last executing test programs:

20.203521911s ago: executing program 0 (id=1039):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090)
syz_emit_ethernet(0x5ea, &(0x7f0000002500)=ANY=[@ANYBLOB="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"/1679], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2509000000050008000100000008000100010000000500070003000000b4a4eb9e3497c3ac4ad78091"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000800)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', <r3=>0x0, 0x29, 0x3, 0x8, 0xf9, 0x16, @private0, @private2, 0x40, 0x8, 0x6, 0x9e}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001d80)={0x780, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x0, 0xd0, 0x7738}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf2a}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x5c, 0x0, 0x7}, {0xf2, 0x8, 0x5, 0x8}, {0x4, 0x1, 0x7, 0xfffffffb}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x44}, 0x41)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000050006000200000005ade77763c0df30a66ef4eb6d50000500040000"], 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x84, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000008000000000000000000000000000000000000000000000000000000020000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
socket$kcm(0xa, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x1, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}}, 0x20048014)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000050500010007000000a330d15f35"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x24040000)

20.126651483s ago: executing program 0 (id=1042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010400000000000000008657a1f9beefdb2108000640000000090500010006000000050005000a0073797a310000000013000300686173683a6e65742c69666163650000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r4, 0x29, 0x9, 0x2, 0x4, 0x30, @local, @remote, 0x98, 0x80, 0x5, 0x800}})
r5 = accept(r1, 0x0, 0x0)
recvfrom$packet(r5, &(0x7f0000000680)=""/211, 0xd3, 0x0, 0x0, 0x0)
shutdown(r5, 0x0)
accept4$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001895fad6b7bc1162c852b90cff4975b9c312c66e70533d8bb0e86c8d005d0015784c46f06bc65e5f8ef6fe595cdc0d2bfddfae85c546d956aa25450cc49dc313dadfb7cbe646d36ba988a3951f08a1487549808d5ca8968b7cb7502e8a60b32913b81ec7f160a9866e216758c0e0cb577cbb552e58bce0ef502a73a886fe2e626677f5fd3769844ee505d6e10789dca4e95fc2cc902e22d9c5bb831b789393719d0133dbd8b1b1fb7d55d41fca8321e1fc77374230158b49e3e839db8089e3a3539ac71c48b99808b5c189f3a6b647da2763bbd6de1b50724629a2b0c5830aec7"], 0x340a)

19.197756378s ago: executing program 1 (id=1057):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r1, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) (async)

19.195753303s ago: executing program 1 (id=1058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000020000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

19.147856466s ago: executing program 2 (id=1059):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000e0ce00010328bd7000fcffffff09000000f419ffba12f53ac65e33c44ef0b3c7a2ec4c150c30b5227b14c6b7e37f9c6b794d89eb34357f37b763eeb2bb538521d4a5a36a5e17c17abe134041e57870a3f51e029de75ad39065bba26242f7e7d31c3de4ca7867506417ea78eda69e365d185714134e559c1ea60495e4632fd044cce48ab9159ab729bfbb65176a9ad3581e6efce7267cb76c929019626b29e883bc7e9fef7b85ddaec400a11f5f04"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) (async)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000000c0), 0x4) (async)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f00000000c0), 0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031c12d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xec, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast2, @in6}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000a00)=0xe8) (async)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000a00)=0xe8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r1, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000a40), &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f0000000b00), &(0x7f0000001900), 0xb569bc77a350f77f, 0x69, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={<r11=>0x0, <r12=>0x0, <r13=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r10, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000001780)=ANY=[@ANYBLOB="340000120100", @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40841}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000011c0)="4c88ff3fc0cf72c3d4668dfecef3592a3590d0517ad6", 0x16}, {&(0x7f00000014c0)="f75d160fb54ae347ac6327b7c91dafcc1a9cf7358343ef85b4720d4ebfbb2c2b9e1beb6a9ffa3ecfe9f87fb01b443fadf7718f12b5e50f0f53d1d776d48fd61ab86799ae48b3aebbfa", 0x49}], 0x2}}, {{&(0x7f0000001580)=@abs={0x45d3db3e4a985d1, 0x0, 0x4e23}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001600)="ba4520ec706cfcb7575a30fa9f01b595237b5b764428c3adb1e32ac8e3a7b98f0babb906c3f62352eeeef13b5bdf7ed4ee1012c30a0c947bf26944eb01a30c2b63ee92d00a627a24c311406d3594f349390acac2b5a9d033b4b0ee7918c6047ce37be04629d096d1a3acd93846241bd66197054893c7b88f8d831b2726283bb0bbbdbfad6f6a0435c8f8829c55232e94336bfa8482574bdf928597f00e3f171771755cb3", 0xa4}, {&(0x7f00000016c0)="2664ce446e586ccf4904f52ca8c448a4294901db88d5635202b73cb426c7124068d3b9ccba8e4c7a68b6f9157836426a2da069e58031b37f8cc5988f0754e394f78b34559ee2b63c180e41477ef7e3f9fc9410c091f82b9a6ce8d865cf355d374ec83debab85a98c276aabab60d59787aaffce872da508a5a12441ac3d201d57f9f5557a3010cfe9589faa0e0e7faae818817cd546", 0x95}, {&(0x7f00000017c0)="41e556f900f49d7d96f67a0f1f620876f879c0f9432a5f78dd6dea94043f004007534b38080d76b416281e7a3d1e95835a99cb99d1d4985b55f2993bd42c61fd9131fce25577f64f8700206550376a66ac8b1e35910e30c2ec8db27099f1afe1b381475ca3b496abf7106a1ddcc60ac3e05b72946e5f807d9dd40c98f2a5486b8dd3b6cc2b9986dff827bd009758e70daeeb8ee9bd10a61fcc4c43c8b4c9a9231f5438520e809d8c21769680310931f2405c385c636ee1e263eae45e8b2fb207b7ee5a3b907555f909b2def4083e5c525236068731e9d1556dd10b2c7160f7b7db", 0xe1}], 0x3, &(0x7f0000001940)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r13, @ANYRESHEX=r9, @ANYRES32, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="14fbffffffffffffff00000001000000", @ANYRES32=r0, @ANYRES8=r1], 0x68, 0x800}}, {{&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="354ddf728c04a411a53ec3df4ba0833d94e010d70c5ecb8a52b33146e80e1c02a49090d43fb1d34b7bc1e025ea4f44fc5fab30ecade1f89b21c4bf6f602c1bb43ce5a22cd067c3d027dcf2d885864fb45dff36940806f8ce82b43e9beef937f9da26f2deab9170180dacadad29720244e67e61f57f9e7ae0117376379fd44e582507f29884", 0x85}, {&(0x7f0000001b00)="666f2a2169fb77b033c653e7ed03d743b0da91fbc8ff1a248179ce4ca949613c36c199668fb509d0f5ff04e7b7b27abbe7adb6a71e17b4d8d648bdcbd4534cfcd79feab1c5172b8803ba3622ac9f880a4e5c5067bbc772f194c507fa72e97bee8d1bcb633e83c882a7e906e5c7dfaee69aced7c650facbfc2b663683041770b5386ffdca9b9915f92fc49f8a59ed0b14b807d36461e25fb235eaaa65e3fcc76694199a8529b9a3fc2a", 0xa9}, {&(0x7f0000001bc0)="d8e0b5d7b410ebc2d6d80343bf664848a3ffe6946687f5b371665e1b930a9e74a1bf95427fcfc5b640b57b934af58546e536f40fef7c5cb37e1abb35daa396e6f6da71cac90fb58de1c2e9da6e5061adb6e206bfb86ec35d3fac61f80a3b502d7335038080a0729119f9cd5087bf4f8d5a1391d7accc6dc0a17d8f345eb9685cc0f3b4c855c18a0c1b48e96dabe12a5be044", 0x92}, {&(0x7f0000001c80)="87b77ea2473b6aa2c12cef693a35c8fa5ecdbf1fa4e268bde9850cd4d827ae847d98cf725b8a8a92558b0d", 0x2b}], 0x4, &(0x7f0000002080)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r13, @ANYBLOB="00000000022b0000000000000000eeff00800100", @ANYRESOCT=r9, @ANYRES8=r3, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r13, @ANYRES16, @ANYRES32=r5, @ANYRES32=r10, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="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"/4106, @ANYRES32=r13, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00']}}], 0x5, 0x4)
sendmsg$nl_xfrm(r4, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f40400001000000225bd7000fddbdf25ac14143b00000000000000000000000064010101000000000000000000000000ab2c00004e2209401706030b5b2b3b2c", @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0300000000000000000000800000000003000000000000000008000000000000100000000000000005000000000000000200000000000000ff0f000000000000fdffffffffffffff7f000000000000000100000000000000ff0700000000000024000000b36b6e0002010003000000000c0015005b073500ffffff7fac000700ff0200000000000000000000000000017f0000010000000000000000000000004e2200ff4e2400000200e08087000000", @ANYRES32=r12, @ANYRES32=r12, @ANYRES32=0x0], 0x4f4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="f40400001000000225bd7000fddbdf25ac14143b00000000000000000000000064010101000000000000000000000000ab2c00004e2209401706030b5b2b3b2c", @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0300000000000000000000800000000003000000000000000008000000000000100000000000000005000000000000000200000000000000ff0f000000000000fdffffffffffffff7f000000000000000100000000000000ff0700000000000024000000b36b6e0002010003000000000c0015005b073500ffffff7fac000700ff0200000000000000000000000000017f0000010000000000000000000000004e2200ff4e2400000200e08087000000", @ANYRES32=r12, @ANYRES32=r12, @ANYRES32=0x0], 0x4f4}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, 0x0, &(0x7f0000000240))
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x0, 0xb, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x215, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00', {}, {}, 0x11}, 0x2e8, 0x110, 0x178, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e28, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x21, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3], 0x4}}, @common=@inet=@multiport={{0x50}, {0x12, 0xe, [0x4e24, 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e20, 0x4e24, 0x7f, 0x4e22, 0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e21], [0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffc, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x5, 'snmp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB='d\x00\x004', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a0008021100000000000a001a0008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a001a00ffffffffffff00000a001a000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x841)
r17 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r15, r16, 0x5, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r17, r15, 0x4, r15}, 0x10)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)

19.13822105s ago: executing program 1 (id=1060):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2000fa, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r1, r2, 0x1, 0x2, 0x2}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r1, r2, 0x1, 0x2, 0x2}, 0x50)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) (async)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x709)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x30, 0xffffffffffff0000, 0x7}, &(0x7f0000000100)=0x18)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
close(0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4) (async)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004"], 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004"], 0x50)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000180)={0x1d, r10, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$can_j1939(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x1ee, 0x4}}, 0x18, &(0x7f0000000000)={&(0x7f0000000140)='\x00', 0x1}, 0x1, 0x0, 0x0, 0x4811}, 0x0)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r12)
socket$unix(0x1, 0x2, 0x0)

19.058311779s ago: executing program 2 (id=1061):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x18)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r5, @ANYBLOB="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"], 0x3fc}, 0x1, 0x0, 0x0, 0x80}, 0x4044)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

18.998042463s ago: executing program 1 (id=1062):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r8)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r8)
recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001680)=""/139, 0x8b}, {&(0x7f0000000380)=""/160, 0xc4}, {&(0x7f00000005c0)=""/4107, 0x1014}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f00000027c0)=""/4096}], 0x5}, 0x22)
sendfile(r5, r7, &(0x7f0000000280)=0xf8, 0x5)
sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_newnexthop={0x9c, 0x68, 0x8, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x0, 0xe}, {0x0, 0x6}, {0x2, 0x3}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x7}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

18.877681864s ago: executing program 2 (id=1063):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r9=>0x0]}, &(0x7f0000000080)=0x8)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000400)={<r10=>r9, 0xa}, &(0x7f0000000440)=0x8)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r11, 0x0, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYBLOB="010aa1c2865d933eac19f0bf6761124075b0c97dd5f47d1b530c4c17e3a27aeb253ea708ab95217514c39795e1fc7b02d278929d2bccfc3736aac3fe3eec4461ea59259aef1237545d763a871998e69cdd6b188c41b956a02aedd98ce2aa4e362f98da7d82ff2904f8206178cb30f9455c90e83c86c5614a165584af228193e5fda15221325e667ecf7574c0e084f00328bac3777d3fcae39563e83eabd729a6741309cc6af8c4b21761ce628557f3387e669e798ef16298d8394ed5b5787f540af7f2cd16bbd5019a7ece59de3bdc9320c9a29803f97b187339f0e0ec71644b169be6590ec873cd0a0aad9ef851", @ANYRES64=r10], 0x50}, 0x1, 0x0, 0x0, 0x24040840}, 0x24040045)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r13, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x70dda7b270d0d0a}, 0x4040091)
r14 = socket$netlink(0x10, 0x3, 0x0)
r15 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r15, 0x110, 0x4, 0xfffffffffffffffc, 0x0)
sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.718262315s ago: executing program 0 (id=1064):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r8, 0x0)
ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0x10, 0x0, 0x81})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000840)={@empty, @private=0xa010100, 0x800, 0x2}})
sendmsg$NFT_BATCH(r6, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x31}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xf, 0x756e, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@deltaction={0x228, 0x31, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff81}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc97}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x897b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x55}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7eab}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x1b}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, 0x180, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000040)='pimreg\x00', 0x7, 0x3, 0x6})

17.647514769s ago: executing program 0 (id=1065):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x4084, 0x4) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240)=0x4084, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/50, 0x32}, {&(0x7f0000001780)=""/19, 0x13}, {&(0x7f00000017c0)=""/105, 0x69}], 0x5) (async)
readv(0xffffffffffffffff, &(0x7f0000001840)=[{&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/50, 0x32}, {&(0x7f0000001780)=""/19, 0x13}, {&(0x7f00000017c0)=""/105, 0x69}], 0x5)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x0, 0x4})
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800010001"], 0x48)
socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'})
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES64=r0, @ANYBLOB="f5ff0f00252155b21c0012000c00010008000100015d801ce4b5d287a93788dd3f97f568abdc58890d30a77679428721b1306ac868b02bec000000000b6bd5a9e2ccfca17c53573735c0331a4f699e4ec51b7444160979c728c9d6ca78fa7711cc6c30c41d981ead36d8d789a200a57b88e109aec59d4f195d1137da8fbf1fad"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES32=r7, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRES32=r7, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x40000c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@getnexthop={0x24, 0x6a, 0xe00, 0x90a2, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

16.798242752s ago: executing program 0 (id=1066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x84}}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, 0x3, 0x3, 0x3204})
write$tun(r2, &(0x7f0000000400)={@void, @val={0x1, 0x4, 0x3, 0x5, 0x3, 0x2}, @x25={0x2, 0x7, 0x13, "fce542239e8981a21d2d9d613470464d821a135ce6b095f1d97794bb9c06aac0965545240f8e6e40cd1fc40605dd93b5834b98ada90bcc1d2ae2bcda6a5368728fbf6edadadde20ea489fe05d6a9c1c25301871b288fbe4d0d9f815292a804a07f7edaf56b8efd58fe04db549bf58ed1dea4011b888496d0083a1c89338adc5649149e4152b99df020aac05d231dfe0d8a371bd010fd3fad806d72721c035caf104c3235cabb6e6b0e75204a159eff066ad6"}}, 0xbf) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4)
bind$tipc(r3, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1002, 0xffffffff, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r8=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r10, 0x84, 0x4, 0x0, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000006c0)={@remote, @multicast1, <r11=>0x0}, &(0x7f0000000700)=0xc)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0x32, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @exit, @generic={0x47, 0x7, 0x8, 0x6, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000680)='syzkaller\x00', 0x353, 0x0, 0x0, 0x40f00, 0x65, '\x00', r11, @lirc_mode2=0x10, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x2, 0x10, 0xbc, 0x9d4}, 0xfffffffffffffd76, 0x0, r13, 0x1, 0x0, &(0x7f0000000b80)=[{0x3, 0x2, 0xb, 0x5}], 0x10, 0x80}, 0x94)

