last executing test programs:

16.516876177s ago: executing program 1 (id=7886):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0xce22, @empty}, 0x10)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c)
listen(r2, 0x7c2)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="a10100001500add427323b470c45b4560a067fffffff8100ce22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000200)="d300ba9d8a5c6e46dad5a677aeb53919bfe50ef7aa1e70b90175666dcac8a67610676fe9834c80e65b10565e9cbcdecc6d59ab91bdd510ff5f24f907c594781e4a215be82cab37553e2e151ce691661e5dfa4824b2cdd5597e0d2825faa87b88241ae99edeef78ef306c51f23c68f169d70ad139fa746be9a903dbe4b9ed76e0", 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x31)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000030000000000", 0x39}], 0x1)

16.440883212s ago: executing program 1 (id=7888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r8, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa0002001})
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

16.242817329s ago: executing program 2 (id=7893):
r0 = socket(0x10, 0x3, 0x0)
r1 = accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000700)=0x1007, 0x4)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f00000000c0))
sendto$packet(r1, &(0x7f0000000240)="1bee17e67c0ad6b553e04115bf3ad06d8d4e00a484d64f14bd7166ee022941bbf962009ac9976caf75717e0da0330721d81135297a60318c44ef2ae00725bc4be130", 0x42, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000}, 0x4000000)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x84}}, 0x14}}, 0x0)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r8, &(0x7f0000000240)="94", 0x1)
tee(r7, r9, 0x8f5, 0x0)
vmsplice(r7, &(0x7f0000000700)=[{&(0x7f00000002c0)="53b6", 0x2}], 0x1, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@isdn={0x22, 0x1, 0x3, 0x9, 0x9}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="e94b1cd3f183a7bd34e902438b2ed1c442c56c76b9d233a928fb577ab248f000890d56d45c564bc7ab19f66e53f122727c8a60fc1d739a7286a8d8095d3f300a28745470cb0fc44d1684610eecd81bad344ceb330e0b", 0x56}], 0x1, &(0x7f0000000680)=[{0x78, 0x10a, 0x3, "86b944a81c0483b02d575200c60e3729cfd827836a3a75f7e24f101627de8a00c825a4f98cae1e99a4b94f8511b0eb050e2015a21869ad6baccd495c9456bda0b9d1de8a30d8bfa079b8cdf863ba3b9ab1d4eaeaf836e448287deb668d9f64b9a98d58f88261a4"}, {0xf0, 0x119, 0x800, "f6142aeecdfa73d0b14c535af1e709460fb00210385b94b016e4a912f5a8c8aca8adc8044274350c886b5d249268497ae6e5954775dbf8ac11457b85b33531165b6306a8169e5907c7f74dca178ced5eedea269ec0833a7cf79ef740a05cc030a005d1df21d83435ba8e9a53d2584d60047bf72fc2f785b4648c79ea0e057188034749c84947dec407c5dc3d1fd9cfb4a7ed1e76645ea190414b087df661d0854c77a244411b0bf9522643c69acaaf2e57ed3616ce3ee25f2642ef80d0115c073f4f85d76478cfb5a817b0cba089a591cefb575e7bbf9c5bb053cdd09c008a22"}, {0xe8, 0x104, 0x8, "05600ae785b3f77b25080ba33d8ec04ae8a994ab5f116ae0ef817040bedb54326909b2f9b0aa6a96380fbb1e0e93c40c13eccdc7bb21cc9b26510923c59bbcf848cf8e1425250741a53566967fc601972bceaf792e37fe2444d2dedc7d4647f08aecd5cc84bbf61da4114664d586c462098842b9e9bd918049d6b4a882a95c93a526b44e27f6e6fe0c0dc95dac4726ead99ddb04a28e76b39e2207eed7f90b4dd795bdff89194637304b0bd575b0884a8b48b3d9ac025dd0e976f017a79290ca585f5152b81c4cf79098b2950d2e6ccfb1a3c3b73d"}, {0x80, 0x10d, 0x0, "4fb744f19c20205556d3e6e65151ea62dd639cffae94919cc636bc1e56591881d64435565545323ffc037bfa5500d341950c2f30e20f091e32f01deb5ab354b69ed5e971ba50599d18ff8826298f44ed051e6f17d20f53c2d343a4bc89676a271ac9b3a59fa64551a55b"}], 0x2d0}}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x0, 0x4, {0xa, 0x4e23, 0x3, @empty, 0x3}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a00)="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", 0xff}, {&(0x7f0000000b00)="0830c8901a4df993e6038ac22a6dcb9494", 0x11}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x88}}], 0x2, 0x8000)

16.183989753s ago: executing program 2 (id=7895):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

16.182045644s ago: executing program 2 (id=7897):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x28)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r1)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

16.093383088s ago: executing program 2 (id=7898):
setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x80000001, 0x80}, 0x24}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2181}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1fa, 0x6, 0x9}}]}]}]}, 0x4c}}, 0x4000844)

16.091849787s ago: executing program 2 (id=7899):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000080)={'b', ' *:* ', 'm\x00'}, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'syzkaller0\x00', 0x2}, 0x18)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4004, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xfffffffa}, 0x1c)
ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000014c0)={0x1, 0x2, 0x1000, 0xe4, &(0x7f0000000180)="6180191623754b6116e6678b8a3f3f786b2aec232392d5bd5a9e59e9e61676d0098841c2197c2ad0531583d77efe92adbfbfe2140c423e251a484f4c195e15ea3e329627b2a6dbfcc808360291b6c9a133c01395be0c40fac7de6d7172553c9da857e128c010e92be582b4c63662e7587c351581117cea7dfec16acac0e8b18c1117f13de1e8a88accadec77f9e28688683cda13ae8fabbd3592dffe86d6c4421713349390b84e3a6e1220d85b2230c410b600e5dfb294efc35b6cbd55eec29bad8db35113983506001f80d0f4476a8bcc6a48d89fa7bbe8ca7825b2a8a9ebaef0880b81", 0x1000, 0x0, &(0x7f00000004c0)="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"})
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000340)=0x9)
close(0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={<r10=>0x0, 0x1}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f00000002c0)=r10, 0x4)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@nested={0x4, 0xcb}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x146}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

16.091330255s ago: executing program 1 (id=7900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x2000c044, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100d6530000040042800c00018006000600800a0000100002800c30fb001780040014800400"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

16.003423802s ago: executing program 1 (id=7902):
r0 = socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r6 = socket$inet(0x2, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40002}, 0x0) (async)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) (async)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x1d, 0x5, "4b15"}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="83295574987e50171a05128008000100736961001400028006000d000900000008000300e0000001"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

16.00287883s ago: executing program 1 (id=7903):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff9, 0x0, 0x3, 0x4, 0x4, 0x6}, &(0x7f0000000140)=0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xfffffffc}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1)
sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

