ T3486] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  599.608479][ T3486] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  599.632801][  T751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  599.642111][ T3486] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  599.653110][  T751] syzkaller0: entered promiscuous mode
[  599.661113][  T751] syzkaller0: entered allmulticast mode
[  599.677015][ T3486] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  599.757003][  T751] tipc: Resetting bearer <eth:syzkaller0>
[  599.769450][  T750] tipc: Resetting bearer <eth:syzkaller0>
[  599.794899][  T750] tipc: Disabling bearer <eth:syzkaller0>
[  599.809420][  T755] syzkaller0: entered promiscuous mode
[  599.818403][  T755] syzkaller0: entered allmulticast mode
[  599.936974][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.956225][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.012882][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.023596][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.146206][  T767] syzkaller0: entered promiscuous mode
[  600.164691][  T767] syzkaller0: entered allmulticast mode
[  600.234068][  T773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12288'.
[  600.252996][  T771] syzkaller0: entered promiscuous mode
[  600.260175][  T771] syzkaller0: entered allmulticast mode
[  600.307829][   T52] Bluetooth: hci6: command tx timeout
[  600.503821][  T779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  600.514573][  T781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  600.522716][  T781] syzkaller0: entered promiscuous mode
[  600.539044][  T781] syzkaller0: entered allmulticast mode
[  600.563030][  T779] syzkaller0: entered promiscuous mode
[  600.569977][  T779] syzkaller0: entered allmulticast mode
[  600.593362][  T781] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  600.633653][  T779] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12291'.
[  600.654680][  T781] tipc: Resetting bearer <eth:syzkaller0>
[  600.664245][  T779] tipc: Resetting bearer <eth:syzkaller0>
[  600.672697][  T780] tipc: Resetting bearer <eth:syzkaller0>
[  600.692350][  T780] tipc: Disabling bearer <eth:syzkaller0>
[  600.718833][  T778] tipc: Resetting bearer <eth:syzkaller0>
[  600.736504][  T778] tipc: Disabling bearer <eth:syzkaller0>
[  600.925231][  T799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12299'.
[  601.087387][  T805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.095877][  T803] syzkaller1: entered promiscuous mode
[  601.101362][  T803] syzkaller1: entered allmulticast mode
[  601.109069][  T805] syzkaller0: entered promiscuous mode
[  601.116763][  T805] syzkaller0: entered allmulticast mode
[  601.160388][  T805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  601.190332][  T811] netlink: 'syz.2.12303': attribute type 1 has an invalid length.
[  601.224544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.242232][  T811] 8021q: adding VLAN 0 to HW filter on device bond7
[  601.257618][  T805] tipc: Resetting bearer <eth:syzkaller0>
[  601.277849][  T804] tipc: Resetting bearer <eth:syzkaller0>
[  601.319958][  T804] tipc: Disabling bearer <eth:syzkaller0>
[  601.380328][  T811] vlan2: entered promiscuous mode
[  601.386139][  T811] bond7: entered promiscuous mode
[  601.391485][  T811] vlan2: entered allmulticast mode
[  601.401322][  T811] bond7: entered allmulticast mode
[  601.438284][  T825] bond7: (slave gretap1): making interface the new active one
[  601.446612][  T825] gretap1: entered promiscuous mode
[  601.452028][  T825] gretap1: entered allmulticast mode
[  601.475413][  T825] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  601.509087][  T840] tipc: Started in network mode
[  601.515042][  T840] tipc: Node identity cab1a49635fd, cluster identity 4711
[  601.522327][  T840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.540494][  T829] syzkaller0: entered promiscuous mode
[  601.552090][  T829] syzkaller0: entered allmulticast mode
[  601.587309][  T847] syzkaller0: entered promiscuous mode
[  601.604482][  T847] syzkaller0: entered allmulticast mode
[  601.689989][  T835] tipc: Resetting bearer <eth:syzkaller0>
[  601.727435][  T828] tipc: Resetting bearer <eth:syzkaller0>
[  601.856218][  T828] tipc: Disabling bearer <eth:syzkaller0>
[  602.374388][    C1] ------------[ cut here ]------------
[  602.380167][    C1] workqueue: cannot queue hci_cmd_timeout on wq hci6
[  602.386929][    C1] WARNING: CPU: 1 PID: 828 at kernel/workqueue.c:2258 __queue_work+0xd38/0xfb0
[  602.395890][    C1] Modules linked in:
[  602.399972][    C1] CPU: 1 UID: 0 PID: 828 Comm: syz.7.12304 Not tainted syzkaller #0 PREEMPT(full) 
[  602.409241][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  602.419281][    C1] RIP: 0010:__queue_work+0xd38/0xfb0