15.826560932s ago: executing program 1 (id=1067):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)={0x178, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x22}}}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="29616908d782c926671fac950995238737070f3454cf1bee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a3adfcd6ca3fb04c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32bd439e6dc46807"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d927adc1fc3793cc82515c75ae9fc8fd8ec277b6a55b6b2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="34c7ac9b19898e716237ae0cd03cab86"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "490bbc742881390c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7e331ecb5d03e196"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c4fa908f9efb5187"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd9d6e729629acdefa3b54a43d125dc7472b71d9f3444049"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ff447687ce98b8c5ab549b70b3e0976f1a77bbf3a5dba89a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="96e847c8453b3e4296c7d034eb758c91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1b9e712d8ba49088379bdaec4aa480ff59caae33ef31f2bea691bda362129af3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0x1b, 0x3, "ef57fe442053254c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a30169c4deb8b3bd58915271acf39ac4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6edf2578afcce3c22b767fdec67e1ded"}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x404c0d4)
bind$xdp(r0, &(0x7f00000004c0)={0x2c, 0x1, r8, 0x7, r0}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
r9 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x1d, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400fbff1400010000000000000000001e880000cb328fd44db4b58ad5383523e0804816c99b8bf9f8c13bad40f808856d2ab7a151e868c8"], 0x14}}, 0x0)

15.824275131s ago: executing program 2 (id=1068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x12, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x134}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}}, 0x400c010) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="78d8f93dbf07002c878e788726d0605c", 0x10}], 0x1, 0x0, 0x0, 0x80}, 0x2400c8d2)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@ifindex, 0x5, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0}, 0x63) (async, rerun: 64)
bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x2, 0x9, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x81}, @NFCTH_STATUS={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

15.823981568s ago: executing program 0 (id=1069):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="990100000000fbdbdf25150000004c0001800d0001007564703a7379dd0a0000000038000400200001000a004e2300000009fe8000000000000000000000000000bb010000001400020002004e23e00000010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x52, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x884)

15.737824097s ago: executing program 1 (id=1070):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
close(r0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffdd2, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x24020400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40ed31675f3c6a05f0dd35b8f97ada6e1a4300ff61f3228eceaabf62d8df5aac82a14832331a31627627f6c1d46cd755fb9099b9243a913198035a36b4d44546d3dfce87d5f21cf01a00b625e4eddb5a28a7d413e09544edce0670cbef0f6594dc89802a7674168486a950184ea57e610c944987ea69bf97b7841425d4df1bc16d2d47b04292707fc65f4165a96dbf2d80be4e15be2adad5fc4a073a8b3f72cc1c05a07de9825503602f5689e42cb770c86243388fdd977470c27b1d", @ANYRES16=r9, @ANYBLOB="080025bd7000fcdbdf25010000000c000300ff0f00000000000008000100000000000c0003000f000000000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400408c1)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)="00d60000000000", 0x7}, {0x0, 0x54}], 0x2)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r10, 0x89e1, &(0x7f0000000000)={@private2, @mcast2})
r11 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r11, 0x2000)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x799, 0x0, 0x0, 0x8, 0x40000c, 0x5}})
ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f00000003c0)={'ip6tnl0\x00', {0x2, 0x4e23, @broadcast}})

15.737301225s ago: executing program 2 (id=1071):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async, rerun: 32)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 32)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa963bffff5, 0x13012, r2, 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x9)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c00128038000180090001006c61737400000000280002800c000240fffffffffffffffe0800014000800000080001400000000d0800014000010102200001800a00010071756f746100000055fe02800c000140000000000000000408000340000001"], 0xe8}}, 0x20050800)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
r6 = accept4(r5, 0x0, 0x0, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001c"], 0x2c}}, 0x0)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x4) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff)
recvmsg(r8, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001b40)=""/4100, 0x1000}, {&(0x7f0000000200)=""/59}, {&(0x7f00000003c0)=""/152}, {&(0x7f00000004c0)=""/45}, {&(0x7f0000000500)=""/100}, {&(0x7f00000005c0)=""/120}, {&(0x7f0000000080)=""/20}], 0xfffffffffffffd8c}, 0x40012101)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a00003401"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

15.518328761s ago: executing program 2 (id=1072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xfc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x32}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xfc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x32}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)

49.955193ms ago: executing program 32 (id=1069):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="990100000000fbdbdf25150000004c0001800d0001007564703a7379dd0a0000000038000400200001000a004e2300000009fe8000000000000000000000000000bb010000001400020002004e23e00000010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x52, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x884)

7.759384ms ago: executing program 33 (id=1070):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
close(r0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffdd2, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
unshare(0x24020400)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40ed31675f3c6a05f0dd35b8f97ada6e1a4300ff61f3228eceaabf62d8df5aac82a14832331a31627627f6c1d46cd755fb9099b9243a913198035a36b4d44546d3dfce87d5f21cf01a00b625e4eddb5a28a7d413e09544edce0670cbef0f6594dc89802a7674168486a950184ea57e610c944987ea69bf97b7841425d4df1bc16d2d47b04292707fc65f4165a96dbf2d80be4e15be2adad5fc4a073a8b3f72cc1c05a07de9825503602f5689e42cb770c86243388fdd977470c27b1d", @ANYRES16=r9, @ANYBLOB="080025bd7000fcdbdf25010000000c000300ff0f00000000000008000100000000000c0003000f000000000000000c0003000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400408c1)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000340)="00d60000000000", 0x7}, {0x0, 0x54}], 0x2)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r10, 0x89e1, &(0x7f0000000000)={@private2, @mcast2})
r11 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r11, 0x2000)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x799, 0x0, 0x0, 0x8, 0x40000c, 0x5}})
ioctl$sock_inet_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f00000003c0)={'ip6tnl0\x00', {0x2, 0x4e23, @broadcast}})

0s ago: executing program 34 (id=1072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xfc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x32}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xfc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x32}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x12}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)

kernel console output (not intermixed with test programs):