15.92385136s ago: executing program 1 (id=7904):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x1, 0x140, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', <r6=>0x0, 0x4, 0x0, 0x4, 0x8, 0x40, @private2, @remote, 0x10, 0x1, 0x7, 0xfffffff9}})
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001940)={0x63c, 0x13, 0x100, 0x70bd2a, 0x25dfdbff, {0x3, 0x3, 0x5, 0x1, {0x4e20, 0x4e23, [0x6, 0x8, 0x7, 0x8], [0x8000, 0x7, 0x6, 0x3], r6, [0x7, 0x5bd]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "37b6c5fb37b3f89636feda754573483b0b2539fe719d9f05ed7917f4c05ecdeaf77153e868ef7380f9ae157898e5a6da7aad13b93c835dc9e1adf1aaf3ae80061664726f7588bde0b2d2b37445a8f1da4881d30489a802476f145cde79d92beed48ff42d49b6dcab47f4a3c861449b0c81f1b68784ca9b502113defee1c0cd4872faa775f97896f9f74e525bb478a91928bb2ea177aad9e504cdb34e4258ef576efbac54407c8ad147aa004a2c09befa54bc3db051a991ed2abdc8136dac2acfaf35b7425347996111ae39ffdf8622c5a0c0599fd60802984dcc04d979c99d88c44f1ea72f21811011d094e7"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "9bd9be0e4eaf59c6ea9799f473e3cddbba36db8f47e47946084f2407072280acc30ed97daa92824db9024929bc8c446f3d99a28adfd3fd12b0c65f5c132f00bdbd5626de0aeb4d8f6155e32db1ab65c82a55ea1885919591998225094bb21d9d2962433e277b8e9d0a5f7d58ce27182849a10540e48c987e1ae7457d03511eb77e74b925f006c6db4f5d83442b"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "7996e577b81fb9da8d5d16d0676cbb0678fa67b074663707e6d8cfc95977543bb2f6b904dcdaafbd32e0d70b761ee5f0c1d39681d11fd49f922bd89fcc485d5730c41b0a1bba9fc261ec36eb9d9ef8b4b51a25a158ab4df695b7bfe77d1b5e8dea75987ca4b213b6a7df560c9c242e495ea180353a601d5084299a980baec4360b8d91a8ed4aa1cc35e4509d77a0b4e794d66e5440ca1e2c5d7d4736ee60641fbde14b36f9a42a2551110c0d8fe50052"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "de7095b8bcfa5f0a16bccf3dc616b9f54b84b6b8f269477bd60c51942bdd5004ae4642f58269e39960163bd55d79691350d3c694d94c5226ba3ea445d106b073db451368fbc3719fe6632ca5e9b5db53e8432a1fa5088e01259b0d437792686212675a93737b43d7e143c459ac"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "c121509c5e00fd3df965cd61ba5489e921b56700a4679bcc6d1a8b249980193b9eadc95553cd27f281e52ee91a9c5f8fa95e30921397714aae1274f3b45fc5a0aedf7b151e920867cf796630f2f46ba6ff4e51b9f164aad32fe92a36848d270e7f7e57d6bb006dc8f9b74f7001b74df605938654b9f3fb81f6e81d8e3fa9a44f231d07908e366c22552e183ad21df4c2d9d55b2b371522d420f5e5ce286fb239be984a9638c8250a7e978d01508e40f79986cd247d566554360e71e5a029b54d65762f2cf272ddc1ce57aa336b5c7a8f53d9488aebc8441d7742e4b676d338594368b980c7c6c46e17f37917313715f5d6846e32e4eb3d21"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "1cb30db111a4a51a206a3fe84a44c46604ae20d9499a3e6341e1ca92e4e84800d18d3b3f6ce5745d8c8cd333f5da821dc5449619f6b26d0447bdd7f99e4da2f529bda67ac69c4e19106bb25f86da2abb469e6f7739f36a5945fe20d45540e0b0274b7d0ac5709ee1267d6ab1bb490b231f53e71e4aa033123132e304d30a10c4193a2df030244c6e"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "db353f5c0e0a9b23ee1c21e1bad2d2ca4d88c5d318e6727f598174c454553046eb78f3dbd357a4f85a6fd4b29c2784d7a21dc4244836fd6dd965eb3cc28b4e3c04cd8633949b6590901130bf0d04514e5d90ae8b9c60692e8b3dd82832b1835195e768f0163ec7c397849502352ead6e62b5edcee73fcbea08f03dd24c7c2a0dda31ca11367695aa04bc56f6c8b9515e95972c99876d2c70557c0786b3d04257c48e133988feb00cccd88a3276890f49c2c648e4ea9ea8f7d709118a356a6200600a50bc3021bd9d"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "c46f850ab407c0c01497f467973f64ee35109469994800e50b69d73aae9498f5d655ca245fbd00b1739e6d5a05b31812eeeea77054c2985d8343bcbeb857291a8af528a1d5ee3c8a1fb9b5f783f15b2103c4bfb92ec5226a9f63e40355a4ad7f8bb4d31387725a2b2d60f9c738ce6aec98868ff013cab7ce8ab661d5e6e124df198ee5a81ca9519c2cf3c7fd3386ed253f236c51538861f88ba143ae12f81e187facc04720278960d4008bbc8e1499c22ffefca2ad8654b56448406e4474e0be62ca37907e2f8865a2871de27d254e73ecbdbb0f278072d0f81839999a7fc99787b82afce757a2417f78d290"}]}, 0x63c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c001)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x15) (async)
r7 = socket$inet(0x2, 0x3, 0x2) (async)
r8 = epoll_create1(0x80000)
epoll_wait(r8, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x2000001c})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, 0x0, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)

15.661960259s ago: executing program 0 (id=7908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x10)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0)
close(r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000200)=0x10) (async)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0) (async)
close(r0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r3) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async)

15.571976705s ago: executing program 0 (id=7909):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000180), 0x2ae, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0x8}, {0xd5dfe8a8053da4f1}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x0, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8800, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0)

15.57124283s ago: executing program 0 (id=7910):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@ipv4_delrule={0x40, 0x21, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10014}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x40}}, 0x0)
r1 = socket(0x4eaa711fc7d23ca4, 0x6, 0xfffffffc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000140)=0x1, 0x4)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendto$inet(r1, &(0x7f0000000440)="27e33e84f9bff2fa74fba01607d8a043e80f8b1c26aa01bed012cf4fa695bd90be57552672c0ba8a10789da20ba7aab81dbc5fbb1d3e1717bd5067e1d365c80f03278ca67d605c", 0x47, 0x800, &(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10)
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r4, @ANYBLOB="200928bd7000fddbdf252000000008000300", @ANYRES32=r5, @ANYBLOB="0c0099004a41ffff43000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)=ANY=[@ANYBLOB="2800007000ffdbdf250100000000009ad33c8de0ef1c1a3c26a99a2d0e6693e86685a6af00cce5cb22b459083e747c8a719b9a6b8598fd5b9767f0fbe745e94f1624aa33cb43f68c48cfe6cf0aeb42841c0a617613cd563d54f78564ec2b1ba091c81614eb290e85e748a33f", @ANYRES32=r4, @ANYBLOB="a0007f0a0ae601bd770138175eccfe2b1d154b7588c5c3a5130000004b4574c43d6dc221af26676cbb4818f83b0e74baa512b0078e3f86625afa9b801f31244b8c0000fb11c2b5ba2dc894196a0eaf6468c38b", @ANYBLOB="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"/4096], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x24040814)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000008cc06040e55967af00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20)
sendmmsg(r1, &(0x7f0000000000), 0x0, 0x20048094)

15.568660463s ago: executing program 0 (id=7911):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000871122b182d563dad3acc18a204d40226d261da5ba69d0c43413e99f90f83ee0853d9ebf22a9e70216da221bb726c8efa5", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251000000008000b00010000000800320004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1f, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x49f4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x646}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @ldst={0x574d5ab5b68a3e12, 0x3, 0x4, 0xb, 0xa, 0xffffffffffffffff, 0x1}, @call, @alu={0x7, 0x0, 0x4, 0x8, 0x8, 0x10, 0xfffffffffffffffc}, @ldst={0x3, 0x2, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180))
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15.193668596s ago: executing program 2 (id=7912):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0xec, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcf4, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fc440c50627bd2bce632422804e071a589ed33df4d9400d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11169abb2aa3a8252a2f9fff5c28c3347acc865a1d1819cd"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0xc008080}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd859, 0x0, 0x3df], [0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc9}]}, 0x1c}}, 0x4008924)
r6 = socket(0x15, 0x3, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x301, 0x6000000, 0x0, {0x0, 0x0, 0x12}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x24}}, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000380)={r7, 0x0, 0x3, 0x9, 0x5, 0x2})
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000d0)

15.073971788s ago: executing program 0 (id=7913):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028001}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) (async)
openat$cgroup_devices(r5, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) (async)
openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0)

15.014087442s ago: executing program 0 (id=7914):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf8, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x7, 0x0, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7, 0x0, 0x0, 0x4], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

43.488851ms ago: executing program 32 (id=7914):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xf8, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x7, 0x0, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7, 0x0, 0x0, 0x4], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