[  602.424562][    C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 e3 ca 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 15 36 00 90 0f 0b 90 e9 dd fc ff
[  602.444171][    C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046
[  602.450234][    C1] RAX: 452c3e89009fc800 RBX: 0000000000000100 RCX: ffff888030465ac0
[  602.458198][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  602.466158][    C1] RBP: 1ffff1100e6c4138 R08: ffff8880b8924293 R09: 1ffff11017124852
[  602.474116][    C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000
[  602.482075][    C1] R13: ffff88807850c990 R14: 0000000000000008 R15: ffff888073620978
[  602.490036][    C1] FS:  0000000000000000(0000) GS:ffff88812623c000(0000) knlGS:0000000000000000
[  602.498954][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  602.505530][    C1] CR2: 00007fba235f84c0 CR3: 000000005822c000 CR4: 00000000003526f0
[  602.513505][    C1] Call Trace:
[  602.516793][    C1]  <IRQ>
[  602.519648][    C1]  call_timer_fn+0x17e/0x5f0
[  602.524236][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  602.530048][    C1]  ? call_timer_fn+0xbe/0x5f0
[  602.534732][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  602.539853][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  602.545047][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  602.550851][    C1]  __run_timer_base+0x646/0x860
[  602.555711][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  602.561075][    C1]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  602.567328][    C1]  run_timer_softirq+0xb7/0x180
[  602.572178][    C1]  handle_softirqs+0x286/0x870
[  602.576931][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  602.581689][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  602.586969][    C1]  __irq_exit_rcu+0xca/0x1f0
[  602.591550][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  602.596743][    C1]  irq_exit_rcu+0x9/0x30
[  602.600969][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  602.606593][    C1]  </IRQ>
[  602.609509][    C1]  <TASK>
[  602.612424][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  602.618396][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  602.623669][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ec d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  602.643263][    C1] RSP: 0018:ffffc90003107528 EFLAGS: 00000206
[  602.649324][    C1] RAX: 452c3e89009fc800 RBX: 0000000000000000 RCX: 452c3e89009fc800
[  602.657282][    C1] RDX: ffffffff9323f8f8 RSI: ffffffff8d8f4031 RDI: ffffffff8bbf05e0
[  602.665244][    C1] RBP: ffffffff818a2f35 R08: 0000000000000008 R09: ffffffff95a46120
[  602.673214][    C1] R10: 000000009fa4073a R11: 00000000b6c79feb R12: 0000000000000000
[  602.681191][    C1] R13: ffff888073620948 R14: 0000000000000001 R15: 0000000000000246
[  602.689176][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  602.694494][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  602.699786][    C1]  touch_wq_lockdep_map+0xcb/0x180
[  602.704896][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  602.710182][    C1]  __flush_workqueue+0x121/0x14b0
[  602.715303][    C1]  ? drain_workqueue+0xb1/0x390
[  602.720153][    C1]  ? __pfx___flush_workqueue+0x10/0x10
[  602.725623][    C1]  drain_workqueue+0xd3/0x390
[  602.730298][    C1]  hci_dev_close_sync+0x659/0x1330
[  602.735417][    C1]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  602.740955][    C1]  ? up_write+0x1c4/0x420
[  602.745284][    C1]  hci_unregister_dev+0x21a/0x510
[  602.750302][    C1]  vhci_release+0x152/0x1a0
[  602.754807][    C1]  ? __pfx_vhci_release+0x10/0x10
[  602.759843][    C1]  __fput+0x44c/0xa70
[  602.763822][    C1]  task_work_run+0x1d4/0x260
[  602.768408][    C1]  ? __pfx_task_work_run+0x10/0x10
[  602.773517][    C1]  ? do_exit+0x6b0/0x2300
[  602.777839][    C1]  ? kmem_cache_free+0x19b/0x690
[  602.782779][    C1]  do_exit+0x6b5/0x2300
[  602.786936][    C1]  ? do_raw_spin_lock+0x121/0x290
[  602.791953][    C1]  ? __pfx_do_exit+0x10/0x10
[  602.796536][    C1]  ? cgroup_freezing+0x20/0x350
[  602.801401][    C1]  do_group_exit+0x21c/0x2d0
[  602.805991][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.811185][    C1]  get_signal+0x1285/0x1340
[  602.815694][    C1]  arch_do_signal_or_restart+0xa0/0x790
[  602.821235][    C1]  ? task_work_run+0x1d4/0x260
[  602.825992][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  602.832151][    C1]  ? exit_to_user_mode_loop+0x40/0x130
[  602.837596][    C1]  exit_to_user_mode_loop+0x72/0x130
[  602.842866][    C1]  do_syscall_64+0x2bd/0xfa0
[  602.847451][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.852640][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.858692][    C1]  ? clear_bhb_loop+0x60/0xb0
[  602.863362][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.869244][    C1] RIP: 0033:0x7f168138f6c9
[  602.873647][    C1] Code: Unable to access opcode bytes at 0x7f168138f69f.