04885][ T5876] macsec0 (unregistering): left promiscuous mode
[   66.812069][ T5888] nbd: must specify a device to reconfigure
[   67.000836][ T5896] syzkaller1: entered promiscuous mode
[   67.002608][ T5896] syzkaller1: entered allmulticast mode
[   67.115136][ T5906] Unsupported ieee802154 address type: 0
[   67.126562][ T5909] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET)
[   67.195508][ T5910] xt_hashlimit: size too large, truncated to 1048576
[   67.203459][ T5909] xt_hashlimit: size too large, truncated to 1048576
[   67.312633][ T5921] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   67.315062][ T5921] netlink: 'syz.1.56': attribute type 6 has an invalid length.
[   67.322818][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.332246][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.680353][   T54] Bluetooth: hci2: command tx timeout
[   67.683039][ T5001] Bluetooth: hci0: command tx timeout
[   67.685595][ T5712] Bluetooth: hci1: command tx timeout
[   67.934302][ T5949] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[   67.938241][ T5949] unsupported nla_type 216
[   67.950393][ T5949] netlink: zone id is out of range
[   67.953391][ T5949] netlink: zone id is out of range
[   67.955587][ T5949] netlink: zone id is out of range
[   67.957625][ T5949] netlink: zone id is out of range
[   67.960502][ T5949] netlink: zone id is out of range
[   67.962768][ T5949] netlink: zone id is out of range
[   67.964979][ T5949] netlink: zone id is out of range
[   67.967140][ T5949] netlink: zone id is out of range
[   67.969368][ T5949] netlink: zone id is out of range
[   67.971374][ T5949] netlink: zone id is out of range
[   68.220742][ T5979] dvmrp0: entered allmulticast mode
[   68.385029][   T34] audit: type=1107 audit(1778905085.634:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   69.601450][ T6051] __nla_validate_parse: 23 callbacks suppressed
[   69.601461][ T6051] netlink: 7 bytes leftover after parsing attributes in process `syz.0.93'.
[   69.645800][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[   69.652082][ T6060] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   69.730958][ T6070] Cannot find del_set index 0 as target
[   69.735632][ T6068] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[   69.739898][ T6065] bond1: entered promiscuous mode
[   69.744004][ T6065] bond1: entered allmulticast mode
[   69.749850][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.759199][ T5001] Bluetooth: hci0: command tx timeout
[   69.761629][   T54] Bluetooth: hci2: command tx timeout
[   69.764935][ T5712] Bluetooth: hci1: command tx timeout
[   69.809288][ T6074] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   69.942029][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.945153][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.956833][ T5654] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.959765][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.962932][ T5654] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.962944][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.966992][ T6082] netlink: 'syz.1.100': attribute type 11 has an invalid length.
[   69.971349][ T5654] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.978070][ T5654] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.978122][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   69.988799][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   70.106217][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'.
[   70.218858][ T6091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.103'.
[   70.547078][ T6112] vlan2: entered promiscuous mode
[   70.549336][ T6112] gretap0: entered promiscuous mode
[   70.728334][ T6126] validate_nla: 5 callbacks suppressed
[   70.728351][ T6126] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   70.753720][ T6126] bond2: entered promiscuous mode
[   70.756919][ T6126] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.006042][ T6149] batman_adv: batadv0: Adding interface: dummy0
[   71.008667][ T6149] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.022547][ T6149] batman_adv: batadv0: Interface activated: dummy0
[   71.062157][ T6147] syzkaller0: entered promiscuous mode
[   71.064131][ T6147] syzkaller0: entered allmulticast mode
[   71.245011][ T6168] netlink: 'syz.1.120': attribute type 4 has an invalid length.
[   71.283369][ T6168] netlink: 'syz.1.120': attribute type 4 has an invalid length.
[   71.751305][ T6224] x_tables: duplicate underflow at hook 1
[   71.819724][ T6239] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   71.894939][ T6249] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.916085][ T6249] netlink: 'syz.1.136': attribute type 8 has an invalid length.
[   71.922004][ T6249] netlink: 'syz.1.136': attribute type 4 has an invalid length.
[   71.953428][ T6262] Cannot find add_set index 0 as target
[   72.103767][ T6269] sctp: [Deprecated]: syz.0.140 (pid 6269) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.103767][ T6269] Use struct sctp_sack_info instead
[   72.746982][ T6288] bond1: (slave bond_slave_1): Device is not our slave
[   72.750006][ T6288] bond1: option active_slave: invalid value (bond_slave_1)
[   72.754324][ T6288] bond1 (unregistering): Released all slaves
[   72.883562][ T6292] syzkaller0: entered promiscuous mode
[   72.885519][ T6292] syzkaller0: entered allmulticast mode
[   73.262199][ T6305] nbd0: detected capacity change from 0 to 63
[   73.269830][   T55] block nbd0: Receive control failed (result -104)
[   73.291469][ T6312] netlink: 'syz.0.152': attribute type 6 has an invalid length.
[   73.517776][ T6331] bond0: (slave bond_slave_1): Releasing backup interface
[   73.667208][ T6349] netlink: 'syz.2.163': attribute type 13 has an invalid length.
[   73.670285][ T6349] netlink: 'syz.2.163': attribute type 17 has an invalid length.
[   73.715191][ T6349] 8021q: adding VLAN 0 to HW filter on device team0
[   73.719892][ T6349] dummy0: left promiscuous mode
[   73.724403][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.751507][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.755945][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.761933][ T6349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.765287][ T6349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.771658][ T6349] net_ratelimit: 36 callbacks suppressed
[   73.771666][ T6349] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   73.783422][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.785804][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.791035][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.793525][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.829157][ T6352] bond1: option miimon: invalid value (18446744073709551607)
[   73.832335][ T6352] bond1: option miimon: allowed values 0 - 2147483647
[   73.836581][ T6352] bond1 (unregistering): Released all slaves
[   73.870564][ T6353] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   73.901589][   T55] block nbd1: Receive control failed (result -32)
[   74.016376][ T6366] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   74.022956][ T6366] bond1 (unregistering): Released all slaves
[   74.093191][ T6372] netlink: 'syz.0.167': attribute type 1 has an invalid length.
[   74.111947][ T6372] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.115730][ T6372] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   74.175469][ T6374] bond1: (slave bridge2): Enslaving as an active interface with a down link
[   74.681319][ T6398] syzkaller0: entered promiscuous mode
[   74.683785][ T6398] syzkaller0: entered allmulticast mode
[   74.693376][ T6398] netlink: 'syz.1.171': attribute type 10 has an invalid length.
[   74.702516][ T6398] dummy0: entered allmulticast mode
[   74.705382][ T6398] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.482144][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   76.484356][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   77.546219][ T6382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.721766][ T6416] __nla_validate_parse: 17 callbacks suppressed
[   77.721776][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.177'.
[   77.726741][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.177'.
[   77.942064][ T6431] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   78.055031][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[   78.059779][ T6438] IPVS: Scheduler module ip_vs_sip not found
[   78.187873][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.233642][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   78.245331][ T6468] batadv0: entered promiscuous mode
[   78.248665][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   78.255923][ T6468] macvtap1: entered promiscuous mode
[   78.263850][ T6468] macvtap1: entered allmulticast mode
[   78.276627][ T6468] batadv0: entered allmulticast mode
[   78.281105][ T6468] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   78.286306][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   78.293401][ T6477] syzkaller0: entered promiscuous mode
[   78.295297][ T6477] syzkaller0: entered allmulticast mode
[   78.301058][ T6468] batadv0: left allmulticast mode
[   78.303023][ T6468] batadv0: left promiscuous mode
[   78.306068][ T6468] macvtap1: left promiscuous mode
[   78.307805][ T6468] macvtap1: left allmulticast mode
[   78.675803][ T6495] openvswitch: netlink: Message has 4 unknown bytes.
[   78.678467][ T6495] netlink: 'syz.2.196': attribute type 11 has an invalid length.
[   78.922399][ T6510] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   78.928238][ T6510] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   79.002987][ T6518] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.201'.
[   79.010071][ T6518] openvswitch: netlink: Duplicate key (type 3).
[   79.031098][ T6519] raw_sendmsg: syz.0.200 forgot to set AF_INET. Fix it!
[   79.055649][ T6521] netlink: 'syz.1.202': attribute type 8 has an invalid length.
[   79.057993][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'.
[   79.065370][ T6521] veth1_to_team: entered promiscuous mode
[   79.068231][ T6521] gretap0: entered promiscuous mode
[   79.071333][ T6521] veth1_to_team: left promiscuous mode
[   79.074144][ T6521] gretap0: left promiscuous mode
[   79.174801][ T6528] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   79.210999][ T6531] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[   79.213567][ T6531] netlink: 'syz.1.205': attribute type 2 has an invalid length.
[   79.302397][ T6534] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   79.489741][ T6543] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[   79.787645][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   79.795821][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.798578][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.052907][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'.
[   80.073256][ T6575] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.220284][ T6583] netlink: 'syz.2.223': attribute type 27 has an invalid length.
[   80.284257][ T6587] syzkaller0: entered promiscuous mode
[   80.287744][ T6587] syzkaller0: entered allmulticast mode
[   80.352736][ T6585] sctp: [Deprecated]: syz.0.224 (pid 6585) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.352736][ T6585] Use struct sctp_sack_info instead
[   80.358989][ T6585] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[   80.487355][ T6595] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   80.501034][ T6595] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[   80.612781][ T6600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.636359][ T6598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.678036][ T6610] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   80.711736][   T24] IPVS: starting estimator thread 0...
[   80.714268][ T6610] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[   80.719576][ T6612] bond3: entered promiscuous mode
[   80.721335][ T6612] bond3: entered allmulticast mode
[   80.723182][ T6612] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.808796][ T6613] IPVS: using max 84 ests per chain, 201600 per kthread
[   80.868831][ T6626] syzkaller1: tun_chr_ioctl cmd 1074025673
[   80.877313][ T6626] syzkaller1: tun_chr_ioctl cmd 1074025677
[   80.884310][ T6626] syzkaller1: linktype set to 805
[   80.887564][ T6625] syzkaller1: tun_chr_ioctl cmd 1074025677
[   80.891783][ T6625] syzkaller1: linktype set to 805
[   81.062941][ T6641] xt_hashlimit: max too large, truncated to 1048576
[   81.066483][ T6641] Cannot find set identified by id 1 to match
[   81.144951][ T6646] bond3 (unregistering): Released all slaves
[   81.221113][ T6659] syzkaller0: entered promiscuous mode
[   81.223751][ T6659] syzkaller0: entered allmulticast mode
[   84.389195][ T6672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.495897][ T6699] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   84.505117][ T6700] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   84.517859][ T6693] syzkaller0: entered promiscuous mode
[   84.520300][ T6693] syzkaller0: entered allmulticast mode
[   84.524730][ T6702] __nla_validate_parse: 12 callbacks suppressed
[   84.524742][ T6702] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.254'.
[   84.530963][ T6702] ksmbd: Unknown IPC event: 1, ignore.
[   84.577987][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[   84.581690][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[   84.585627][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.255'.
[   84.590237][ T6704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.593930][ T6704] IPv6: NLM_F_CREATE should be set when creating new route
[   84.693030][ T6712] syzkaller0: entered promiscuous mode
[   84.820835][ T6725] netlink: 'syz.0.261': attribute type 13 has an invalid length.
[   84.826753][ T6725] netlink: 'syz.0.261': attribute type 17 has an invalid length.
[   84.908913][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.911333][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.944659][ T6720] batman_adv: batadv0: Interface deactivated: dummy0
[   85.119190][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.140513][ T6720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.355226][ T6718] syzkaller1: entered promiscuous mode
[   85.357059][ T6718] syzkaller1: entered allmulticast mode
[   85.381673][ T6725] erspan0: left promiscuous mode
[   85.487537][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.508682][ T6725] 8021q: adding VLAN 0 to HW filter on device team0
[   85.536717][ T6725] batman_adv: batadv0: Interface activated: dummy0
[   85.539396][ T6725] batadv0: mtu less than device minimum
[   85.542148][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.547341][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.551819][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.556804][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.561856][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.566963][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.571550][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.575176][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.578776][ T6725] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   85.592385][ T6725] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.632315][ T6725] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.634641][ T6725] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.644250][ T6725] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.646881][ T6725] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.673256][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.695751][ T6725] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.752572][ T5654] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.756193][ T5654] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.760493][ T5654] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.764540][ T5654] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.769101][ T6732] netlink: 'syz.2.262': attribute type 3 has an invalid length.
[   85.772690][ T6732] netlink: 'syz.2.262': attribute type 3 has an invalid length.
[   85.814197][ T5654] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.824164][ T5654] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.828608][ T5654] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.832535][ T5654] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.841724][ T6735] netlink: 7 bytes leftover after parsing attributes in process `syz.2.263'.
[   85.851488][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   85.855233][ T6735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.263'.
[   86.046704][ T6742] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.055294][ T6742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.265'.
[   86.114432][ T6745] netlink: 'syz.1.266': attribute type 13 has an invalid length.
[   86.117920][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   86.127403][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'.
[   86.224412][ T6752] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[   86.258941][ T6751] bond4: (slave bond_slave_1): Device is not our slave
[   86.265134][ T6751] bond4: option active_slave: invalid value (bond_slave_1)
[   86.268634][ T6751] bond4 (unregistering): Released all slaves
[   86.338813][ T6759] trusted_key: syz.1.270 sent an empty control message without MSG_MORE.
[   86.578939][ T6763] nbd2: detected capacity change from 0 to 63
[   86.583484][   T55] block nbd2: Receive control failed (result -104)
[   86.586243][ T6768] block nbd2: Receive control failed (result -32)
[   86.634569][ T6774] netlink: 'syz.0.274': attribute type 11 has an invalid length.
[   86.674178][ T6778] sctp: [Deprecated]: syz.1.275 (pid 6778) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.674178][ T6778] Use struct sctp_sack_info instead
[   86.680586][ T6778] sctp: [Deprecated]: syz.1.275 (pid 6778) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.680586][ T6778] Use struct sctp_sack_info instead
[   86.725386][   T31] cfg80211: failed to load regulatory.db
[   87.092706][ T6805] netlink: 'syz.1.282': attribute type 4 has an invalid length.
[   87.253886][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.261910][ T6816] bridge_slave_0 (unregistering): left allmulticast mode
[   87.264933][ T6816] bridge_slave_0 (unregistering): left promiscuous mode
[   87.267884][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.654892][ T6830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.657816][ T6830] IPv6: NLM_F_CREATE should be set when creating new route
[   87.774633][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.827702][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.835093][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.923105][ T6836] 8021q: VLANs not supported on ip6_vti0
[   87.927811][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.942491][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.949146][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.965204][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.183851][ T6856] netlink: 'syz.2.299': attribute type 1 has an invalid length.
[   88.284830][ T6865] pim6reg1: entered promiscuous mode
[   88.286977][ T6865] pim6reg1: entered allmulticast mode
[   88.694071][ T6883] netlink: 'syz.2.306': attribute type 4 has an invalid length.
[   88.700181][ T6883] netlink: 'syz.2.306': attribute type 4 has an invalid length.
[   89.578476][ T6905] __nla_validate_parse: 13 callbacks suppressed
[   89.578503][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.309'.
[   89.586819][ T6905] netlink: 260 bytes leftover after parsing attributes in process `syz.0.309'.
[   89.643212][ T6907] netlink: 'syz.1.310': attribute type 13 has an invalid length.
[   89.697262][ T6907] bond0: left allmulticast mode
[   89.699703][ T6907] bond_slave_0: left allmulticast mode
[   89.701993][ T6907] bond_slave_1: left allmulticast mode
[   89.704263][ T6907] dummy0: left allmulticast mode
[   89.707550][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.712321][ T6907] 8021q: adding VLAN 0 to HW filter on device team0
[   89.720217][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.765468][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.771185][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.778517][ T6907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   89.782818][ T6907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.796673][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.800594][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.799179][   T31] net_ratelimit: 79 callbacks suppressed
[   90.799195][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.879340][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   91.388910][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   91.592356][ T6879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.674653][ T6928] validate_nla: 1 callbacks suppressed