232.626µs ago: executing program 33 (id=7904):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x1, 0x140, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', <r6=>0x0, 0x4, 0x0, 0x4, 0x8, 0x40, @private2, @remote, 0x10, 0x1, 0x7, 0xfffffff9}})
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001940)={0x63c, 0x13, 0x100, 0x70bd2a, 0x25dfdbff, {0x3, 0x3, 0x5, 0x1, {0x4e20, 0x4e23, [0x6, 0x8, 0x7, 0x8], [0x8000, 0x7, 0x6, 0x3], r6, [0x7, 0x5bd]}, 0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "37b6c5fb37b3f89636feda754573483b0b2539fe719d9f05ed7917f4c05ecdeaf77153e868ef7380f9ae157898e5a6da7aad13b93c835dc9e1adf1aaf3ae80061664726f7588bde0b2d2b37445a8f1da4881d30489a802476f145cde79d92beed48ff42d49b6dcab47f4a3c861449b0c81f1b68784ca9b502113defee1c0cd4872faa775f97896f9f74e525bb478a91928bb2ea177aad9e504cdb34e4258ef576efbac54407c8ad147aa004a2c09befa54bc3db051a991ed2abdc8136dac2acfaf35b7425347996111ae39ffdf8622c5a0c0599fd60802984dcc04d979c99d88c44f1ea72f21811011d094e7"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "9bd9be0e4eaf59c6ea9799f473e3cddbba36db8f47e47946084f2407072280acc30ed97daa92824db9024929bc8c446f3d99a28adfd3fd12b0c65f5c132f00bdbd5626de0aeb4d8f6155e32db1ab65c82a55ea1885919591998225094bb21d9d2962433e277b8e9d0a5f7d58ce27182849a10540e48c987e1ae7457d03511eb77e74b925f006c6db4f5d83442b"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "7996e577b81fb9da8d5d16d0676cbb0678fa67b074663707e6d8cfc95977543bb2f6b904dcdaafbd32e0d70b761ee5f0c1d39681d11fd49f922bd89fcc485d5730c41b0a1bba9fc261ec36eb9d9ef8b4b51a25a158ab4df695b7bfe77d1b5e8dea75987ca4b213b6a7df560c9c242e495ea180353a601d5084299a980baec4360b8d91a8ed4aa1cc35e4509d77a0b4e794d66e5440ca1e2c5d7d4736ee60641fbde14b36f9a42a2551110c0d8fe50052"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "de7095b8bcfa5f0a16bccf3dc616b9f54b84b6b8f269477bd60c51942bdd5004ae4642f58269e39960163bd55d79691350d3c694d94c5226ba3ea445d106b073db451368fbc3719fe6632ca5e9b5db53e8432a1fa5088e01259b0d437792686212675a93737b43d7e143c459ac"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "c121509c5e00fd3df965cd61ba5489e921b56700a4679bcc6d1a8b249980193b9eadc95553cd27f281e52ee91a9c5f8fa95e30921397714aae1274f3b45fc5a0aedf7b151e920867cf796630f2f46ba6ff4e51b9f164aad32fe92a36848d270e7f7e57d6bb006dc8f9b74f7001b74df605938654b9f3fb81f6e81d8e3fa9a44f231d07908e366c22552e183ad21df4c2d9d55b2b371522d420f5e5ce286fb239be984a9638c8250a7e978d01508e40f79986cd247d566554360e71e5a029b54d65762f2cf272ddc1ce57aa336b5c7a8f53d9488aebc8441d7742e4b676d338594368b980c7c6c46e17f37917313715f5d6846e32e4eb3d21"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "1cb30db111a4a51a206a3fe84a44c46604ae20d9499a3e6341e1ca92e4e84800d18d3b3f6ce5745d8c8cd333f5da821dc5449619f6b26d0447bdd7f99e4da2f529bda67ac69c4e19106bb25f86da2abb469e6f7739f36a5945fe20d45540e0b0274b7d0ac5709ee1267d6ab1bb490b231f53e71e4aa033123132e304d30a10c4193a2df030244c6e"}, @INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "db353f5c0e0a9b23ee1c21e1bad2d2ca4d88c5d318e6727f598174c454553046eb78f3dbd357a4f85a6fd4b29c2784d7a21dc4244836fd6dd965eb3cc28b4e3c04cd8633949b6590901130bf0d04514e5d90ae8b9c60692e8b3dd82832b1835195e768f0163ec7c397849502352ead6e62b5edcee73fcbea08f03dd24c7c2a0dda31ca11367695aa04bc56f6c8b9515e95972c99876d2c70557c0786b3d04257c48e133988feb00cccd88a3276890f49c2c648e4ea9ea8f7d709118a356a6200600a50bc3021bd9d"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "c46f850ab407c0c01497f467973f64ee35109469994800e50b69d73aae9498f5d655ca245fbd00b1739e6d5a05b31812eeeea77054c2985d8343bcbeb857291a8af528a1d5ee3c8a1fb9b5f783f15b2103c4bfb92ec5226a9f63e40355a4ad7f8bb4d31387725a2b2d60f9c738ce6aec98868ff013cab7ce8ab661d5e6e124df198ee5a81ca9519c2cf3c7fd3386ed253f236c51538861f88ba143ae12f81e187facc04720278960d4008bbc8e1499c22ffefca2ad8654b56448406e4474e0be62ca37907e2f8865a2871de27d254e73ecbdbb0f278072d0f81839999a7fc99787b82afce757a2417f78d290"}]}, 0x63c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c001)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x15) (async)
r7 = socket$inet(0x2, 0x3, 0x2) (async)
r8 = epoll_create1(0x80000)
epoll_wait(r8, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x2000001c})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r9, 0x0, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)

0s ago: executing program 34 (id=7912):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0xec, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcf4, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fc440c50627bd2bce632422804e071a589ed33df4d9400d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "11169abb2aa3a8252a2f9fff5c28c3347acc865a1d1819cd"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0xc008080}, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd859, 0x0, 0x3df], [0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc9}]}, 0x1c}}, 0x4008924)
r6 = socket(0x15, 0x3, 0x3)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x301, 0x6000000, 0x0, {0x0, 0x0, 0x12}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x24}}, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000380)={r7, 0x0, 0x3, 0x9, 0x5, 0x2})
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000d0)

kernel console output (not intermixed with test programs):