[  602.880646][    C1] RSP: 002b:00007ffdb735f268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  602.889047][    C1] RAX: 0000000000000000 RBX: 0000000000092cf5 RCX: 00007f168138f6c9
[  602.897008][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  602.904967][    C1] RBP: 00007f16815e7da0 R08: 0000000000000001 R09: 00000013b735f55f
[  602.912927][    C1] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f16815e609c
[  602.920885][    C1] R13: 00007f16815e6090 R14: ffffffffffffffff R15: 00007ffdb735f380
[  602.928862][    C1]  </TASK>
[  602.931868][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  602.939145][    C1] CPU: 1 UID: 0 PID: 828 Comm: syz.7.12304 Not tainted syzkaller #0 PREEMPT(full) 
[  602.948424][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  602.958473][    C1] Call Trace:
[  602.961748][    C1]  <IRQ>
[  602.964586][    C1]  dump_stack_lvl+0x99/0x250
[  602.969175][    C1]  ? __asan_memcpy+0x40/0x70
[  602.973766][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  602.978960][    C1]  ? __pfx__printk+0x10/0x10
[  602.983548][    C1]  vpanic+0x237/0x6d0
[  602.987527][    C1]  ? __pfx_vpanic+0x10/0x10
[  602.992027][    C1]  panic+0xb9/0xc0
[  602.995740][    C1]  ? __pfx_panic+0x10/0x10
[  603.000162][    C1]  __warn+0x31b/0x4b0
[  603.004134][    C1]  ? __queue_work+0xd38/0xfb0
[  603.008801][    C1]  ? __queue_work+0xd38/0xfb0
[  603.013468][    C1]  report_bug+0x2be/0x4f0
[  603.017794][    C1]  ? __queue_work+0xd38/0xfb0
[  603.022457][    C1]  ? __queue_work+0xd38/0xfb0
[  603.027124][    C1]  ? __queue_work+0xd3a/0xfb0
[  603.031792][    C1]  handle_bug+0x84/0x160
[  603.036028][    C1]  exc_invalid_op+0x1a/0x50
[  603.040518][    C1]  asm_exc_invalid_op+0x1a/0x20
[  603.045354][    C1] RIP: 0010:__queue_work+0xd38/0xfb0
[  603.050629][    C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 e3 ca 9b 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 eb 69 8b 4c 89 fa e8 b9 31 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 9a 15 36 00 90 0f 0b 90 e9 dd fc ff
[  603.070226][    C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046
[  603.076289][    C1] RAX: 452c3e89009fc800 RBX: 0000000000000100 RCX: ffff888030465ac0
[  603.084247][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  603.092205][    C1] RBP: 1ffff1100e6c4138 R08: ffff8880b8924293 R09: 1ffff11017124852
[  603.100163][    C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: dffffc0000000000
[  603.108123][    C1] R13: ffff88807850c990 R14: 0000000000000008 R15: ffff888073620978
[  603.116107][    C1]  call_timer_fn+0x17e/0x5f0
[  603.120689][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  603.126486][    C1]  ? call_timer_fn+0xbe/0x5f0
[  603.131151][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  603.136257][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  603.141445][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  603.147242][    C1]  __run_timer_base+0x646/0x860
[  603.152100][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  603.157463][    C1]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  603.163712][    C1]  run_timer_softirq+0xb7/0x180
[  603.168569][    C1]  handle_softirqs+0x286/0x870
[  603.173322][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  603.178077][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  603.183355][    C1]  __irq_exit_rcu+0xca/0x1f0
[  603.187930][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  603.193125][    C1]  irq_exit_rcu+0x9/0x30
[  603.197356][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  603.202982][    C1]  </IRQ>