[   91.674662][ T6928] netlink: 'syz.1.314': attribute type 1 has an invalid length.
[   91.715077][ T6928] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.733721][ T6928] bond4: (slave geneve2): making interface the new active one
[   91.737424][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.741197][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'.
[   91.744635][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.749307][ T6928] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   91.753563][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.760248][ T6929] veth1_to_batadv: entered allmulticast mode
[   91.764665][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.767312][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.777223][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.789862][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.802194][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.849227][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.849690][ T6941] netlink: 96 bytes leftover after parsing attributes in process `syz.1.317'.
[   91.899877][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   91.917038][ T6944] batadv_slave_1: entered promiscuous mode
[   91.961790][ T6944] batadv_slave_1: left promiscuous mode
[   92.110304][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'.
[   92.116352][ T6963] netlink: 'syz.1.323': attribute type 1 has an invalid length.
[   92.140205][ T6961] netlink: 'syz.2.324': attribute type 1 has an invalid length.
[   92.142141][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.323'.
[   92.149175][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.175711][ T6961] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.196311][ T6967] netlink: 'syz.0.325': attribute type 10 has an invalid length.
[   92.403438][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.329'.
[   92.410172][ T6980] netlink: 'syz.2.329': attribute type 1 has an invalid length.
[   92.424503][ T6980] bond4: entered promiscuous mode
[   92.426875][ T6980] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.441970][ T6981] netlink: 'syz.0.328': attribute type 16 has an invalid length.
[   92.449677][ T6981] netlink: 'syz.0.328': attribute type 17 has an invalid length.
[   92.474106][ T6981] veth1_vlan: left promiscuous mode
[   92.476510][ T6981] veth0_vlan: left promiscuous mode
[   92.484797][ T6981] veth0_vlan: entered promiscuous mode
[   92.494488][ T6981] veth1_vlan: entered promiscuous mode
[   92.500060][ T6981] veth1_macvtap: left promiscuous mode
[   92.502311][ T6981] veth0_macvtap: left promiscuous mode
[   92.504884][ T6981] veth0_macvtap: entered promiscuous mode
[   92.507335][ T6981] veth1_macvtap: entered promiscuous mode
[   92.513337][ T6981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.516582][ T6981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.519675][ T6981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.523203][ T6981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.540773][ T6988] netlink: 14 bytes leftover after parsing attributes in process `syz.2.330'.
[   92.544376][ T5747] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.554713][ T6985] vlan1: entered allmulticast mode
[   92.556493][ T6985] bond0: entered allmulticast mode
[   92.558220][ T6985] bond_slave_0: entered allmulticast mode
[   92.580068][ T6988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.584240][ T6988] bond_slave_0: left allmulticast mode
[   92.587866][ T6988] bond0 (unregistering): Released all slaves
[   92.596290][ T5747] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.603138][ T5747] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.612101][ T5747] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.798429][ T6990] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[   92.855049][ T6990] bond0: (slave bridge2): making interface the new active one
[   92.858527][ T6990] bond0: (slave bridge2): Enslaving as an active interface with an up link
[   92.872447][ T6990] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   92.901960][ T6994] netlink: 140 bytes leftover after parsing attributes in process `syz.0.332'.
[   92.937514][ T6996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.951159][ T6996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.023410][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.035701][ T7003] syzkaller0: entered promiscuous mode
[   93.037626][ T7003] syzkaller0: entered allmulticast mode
[   93.055554][ T7003] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.156027][ T7005] 5n: entered promiscuous mode
[   93.216319][ T7008] netlink: 'syz.1.338': attribute type 21 has an invalid length.
[   93.221215][ T7010] netlink: 'syz.1.338': attribute type 21 has an invalid length.
[   93.468138][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[   93.491417][ T5747] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.507583][ T5747] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.516828][ T5747] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.521725][ T5747] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.581434][ T7033] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[   93.593649][ T7032] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[   93.977572][ T7049] bond2: Unable to set down delay as MII monitoring is disabled
[   93.983097][ T7049] bond2 (unregistering): Released all slaves
[   94.198460][ T7053] veth1_to_batadv: entered promiscuous mode
[   94.579619][ T7062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.582682][ T7062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.614968][ T7067] __nla_validate_parse: 7 callbacks suppressed
[   94.614987][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'.
[   94.717171][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.895023][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[   95.023666][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'.
[   95.027411][ T7091] nbd: illegal input index -1113835520
[   95.458384][ T7109] netlink: 156 bytes leftover after parsing attributes in process `syz.2.368'.
[   95.462935][ T7109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.368'.
[   95.561217][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   95.756597][ T7125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.372'.
[   95.779917][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   95.810120][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   95.863918][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   96.001525][   T12] net_ratelimit: 20 callbacks suppressed
[   96.001620][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[   96.010522][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   96.011477][ T7140] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.194521][ T7149] tipc: Started in network mode
[   96.196612][ T7149] tipc: Node identity f6c2b30a06eb, cluster identity 4711
[   96.199751][ T7149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.203230][ T7149] syzkaller0: entered promiscuous mode
[   96.205566][ T7149] syzkaller0: entered allmulticast mode
[   96.234909][ T7149] tipc: Resetting bearer <eth:syzkaller0>
[   96.245828][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[   96.271369][ T7148] tipc: Disabling bearer <eth:syzkaller0>
[   96.367805][ T7162] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   96.372822][ T7163] lo: entered allmulticast mode
[   96.378151][ T7163] lo: left allmulticast mode
[   96.528898][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[   96.534181][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   97.049641][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[   97.055401][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   97.310711][ T7184] validate_nla: 7 callbacks suppressed
[   97.310727][ T7184] netlink: 'syz.1.388': attribute type 10 has an invalid length.
[   97.323286][ T7184] bond0: (slave dummy0): Releasing backup interface
[   97.335483][ T7184] team0: Port device dummy0 added
[   97.343092][ T7184] netlink: 'syz.1.388': attribute type 10 has an invalid length.
[   97.343197][ T7185] netlink: 'syz.1.388': attribute type 10 has an invalid length.
[   97.361411][ T7184] team0: Port device dummy0 removed
[   97.365407][ T7184] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   97.568990][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[   97.573855][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   97.577871][ T7205] Bluetooth: MGMT ver 1.23
[   97.974470][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.979406][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.039304][ T7235] veth1_to_team: entered promiscuous mode
[   98.043900][ T7235] veth1_to_team: left promiscuous mode
[   98.052119][ T7233] netlink: 'syz.1.399': attribute type 3 has an invalid length.
[   98.110140][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[   98.114719][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[   98.151036][ T7249] netlink: 'syz.0.403': attribute type 4 has an invalid length.
[   98.246346][ T7266] bridge4: entered promiscuous mode
[   98.248102][ T7266] bridge4: entered allmulticast mode
[   98.265094][ T7266] team0: Port device bridge4 added
[   98.271679][ T7266] bridge0: port 3(team0) entered blocking state
[   98.276766][ T7266] bridge0: port 3(team0) entered disabled state
[   98.283534][ T7266] team0: entered allmulticast mode
[   98.285648][ T7266] team_slave_0: entered allmulticast mode
[   98.287533][ T7266] team_slave_1: entered allmulticast mode
[   98.292684][ T7266] team0: entered promiscuous mode
[   98.294528][ T7266] team_slave_0: entered promiscuous mode
[   98.296579][ T7266] team_slave_1: entered promiscuous mode
[   98.347452][ T7272] netlink: 'syz.0.408': attribute type 1 has an invalid length.
[   98.372216][ T7272] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   98.376594][ T7272] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   98.447708][ T7274] bond3: (slave bridge3): Enslaving as an active interface with a down link
[   98.513804][ T7282] netlink: 'syz.0.411': attribute type 1 has an invalid length.
[   98.539503][ T7282] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.554614][ T7282] bond4: (slave gretap1): making interface the new active one
[   98.557924][ T7282] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   98.915546][ T7314] lo speed is unknown, defaulting to 1000
[   98.921163][ T7314] lo speed is unknown, defaulting to 1000
[   98.925448][ T7314] lo speed is unknown, defaulting to 1000
[   98.967856][ T7318] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   98.973609][ T7318] netlink: 'syz.0.422': attribute type 2 has an invalid length.
[   98.977870][ T7318] netlink: 'syz.0.422': attribute type 3 has an invalid length.
[   98.993999][ T7318] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   98.993999][ T7318] Please contact the netfilter-devel mailing list or update your nftables rules.
[   99.081537][ T7332] team_slave_0 (unregistering): left promiscuous mode
[   99.088980][ T7332] team_slave_0 (unregistering): left allmulticast mode
[   99.092965][ T7332] team0: Port device team_slave_0 removed
[   99.118128][ T7314] infiniband sqz0: set active
[   99.123862][ T7314] infiniband sqz0: added lo
[   99.136182][ T7314] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   99.136784][ T7326] syzkaller0: entered promiscuous mode
[   99.141064][ T7314] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   99.141101][ T7314] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   99.159363][ T7326] syzkaller0: entered allmulticast mode
[   99.160059][ T7314] RDS/IB: sqz0: added
[   99.164746][   T24] lo speed is unknown, defaulting to 1000
[   99.171533][ T7314] smc: adding ib device sqz0 with port count 1
[   99.174497][ T7314] smc:    ib device sqz0 port 1 has no pnetid
[  100.286948][   T24] lo speed is unknown, defaulting to 1000
[  100.300951][ T7314] lo speed is unknown, defaulting to 1000
[  100.414509][ T7342] Driver unsupported XDP return value 0 on prog  (id 75) dev N/A, expect packet loss!
[  100.555380][ T7314] lo speed is unknown, defaulting to 1000
[  100.682881][ T7350] lo speed is unknown, defaulting to 1000
[  100.825927][ T7314] lo speed is unknown, defaulting to 1000
[  101.041167][ T7360] bond7: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  101.062474][ T7360] syzkaller0: entered promiscuous mode
[  101.064318][ T7360] syzkaller0: entered allmulticast mode
[  101.189889][ T5747] net_ratelimit: 10 callbacks suppressed
[  101.189909][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  101.197813][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  101.233656][ T7365] __nla_validate_parse: 16 callbacks suppressed
[  101.233713][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.
[  101.361369][ T7371] netlink: 17 bytes leftover after parsing attributes in process `syz.0.438'.
[  101.432059][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'.
[  101.481560][ T7383] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'.
[  101.484455][ T7383] gre0: entered allmulticast mode
[  101.486346][ T7383] netlink: 48 bytes leftover after parsing attributes in process `syz.2.442'.
[  101.615907][ T7386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.728953][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  101.734720][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  102.250709][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  102.256472][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  102.302796][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[  102.339187][ T7398] validate_nla: 3 callbacks suppressed
[  102.339199][ T7398] netlink: 'syz.2.448': attribute type 4 has an invalid length.
[  102.387048][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  102.392753][ T7398] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  102.470747][ T7417] netlink: 44 bytes leftover after parsing attributes in process `syz.2.452'.
[  102.594902][ T7433] netlink: 'syz.0.455': attribute type 13 has an invalid length.
[  102.597718][ T7433] netlink: 'syz.0.455': attribute type 17 has an invalid length.
[  102.779718][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  102.784185][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  102.914081][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  102.917096][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  102.960319][ T7459] macvtap1: entered promiscuous mode
[  102.962807][ T7459] macvtap1: entered allmulticast mode
[  102.965150][ T7459] veth1_vlan: entered allmulticast mode
[  102.996698][ T7460] macvtap2: entered promiscuous mode
[  102.999126][ T7460] macvtap2: entered allmulticast mode
[  103.112309][ T7472] syzkaller1: entered promiscuous mode
[  103.119427][ T7472] syzkaller1: entered allmulticast mode
[  103.220374][ T7485] netlink: 'syz.1.469': attribute type 3 has an invalid length.
[  103.244448][ T5747] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.252488][ T5747] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.255052][ T5747] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.258538][ T5747] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.299363][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  103.303919][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  103.361847][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 30 seconds
[  103.369081][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 30 seconds
[  103.372588][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 30 seconds
[  103.376069][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 30 seconds
[  103.621382][ T7514] syzkaller0: entered promiscuous mode
[  103.623756][ T7514] syzkaller0: entered allmulticast mode
[  103.668003][ T7514] lo speed is unknown, defaulting to 1000
[  104.190187][ T7540] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  104.193819][ T7540] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  104.221199][ T7540] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.245579][ T7540] bond5: (slave veth3): Enslaving as an active interface with a down link
[  104.264210][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv2
[  104.267160][ T7540] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  105.277552][ T7594] xt_ecn: cannot match TCP bits for non-tcp packets
[  105.427526][ T7600] sctp: [Deprecated]: syz.1.498 (pid 7600) Use of int in maxseg socket option.
[  105.427526][ T7600] Use struct sctp_assoc_value instead
[  105.450436][ T7600] x_tables: duplicate underflow at hook 1
[  105.568590][ T7622] nbd: must specify at least one socket
[  105.599723][ T7622] bond6: option miimon: invalid value (18446744073709551607)
[  105.602192][ T7622] bond6: option miimon: allowed values 0 - 2147483647
[  105.606859][ T7622] bond6 (unregistering): Released all slaves
[  106.332187][ T7687] __nla_validate_parse: 18 callbacks suppressed
[  106.332196][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'.
[  106.351323][ T7687] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.358255][ T7687] bond5: (slave lo): Enslaving as an active interface with an up link
[  106.361627][ T7687] net_ratelimit: 14 callbacks suppressed
[  106.361634][ T7687] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  106.368901][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  106.373208][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  106.487599][ T7709] netlink: 'syz.2.510': attribute type 10 has an invalid length.
[  106.526983][ T7709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'.
[  106.592692][ T7709] geneve1: entered promiscuous mode
[  106.604931][ T7709] geneve1: entered allmulticast mode
[  106.621054][ T7709] team0: Port device geneve1 added
[  106.626589][ T5654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.634113][ T5654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.644291][ T5654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.649852][ T5654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.669354][ T7719] syzkaller0: entered promiscuous mode
[  106.671351][ T7719] syzkaller0: entered allmulticast mode
[  106.850940][ T7737] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  106.888967][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  106.893617][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  106.905250][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'.
[  106.910486][ T7737] 8021q: adding VLAN 0 to HW filter on device bond7
[  106.913266][ T7730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  106.929140][ T7737] vlan2: entered allmulticast mode
[  106.930886][ T7737] bond7: entered allmulticast mode
[  107.088091][ T7757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.520'.
[  107.409044][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  107.414479][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  107.938934][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  107.944353][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  108.459109][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  110.021302][ T7756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.234747][ T7788] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[  110.261617][ T7781] hsr0: entered promiscuous mode
[  110.272100][ T7791] netlink: 'syz.1.525': attribute type 1 has an invalid length.
[  110.277680][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'.
[  110.386462][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'.
[  110.397290][ T7801] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  110.416468][ T7801] 8021q: adding VLAN 0 to HW filter on device bond9
[  110.457621][ T7801] bond9: (slave veth5): Enslaving as an active interface with a down link
[  110.507431][ T7801] bond9: (slave veth7): Enslaving as an active interface with a down link
[  110.542321][ T7801] bond9: entered allmulticast mode
[  110.659275][   T24] IPVS: starting estimator thread 0...
[  110.748879][ T7825] IPVS: using max 85 ests per chain, 204000 per kthread
[  110.856340][ T7835] tc_dump_action: action bad kind
[  110.906982][ T7837] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  110.923039][ T7839] netlink: 'syz.1.536': attribute type 6 has an invalid length.
[  111.017931][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  111.024652][ T7808] hsr0: left promiscuous mode
[  111.155690][ T7855] syzkaller0: entered promiscuous mode
[  111.163474][ T7855] syzkaller0: entered allmulticast mode
[  111.164396][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'.
[  111.238924][ T7858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.540'.
[  111.428280][ T7862] netlink: 104 bytes leftover after parsing attributes in process `syz.1.542'.
[  111.551801][ T5747] net_ratelimit: 13 callbacks suppressed
[  111.551822][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  111.559412][ T5747] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  111.726574][ T7879] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  111.729500][ T7879] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.866931][ T7887] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.552'.