 promiscuous mode
[  636.160110][  T571] ip6gre4: entered promiscuous mode
[  636.162235][  T571] bond28: entered promiscuous mode
[  636.165098][  T571] bond29: entered promiscuous mode
[  636.167340][  T571] bond30: entered promiscuous mode
[  636.169399][  T571] mac80211_hwsim hwsim36 wlan12: entered promiscuous mode
[  636.172306][  T571] bond31: entered promiscuous mode
[  636.174997][  T571] mac80211_hwsim hwsim37 wlan13: entered promiscuous mode
[  636.178478][  T571] pim6reg99999991: entered promiscuous mode
[  636.181166][  T571] vlan4: entered promiscuous mode
[  636.183933][  T571] bond32: entered promiscuous mode
[  636.186294][  T571] bridge15: entered promiscuous mode
[  636.188390][  T571] mac80211_hwsim hwsim39 wlan14: entered promiscuous mode
[  636.190840][  T571] sit1: entered promiscuous mode
[  636.192731][  T571] mac80211_hwsim hwsim40 wlan15: entered promiscuous mode
[  636.195833][  T571] bond33: entered promiscuous mode
[  636.197740][  T571] gretap5: entered promiscuous mode
[  636.199846][  T571] bond34: entered promiscuous mode
[  636.202114][  T571] : entered promiscuous mode
[  636.204646][  T571] mac80211_hwsim hwsim44 wlan16: entered promiscuous mode
[  636.210236][  T571] gre4: entered promiscuous mode
[  636.212543][  T571] ip6tnl8: entered promiscuous mode
[  636.216097][  T571] erspan1: entered promiscuous mode
[  636.218272][  T571] syztnl0: entered promiscuous mode
[  636.220122][  T571] sit2: entered promiscuous mode
[  636.221936][  T571] sit3: entered promiscuous mode
[  636.224124][  T571] bond35: entered promiscuous mode
[  636.225981][  T571] vlan5: entered promiscuous mode
[  636.227860][  T571] geneve3: entered promiscuous mode
[  636.229714][  T571] veth26: entered promiscuous mode
[  636.231532][  T571] veth27: entered promiscuous mode
[  636.234034][  T571] ip6gre5: entered promiscuous mode
[  636.235893][  T571] vlan6: entered promiscuous mode
[  636.237685][  T571] ip6erspan1: entered promiscuous mode
[  636.239580][  T571] bond36: entered promiscuous mode
[  636.241611][  T571] bridge16: entered promiscuous mode
[  636.244624][  T571] bond37: entered promiscuous mode
[  636.246408][  T571] bond38: entered promiscuous mode
[  636.248245][  T571] vcan0: entered promiscuous mode
[  636.250020][  T571] bridge17: entered promiscuous mode
[  636.251866][  T571] veth28: entered promiscuous mode
[  636.254717][  T571] veth29: entered promiscuous mode
[  636.256516][  T571] veth30: entered promiscuous mode
[  636.258342][  T571] veth31: entered promiscuous mode
[  636.260098][  T571] ip6tnl9: entered promiscuous mode
[  636.261817][  T571] ip6tnl10: entered promiscuous mode
[  636.263940][  T571] ip6gretap0.2: entered promiscuous mode
[  636.266168][  T571] bridge18: entered promiscuous mode
[  636.267958][  T571] mac80211_hwsim hwsim51 wlan17: entered promiscuous mode
[  636.270911][  T571] mac80211_hwsim hwsim52 wlan18: entered promiscuous mode
[  636.274236][  T571] bond39: entered promiscuous mode
[  636.276033][  T571] ipvlan3: entered promiscuous mode
[  636.277839][  T571] ipvlan4: entered promiscuous mode
[  636.279578][  T571] bond40: entered promiscuous mode
[  636.281546][  T571] veth32: entered promiscuous mode
[  636.284187][  T571] veth33: entered promiscuous mode
[  636.286015][  T571] ip6gre6: entered promiscuous mode
[  636.287944][  T571] bridge19: entered promiscuous mode
[  636.289829][  T571] mac80211_hwsim hwsim53 wlan19: entered promiscuous mode
[  636.292438][  T571] ipip2: entered promiscuous mode
[  636.294615][ T6627] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.297763][  T571] vxcan2: entered promiscuous mode
[  636.302332][  T571] vxcan3: entered promiscuous mode
[  636.305949][  T571] bond41: entered promiscuous mode
[  636.310273][  T571] vcan1: entered promiscuous mode
[  636.315129][  T571] vxlan1: entered promiscuous mode
[  636.318457][  T571] vxlan2: entered promiscuous mode
[  636.322719][  T571] mac80211_hwsim hwsim55 wlan20: entered promiscuous mode
[  636.326001][  T571] bond42: entered promiscuous mode
[  636.328181][  T571] bridge20: entered promiscuous mode
[  636.330288][  T571] veth34: entered promiscuous mode
[  636.332326][  T571] veth35: entered promiscuous mode
[  636.334468][  T571] veth36: entered promiscuous mode
[  636.336326][  T571] veth37: entered promiscuous mode
[  636.338096][  T571] bond43: entered promiscuous mode
[  636.339947][  T571] veth38: entered promiscuous mode
[  636.341834][  T571] veth39: entered promiscuous mode
[  636.346732][  T571] bridge21: entered promiscuous mode
[  636.348595][  T571] bond44: entered promiscuous mode
[  636.350471][  T571] geneve4: entered promiscuous mode
[  636.352438][  T571] ip6tnl11: entered promiscuous mode
[  636.354610][  T571] bond45: entered promiscuous mode
[  636.356343][  T571] geneve5: entered promiscuous mode
[  636.358183][  T571] bond46: entered promiscuous mode
[  636.359986][  T571] bond47: entered promiscuous mode
[  636.361817][  T571] bond48: entered promiscuous mode
[  636.364603][  T571] bridge22: entered promiscuous mode
[  636.366508][  T571] vlan7: entered promiscuous mode
[  636.368598][  T571] veth40: entered promiscuous mode
[  636.370507][  T571] veth41: entered promiscuous mode
[  636.372556][  T571] veth42: entered promiscuous mode
[  636.375082][  T571] veth43: entered promiscuous mode
[  636.376995][  T571] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode
[  636.381076][  T571] bridge23: entered promiscuous mode
[  636.384986][  T571] bond49: entered promiscuous mode
[  636.387301][  T571] bridge24: entered promiscuous mode
[  636.389602][  T571] bond50: entered promiscuous mode
[  636.391650][  T571] ip6gre7: entered promiscuous mode
[  636.393808][  T571] bond51: entered promiscuous mode
[  636.395683][  T571] bond52: entered promiscuous mode
[  636.397767][  T571] vlan0: entered promiscuous mode
[  636.399973][  T571] bridge25: entered promiscuous mode
[  636.402093][  T571] vti0: entered promiscuous mode
[  636.404273][  T571] bond53: entered promiscuous mode
[  636.406123][  T571] vlan1: entered promiscuous mode
[  636.408095][  T571] bond54: entered promiscuous mode
[  636.410163][  T571] vti60: entered promiscuous mode
[  636.411917][  T571] bond55: entered promiscuous mode
[  636.414111][  T571] bond56: entered promiscuous mode
[  636.415836][  T571] bond57: entered promiscuous mode
[  636.417767][  T571] ipip3: entered promiscuous mode
[  636.419643][  T571] bond58: entered promiscuous mode
[  636.421373][  T571] vlan8: entered promiscuous mode
[  636.423753][  T571] bond59: entered promiscuous mode
[  636.425562][  T571] bridge26: entered promiscuous mode
[  636.427422][  T571] syztnl1: entered promiscuous mode
[  636.429170][  T571] bond60: entered promiscuous mode
[  636.431018][  T571] mac80211_hwsim hwsim75 wlan21: entered promiscuous mode
[  636.434500][  T571] @: entered promiscuous mode
[  636.436922][  T571] xfrm2: entered promiscuous mode
[  636.439782][  T571] bond61: entered promiscuous mode
[  636.444643][  T571] macvlan0: entered promiscuous mode
[  636.449454][  T571] bond62: entered promiscuous mode
[  636.454955][  T571] mac80211_hwsim hwsim79 wlan22: entered promiscuous mode
[  636.461581][  T571] mac80211_hwsim hwsim80 wlan23: entered promiscuous mode
[  636.464655][  T571] bond63: entered promiscuous mode
[  636.467118][  T571] bond64: entered promiscuous mode
[  636.469154][  T571] vxlan3: entered promiscuous mode
[  636.471271][  T571] bridge27: entered promiscuous mode
[  636.474453][  T571] bridge28: entered promiscuous mode
[  636.476638][  T571] macvlan1: entered promiscuous mode
[  636.478509][  T571] ip6gretap3: entered promiscuous mode
[  636.480496][  T571] bond65: entered promiscuous mode
[  636.482604][  T571] gtp2: entered promiscuous mode
[  636.485369][  T571] gre5: entered promiscuous mode
[  636.487419][  T571] bridge29: entered promiscuous mode
[  636.489316][  T571] bond66: entered promiscuous mode
[  636.491368][  T571] bridge30: entered promiscuous mode
[  636.498364][  T571] bond67: entered promiscuous mode
[  636.500462][  T571] mac80211_hwsim hwsim85 wlan24: entered promiscuous mode
[  636.506262][  T571] veth44: entered promiscuous mode
[  636.509987][  T571] veth45: entered promiscuous mode
[  636.512263][  T571] mac80211_hwsim hwsim86 wlan25: entered promiscuous mode
[  636.515372][  T571] mac80211_hwsim hwsim87 wlan26: entered promiscuous mode
[  636.518546][  T571] mac80211_hwsim hwsim88 wlan27: entered promiscuous mode
[  636.525839][  T571] mac80211_hwsim hwsim89 wlan28: entered promiscuous mode
[  636.530036][  T571] mac80211_hwsim hwsim90 wlan29: entered promiscuous mode
[  636.533829][  T571] mac80211_hwsim hwsim91 wlan30: entered promiscuous mode
[  636.536929][  T571] mac80211_hwsim hwsim92 wlan31: entered promiscuous mode
[  636.539974][  T571] mac80211_hwsim hwsim93 wlan32: entered promiscuous mode
[  636.542931][  T571] mac80211_hwsim hwsim94 wlan33: entered promiscuous mode
[  636.547270][  T571] mac80211_hwsim hwsim95 wlan34: entered promiscuous mode
[  636.550332][  T571] mac80211_hwsim hwsim96 wlan35: entered promiscuous mode
[  636.553456][  T571] mac80211_hwsim hwsim97 wlan36: entered promiscuous mode
[  636.556609][  T571] mac80211_hwsim hwsim98 wlan37: entered promiscuous mode
[  636.559744][  T571] bridge31: entered promiscuous mode
[  636.562133][  T571] veth46: entered promiscuous mode
[  636.565301][  T571] veth47: entered promiscuous mode
[  636.567935][  T571] vti61: entered promiscuous mode
[  636.570254][  T571] veth48: entered promiscuous mode
[  636.572547][  T571] veth49: entered promiscuous mode
[  636.574885][  T571] bond68: entered promiscuous mode
[  636.577401][  T571] bond69: entered promiscuous mode
[  636.579540][  T571] bond70: entered promiscuous mode
[  636.581691][  T571] ip6tnl12: entered promiscuous mode