[  603.205898][    C1]  <TASK>
[  603.208818][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  603.214792][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  603.220074][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ec d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  603.239664][    C1] RSP: 0018:ffffc90003107528 EFLAGS: 00000206
[  603.245723][    C1] RAX: 452c3e89009fc800 RBX: 0000000000000000 RCX: 452c3e89009fc800
[  603.253681][    C1] RDX: ffffffff9323f8f8 RSI: ffffffff8d8f4031 RDI: ffffffff8bbf05e0
[  603.261649][    C1] RBP: ffffffff818a2f35 R08: 0000000000000008 R09: ffffffff95a46120
[  603.269611][    C1] R10: 000000009fa4073a R11: 00000000b6c79feb R12: 0000000000000000
[  603.277567][    C1] R13: ffff888073620948 R14: 0000000000000001 R15: 0000000000000246
[  603.285536][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  603.290869][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  603.296144][    C1]  touch_wq_lockdep_map+0xcb/0x180
[  603.301244][    C1]  ? touch_wq_lockdep_map+0xb5/0x180
[  603.306525][    C1]  __flush_workqueue+0x121/0x14b0
[  603.311550][    C1]  ? drain_workqueue+0xb1/0x390
[  603.316409][    C1]  ? __pfx___flush_workqueue+0x10/0x10
[  603.321891][    C1]  drain_workqueue+0xd3/0x390
[  603.326579][    C1]  hci_dev_close_sync+0x659/0x1330
[  603.331706][    C1]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  603.337259][    C1]  ? up_write+0x1c4/0x420
[  603.341591][    C1]  hci_unregister_dev+0x21a/0x510
[  603.346616][    C1]  vhci_release+0x152/0x1a0
[  603.351117][    C1]  ? __pfx_vhci_release+0x10/0x10
[  603.356138][    C1]  __fput+0x44c/0xa70
[  603.360129][    C1]  task_work_run+0x1d4/0x260
[  603.364724][    C1]  ? __pfx_task_work_run+0x10/0x10
[  603.369859][    C1]  ? do_exit+0x6b0/0x2300
[  603.374181][    C1]  ? kmem_cache_free+0x19b/0x690
[  603.379119][    C1]  do_exit+0x6b5/0x2300
[  603.383277][    C1]  ? do_raw_spin_lock+0x121/0x290
[  603.388300][    C1]  ? __pfx_do_exit+0x10/0x10
[  603.392883][    C1]  ? cgroup_freezing+0x20/0x350
[  603.397751][    C1]  do_group_exit+0x21c/0x2d0
[  603.402334][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.407529][    C1]  get_signal+0x1285/0x1340
[  603.412042][    C1]  arch_do_signal_or_restart+0xa0/0x790
[  603.417585][    C1]  ? task_work_run+0x1d4/0x260
[  603.422346][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  603.428509][    C1]  ? exit_to_user_mode_loop+0x40/0x130
[  603.433960][    C1]  exit_to_user_mode_loop+0x72/0x130
[  603.439231][    C1]  do_syscall_64+0x2bd/0xfa0
[  603.443814][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.449006][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.455060][    C1]  ? clear_bhb_loop+0x60/0xb0
[  603.459729][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.465606][    C1] RIP: 0033:0x7f168138f6c9
[  603.470006][    C1] Code: Unable to access opcode bytes at 0x7f168138f69f.
[  603.477004][    C1] RSP: 002b:00007ffdb735f268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  603.485412][    C1] RAX: 0000000000000000 RBX: 0000000000092cf5 RCX: 00007f168138f6c9
[  603.493369][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  603.501327][    C1] RBP: 00007f16815e7da0 R08: 0000000000000001 R09: 00000013b735f55f
[  603.509283][    C1] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f16815e609c
[  603.517241][    C1] R13: 00007f16815e6090 R14: ffffffffffffffff R15: 00007ffdb735f380
[  603.525215][    C1]  </TASK>
[  603.528508][    C1] Kernel Offset: disabled
[  603.532818][    C1] Rebooting in 86400 seconds..