[  112.022850][ T7900] xt_policy: too many policy elements
[  112.031715][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'.
[  112.063280][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.066156][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.069401][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  112.074058][ T5654] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  112.093437][ T7901] batman_adv: batadv0: Interface deactivated: dummy0
[  112.123013][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.127328][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.178554][ T7901] vlan2: left allmulticast mode
[  112.180470][ T7901] bond7: left allmulticast mode
[  112.182242][ T7901] bond9: left allmulticast mode
[  112.187955][   T24] lo speed is unknown, defaulting to 1000
[  112.195638][   T24] sqz0: Port: 1 Link DOWN
[  112.198337][ T5654] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.201890][ T5654] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.222141][   T24] lo speed is unknown, defaulting to 1000
[  112.222264][ T5654] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.227358][ T5654] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.248014][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[  112.256246][ T7911] netlink: 'syz.2.559': attribute type 13 has an invalid length.
[  112.266072][ T7911] netlink: 'syz.2.559': attribute type 17 has an invalid length.
[  112.272385][ T7911] gre0: left allmulticast mode
[  112.302745][ T7911] bridge0: port 3(team0) entered blocking state
[  112.304858][ T7911] bridge0: port 3(team0) entered listening state
[  112.312914][ T7911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.414576][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.419941][ T7911] veth1_to_batadv: left allmulticast mode
[  112.426702][ T7911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.432464][ T7911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.437471][ T7911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.452293][ T7911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  112.457004][ T7928] ipt_REJECT: TCP_RESET invalid for non-tcp
[  112.463313][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.465567][ T1111] bridge0: port 1(bridge_slave_0) entered listening state
[  112.469074][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.471340][ T1111] bridge0: port 2(bridge_slave_1) entered listening state
[  112.506063][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'.
[  112.550589][ T7937] tipc: Started in network mode
[  112.552915][ T7937] tipc: Node identity ac14140f, cluster identity 4711
[  112.556609][ T7937] tipc: New replicast peer: 255.255.255.255
[  112.560330][ T7937] tipc: Enabled bearer <udp:syz2>, priority 10
[  112.565742][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'.
[  113.133550][ T7944] netem: invalid attributes len -1
[  113.135315][ T7944] netem: change failed
[  113.169953][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'.
[  113.244857][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  113.248415][ T7958] syzkaller0: entered promiscuous mode
[  113.249005][   T34] audit: type=1107 audit(1778905130.494:3): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L<@!k陶P4dK@q!QՄ>r
[  113.249005][   T34] W	W: ?U=}w`g*n#~Rx4*k"ߝl'
[  113.250864][ T7958] syzkaller0: entered allmulticast mode
[  113.270033][ T7958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.573'.
[  113.293512][ T7956] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  113.307256][ T7956] 8021q: adding VLAN 0 to HW filter on device bond10
[  113.330480][ T7956] bond10: (slave geneve2): making interface the new active one
[  113.335817][ T7956] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  113.340257][ T5654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.343182][ T5654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.363054][ T5654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.365918][ T5654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.559441][ T7963] bridge0: port 3(team0) entered disabled state
[  113.561953][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.564364][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.595536][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'.
[  113.619733][ T7973] syzkaller0: entered promiscuous mode
[  113.621617][ T7973] syzkaller0: entered allmulticast mode
[  113.649707][ T7976] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  113.682106][   T10] tipc: Node number set to 2886997007
[  113.936508][ T7989] gtp0: entered promiscuous mode
[  113.938376][ T7989] gtp0: entered allmulticast mode
[  113.986460][ T7989] netlink: 'syz.2.583': attribute type 15 has an invalid length.
[  114.044846][ T8000] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.005778][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.014206][ T8014] 8021q: adding VLAN 0 to HW filter on device team0
[  116.017995][ T8014] batman_adv: batadv0: Interface activated: dummy0
[  116.023239][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.044811][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.048035][ T8014] veth1_to_batadv: left promiscuous mode
[  116.051314][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.056491][ T8014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  116.062988][ T5668] lo speed is unknown, defaulting to 1000
[  116.066722][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.069180][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.071903][ T5668] sqz0: Port: 1 Link ACTIVE
[  116.075990][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.078309][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.096675][ T5690] lo speed is unknown, defaulting to 1000
[  116.101605][  T810] lo speed is unknown, defaulting to 1000
[  116.106455][  T810] sqz0: Port: 1 Link DOWN
[  116.167252][ T8018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.170398][ T8018] IPv6: NLM_F_CREATE should be set when creating new route
[  116.173499][ T8018] IPv6: NLM_F_CREATE should be set when creating new route
[  116.176524][ T8018] IPv6: NLM_F_CREATE should be set when creating new route
[  116.181046][ T8018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.214324][ T8020] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[  116.216800][ T8020] netlink: 'syz.0.591': attribute type 4 has an invalid length.
[  116.241366][ T8024] openvswitch: netlink: Flow actions attr not present in new flow.
[  116.803082][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  116.806798][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  116.809933][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  116.812893][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  116.816537][   T11] block nbd2: Dead connection, failed to find a fallback
[  116.822638][   T11] block nbd2: shutting down sockets
[  116.825320][   T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.829909][   T11] Buffer I/O error on dev nbd2, logical block 3, async page read
[  116.833495][   T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.837183][   T11] Buffer I/O error on dev nbd2, logical block 2, async page read
[  116.844277][   T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.848888][   T11] Buffer I/O error on dev nbd2, logical block 1, async page read
[  116.852135][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.855827][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  116.862006][ T5620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.867327][ T5620] Buffer I/O error on dev nbd2, logical block 0, async page read
[  116.871274][ T5620] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.875096][ T5620] Buffer I/O error on dev nbd2, logical block 1, async page read
[  116.878449][ T5620] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.885180][ T5620] Buffer I/O error on dev nbd2, logical block 2, async page read
[  116.887718][ T5620] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.891223][ T5620] Buffer I/O error on dev nbd2, logical block 3, async page read
[  116.893890][ T5620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.897073][ T5620] Buffer I/O error on dev nbd2, logical block 0, async page read
[  116.900423][ T5620] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.903659][ T5620] Buffer I/O error on dev nbd2, logical block 1, async page read
[  116.908151][ T5620] ldm_validate_partition_table(): Disk read failed.
[  116.915008][ T5620] Dev nbd2: unable to read RDB block 0
[  116.918310][ T5620]  nbd2: unable to read partition table
[  116.929762][ T5620] ldm_validate_partition_table(): Disk read failed.
[  116.935206][ T5620] Dev nbd2: unable to read RDB block 0
[  116.940311][ T5620]  nbd2: unable to read partition table
[  117.068661][ T8003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  117.135588][ T8030] netlink: 'syz.1.594': attribute type 4 has an invalid length.
[  117.353757][ T8058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.393598][ T8061] netlink: 'syz.0.600': attribute type 2 has an invalid length.
[  117.462276][ T8066] netlink: 'syz.0.603': attribute type 8 has an invalid length.
[  117.554794][ T8074] vlan1: entered allmulticast mode
[  117.556984][ T8074] bond0: entered allmulticast mode
[  117.559238][ T8074] bridge2: entered allmulticast mode
[  117.561864][ T8064] : renamed from bond0 (while UP)
[  117.562861][ T8074] __nla_validate_parse: 8 callbacks suppressed
[  117.562869][ T8074] netlink: 14 bytes leftover after parsing attributes in process `syz.2.605'.
[  117.744655][ T8075] ipvlan2: entered promiscuous mode
[  117.756902][ T8077] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  117.837683][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'.
[  117.844857][ T8099] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.611'.
[  118.103481][ T8118] netlink: 'syz.1.614': attribute type 9 has an invalid length.
[  118.190737][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  118.284662][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'.
[  118.453630][ T8147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.456332][ T8147] syzkaller0: entered promiscuous mode
[  118.458220][ T8147] syzkaller0: entered allmulticast mode
[  118.481019][ T8147] tipc: Resetting bearer <eth:syzkaller0>
[  118.488593][ T8146] tipc: Resetting bearer <eth:syzkaller0>
[  118.501327][ T8146] tipc: Disabling bearer <eth:syzkaller0>
[  118.555943][ T8150] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  118.575904][ T8150] batadv_slave_0: entered promiscuous mode
[  118.594113][ T8149] batadv_slave_0: left promiscuous mode
[  118.825202][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'.
[  120.348407][ T8178] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.630'.
[  120.482672][ T8196] syzkaller0: entered promiscuous mode
[  120.488273][ T8196] syzkaller0: entered allmulticast mode
[  120.498280][ T8195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.512233][ T8193] netlink: 496 bytes leftover after parsing attributes in process `syz.0.635'.
[  120.521105][ T8196] tipc: Resetting bearer <eth:syzkaller0>
[  120.538049][ T8194] tipc: Resetting bearer <eth:syzkaller0>
[  120.553998][ T8194] tipc: Disabling bearer <eth:syzkaller0>
[  120.632518][ T8203] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  120.645520][ T8203] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  120.669688][ T8203] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  120.700726][ T8203] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.724629][ T8203] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.790416][   T83] smbdirect: ib_dev[syz2] removed
[  120.847828][ T8215] lo speed is unknown, defaulting to 1000
[  121.384306][ T8227] sctp: [Deprecated]: syz.0.644 (pid 8227) Use of int in maxseg socket option.
[  121.384306][ T8227] Use struct sctp_assoc_value instead
[  121.705298][ T8237] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'.
[  121.737030][ T8244] netlink: 'syz.1.649': attribute type 1 has an invalid length.
[  121.757645][ T8245] veth7: entered allmulticast mode
[  121.776537][ T8244] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  121.984384][ T8262] tun0: tun_chr_ioctl cmd 1074812118
[  121.989187][ T8262] tun0: tun_chr_ioctl cmd 1074033169
[  122.030240][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'.
[  122.246725][ T8283] netlink: 'syz.1.659': attribute type 1 has an invalid length.
[  122.267562][ T8283] bond0: entered promiscuous mode
[  122.272901][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.315185][ T8283] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.317610][ T8283] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  122.322353][ T8283] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  122.328934][ T8283] bond0: (slave vti0): making interface the new active one
[  122.331385][ T8283] vti0: entered promiscuous mode
[  122.334026][ T8283] bond0: (slave vti0): Enslaving as an active interface with an up link
[  122.373865][ T8286] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  122.397982][ T8286] veth7: entered allmulticast mode
[  122.578987][ T8302] : (slave dummy0): Releasing backup interface
[  122.586670][ T8302] bridge_slave_1: left allmulticast mode
[  122.588529][ T8302] bridge_slave_1: left promiscuous mode
[  122.591122][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.598312][ T8302] : (slave bond_slave_0): Releasing backup interface
[  122.606482][ T8302] : (slave bond_slave_1): Releasing backup interface
[  122.616663][ T8302] team0: Port device team_slave_0 removed
[  122.623827][ T8302] team0: Port device team_slave_1 removed
[  122.626383][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.629578][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.632801][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.635307][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.638474][ T8302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  122.761419][ T8309] __nla_validate_parse: 3 callbacks suppressed
[  122.761430][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'.
[  123.065820][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.673'.
[  123.133765][ T8322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.669'.
[  123.136977][ T8341] syz_tun: entered allmulticast mode
[  123.143658][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'.
[  123.293387][ T8348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'.
[  123.402415][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'.
[  123.464537][ T8362] netlink: 120 bytes leftover after parsing attributes in process `syz.1.682'.
[  123.497186][ T8366] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  123.517301][ T8366] bond6: (slave geneve2): making interface the new active one
[  123.524968][ T8366] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  123.530402][ T5747] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  123.531691][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'.
[  123.541879][ T8366] 8021q: adding VLAN 0 to HW filter on device bond6
[  123.555480][ T5654] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  123.558553][ T5654] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  123.562664][ T5654] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  123.568131][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.573610][ T8350] bridge_slave_0 (unregistering): left allmulticast mode
[  123.575888][ T8350] bridge_slave_0 (unregistering): left promiscuous mode
[  123.578111][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.707202][ T8374] netlink: 120 bytes leftover after parsing attributes in process `syz.2.685'.
[  123.713775][ T8374] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  123.723962][ T8374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.685'.
[  123.735369][ T8373] bond11: option resend_igmp: invalid value (2878)
[  123.737554][ T8373] bond11: option resend_igmp: allowed values 0 - 255
[  123.744527][ T8373] bond11 (unregistering): Released all slaves
[  123.769897][ T8376] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  123.873285][ T8380] netlink: 'syz.2.688': attribute type 4 has an invalid length.
[  123.884564][ T8380] netlink: 'syz.2.688': attribute type 4 has an invalid length.
[  124.053233][ T8397] netem: change failed
[  124.154332][ T8406] netlink: 'syz.2.696': attribute type 10 has an invalid length.
[  124.158484][ T8406] syz_tun: entered promiscuous mode
[  124.201090][ T8406] netlink: 'syz.2.696': attribute type 4 has an invalid length.
[  124.297680][ T8417] lo speed is unknown, defaulting to 1000
[  124.394648][ T8418] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:4
[  124.575654][ T8431] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  124.581978][ T8431] bond11: (slave lo): Enslaving as an active interface with an up link
[  124.585933][ T8431] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  124.606728][ T5722] lo speed is unknown, defaulting to 1000
[  124.611147][ T5722] sqz0: Port: 1 Link ACTIVE
[  124.623412][ T5722] lo speed is unknown, defaulting to 1000
[  124.706994][ T8440] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  124.742899][ T8449] netlink: 'syz.1.708': attribute type 8 has an invalid length.
[  124.750759][ T8449] geneve3: entered promiscuous mode
[  124.752449][ T8449] geneve3: entered allmulticast mode
[  124.816140][ T5690] bridge0: entered promiscuous mode
[  124.821780][ T8442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.913191][ T8460] tipc: Enabled bearer <eth:gre0>, priority 27
[  125.174092][ T8476] tipc: New replicast peer: 255.255.255.255
[  125.176511][ T8476] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.215087][ T8476] syzkaller0: entered promiscuous mode
[  125.216923][ T8476] syzkaller0: entered allmulticast mode
[  126.480624][   T10] tipc: Node number set to 875490473
[  126.771518][ T8501] pim6reg1: entered promiscuous mode
[  126.776822][ T8501] pim6reg1: entered allmulticast mode
[  126.992440][ T8516] syz_tun (unregistering): left allmulticast mode
[  127.034077][ T8520] 8021q: adding VLAN 0 to HW filter on device bond13
[  127.133682][ T8529] syz_tun: entered allmulticast mode
[  127.158175][ T8529] dvmrp8: entered allmulticast mode
[  127.175412][ T8528] syz_tun: left allmulticast mode
[  127.242423][ T8535] validate_nla: 8 callbacks suppressed
[  127.242434][ T8535] netlink: 'syz.0.731': attribute type 2 has an invalid length.
[  127.501174][ T5654] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.507784][ T8544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.520923][ T5654] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.553393][ T5654] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.563978][ T5654] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.645652][ T8556] netlink: 'syz.2.738': attribute type 11 has an invalid length.
[  127.708194][ T8565] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[  127.717103][ T8562] openvswitch: netlink: Flow key attr not present in new flow.
[  127.743592][ T8571] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  127.785715][ T8565] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address
[  127.797420][ T8565] bond7: (slave vxcan5): Error -95 calling set_mac_address
[  127.864486][ T8575] bond7: (slave bridge9): Enslaving as an active interface with a down link
[  127.877115][ T8565] macvlan0: entered promiscuous mode
[  127.879403][ T8565] macvlan0: entered allmulticast mode
[  127.881786][ T8565] bond7: entered promiscuous mode
[  127.887692][ T8565] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  127.892075][ T8565] bond7: left promiscuous mode
[  127.973452][ T8579] netlink: 'syz.0.745': attribute type 6 has an invalid length.
[  127.978672][ T8579] syzkaller1: entered promiscuous mode
[  127.981658][ T8579] syzkaller1: entered allmulticast mode
[  128.026205][ T8586] pim6reg1: entered promiscuous mode
[  128.028447][ T8586] pim6reg1: entered allmulticast mode
[  128.100447][ T8588] lo speed is unknown, defaulting to 1000
[  128.186347][ T8593] xt_hashlimit: size too large, truncated to 1048576
[  128.501770][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.516791][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.607330][ T5747] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.612321][ T5747] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.617290][ T5747] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.624693][ T5747] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.631405][ T5747] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.637438][ T5747] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.644908][ T5747] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.652038][ T5747] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.656645][ T5747] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.664207][ T5747] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.673122][ T5747] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.683404][ T5747] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.724188][ T8607] bond8 (unregistering): Released all slaves