[  636.584063][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  636.588238][  T571] bond71: entered promiscuous mode
[  636.590053][  T571] #: entered promiscuous mode
[  636.591767][  T571] mac80211_hwsim hwsim103 wlan38: entered promiscuous mode
[  636.594374][  T571] macsec2: entered promiscuous mode
[  636.596403][  T571] gre6: entered promiscuous mode
[  636.598133][  T571] mac80211_hwsim hwsim104 wlan39: entered promiscuous mode
[  636.600518][  T571] mac80211_hwsim hwsim105 wlan40: entered promiscuous mode
[  636.603140][  T571] netdevsim netdevsim1 eth0: entered promiscuous mode
[  636.605992][  T571] netdevsim netdevsim1 eth1: entered promiscuous mode
[  636.608855][  T571] netdevsim netdevsim1 eth2: entered promiscuous mode
[  636.611656][  T571] netdevsim netdevsim1 eth3: entered promiscuous mode
[  636.614865][  T571] bond72: entered promiscuous mode
[  636.617099][  T571] bridge32: entered promiscuous mode
[  636.619501][  T571] bridge33: entered promiscuous mode
[  636.621834][  T571] bridge34: entered promiscuous mode
[  636.624465][  T571] bridge35: entered promiscuous mode
[  636.626776][  T571] bond73: entered promiscuous mode
[  636.629045][  T571] bridge36: entered promiscuous mode
[  636.631445][  T571] bridge37: entered promiscuous mode
[  636.634186][  T571] mac80211_hwsim hwsim107 wlan41: entered promiscuous mode
[  636.637313][  T571] mac80211_hwsim hwsim108 wlan42: entered promiscuous mode
[  636.640259][  T571] mac80211_hwsim hwsim109 wlan43: entered promiscuous mode
[  636.643329][  T571] mac80211_hwsim hwsim110 wlan44: entered promiscuous mode
[  636.646662][  T571] pimreg9: entered promiscuous mode
[  636.648999][  T571] bond74: entered promiscuous mode
[  636.651229][  T571] veth50: entered promiscuous mode
[  636.653860][  T571] veth51: entered promiscuous mode
[  636.656249][  T571] bridge38: entered promiscuous mode
[  636.658516][  T571] bond75: entered promiscuous mode
[  636.660769][  T571] vlan3: entered promiscuous mode
[  636.663218][  T571] batadv0: entered promiscuous mode
[  636.665682][  T571] bridge39: entered promiscuous mode
[  636.667932][  T571] bridge40: entered promiscuous mode
[  636.670153][  T571] bridge41: entered promiscuous mode
[  636.672525][  T571] bond76: entered promiscuous mode
[  636.675333][  T571] >: entered promiscuous mode
[  636.677421][  T571] gtp3: entered promiscuous mode
[  636.679614][  T571] bond77: entered promiscuous mode
[  636.681779][  T571] batadv1: entered promiscuous mode
[  636.684449][  T571] bond78: entered promiscuous mode
[  636.686676][  T571] bond79: entered promiscuous mode
[  636.688776][  T571] gretap6: entered promiscuous mode
[  636.691062][  T571] bond80: entered promiscuous mode
[  636.694409][  T571] bond81: entered promiscuous mode
[  636.696740][  T571] gtp4: entered promiscuous mode
[  636.698989][  T571] ip6gre8: entered promiscuous mode
[  636.701393][  T571] gtp5: entered promiscuous mode
[  636.703143][  T571] bond82: entered promiscuous mode
[  636.705131][  T571] vlan9: entered promiscuous mode
[  636.706979][  T571] veth52: entered promiscuous mode
[  636.708738][  T571] veth53: entered promiscuous mode
[  636.710481][  T571] bridge42: entered promiscuous mode
[  636.712210][  T571] veth54: entered promiscuous mode
[  636.714166][  T571] veth55: entered promiscuous mode
[  636.715993][  T571] dvmrp6: entered promiscuous mode
[  636.717734][  T571] bond83: entered promiscuous mode
[  636.719457][  T571] bridge43: entered promiscuous mode
[  636.721259][  T571] gtp6: entered promiscuous mode
[  636.722912][  T571] bridge44: entered promiscuous mode
[  636.724753][  T571] mac80211_hwsim hwsim123 wlan1: entered promiscuous mode
[  636.727334][  T571] veth56: entered promiscuous mode
[  636.729048][  T571] veth57: entered promiscuous mode
[  636.730912][  T571] bridge45: entered promiscuous mode
[  636.732621][  T571] ip6gre9: entered promiscuous mode
[  636.734423][  T571] bridge46: entered promiscuous mode
[  636.736784][  T571] mac80211_hwsim hwsim125 wlan45: entered promiscuous mode
[  636.739467][  T571] bond85: entered promiscuous mode
[  636.741459][  T571] bridge47: entered promiscuous mode
[  636.743605][  T571] vlan10: entered promiscuous mode
[  636.746001][  T571] xfrm3: entered promiscuous mode
[  636.748153][  T571] gtp7: entered promiscuous mode
[  636.750329][  T571] team_slave_0: entered promiscuous mode
[  636.752383][  T571] bond86: entered promiscuous mode
[  636.754169][  T571] bond87: entered promiscuous mode
[  636.756112][  T571] bridge48: entered promiscuous mode
[  636.758222][  T571] xfrm4: entered promiscuous mode
[  636.766421][  T577] syzkaller1: entered promiscuous mode
[  636.768663][  T577] syzkaller1: entered allmulticast mode
[  636.812065][  T590] __nla_validate_parse: 33 callbacks suppressed
[  636.812081][  T590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'.
[  636.828381][  T590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'.
[  636.834829][  T590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'.
[  636.838568][  T590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'.
[  636.871498][ T5670] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  636.876144][  T592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7113'.
[  636.909467][  T595] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  636.909478][  T594] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  636.909497][  T594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.911871][  T595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.985251][  T605] nbd: must specify at least one socket
[  636.991483][  T606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7115'.
[  637.023728][  T608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7119'.
[  637.033443][  T610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7120'.
[  637.040506][  T610] : entered promiscuous mode
[  637.045434][  T610] macvtap0: entered promiscuous mode
[  637.047512][  T610] macvtap0: entered allmulticast mode
[  637.049297][  T610] : entered allmulticast mode
[  637.051485][  T610] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  637.060379][  T610] : left allmulticast mode
[  637.062033][  T610] : left promiscuous mode
[  637.065909][  T610] macvtap0: left promiscuous mode
[  637.067569][  T610] macvtap0: left allmulticast mode
[  637.166112][  T621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7123'.
[  637.234306][  T623] netlink: 'syz.2.7124': attribute type 16 has an invalid length.
[  637.236788][  T623] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7124'.
[  637.411554][  T652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.465870][  T655] netlink: 'syz.0.7132': attribute type 12 has an invalid length.
[  637.623287][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  637.797141][  T676] vlan11: entered promiscuous mode
[  638.662945][  T724] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  638.665895][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  638.776300][  T732] netlink: 'syz.2.7154': attribute type 12 has an invalid length.
[  638.976697][  T755] IPv6: sit4: Disabled Multicast RS
[  639.623236][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  639.931369][   T34] audit: type=1804 audit(1778902951.501:25): pid=786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7168" name="/newroot/2548/cgroup.controllers" dev="tmpfs" ino=13005 res=1 errno=0
[  639.944381][   T34] audit: type=1800 audit(1778902951.501:26): pid=786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7168" name="cgroup.controllers" dev="tmpfs" ino=13005 res=0 errno=0
[  640.021742][  T803] netlink: 'syz.2.7173': attribute type 1 has an invalid length.
[  640.263280][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.291342][  T825] netlink: 'syz.1.7177': attribute type 1 has an invalid length.
[  640.304801][  T825] netlink: 'syz.1.7177': attribute type 1 has an invalid length.
[  640.495390][  T835] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  640.608174][  T850] netlink: 'syz.2.7185': attribute type 1 has an invalid length.
[  640.614832][  T850] workqueue: Failed to create a rescuer kthread for wq "bond102": -EINTR
[  640.743273][    C0] net_ratelimit: 66 callbacks suppressed
[  640.743292][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  640.774179][  T873] netlink: 'syz.2.7190': attribute type 1 has an invalid length.
[  640.788339][  T873] veth49: entered allmulticast mode
[  640.827491][  T876] bond88: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  640.833460][  T873] netlink: 'syz.2.7190': attribute type 1 has an invalid length.
[  640.882945][  T873] 8021q: adding VLAN 0 to HW filter on device bond103
[  641.783273][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  641.819936][  T941] veth0_macvtap: Caught tx_queue_len zero misconfig
[  641.979786][  T956] __nla_validate_parse: 92 callbacks suppressed
[  641.979800][  T956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7209'.
[  642.021862][  T959] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  642.076666][  T967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7212'.
[  642.110195][  T969] lo speed is unknown, defaulting to 1000
[  642.181308][  T977] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.7215'.
[  642.230446][  T982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7216'.
[  642.279927][  T971] lo speed is unknown, defaulting to 1000
[  642.383997][  T989] netlink: 'syz.2.7218': attribute type 1 has an invalid length.
[  642.411201][  T987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7217'.
[  642.463248][  T987] lo: left promiscuous mode
[  642.472320][  T987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.817302][ T1016] lo speed is unknown, defaulting to 1000
[  642.830563][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  642.856253][ T1020] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7226'.
[  643.499266][ T1059] xt_hashlimit: size too large, truncated to 1048576
[  643.747991][ T1075] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7236'.
[  643.751778][ T1075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7236'.
[  643.783306][ T1078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7236'.
[  643.787043][ T1078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7236'.
[  643.863292][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  643.933867][ T1088] lo speed is unknown, defaulting to 1000
[  644.423271][ T5610] Bluetooth: hci2: command 0x0405 tx timeout
[  644.424198][ T5615] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  644.913285][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  644.918981][ T1165] netlink: 'syz.2.7258': attribute type 9 has an invalid length.
[  644.997928][ T1170] openvswitch: netlink: Message has 15 unknown bytes.
[  645.061111][ T1177] lo speed is unknown, defaulting to 1000
[  645.257526][ T1177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  645.330539][ T1189] netlink: 'syz.2.7264': attribute type 1 has an invalid length.
[  645.362545][ T1189] workqueue: Failed to create a rescuer kthread for wq "bond104": -EINTR
[  645.399308][ T1186] xt_CT: You must specify a L4 protocol and not use inversions on it
[  645.792518][ T1216] ip6t_srh: unknown srh match flags  4000
[  645.953221][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  646.535425][ T1255] netlink: 'syz.0.7281': attribute type 1 has an invalid length.
[  646.539345][ T1253] IPv6: Can't replace route, no match found
[  646.542549][ T1253] IPv6: Can't replace route, no match found
[  646.558411][ T1255] 8021q: adding VLAN 0 to HW filter on device bond69
[  646.625496][ T1255] macvlan0: entered promiscuous mode
[  646.627688][ T1255] macvlan0: entered allmulticast mode
[  646.638772][ T1255] sctp: [Deprecated]: syz.0.7281 (pid 1255) Use of int in maxseg socket option.
[  646.638772][ T1255] Use struct sctp_assoc_value instead
[  646.845178][ T1261] nbd0: detected capacity change from 0 to 63
[  646.849506][ T1267] block nbd0: NBD_DISCONNECT
[  646.854469][ T1267] block nbd0: Disconnected due to user request.
[  646.857562][ T1267] block nbd0: shutting down sockets
[  646.862013][    C1] blk_print_req_error: 138 callbacks suppressed
[  646.862029][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.868311][    C1] buffer_io_error: 138 callbacks suppressed
[  646.868321][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  646.874018][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.877612][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  646.880806][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.884509][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  646.887629][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.891223][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  646.896947][T30889] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.902391][T30889] Buffer I/O error on dev nbd0, logical block 0, async page read
[  646.906423][T30889] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.910139][T30889] Buffer I/O error on dev nbd0, logical block 1, async page read
[  646.913437][T30889] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.916610][T30889] Buffer I/O error on dev nbd0, logical block 2, async page read
[  646.919354][T30889] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.923609][T30889] Buffer I/O error on dev nbd0, logical block 3, async page read
[  646.926269][T30889] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.929523][T30889] Buffer I/O error on dev nbd0, logical block 0, async page read
[  646.933573][T30889] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.937633][T30889] Buffer I/O error on dev nbd0, logical block 1, async page read
[  646.941700][T30889] ldm_validate_partition_table(): Disk read failed.
[  646.946861][T30889] Dev nbd0: unable to read RDB block 0
[  646.950538][T30889]  nbd0: unable to read partition table
[  646.963825][T30889] ldm_validate_partition_table(): Disk read failed.
[  646.967486][T30889] Dev nbd0: unable to read RDB block 0
[  646.974645][T30889]  nbd0: unable to read partition table
[  646.983241][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  646.996752][ T1273] __nla_validate_parse: 27 callbacks suppressed
[  646.996770][ T1273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7284'.
[  647.073915][ T1282] netlink: 'syz.1.7287': attribute type 10 has an invalid length.
[  647.088905][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.100760][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.105176][ T1280] tipc: Resetting bearer <eth:gre0>
[  647.110118][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.121577][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.127859][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.138916][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.149103][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.159627][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.169290][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7286'.
[  647.315992][ T1283] tap0: tun_chr_ioctl cmd 1074025677
[  647.319770][ T1283] tap0: linktype set to 773
[  647.326780][ T5444] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  647.337708][ T5444] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  647.343400][ T5444] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  647.346284][ T5444] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  647.364020][ T1287] netlink: 'syz.0.7288': attribute type 1 has an invalid length.
[  647.595215][ T1311] ip6tnl0: Caught tx_queue_len zero misconfig
[  647.597429][ T1311] netem: change failed
[  647.601557][ T1305] netlink: 'syz.1.7293': attribute type 1 has an invalid length.
[  647.742128][ T1319] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  647.974237][ T1358] netlink: 'syz.0.7306': attribute type 1 has an invalid length.
[  648.009225][ T1358] 8021q: adding VLAN 0 to HW filter on device bond70
[  648.023271][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  648.612115][ T1387] xt_HMARK: spi-set and port-set can't be combined
[  648.785750][ T1395] netlink: 'syz.2.7318': attribute type 10 has an invalid length.
[  649.073311][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  649.088742][ T1415] netlink: 'syz.1.7325': attribute type 4 has an invalid length.
[  649.095233][ T1417] netlink: 'syz.2.7326': attribute type 10 has an invalid length.
[  649.250122][ T1432] vlan6: entered promiscuous mode
[  649.274786][ T1425] netlink: 'syz.2.7329': attribute type 1 has an invalid length.
[  649.316147][ T1437] netlink: 'syz.2.7331': attribute type 9 has an invalid length.
[  649.420289][ T1446] lo speed is unknown, defaulting to 1000
[  649.452079][ T1448] veth0_macvtap: left promiscuous mode
[  649.454891][ T1448] veth0_macvtap: entered promiscuous mode
[  649.465096][ T1448] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  649.480388][ T7290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.487511][ T7290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.494426][ T7290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.500717][ T7290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.672403][ T1461] xt_bpf: check failed: parse error
[  649.687326][ T1461] openvswitch: netlink: Key type 154 is out of range max 32
[  649.696468][ T1461] netlink: 'syz.2.7337': attribute type 2 has an invalid length.
[  649.711959][ T1463] vlan6: entered promiscuous mode
[  649.815817][ T1467] netlink: 'syz.0.7340': attribute type 5 has an invalid length.
[  649.884191][ T1472] netlink: 'syz.2.7343': attribute type 1 has an invalid length.
[  649.902422][ T1473] sctp: [Deprecated]: syz.0.7342 (pid 1473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  649.902422][ T1473] Use struct sctp_sack_info instead
[  649.912724][ T1472] 8021q: adding VLAN 0 to HW filter on device bond104
[  649.920929][ T1473] lo: Caught tx_queue_len zero misconfig
[  649.923369][ T1473] sch_tbf: burst 21990 is lower than device lo mtu (11337746) !
[  649.968509][ T1472] bond104: (slave veth49): Enslaving as an active interface with a down link
[  650.103238][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  651.143215][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  652.193222][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  653.223200][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  653.370863][ T1530] validate_nla: 1 callbacks suppressed
[  653.370876][ T1530] netlink: 'syz.0.7358': attribute type 32 has an invalid length.
[  653.410258][ T1528] xt_hashlimit: size too large, truncated to 1048576
[  653.412921][ T1528] xt_hashlimit: invalid interval
[  653.420141][ T1528] veth1: entered promiscuous mode
[  653.421757][ T1528] veth1: entered allmulticast mode
[  653.505334][ T1547] __nla_validate_parse: 343 callbacks suppressed
[  653.505349][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7362'.
[  653.550597][ T1555] netlink: 'syz.1.7366': attribute type 1 has an invalid length.
[  653.606324][ T1560] netlink: 15930 bytes leftover after parsing attributes in process `syz.2.7367'.
[  653.620508][ T1561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7366'.
[  653.624985][ T1563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7366'.
[  653.801529][ T1583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7372'.
[  653.805946][ T1584] netlink: 'syz.2.7373': attribute type 33 has an invalid length.
[  653.808977][ T1584] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7373'.
[  653.840038][ T1583] bond89: (slave bridge50): Enslaving as an active interface with an up link
[  653.932818][ T1598] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  654.094684][ T1590] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7374'.