[  128.837271][ T8613] __nla_validate_parse: 24 callbacks suppressed
[  128.837291][ T8613] netlink: 200 bytes leftover after parsing attributes in process `syz.2.753'.
[  128.893757][ T8616] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  128.946954][ T8616] bond8: entered promiscuous mode
[  128.950004][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'.
[  128.950690][ T8616] 8021q: adding VLAN 0 to HW filter on device bond8
[  128.972941][ T8616] vlan0: entered allmulticast mode
[  128.974567][ T8616] bond8: entered allmulticast mode
[  128.997193][ T8616] bond8: (slave bridge7): making interface the new active one
[  129.000849][ T8616] bridge7: entered promiscuous mode
[  129.003253][ T8616] bridge7: entered allmulticast mode
[  129.006062][ T8616] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  129.023781][ T8622] lo speed is unknown, defaulting to 1000
[  129.436538][ T8663] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  129.492904][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.768'.
[  129.496236][ T8667] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  129.580338][ T8667] bond9: entered promiscuous mode
[  129.582245][ T8667] 8021q: adding VLAN 0 to HW filter on device bond9
[  129.634247][ T8667] bond9: (slave bridge8): making interface the new active one
[  129.636999][ T8667] bridge8: entered promiscuous mode
[  129.640923][ T8667] bond9: (slave bridge8): Enslaving as an active interface with an up link
[  129.694134][ T8683] tc_dump_action: action bad kind
[  129.834824][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'.
[  129.843721][ T8703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'.
[  129.855534][ T8705] netlink: 108 bytes leftover after parsing attributes in process `syz.2.780'.
[  129.970134][ T8719] netlink: 'syz.0.784': attribute type 8 has an invalid length.
[  129.983162][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  129.996820][ T8719] veth1_to_team: entered promiscuous mode
[  130.007239][ T8719] veth1_to_team: left promiscuous mode
[  130.014008][ T8723] netlink: 76 bytes leftover after parsing attributes in process `syz.2.785'.
[  130.056178][ T8726] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.787'.
[  130.074194][ T8726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  130.120682][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'.
[  130.182733][ T8731] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  130.254537][ T8737] xt_bpf: check failed: parse error
[  130.286539][ T8737] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  130.323519][ T8752] ip6t_srh: unknown srh match flags  4000
[  130.406968][ T8758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.441045][ T8764] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  130.486849][ T8764] 8021q: adding VLAN 0 to HW filter on device bond16
[  130.492343][ T8764] bond15: (slave bond16): making interface the new active one
[  130.495396][ T8764] bond15: (slave bond16): Enslaving as an active interface with an up link
[  130.552932][ T8772] netlink: 'syz.1.800': attribute type 4 has an invalid length.
[  130.727270][ T8795] tipc: Resetting bearer <eth:gre0>
[  130.730630][ T8795] tipc: Resetting bearer <eth:gre0>
[  130.747110][ T8795] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  130.931878][ T8813] 8021q: adding VLAN 0 to HW filter on device bond11
[  130.940511][ T8813] bond11 (unregistering): Released all slaves
[  131.116127][ T8827] netlink: 'syz.1.816': attribute type 1 has an invalid length.
[  131.132851][ T8827] bond11: entered promiscuous mode
[  131.135234][ T8827] 8021q: adding VLAN 0 to HW filter on device bond11
[  131.151311][ T8828] bond11: (slave bridge10): making interface the new active one
[  131.153838][ T8828] bridge10: entered promiscuous mode
[  131.156225][ T8828] bond11: (slave bridge10): Enslaving as an active interface with an up link
[  131.165621][ T8827] bond11: (slave bridge11): Enslaving as a backup interface with an up link
[  131.286916][ T8839] bond12 (unregistering): Released all slaves
[  131.359602][ T8842] netlink: 'syz.1.821': attribute type 1 has an invalid length.
[  131.383068][ T8842] bond12: (slave bridge12): making interface the new active one
[  131.386337][ T8842] bond12: (slave bridge12): Enslaving as an active interface with an up link
[  131.393593][ T8842] SET target dimension over the limit!
[  131.401889][ T8842] bond12: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  131.563157][ T8852] lo speed is unknown, defaulting to 1000
[  131.700329][ T5690] IPVS: starting estimator thread 0...
[  131.748118][ T8863] 8021q: adding VLAN 0 to HW filter on device bond13
[  131.784221][ T8870] xt_TPROXY: Can be used only with -p tcp or -p udp
[  131.803566][ T8867] IPVS: using max 84 ests per chain, 201600 per kthread
[  131.884577][ T8879] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  131.887246][ T8879] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  132.214037][ T8898] 8021q: adding VLAN 0 to HW filter on device bond14
[  132.745654][ T8909] validate_nla: 4 callbacks suppressed
[  132.745670][ T8909] netlink: 'syz.0.837': attribute type 12 has an invalid length.
[  132.753202][ T8909] netlink: 'syz.0.837': attribute type 12 has an invalid length.
[  132.798554][ T8912] syzkaller0: entered promiscuous mode
[  132.800897][ T8912] syzkaller0: entered allmulticast mode
[  133.449795][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 60 seconds
[  133.453856][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 60 seconds
[  133.458131][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 60 seconds
[  133.462493][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 60 seconds
[  134.992589][ T8887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.998460][ T8912] netlink: 'syz.0.838': attribute type 1 has an invalid length.
[  135.002407][ T8912] __nla_validate_parse: 16 callbacks suppressed
[  135.002417][ T8912] netlink: 224 bytes leftover after parsing attributes in process `syz.0.838'.
[  135.008674][ T8912] NCSI netlink: No device for ifindex 0
[  135.072723][ T8916] netlink: 'syz.2.840': attribute type 4 has an invalid length.
[  135.076347][ T8916] netlink: 'syz.2.840': attribute type 4 has an invalid length.
[  135.116360][ T8922] netlink: 'syz.1.842': attribute type 28 has an invalid length.
[  135.134675][ T8922] netlink: 1544 bytes leftover after parsing attributes in process `syz.1.842'.
[  135.147326][ T8926] syzkaller1: tun_chr_ioctl cmd 35108
[  135.168029][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'.
[  135.176493][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  135.304258][ T8952] netlink: 240 bytes leftover after parsing attributes in process `syz.1.848'.
[  135.355483][ T8956] netlink: 'syz.2.852': attribute type 6 has an invalid length.
[  135.360681][ T8956] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.366511][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'.
[  135.378288][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'.
[  135.498269][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'.
[  135.624185][ T8980] netlink: 'syz.1.858': attribute type 1 has an invalid length.
[  135.631511][ T8980] netlink: 228 bytes leftover after parsing attributes in process `syz.1.858'.
[  135.783115][ T8997] netlink: 'syz.0.864': attribute type 1 has an invalid length.
[  135.798241][ T8997] 8021q: adding VLAN 0 to HW filter on device bond17
[  135.806586][ T8997] vlan4: entered allmulticast mode
[  135.809444][ T8997] bond17: entered allmulticast mode
[  135.824266][ T8997] bond17: (slave geneve3): making interface the new active one
[  135.829308][ T8997] geneve3: entered allmulticast mode
[  135.835156][ T8997] bond17: (slave geneve3): Enslaving as an active interface with an up link
[  135.844976][ T8996] bridge0: port 4(veth1_to_bridge) entered blocking state
[  135.847325][ T8996] bridge0: port 4(veth1_to_bridge) entered disabled state
[  135.850344][ T8996] veth1_to_bridge: entered allmulticast mode
[  135.855061][ T8996] veth1_to_bridge: entered promiscuous mode
[  136.202289][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'.
[  136.214932][ T9025] smc: net device wlan0 applied user defined pnetid SYZ0
[  137.106117][ T9046] lo speed is unknown, defaulting to 1000
[  137.216544][ T9056] openvswitch: netlink: Actions may not be safe on all matching packets
[  137.545282][ T9079] bond18 (unregistering): Released all slaves
[  137.689368][ T9088] macsec0: entered promiscuous mode
[  137.691095][ T9088] macsec0: entered allmulticast mode
[  137.781016][ T9091] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  137.785018][ T9091] Cannot find set identified by id 3 to match
[  137.922960][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  137.925671][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  138.037795][ T9099] bond0: (slave netdevsim0): Error: Device type is different from other slaves
[  138.065592][ T9101] lo speed is unknown, defaulting to 1000
[  138.209326][ T9103] syzkaller0: entered promiscuous mode
[  138.217752][ T9103] syzkaller0: entered allmulticast mode
[  138.234483][ T9103] syzkaller0: mtu greater than device maximum
[  140.168922][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  140.170684][ T9102] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  141.671865][ T9136] __nla_validate_parse: 12 callbacks suppressed
[  141.671878][ T9136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.898'.
[  141.684299][ T9136] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  141.698920][ T9136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.898'.
[  141.701980][ T9136] netlink: 252 bytes leftover after parsing attributes in process `syz.1.898'.
[  141.704946][ T9136] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  141.707450][ T9136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.898'.
[  141.863681][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'.
[  141.906634][ T9152] netlink: 'syz.1.904': attribute type 13 has an invalid length.
[  141.906699][ T9151] netlink: 'syz.1.904': attribute type 13 has an invalid length.
[  141.916042][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  142.007625][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'.
[  142.015537][ T9159] openvswitch: netlink: Flow actions attr not present in new flow.
[  142.071607][ T9161] netlink: 'syz.1.908': attribute type 13 has an invalid length.
[  142.083520][ T9165] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.909'.
[  142.087179][ T9167] netem: change failed
[  142.092001][ T9161] netlink: 'syz.1.908': attribute type 17 has an invalid length.
[  142.097508][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'.
[  142.123735][ T9169] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  142.133910][ T9161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.908'.
[  142.187216][ T9179] netem: change failed
[  142.277751][ T5690] bridge0: entered promiscuous mode
[  142.461696][ T9215] netlink: 'syz.2.923': attribute type 1 has an invalid length.
[  142.483990][ T9215] bond8 (unregistering): Released all slaves
[  142.693887][ T9233] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  142.716732][ T9233] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  143.055672][ T9239] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  143.076644][ T9239] bond8: (slave geneve3): making interface the new active one
[  143.084033][ T9239] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  143.087447][ T9131] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  143.093960][ T9131] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  143.103049][ T9131] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  143.112078][ T9131] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  143.149341][ T9242] netlink: 'syz.2.930': attribute type 32 has an invalid length.
[  143.321048][ T9242] netlink: 'syz.2.930': attribute type 32 has an invalid length.
[  143.643487][ T9277] sctp: [Deprecated]: syz.1.935 (pid 9277) Use of int in maxseg socket option.
[  143.643487][ T9277] Use struct sctp_assoc_value instead
[  143.787072][ T9293] veth1_to_team: entered promiscuous mode
[  143.794322][ T9293] veth1_to_team: left promiscuous mode
[  143.924497][ T9306] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  144.244504][ T9339] 8021q: adding VLAN 0 to HW filter on device bond18
[  144.260553][ T9346] tipc: Enabled bearer <ib:ip6gre0>, priority 8
[  144.282711][ T9339] veth11: entered allmulticast mode
[  144.299740][ T9339] bond18: (slave veth11): Enslaving as an active interface with an up link
[  144.303866][ T9345] tipc: Enabling of bearer <ib:ip6gre0> rejected, already enabled
[  144.317173][ T9339] bond18 (unregistering): (slave veth11): Releasing backup interface
[  144.324814][ T9339] bond18 (unregistering): Released all slaves
[  144.563512][ T9362] lo speed is unknown, defaulting to 1000
[  144.633164][ T9365] openvswitch: netlink: Flow key attr not present in new flow.
[  145.619513][ T9417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.717545][ T9422] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  145.722042][ T9422] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  145.793586][ T9436] bridge10: entered promiscuous mode
[  145.795834][ T9436] bridge10: entered allmulticast mode
[  145.800301][ T9436] team0: Port device bridge10 added
[  145.845356][ T9435] lo speed is unknown, defaulting to 1000
[  145.934042][ T9445] xt_hashlimit: size too large, truncated to 1048576
[  145.953803][ T9442] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20128
[  145.955747][ T9448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.079548][ T9453] ip6gre2: entered promiscuous mode
[  146.081339][ T9453] ip6gre2: entered allmulticast mode
[  146.216252][ T9456] lo speed is unknown, defaulting to 1000
[  146.734080][ T9467] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  146.744881][ T9467] bond9 (unregistering): Released all slaves
[  146.756278][ T9471] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  146.902739][ T9475] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  146.947714][ T9478] validate_nla: 14 callbacks suppressed
[  146.947732][ T9478] netlink: 'syz.0.988': attribute type 5 has an invalid length.
[  147.331841][ T9502] __nla_validate_parse: 36 callbacks suppressed
[  147.331851][ T9502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'.
[  147.426610][ T9509] netlink: 'syz.2.996': attribute type 5 has an invalid length.
[  147.733327][ T9552] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1004'.
[  147.736784][ T9552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.935522][ T9560] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1008'.
[  148.230505][ T9582] syzkaller1: tun_chr_ioctl cmd 2147767506
[  148.421456][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  148.424409][ T9588] netlink: 'syz.1.1018': attribute type 1 has an invalid length.
[  148.426998][ T9588] netlink: 'syz.1.1018': attribute type 2 has an invalid length.
[  148.520345][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'.
[  148.534371][ T9605] 8021q: adding VLAN 0 to HW filter on device bond16
[  148.539337][ T9605] bond16: entered promiscuous mode
[  148.541611][ T9605] bond16: entered allmulticast mode
[  148.545609][ T9605] 8021q: adding VLAN 0 to HW filter on device bond16
[  148.550692][ T9605] team0: Port device bond16 added
[  148.616492][ T9610] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1024'.
[  148.665318][ T9613] erspan0: entered promiscuous mode
[  148.807051][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'.
[  148.815817][ T9629] netem: incorrect ge model size
[  148.827246][ T9629] netem: change failed
[  148.845097][ T9632] xt_limit: Overflow, try lower: 324382443/0
[  148.845182][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'.
[  148.855585][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  148.861508][ T9633] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  148.865088][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  148.868245][ T9632] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  148.886212][ T9618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.891590][ T9618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.955182][ T9618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.958467][ T9618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.022436][ T9618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.025822][ T9618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.098138][ T9618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.102237][ T9618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.244524][ T5669] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.247347][ T5669] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.257895][ T5669] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.260938][ T5669] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.290721][ T5669] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.297901][ T5669] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.311085][ T9658] netlink: 'syz.1.1035': attribute type 1 has an invalid length.
[  149.346540][ T9658] 8021q: adding VLAN 0 to HW filter on device bond17
[  149.349309][ T5669] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.353357][ T5669] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.677017][ T9693] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  149.689646][ T9693] syzkaller0: entered promiscuous mode
[  149.691465][ T9693] syzkaller0: entered allmulticast mode
[  149.810587][ T9695] netlink: 'syz.1.1046': attribute type 1 has an invalid length.
[  149.824056][ T9695] bond18: entered promiscuous mode
[  149.826202][ T9695] 8021q: adding VLAN 0 to HW filter on device bond18
[  149.836554][ T9695] bond18: entered allmulticast mode
[  149.884629][ T9698] IPVS: Error connecting to the multicast addr
[  150.034297][ T9704] IPv6: sit1: Disabled Multicast RS
[  150.038083][ T9704] netlink: 'syz.1.1050': attribute type 20 has an invalid length.
[  150.135094][ T9706] IPv6: sit2: Disabled Multicast RS
[  150.140064][ T9706] netlink: 'syz.1.1051': attribute type 32 has an invalid length.
[  150.344149][ T9717] netlink: 'syz.2.1055': attribute type 39 has an invalid length.
[  150.563887][ T9735] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  150.570515][ T9735] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  150.611469][ T9743] tipc: Resetting bearer <eth:gre0>
[  150.678143][ T9743] tipc: Resetting bearer <ib:ip6gre0>
[  150.890550][ T9743] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  150.896671][ T9743] bond1: left promiscuous mode
[  150.898600][ T9743] bond1: left allmulticast mode
[  150.901074][ T9743] bond2: left promiscuous mode
[  150.902874][ T9743] bond3: left promiscuous mode
[  150.904507][ T9743] bond3: left allmulticast mode
[  150.922201][ T9743] veth1_vlan: left allmulticast mode
[  150.924563][ T9743] macvtap1: left promiscuous mode
[  150.926259][ T9743] macvtap1: left allmulticast mode
[  150.936145][ T9743] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  150.942523][ T9743] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  150.947999][ T9743] bond0: left promiscuous mode
[  150.950145][ T9743] vti0: left promiscuous mode
[  150.958159][ T9743] geneve3: left promiscuous mode
[  150.962934][ T9743] geneve3: left allmulticast mode
[  150.973876][ T9743] bond8: left promiscuous mode
[  150.976457][ T9743] bridge7: left promiscuous mode
[  150.979593][ T9743] vlan0: left allmulticast mode
[  150.984245][ T9743] bond8: left allmulticast mode
[  150.986043][ T9743] bridge7: left allmulticast mode
[  150.990032][ T9743] bond9: left promiscuous mode
[  150.992166][ T9743] bridge8: left promiscuous mode
[  151.003449][ T9743] bond11: left promiscuous mode
[  151.008792][ T9743] bridge10: left promiscuous mode
[  151.036256][ T9743] ip6gre2: left promiscuous mode
[  151.039895][ T9743] ip6gre2: left allmulticast mode
[  151.044841][ T9743] bond16: left promiscuous mode
[  151.046536][ T9743] bond16: left allmulticast mode
[  151.066263][ T9743] bond18: left promiscuous mode
[  151.071958][ T9743] bond18: left allmulticast mode
[  151.087839][ T5669] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.092173][ T5669] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.095911][ T5669] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.100332][ T5669] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.106234][ T5669] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.109509][ T5669] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.113428][ T5669] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.117120][ T5669] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.881776][ T9757] tunl0: entered allmulticast mode
[  153.720267][ T9747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  153.821928][ T9772] __nla_validate_parse: 17 callbacks suppressed
[  153.821940][ T9772] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1068'.
[  153.851988][ T9776] netlink: 'syz.0.1069': attribute type 1 has an invalid length.
[  153.891921][ T9776] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  153.896565][ T9776] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  153.926706][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'.
[  153.940835][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1071'.
[  153.991511][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'.
[  154.006631][ T9790] bond18: (slave bridge5): Enslaving as an active interface with a down link
[  156.875238][ T5060] udevd[5060]: worker [5617] /devices/virtual/block/nbd0 is taking a long time
[  163.522562][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 90 seconds
[  163.526800][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 90 seconds
[  163.530955][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 90 seconds
[  163.535882][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 90 seconds
[  169.705303][ T5712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.713735][ T5712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.718193][ T5712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.722590][ T5712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.727305][ T5712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.742204][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  169.753142][ T5001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  169.765146][ T5001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  169.770174][ T5001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  169.776374][ T9805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  169.781792][ T9805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  169.790186][ T5712] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  169.799732][ T5712] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  169.810663][ T5712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  169.814409][ T5712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  170.062822][ T9804] lo speed is unknown, defaulting to 1000
[  170.156539][ T9802] lo speed is unknown, defaulting to 1000
[  170.253301][ T9800] lo speed is unknown, defaulting to 1000
[  170.397922][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.402417][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.405017][ T9804] bridge_slave_0: entered allmulticast mode
[  170.407721][ T9804] bridge_slave_0: entered promiscuous mode
[  170.411452][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.413850][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.416198][ T9804] bridge_slave_1: entered allmulticast mode
[  170.419331][ T9804] bridge_slave_1: entered promiscuous mode
[  170.466959][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.495664][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.550088][ T9804] team0: Port device team_slave_0 added
[  170.562181][ T9804] team0: Port device team_slave_1 added
[  170.606928][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.609292][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.617132][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.638344][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.641366][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.651530][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.748572][ T9804] hsr_slave_0: entered promiscuous mode
[  170.751317][ T9804] hsr_slave_1: entered promiscuous mode
[  170.753666][ T9804] debugfs: 'hsr0' already exists in 'hsr'
[  170.755811][ T9804] Cannot create hsr debugfs directory
[  170.778345][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.781223][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.784109][ T9802] bridge_slave_0: entered allmulticast mode
[  170.787275][ T9802] bridge_slave_0: entered promiscuous mode
[  170.812677][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.815740][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.819109][ T9802] bridge_slave_1: entered allmulticast mode
[  170.823010][ T9802] bridge_slave_1: entered promiscuous mode
[  170.896006][ T9802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.920712][ T9802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.933706][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.936151][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.939141][ T9800] bridge_slave_0: entered allmulticast mode
[  170.942317][ T9800] bridge_slave_0: entered promiscuous mode
[  170.962863][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.965642][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.968232][ T9800] bridge_slave_1: entered allmulticast mode
[  170.971991][ T9800] bridge_slave_1: entered promiscuous mode
[  171.002463][ T9802] team0: Port device team_slave_0 added
[  171.021893][ T9802] team0: Port device team_slave_1 added
[  171.028056][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.052323][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.084137][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.086769][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.094738][ T9802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.115276][ T9802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.118042][ T9802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.127911][ T9802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.134621][ T9800] team0: Port device team_slave_0 added
[  171.155611][ T9800] team0: Port device team_slave_1 added
[  171.193807][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.196711][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.207461][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.212584][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.216567][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.224597][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.254967][ T9802] hsr_slave_0: entered promiscuous mode
[  171.257243][ T9802] hsr_slave_1: entered promiscuous mode
[  171.259743][ T9802] debugfs: 'hsr0' already exists in 'hsr'
[  171.261605][ T9802] Cannot create hsr debugfs directory
[  171.299806][ T9800] hsr_slave_0: entered promiscuous mode
[  171.302403][ T9800] hsr_slave_1: entered promiscuous mode
[  171.304729][ T9800] debugfs: 'hsr0' already exists in 'hsr'
[  171.306560][ T9800] Cannot create hsr debugfs directory
[  171.839704][ T5001] Bluetooth: hci4: command tx timeout
[  171.839807][ T5712] Bluetooth: hci3: command tx timeout
[  171.844103][ T9805] Bluetooth: hci5: command tx timeout
[  173.919013][ T9805] Bluetooth: hci5: command tx timeout
[  173.919116][ T5712] Bluetooth: hci3: command tx timeout
[  173.923670][ T5001] Bluetooth: hci4: command tx timeout
[  175.999639][ T5712] Bluetooth: hci4: command tx timeout
[  176.000354][ T9805] Bluetooth: hci3: command tx timeout
[  176.004001][ T5001] Bluetooth: hci5: command tx timeout
[  178.079923][ T5001] Bluetooth: hci5: command tx timeout
[  178.079946][ T9805] Bluetooth: hci4: command tx timeout
[  178.088986][ T9805] Bluetooth: hci3: command tx timeout
[  186.079144][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  186.087857][ T5712] Bluetooth: hci1: command 0x0406 tx timeout
[  193.600124][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 120 seconds
[  193.604475][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 120 seconds
[  193.609104][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 120 seconds
[  193.613437][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 120 seconds
[  199.369661][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  199.371930][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  223.681300][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 150 seconds
[  223.685010][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 150 seconds
[  223.688545][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 150 seconds
[  223.691921][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 150 seconds
[  230.674605][ T5001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.682682][ T5001] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.686039][ T5001] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  230.691017][ T5001] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  230.695225][ T5001] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  230.786103][ T5001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.803771][ T5712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.807238][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  230.815532][ T5712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  230.815820][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  230.826454][ T5712] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  230.830758][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  230.831513][ T5712] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  230.837518][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  230.837538][ T5712] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  230.972526][ T9858] lo speed is unknown, defaulting to 1000
[  231.148560][ T9864] lo speed is unknown, defaulting to 1000
[  231.318506][ T9862] lo speed is unknown, defaulting to 1000
[  231.349630][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.358880][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.362235][ T9858] bridge_slave_0: entered allmulticast mode
[  231.366306][ T9858] bridge_slave_0: entered promiscuous mode
[  231.382695][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.385773][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.391107][ T9858] bridge_slave_1: entered allmulticast mode
[  231.394946][ T9858] bridge_slave_1: entered promiscuous mode
[  231.430830][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.436891][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.457998][ T9858] team0: Port device team_slave_0 added
[  231.466334][ T9858] team0: Port device team_slave_1 added
[  231.485836][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.488103][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.496543][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.508475][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.510724][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.518978][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.578931][ T9858] hsr_slave_0: entered promiscuous mode
[  231.581187][ T9858] hsr_slave_1: entered promiscuous mode
[  231.583252][ T9858] debugfs: 'hsr0' already exists in 'hsr'
[  231.585245][ T9858] Cannot create hsr debugfs directory
[  231.746995][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.750084][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.752341][ T9864] bridge_slave_0: entered allmulticast mode
[  231.755216][ T9864] bridge_slave_0: entered promiscuous mode
[  231.758196][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.761537][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.763927][ T9864] bridge_slave_1: entered allmulticast mode
[  231.766492][ T9864] bridge_slave_1: entered promiscuous mode
[  231.821948][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.826726][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.876262][ T9864] team0: Port device team_slave_0 added
[  231.886717][ T9864] team0: Port device team_slave_1 added
[  231.947612][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.950473][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.952863][ T9862] bridge_slave_0: entered allmulticast mode
[  231.955548][ T9862] bridge_slave_0: entered promiscuous mode
[  231.958482][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.961364][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  231.969642][ T9864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.973493][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.977148][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.980372][ T9862] bridge_slave_1: entered allmulticast mode
[  231.984215][ T9862] bridge_slave_1: entered promiscuous mode
[  231.996206][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.000938][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.009203][ T9864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.036330][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.041198][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.074463][ T9862] team0: Port device team_slave_0 added
[  232.080271][ T9864] hsr_slave_0: entered promiscuous mode
[  232.082729][ T9864] hsr_slave_1: entered promiscuous mode
[  232.085280][ T9864] debugfs: 'hsr0' already exists in 'hsr'
[  232.087180][ T9864] Cannot create hsr debugfs directory
[  232.090176][ T9862] team0: Port device team_slave_1 added
[  232.115209][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.117998][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.126748][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.137506][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.140067][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.147957][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.199482][ T9862] hsr_slave_0: entered promiscuous mode
[  232.201861][ T9862] hsr_slave_1: entered promiscuous mode
[  232.204579][ T9862] debugfs: 'hsr0' already exists in 'hsr'
[  232.206525][ T9862] Cannot create hsr debugfs directory
[  232.728972][ T9805] Bluetooth: hci6: command tx timeout
[  232.879117][ T9805] Bluetooth: hci7: command tx timeout
[  232.879163][ T5001] Bluetooth: hci8: command tx timeout
[  234.808969][ T5001] Bluetooth: hci6: command tx timeout
[  234.959000][ T5001] Bluetooth: hci8: command tx timeout
[  234.959267][ T9805] Bluetooth: hci7: command tx timeout
[  236.879002][ T9805] Bluetooth: hci6: command tx timeout
[  237.038953][ T9805] Bluetooth: hci8: command tx timeout
[  237.039708][ T5001] Bluetooth: hci7: command tx timeout
[  238.959038][ T5001] Bluetooth: hci6: command tx timeout
[  239.118916][ T9805] Bluetooth: hci8: command tx timeout
[  239.121728][ T5001] Bluetooth: hci7: command tx timeout
[  253.769940][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 180 seconds
[  253.774263][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 180 seconds
[  253.778642][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 180 seconds
[  253.783231][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 180 seconds
[  253.880518][ T5060] udevd[5060]: worker [5617] /devices/virtual/block/nbd0 timeout; kill it
[  253.883339][ T5060] udevd[5060]: seq 10594 '/devices/virtual/block/nbd0' killed
[  260.802246][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  260.804752][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  283.849686][   T98] block nbd0: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 210 seconds
[  283.853731][   T98] block nbd0: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 210 seconds
[  283.857703][   T98] block nbd0: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 210 seconds
[  283.861960][   T98] block nbd0: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 210 seconds
[  290.699872][ T5001] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  290.709077][ T5001] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  290.710774][   T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  290.720650][ T5001] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  290.721627][   T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  290.729609][ T5001] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  290.733330][   T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  290.733549][ T5001] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  290.738599][   T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  290.739985][ T5001] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  290.895483][ T9913] lo speed is unknown, defaulting to 1000
[  290.983245][ T9912] lo speed is unknown, defaulting to 1000
[  291.158573][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.161346][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.163865][ T9913] bridge_slave_0: entered allmulticast mode
[  291.166889][ T9913] bridge_slave_0: entered promiscuous mode
[  291.174517][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.177273][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.180046][ T9913] bridge_slave_1: entered allmulticast mode
[  291.183019][ T9913] bridge_slave_1: entered promiscuous mode
[  291.211468][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.221849][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.245731][ T9913] team0: Port device team_slave_0 added
[  291.249813][ T9913] team0: Port device team_slave_1 added
[  291.265852][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.268176][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.276453][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.284792][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.286987][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.295434][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.354077][ T9913] hsr_slave_0: entered promiscuous mode
[  291.357131][ T9913] hsr_slave_1: entered promiscuous mode
[  291.361315][ T9913] debugfs: 'hsr0' already exists in 'hsr'
[  291.363646][ T9913] Cannot create hsr debugfs directory
[  291.489614][ T9912] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.492034][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.494429][ T9912] bridge_slave_0: entered allmulticast mode
[  291.497179][ T9912] bridge_slave_0: entered promiscuous mode
[  291.505857][ T9912] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.508460][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.511483][ T9912] bridge_slave_1: entered allmulticast mode
[  291.514400][ T9912] bridge_slave_1: entered promiscuous mode
[  291.565466][ T9912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.590411][ T9912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.619756][ T9912] team0: Port device team_slave_0 added
[  291.625417][ T9912] team0: Port device team_slave_1 added
[  291.652623][ T9912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.655598][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.666231][ T9912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.689872][ T9912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.692762][ T9912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.703562][ T9912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.713701][ T5614] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  291.721564][ T5614] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  291.730580][ T5614] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  291.734590][ T5614] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  291.738145][ T5614] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  291.766529][ T9912] hsr_slave_0: entered promiscuous mode
[  291.769975][ T9912] hsr_slave_1: entered promiscuous mode
[  291.773007][ T9912] debugfs: 'hsr0' already exists in 'hsr'
[  291.775306][ T9912] Cannot create hsr debugfs directory
[  291.997983][ T9948] lo speed is unknown, defaulting to 1000
[  292.359927][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.363178][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.366441][ T9948] bridge_slave_0: entered allmulticast mode
[  292.370397][ T9948] bridge_slave_0: entered promiscuous mode
[  292.374072][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.376535][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.379180][ T9948] bridge_slave_1: entered allmulticast mode
[  292.381917][ T9948] bridge_slave_1: entered promiscuous mode
[  292.398170][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.403226][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.421658][ T9948] team0: Port device team_slave_0 added
[  292.424968][ T9948] team0: Port device team_slave_1 added
[  292.439672][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.441958][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.450023][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.454882][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.457056][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.465272][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.489962][ T9948] hsr_slave_0: entered promiscuous mode
[  292.492383][ T9948] hsr_slave_1: entered promiscuous mode
[  292.494537][ T9948] debugfs: 'hsr0' already exists in 'hsr'
[  292.496329][ T9948] Cannot create hsr debugfs directory
[  292.801681][ T9946] Bluetooth: hci10: command tx timeout
[  292.809451][ T9946] Bluetooth: hci9: command tx timeout
[  293.601543][ T9946] Bluetooth: hci4: command 0x0406 tx timeout
[  293.601619][ T5614] Bluetooth: hci5: command 0x0406 tx timeout
[  293.604143][ T9946] Bluetooth: hci3: command 0x0406 tx timeout
[  293.839120][ T5712] Bluetooth: hci11: command tx timeout