[  654.098164][ T1590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7374'.
[  654.101437][ T1590] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7374'.
[  654.105185][ T1590] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  654.107588][ T1590] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7374'.
[  654.128694][ T1590] syz.0.7374 (1590) used obsolete PPPIOCDETACH ioctl
[  654.133479][ T1590] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  654.135897][ T1590] netlink: 'syz.0.7374': attribute type 1 has an invalid length.
[  654.138617][ T1590] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  654.141293][ T1590] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  654.144564][ T1590] netlink: 'syz.0.7374': attribute type 1 has an invalid length.
[  654.147260][ T1590] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  654.273274][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  654.353261][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  654.356653][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  654.628371][ T1583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  654.784246][ T1607] bond90: option primary_reselect: invalid value (133)
[  654.787891][ T1607] bond90 (unregistering): Released all slaves
[  654.931786][ T1629] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  655.024691][ T1631] lo speed is unknown, defaulting to 1000
[  655.303284][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  655.427485][ T1649] veth1: left promiscuous mode
[  655.429106][ T1649] veth1: left allmulticast mode
[  655.454251][ T1649] veth0_macvtap: left promiscuous mode
[  655.457304][ T1649] veth0_macvtap: entered promiscuous mode
[  655.473794][ T1649] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  656.343291][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  656.367169][ T1728] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  656.372378][ T1728] CPU: 0 UID: 0 PID: 1728 Comm: syz.2.7409 Not tainted syzkaller #0 PREEMPT(full) 
[  656.372392][ T1728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  656.372398][ T1728] Call Trace:
[  656.372401][ T1728]  <TASK>
[  656.372406][ T1728]  dump_stack_lvl+0xe8/0x150
[  656.372421][ T1728]  sysfs_warn_dup+0x8e/0xa0
[  656.372433][ T1728]  sysfs_do_create_link_sd+0xc0/0x110
[  656.372444][ T1728]  device_add_class_symlinks+0x1cf/0x240
[  656.372456][ T1728]  device_add+0x475/0xbb0
[  656.372467][ T1728]  wiphy_register+0x1dc5/0x2dc0
[  656.372487][ T1728]  ? __pfx_wiphy_register+0x10/0x10
[  656.372499][ T1728]  ? __pfx_netdev_run_todo+0x10/0x10
[  656.372510][ T1728]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  656.372522][ T1728]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  656.372536][ T1728]  ieee80211_register_hw+0x3d82/0x4a70
[  656.372552][ T1728]  ? ieee80211_register_hw+0x1931/0x4a70
[  656.372572][ T1728]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  656.372583][ T1728]  ? __asan_memset+0x22/0x50
[  656.372592][ T1728]  ? __hrtimer_setup+0x1b7/0x260
[  656.372601][ T1728]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  656.372612][ T1728]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  656.372643][ T1728]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  656.372657][ T1728]  ? kstrndup+0xbf/0x160
[  656.372676][ T1728]  hwsim_new_radio_nl+0xf6a/0x1c00
[  656.372706][ T1728]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  656.372729][ T1728]  ? rcu_is_watching+0x15/0xb0
[  656.372746][ T1728]  ? trace_kmalloc+0x2a/0xf0
[  656.372786][ T1728]  ? __nla_parse+0x40/0x60
[  656.372801][ T1728]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  656.372810][ T1728]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  656.372823][ T1728]  genl_family_rcv_msg_doit+0x22a/0x330
[  656.372835][ T1728]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  656.372850][ T1728]  ? bpf_lsm_capable+0x9/0x20
[  656.372858][ T1728]  ? security_capable+0x7e/0x2c0
[  656.372872][ T1728]  genl_rcv_msg+0x61c/0x7a0
[  656.372882][ T1728]  ? __pfx_genl_rcv_msg+0x10/0x10
[  656.372888][ T1728]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  656.372902][ T1728]  netlink_rcv_skb+0x232/0x4b0
[  656.372913][ T1728]  ? __pfx_genl_rcv_msg+0x10/0x10
[  656.372921][ T1728]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  656.372937][ T1728]  ? down_read+0x270/0x2e0
[  656.372944][ T1728]  ? genl_rcv+0xd/0x40
[  656.372993][ T1728]  genl_rcv+0x28/0x40
[  656.373002][ T1728]  netlink_unicast+0x75c/0x8e0
[  656.373029][ T1728]  netlink_sendmsg+0x813/0xb40
[  656.373045][ T1728]  ? __pfx_netlink_sendmsg+0x10/0x10
[  656.373058][ T1728]  ? aa_sock_msg_perm+0xf1/0x1b0
[  656.373068][ T1728]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  656.373079][ T1728]  ____sys_sendmsg+0x972/0x9f0
[  656.373090][ T1728]  ? __might_fault+0xaf/0x130
[  656.373105][ T1728]  ? __pfx_____sys_sendmsg+0x10/0x10
[  656.373119][ T1728]  ? import_iovec+0x73/0xa0
[  656.373133][ T1728]  ___sys_sendmsg+0x2a5/0x360
[  656.373142][ T1728]  ? __lock_acquire+0x6b5/0x2cf0
[  656.373152][ T1728]  ? __pfx____sys_sendmsg+0x10/0x10
[  656.373167][ T1728]  ? futex_wait+0x2a2/0x390
[  656.373191][ T1728]  ? __fget_files+0x2a/0x420
[  656.373199][ T1728]  ? __fget_files+0x3a0/0x420
[  656.373212][ T1728]  __x64_sys_sendmsg+0x1bd/0x2a0
[  656.373222][ T1728]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  656.373235][ T1728]  ? rcu_is_watching+0x15/0xb0
[  656.373248][ T1728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.373256][ T1728]  do_syscall_64+0x15f/0xf80
[  656.373265][ T1728]  ? trace_irq_disable+0x3b/0x140
[  656.373278][ T1728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.373284][ T1728] RIP: 0033:0x7fb64f39ce59
[  656.373293][ T1728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.373299][ T1728] RSP: 002b:00007fb65019e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  656.373309][ T1728] RAX: ffffffffffffffda RBX: 00007fb64f616090 RCX: 00007fb64f39ce59
[  656.373314][ T1728] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  656.373319][ T1728] RBP: 00007fb64f432d6f R08: 0000000000000000 R09: 0000000000000000
[  656.373323][ T1728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  656.373327][ T1728] R13: 00007fb64f616128 R14: 00007fb64f616090 R15: 00007ffdb3ed8308
[  656.373340][ T1728]  </TASK>
[  657.383291][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  658.423225][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  659.463346][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  659.850695][ T1762] validate_nla: 6 callbacks suppressed
[  659.850705][ T1762] netlink: 'syz.2.7420': attribute type 1 has an invalid length.
[  659.858101][ T1762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  660.265379][ T1764] netlink: 'syz.0.7421': attribute type 15 has an invalid length.
[  660.283513][ T1764] __nla_validate_parse: 15 callbacks suppressed
[  660.283528][ T1764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7421'.
[  660.349320][ T1768] 5n: entered promiscuous mode
[  660.352859][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'.
[  660.357389][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'.
[  660.364354][ T1770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7424'.
[  660.369184][ T1770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7424'.
[  660.381592][ T1770] ip6tnl14: entered allmulticast mode
[  660.497164][ T1781] lo speed is unknown, defaulting to 1000
[  660.503329][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  660.606294][ T1791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7432'.
[  660.670272][ T1795] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7433'.
[  660.684948][ T1797] xt_hashlimit: size too large, truncated to 1048576
[  660.800509][ T1808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7437'.
[  660.803537][ T1808] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7437'.
[  660.807892][ T1808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7437'.
[  660.915355][ T1820] netlink: 'syz.2.7440': attribute type 2 has an invalid length.
[  661.029937][ T1834] netlink: 'syz.2.7444': attribute type 2 has an invalid length.
[  661.034302][ T1832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.044619][ T1832] ip6gre0: entered promiscuous mode
[  661.051837][ T1832] ip6gre0: entered allmulticast mode
[  661.078170][ T1834] 8021q: adding VLAN 0 to HW filter on device bond105
[  661.136866][ T1834] bond105: entered promiscuous mode
[  661.139045][ T1834] bond105: entered allmulticast mode
[  661.141397][ T1844] netlink: 'syz.0.7446': attribute type 1 has an invalid length.
[  661.155794][ T1844] bond71: entered promiscuous mode
[  661.158132][ T1844] 8021q: adding VLAN 0 to HW filter on device bond71
[  661.174473][ T1844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  661.260745][ T1856] netlink: 'syz.0.7450': attribute type 19 has an invalid length.
[  661.263749][ T1856] netlink: 'syz.0.7450': attribute type 20 has an invalid length.
[  661.313723][ T1861] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  661.357011][ T1872] netlink: 'syz.2.7456': attribute type 2 has an invalid length.
[  661.377501][ T1878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.396147][ T1880] netlink: 'syz.2.7458': attribute type 1 has an invalid length.
[  661.414540][ T1880] vti4: entered promiscuous mode
[  661.430452][ T1876] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  661.436200][ T1882] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  661.553200][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  661.588737][ T1904] netlink: 'syz.1.7464': attribute type 1 has an invalid length.
[  661.622227][ T1900] lo speed is unknown, defaulting to 1000