[  294.889076][ T5712] Bluetooth: hci9: command tx timeout
[  294.891485][ T9805] Bluetooth: hci10: command tx timeout
[  295.919129][ T5712] Bluetooth: hci11: command tx timeout
[  296.959105][ T5712] Bluetooth: hci9: command tx timeout
[  296.959197][ T9805] Bluetooth: hci10: command tx timeout
[  297.999252][ T9805] Bluetooth: hci11: command tx timeout
[  299.039152][ T9805] Bluetooth: hci10: command tx timeout
[  299.039207][ T5712] Bluetooth: hci9: command tx timeout
[  300.079112][ T5712] Bluetooth: hci11: command tx timeout
[  301.759199][   T35] INFO: task syz.0.1069:9776 blocked for more than 143 seconds.
[  301.762508][   T35]       Not tainted syzkaller #0
[  301.766099][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  301.769732][   T35] task:syz.0.1069      state:D stack:22872 pid:9776  tgid:9775  ppid:5616   task_flags:0x400140 flags:0x00080002
[  301.774881][   T35] Call Trace:
[  301.776344][   T35]  <TASK>
[  301.777615][   T35]  __schedule+0x1821/0x5740
[  301.779816][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  301.782017][   T35]  ? __pfx___schedule+0x10/0x10
[  301.784105][   T35]  ? schedule+0x90/0x360
[  301.785884][   T35]  schedule+0x164/0x360
[  301.787576][   T35]  schedule_preempt_disabled+0x13/0x30
[  301.790812][   T35]  __mutex_lock+0x7f7/0x1550
[  301.793153][   T35]  ? __mutex_lock+0x608/0x1550
[  301.798317][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  301.803798][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  301.816887][   T35]  ? radix_tree_lookup+0x240/0x290
[  301.821648][   T35]  genl_rcv_msg+0x10b/0x7a0
[  301.827555][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.829908][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  301.832225][   T35]  netlink_rcv_skb+0x232/0x4b0
[  301.834234][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.837004][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  301.839895][   T35]  ? down_read+0x270/0x2e0
[  301.841890][   T35]  ? genl_rcv+0xd/0x40
[  301.843596][   T35]  genl_rcv+0x28/0x40
[  301.845051][   T35]  netlink_unicast+0x75c/0x8e0
[  301.846577][   T35]  netlink_sendmsg+0x813/0xb40
[  301.848049][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.849923][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  301.851778][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  301.853430][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.855361][   T35]  __sys_sendto+0x672/0x710
[  301.857262][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  301.859584][   T35]  ? exc_page_fault+0x6a/0xc0
[  301.861597][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  301.863718][   T35]  __x64_sys_sendto+0xde/0x100
[  301.865684][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.868171][   T35]  do_syscall_64+0x15f/0xf80
[  301.870172][   T35]  ? trace_irq_disable+0x3b/0x140
[  301.872265][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.874648][   T35] RIP: 0033:0x7facbf35d68e
[  301.876448][   T35] RSP: 002b:00007facc0283e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  301.880101][   T35] RAX: ffffffffffffffda RBX: 00007facc02856c0 RCX: 00007facbf35d68e
[  301.883345][   T35] RDX: 0000000000000020 RSI: 00007facc0284000 RDI: 0000000000000007
[  301.886577][   T35] RBP: 0000000000000000 R08: 00007facc0283f04 R09: 000000000000000c
[  301.890117][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  301.893425][   T35] R13: 00007facc0283f58 R14: 00007facc0284000 R15: 0000000000000000
[  301.896638][   T35]  </TASK>
[  301.898028][   T35] INFO: task syz.1.1070:9780 blocked for more than 143 seconds.
[  301.901406][   T35]       Not tainted syzkaller #0
[  301.903511][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  301.907004][   T35] task:syz.1.1070      state:D stack:26312 pid:9780  tgid:9779  ppid:5612   task_flags:0x480140 flags:0x00080002
[  301.911795][   T35] Call Trace:
[  301.913178][   T35]  <TASK>
[  301.914389][   T35]  __schedule+0x1821/0x5740
[  301.916251][   T35]  ? __pfx___schedule+0x10/0x10
[  301.918201][   T35]  ? schedule+0x90/0x360
[  301.920391][   T35]  schedule+0x164/0x360
[  301.922288][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  301.924537][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  301.926999][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  301.929685][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  301.932146][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  301.934515][   T35]  nbd_set_size+0x454/0x680
[  301.935941][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  301.937506][   T35]  ? nla_memcpy+0x5b/0xc0
[  301.939136][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  301.940913][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  301.942758][   T35]  ? rcu_is_watching+0x15/0xb0
[  301.944249][   T35]  ? trace_kmalloc+0x2a/0xf0
[  301.945695][   T35]  ? __nla_parse+0x40/0x60
[  301.947132][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  301.949610][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  301.951637][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  301.953239][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  301.955477][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  301.957416][   T35]  genl_rcv_msg+0x61c/0x7a0
[  301.959472][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.961514][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  301.963704][   T35]  netlink_rcv_skb+0x232/0x4b0
[  301.965588][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  301.967549][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  301.969409][   T35]  ? down_read+0x270/0x2e0
[  301.970795][   T35]  ? genl_rcv+0xd/0x40
[  301.972079][   T35]  genl_rcv+0x28/0x40
[  301.973316][   T35]  netlink_unicast+0x75c/0x8e0
[  301.974795][   T35]  netlink_sendmsg+0x813/0xb40
[  301.976655][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  301.978953][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  301.980999][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  301.983074][   T35]  ____sys_sendmsg+0x972/0x9f0
[  301.984944][   T35]  ? __might_fault+0xaf/0x130
[  301.986800][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  301.988992][   T35]  ? import_iovec+0x73/0xa0
[  301.990753][   T35]  ___sys_sendmsg+0x2a5/0x360
[  301.992585][   T35]  ? try_to_wake_up+0x828/0x1380
[  301.994520][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.996559][   T35]  ? futex_wake+0x4ac/0x580
[  301.998333][   T35]  ? call_rcu+0x644/0x890
[  302.002382][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  302.004318][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  302.006427][   T35]  ? rcu_is_watching+0x15/0xb0
[  302.008164][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.010679][   T35]  do_syscall_64+0x15f/0xf80
[  302.012546][   T35]  ? trace_irq_disable+0x3b/0x140
[  302.014477][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.016368][   T35] RIP: 0033:0x7f610a99ce59
[  302.017744][   T35] RSP: 002b:00007f610b793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.020552][   T35] RAX: ffffffffffffffda RBX: 00007f610ac15fa0 RCX: 00007f610a99ce59
[  302.023189][   T35] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 000000000000000d
[  302.025618][   T35] RBP: 00007f610aa32d6f R08: 0000000000000000 R09: 0000000000000000
[  302.028056][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.030833][   T35] R13: 00007f610ac16038 R14: 00007f610ac15fa0 R15: 00007ffc013d2b58
[  302.033454][   T35]  </TASK>
[  302.034463][   T35] INFO: task syz.2.1072:9793 blocked for more than 143 seconds.
[  302.036839][   T35]       Not tainted syzkaller #0
[  302.038444][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  302.042032][   T35] task:syz.2.1072      state:D stack:28672 pid:9793  tgid:9792  ppid:5621   task_flags:0x400040 flags:0x00080002
[  302.046441][   T35] Call Trace:
[  302.047479][   T35]  <TASK>
[  302.048407][   T35]  __schedule+0x1821/0x5740
[  302.050140][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  302.051847][   T35]  ? __pfx___schedule+0x10/0x10
[  302.053358][   T35]  ? schedule+0x90/0x360
[  302.054776][   T35]  schedule+0x164/0x360
[  302.056415][   T35]  schedule_preempt_disabled+0x13/0x30
[  302.058513][   T35]  __mutex_lock+0x7f7/0x1550
[  302.060761][   T35]  ? kernel_text_address+0xa5/0xe0
[  302.062543][   T35]  ? __mutex_lock+0x608/0x1550
[  302.064028][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  302.065473][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  302.067142][   T35]  ? stack_trace_save+0xa9/0x100
[  302.069355][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  302.071129][   T35]  ? radix_tree_lookup+0x240/0x290
[  302.072807][   T35]  genl_rcv_msg+0x10b/0x7a0
[  302.074556][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.076519][   T35]  netlink_rcv_skb+0x232/0x4b0
[  302.078371][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.080658][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.082597][   T35]  ? down_read+0x270/0x2e0
[  302.084014][   T35]  ? genl_rcv+0xd/0x40
[  302.085536][   T35]  genl_rcv+0x28/0x40
[  302.087097][   T35]  netlink_unicast+0x75c/0x8e0
[  302.089069][   T35]  netlink_sendmsg+0x813/0xb40
[  302.090660][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.092273][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  302.093728][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  302.095589][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.097608][   T35]  __sys_sendto+0x672/0x710
[  302.099555][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  302.101593][   T35]  ? exc_page_fault+0x6a/0xc0
[  302.103421][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  302.105452][   T35]  __x64_sys_sendto+0xde/0x100
[  302.107274][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.109813][   T35]  do_syscall_64+0x15f/0xf80
[  302.111653][   T35]  ? trace_irq_disable+0x3b/0x140
[  302.113645][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.115953][   T35] RIP: 0033:0x7f5b2e75d68e
[  302.117668][   T35] RSP: 002b:00007f5b2f5b2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  302.121201][   T35] RAX: ffffffffffffffda RBX: 00007f5b2f5b46c0 RCX: 00007f5b2e75d68e
[  302.124321][   T35] RDX: 0000000000000020 RSI: 00007f5b2f5b3000 RDI: 0000000000000004
[  302.127413][   T35] RBP: 0000000000000000 R08: 00007f5b2f5b2f04 R09: 000000000000000c
[  302.130566][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  302.133538][   T35] R13: 00007f5b2f5b2f58 R14: 00007f5b2f5b3000 R15: 0000000000000000
[  302.136188][   T35]  </TASK>
[  302.137268][   T35] INFO: task syz.2.1072:9795 blocked for more than 143 seconds.
[  302.140170][   T35]       Not tainted syzkaller #0
[  302.141857][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  302.144507][   T35] task:syz.2.1072      state:D stack:28760 pid:9795  tgid:9792  ppid:5621   task_flags:0x400040 flags:0x00080002
[  302.149000][   T35] Call Trace:
[  302.150182][   T35]  <TASK>
[  302.151153][   T35]  __schedule+0x1821/0x5740
[  302.152575][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  302.154223][   T35]  ? __pfx___schedule+0x10/0x10
[  302.155887][   T35]  ? schedule+0x90/0x360
[  302.157299][   T35]  schedule+0x164/0x360
[  302.158609][   T35]  schedule_preempt_disabled+0x13/0x30
[  302.160677][   T35]  __mutex_lock+0x7f7/0x1550
[  302.162374][   T35]  ? kernel_text_address+0xa5/0xe0
[  302.164046][   T35]  ? __mutex_lock+0x608/0x1550
[  302.165898][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  302.167745][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  302.170206][   T35]  ? stack_trace_save+0xa9/0x100
[  302.172486][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  302.174124][   T35]  ? radix_tree_lookup+0x240/0x290
[  302.175627][   T35]  genl_rcv_msg+0x10b/0x7a0
[  302.177052][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.178604][   T35]  netlink_rcv_skb+0x232/0x4b0
[  302.180444][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  302.182337][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.184053][   T35]  ? down_read+0x270/0x2e0
[  302.185431][   T35]  ? genl_rcv+0xd/0x40
[  302.186720][   T35]  genl_rcv+0x28/0x40
[  302.187940][   T35]  netlink_unicast+0x75c/0x8e0
[  302.189569][   T35]  netlink_sendmsg+0x813/0xb40
[  302.191209][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.192752][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  302.194246][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  302.195993][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.197774][   T35]  __sys_sendto+0x672/0x710
[  302.199585][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  302.201550][   T35]  ? fd_install+0x94/0x3d0
[  302.203114][   T35]  ? fd_install+0x306/0x3d0
[  302.204780][   T35]  __x64_sys_sendto+0xde/0x100
[  302.206273][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.208379][   T35]  do_syscall_64+0x15f/0xf80
[  302.210244][   T35]  ? trace_irq_disable+0x3b/0x140
[  302.212135][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.214327][   T35] RIP: 0033:0x7f5b2e75d68e
[  302.216033][   T35] RSP: 002b:00007f5b2f570e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  302.219242][   T35] RAX: ffffffffffffffda RBX: 00007f5b2f5726c0 RCX: 00007f5b2e75d68e
[  302.222304][   T35] RDX: 0000000000000020 RSI: 00007f5b2f571000 RDI: 0000000000000006
[  302.225193][   T35] RBP: 0000000000000000 R08: 00007f5b2f570f04 R09: 000000000000000c
[  302.228282][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  302.231493][   T35] R13: 00007f5b2f570f58 R14: 00007f5b2f571000 R15: 0000000000000000
[  302.234551][   T35]  </TASK>
[  302.235836][   T35] 
[  302.235836][   T35] Showing all locks held in the system:
[  302.238616][   T35] 1 lock held by khungtaskd/35:
[  302.241378][   T35]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  302.244502][   T35] 2 locks held by getty/5439:
[  302.245983][   T35]  #0: ffff88816e2e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  302.250271][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  302.253413][   T35] 1 lock held by udevd/5617:
[  302.254854][   T35]  #0: ffff888104735350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  302.257783][   T35] 2 locks held by syz.0.1069/9776:
[  302.260096][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.263380][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.266216][   T35] 6 locks held by syz.1.1070/9780:
[  302.267797][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.270885][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.274376][   T35]  #2: ffff8881043dea60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  302.278221][   T35]  #3: ffff8881047bc7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  302.281825][   T35]  #4: ffff8881047bc190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  302.285779][   T35]  #5: ffff8881047bc1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  302.289717][   T35] 2 locks held by syz.2.1072/9793:
[  302.291372][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.293868][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.296580][   T35] 2 locks held by syz.2.1072/9795:
[  302.298170][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.300880][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.303730][   T35] 2 locks held by syz-executor/9800:
[  302.305356][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.307834][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.310656][   T35] 2 locks held by syz-executor/9802:
[  302.312287][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.314801][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.317494][   T35] 2 locks held by syz-executor/9804:
[  302.319845][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.322423][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.325244][   T35] 2 locks held by syz-executor/9858:
[  302.326859][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.329915][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.332724][   T35] 2 locks held by syz-executor/9862:
[  302.334375][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.336848][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.339718][   T35] 2 locks held by syz-executor/9864:
[  302.341400][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.343912][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.346826][   T35] 2 locks held by syz-executor/9912:
[  302.348941][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.352103][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.355504][   T35] 2 locks held by syz-executor/9913:
[  302.357532][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.361153][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.364649][   T35] 2 locks held by syz-executor/9948:
[  302.366629][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  302.369823][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  302.373279][   T35] 
[  302.374207][   T35] =============================================
[  302.374207][   T35] 
[  302.376730][   T35] NMI backtrace for cpu 0
[  302.376740][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  302.376748][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.376753][   T35] Call Trace:
[  302.376758][   T35]  <TASK>
[  302.376762][   T35]  dump_stack_lvl+0xe8/0x150
[  302.376774][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  302.376784][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  302.376793][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  302.376801][   T35]  sys_info+0x135/0x170
[  302.376808][   T35]  watchdog+0xfd3/0x1030
[  302.376822][   T35]  ? watchdog+0x1c9/0x1030
[  302.376833][   T35]  kthread+0x389/0x470
[  302.376844][   T35]  ? __pfx_watchdog+0x10/0x10
[  302.376853][   T35]  ? __pfx_kthread+0x10/0x10
[  302.376862][   T35]  ret_from_fork+0x514/0xb70
[  302.376876][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  302.376883][   T35]  ? __switch_to+0xc79/0x1410
[  302.376894][   T35]  ? __pfx_kthread+0x10/0x10
[  302.376902][   T35]  ret_from_fork_asm+0x1a/0x30
[  302.376916][   T35]  </TASK>
[  302.376919][   T35] Sending NMI from CPU 0 to CPUs 1:
[  302.415662][    C1] NMI backtrace for cpu 1
[  302.415679][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  302.415687][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.415691][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  302.415709][    C1] Code: ab 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 a1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  302.415715][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[  302.415723][    C1] RAX: 000000000018c571 RBX: ffffffff819a958a RCX: 0000000080000001
[  302.415728][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6ba3 RDI: ffffffff8c28af60
[  302.415732][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  302.415737][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  302.415741][    C1] R13: 1ffff1102c09d000 R14: 0000000000000001 R15: 1ffff1102c09d000
[  302.415746][    C1] FS:  0000000000000000(0000) GS:ffff8882a928a000(0000) knlGS:0000000000000000
[  302.415751][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  302.415755][    C1] CR2: 00007fa8127f8580 CR3: 000000000e74a000 CR4: 00000000000006f0
[  302.415784][    C1] Call Trace:
[  302.415791][    C1]  <TASK>
[  302.415794][    C1]  default_idle+0x9/0x20
[  302.415801][    C1]  default_idle_call+0x72/0xb0
[  302.415809][    C1]  do_idle+0x36a/0x5f0
[  302.415819][    C1]  ? __pfx_do_idle+0x10/0x10
[  302.415827][    C1]  cpu_startup_entry+0x43/0x60
[  302.415834][    C1]  start_secondary+0x101/0x110
[  302.415841][    C1]  common_startup_64+0x13e/0x147
[  302.415852][    C1]  </TASK>
[  302.473350][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  302.475905][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  302.479388][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  302.482584][   T35] Call Trace:
[  302.483742][   T35]  <TASK>
[  302.484895][   T35]  vpanic+0x56c/0xa60
[  302.486432][   T35]  ? __pfx___schedule+0x10/0x10
[  302.488287][   T35]  ? __pfx_vpanic+0x10/0x10
[  302.490023][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  302.492427][   T35]  panic+0xc5/0xd0
[  302.493879][   T35]  ? __pfx_panic+0x10/0x10
[  302.495625][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  302.497692][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  302.500039][   T35]  watchdog+0x102c/0x1030
[  302.501704][   T35]  ? watchdog+0x1c9/0x1030
[  302.503461][   T35]  kthread+0x389/0x470
[  302.505059][   T35]  ? __pfx_watchdog+0x10/0x10
[  302.506863][   T35]  ? __pfx_kthread+0x10/0x10
[  302.508665][   T35]  ret_from_fork+0x514/0xb70
[  302.510446][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  302.512413][   T35]  ? __switch_to+0xc79/0x1410
[  302.514243][   T35]  ? __pfx_kthread+0x10/0x10
[  302.516040][   T35]  ret_from_fork_asm+0x1a/0x30
[  302.517903][   T35]  </TASK>
[  302.519939][   T35] Kernel Offset: disabled
[  302.521569][   T35] Rebooting in 86400 seconds..