[  661.712492][ T1909] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  661.724175][ T1909] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  662.049476][ T1936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  662.073382][ T1936] tipc: Resetting bearer <eth:syzkaller0>
[  662.543414][ T1972] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  662.546444][ T1972] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  662.583223][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  663.407842][ T1996] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  663.423828][ T1996] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  663.429138][ T1996] CPU: 0 UID: 0 PID: 1996 Comm: syz.0.7487 Not tainted syzkaller #0 PREEMPT(full) 
[  663.429152][ T1996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  663.429158][ T1996] Call Trace:
[  663.429161][ T1996]  <TASK>
[  663.429166][ T1996]  dump_stack_lvl+0xe8/0x150
[  663.429180][ T1996]  sysfs_warn_dup+0x8e/0xa0
[  663.429191][ T1996]  sysfs_do_create_link_sd+0xc0/0x110
[  663.429202][ T1996]  device_add_class_symlinks+0x1cf/0x240
[  663.429215][ T1996]  device_add+0x475/0xbb0
[  663.429226][ T1996]  wiphy_register+0x1dc5/0x2dc0
[  663.429245][ T1996]  ? __pfx_wiphy_register+0x10/0x10
[  663.429255][ T1996]  ? __pfx_netdev_run_todo+0x10/0x10
[  663.429267][ T1996]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  663.429280][ T1996]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  663.429293][ T1996]  ieee80211_register_hw+0x3d82/0x4a70
[  663.429312][ T1996]  ? ieee80211_register_hw+0x1931/0x4a70
[  663.429334][ T1996]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  663.429354][ T1996]  ? __asan_memset+0x22/0x50
[  663.429364][ T1996]  ? __hrtimer_setup+0x1b7/0x260
[  663.429374][ T1996]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  663.429387][ T1996]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  663.429409][ T1996]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  663.429418][ T1996]  ? kstrndup+0xbf/0x160
[  663.429431][ T1996]  hwsim_new_radio_nl+0xf6a/0x1c00
[  663.429451][ T1996]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  663.429463][ T1996]  ? rcu_is_watching+0x15/0xb0
[  663.429472][ T1996]  ? trace_kmalloc+0x2a/0xf0
[  663.429483][ T1996]  ? __nla_parse+0x40/0x60
[  663.429495][ T1996]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  663.429503][ T1996]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  663.429513][ T1996]  genl_family_rcv_msg_doit+0x22a/0x330
[  663.429523][ T1996]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  663.429536][ T1996]  ? bpf_lsm_capable+0x9/0x20
[  663.429543][ T1996]  ? security_capable+0x7e/0x2c0
[  663.429554][ T1996]  genl_rcv_msg+0x61c/0x7a0
[  663.429563][ T1996]  ? __pfx_genl_rcv_msg+0x10/0x10
[  663.429570][ T1996]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  663.429584][ T1996]  netlink_rcv_skb+0x232/0x4b0
[  663.429593][ T1996]  ? __pfx_genl_rcv_msg+0x10/0x10
[  663.429601][ T1996]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  663.429616][ T1996]  ? down_read+0x270/0x2e0
[  663.429623][ T1996]  ? genl_rcv+0xd/0x40
[  663.429630][ T1996]  genl_rcv+0x28/0x40
[  663.429637][ T1996]  netlink_unicast+0x75c/0x8e0
[  663.429649][ T1996]  netlink_sendmsg+0x813/0xb40
[  663.429662][ T1996]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.429673][ T1996]  ? aa_sock_msg_perm+0xf1/0x1b0
[  663.429683][ T1996]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  663.429693][ T1996]  ____sys_sendmsg+0x972/0x9f0
[  663.429703][ T1996]  ? __might_fault+0xaf/0x130
[  663.429714][ T1996]  ? __pfx_____sys_sendmsg+0x10/0x10
[  663.429727][ T1996]  ? import_iovec+0x73/0xa0
[  663.429738][ T1996]  ___sys_sendmsg+0x2a5/0x360
[  663.429747][ T1996]  ? __lock_acquire+0x6b5/0x2cf0
[  663.429757][ T1996]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.429769][ T1996]  ? futex_wait+0x2a2/0x390
[  663.429788][ T1996]  ? __fget_files+0x2a/0x420
[  663.429797][ T1996]  ? __fget_files+0x3a0/0x420
[  663.429809][ T1996]  __x64_sys_sendmsg+0x1bd/0x2a0
[  663.429819][ T1996]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  663.429832][ T1996]  ? rcu_is_watching+0x15/0xb0
[  663.429845][ T1996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.429852][ T1996]  do_syscall_64+0x15f/0xf80
[  663.429861][ T1996]  ? trace_irq_disable+0x3b/0x140
[  663.429873][ T1996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.429914][ T1996] RIP: 0033:0x7fe250f9ce59
[  663.429927][ T1996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.429943][ T1996] RSP: 002b:00007fe251db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.429953][ T1996] RAX: ffffffffffffffda RBX: 00007fe251215fa0 RCX: 00007fe250f9ce59
[  663.429960][ T1996] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  663.429965][ T1996] RBP: 00007fe251032d6f R08: 0000000000000000 R09: 0000000000000000
[  663.429972][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  663.429977][ T1996] R13: 00007fe251216038 R14: 00007fe251215fa0 R15: 00007fff16b9d418
[  663.429991][ T1996]  </TASK>
[  663.586523][ T2001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  663.623142][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  663.695032][ T2014] bond90: entered promiscuous mode
[  663.798458][ T2014] batadv2: left allmulticast mode
[  663.802027][ T2014] bridge0: port 1(batadv2) entered disabled state
[  663.809691][ T2014] bond87: (slave bridge48): Releasing active interface
[  663.823430][ T2014] bond89: (slave bridge50): Releasing backup interface
[  663.836674][ T8577] lo speed is unknown, defaulting to 1000
[  663.840546][ T8577] syz2: Port: 1 Link DOWN
[  663.842334][ T2011] bond90: left promiscuous mode
[  663.847457][ T8577] lo speed is unknown, defaulting to 1000
[  663.856319][ T2020] mac80211_hwsim hwsim115 syzkaller0: left promiscuous mode
[  663.860170][ T2020] mac80211_hwsim hwsim115 syzkaller0: left allmulticast mode
[  663.930388][ T2029] ipvlan4: entered promiscuous mode
[  663.936228][ T2029] bridge0: port 2(ipvlan4) entered blocking state
[  663.938332][ T2029] bridge0: port 2(ipvlan4) entered disabled state
[  663.940438][ T2029] ipvlan4: entered allmulticast mode
[  663.943285][ T2029] ipvlan4: left allmulticast mode
[  663.981005][ T2032] : left promiscuous mode
[  663.984118][ T5785] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.987351][ T5785] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.990526][ T5785] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.995357][ T5785] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  664.153735][ T2048] veth37: entered promiscuous mode
[  664.156345][ T2048] veth37: entered allmulticast mode
[  664.369137][ T2068] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  664.372728][ T2068] mac80211_hwsim hwsim115 syzkaller0: entered promiscuous mode
[  664.378712][ T2068] mac80211_hwsim hwsim115 syzkaller0: entered allmulticast mode
[  664.663265][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  665.460750][ T2126] validate_nla: 6 callbacks suppressed
[  665.460761][ T2126] netlink: 'syz.2.7526': attribute type 13 has an invalid length.
[  665.516332][ T2126] __nla_validate_parse: 33 callbacks suppressed
[  665.516343][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7526'.
[  665.521767][ T2126] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  665.636210][ T2140] vlan13: entered promiscuous mode
[  665.703234][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  665.740350][ T2142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7533'.
[  665.811558][ T2148] tunl0: left promiscuous mode
[  665.814239][ T2148] gre0: left promiscuous mode
[  665.816350][ T2148] gretap0: left promiscuous mode
[  665.818706][ T2148] ip_vti0: left promiscuous mode
[  665.820741][ T2148] ip6_vti0: left promiscuous mode
[  665.822885][ T2148] sit0: left promiscuous mode
[  665.825431][ T2148] ip6tnl0: left promiscuous mode
[  665.827153][ T2148] ip6gre0: left promiscuous mode
[  665.828956][ T2148] nlmon0: left promiscuous mode
[  665.830570][ T2148] veth0: left promiscuous mode
[  665.832315][ T2148] veth1: left promiscuous mode
[  665.835105][ T2148] wg0: left promiscuous mode
[  665.837352][ T2148] wg2: left promiscuous mode
[  665.839004][ T2148] veth0_to_bond: left promiscuous mode
[  665.841099][ T2148] bond_slave_0: left promiscuous mode
[  665.842959][ T2148] veth1_to_bond: left promiscuous mode
[  665.845612][ T2148] bond_slave_1: left promiscuous mode
[  665.848075][ T2148] veth1_to_team: left promiscuous mode
[  665.849927][ T2148] team_slave_1: left promiscuous mode
[  665.851658][ T2148] xfrm0: left promiscuous mode
[  665.853736][ T2148] veth0_to_hsr: left promiscuous mode
[  665.855562][ T2148] hsr_slave_0: left promiscuous mode
[  665.857384][ T2148] veth1_to_hsr: left promiscuous mode
[  665.859184][ T2148] hsr_slave_1: left promiscuous mode
[  665.861063][ T2148] mac80211_hwsim hwsim6 ;: left promiscuous mode
[  665.864255][ T2148] bond1: left promiscuous mode
[  665.866039][ T2148] ipip0: left promiscuous mode
[  665.868047][ T2148] bridge1: left promiscuous mode
[  665.870145][ T2148] xfrm1: left promiscuous mode
[  665.871706][ T2148] vxlan0: left promiscuous mode
[  665.873678][ T2148] mac80211_hwsim hwsim11 wlan2: left promiscuous mode
[  665.876003][ T2148] ip6gre1: left promiscuous mode
[  665.877676][ T2148] ip6gre2: left promiscuous mode
[  665.879257][ T2148] ip6tnl1: left promiscuous mode
[  665.880836][ T2148] mac80211_hwsim hwsim12 wlan3: left promiscuous mode
[  665.883467][ T2148] bond2: left promiscuous mode
[  665.885277][ T2148] gretap1: left promiscuous mode
[  665.887199][ T2148] bond3: left promiscuous mode
[  665.888815][ T2148] bond4: left promiscuous mode
[  665.890479][ T2148] vlan2: left promiscuous mode
[  665.892119][ T2148] bond5: left promiscuous mode
[  665.894341][ T2148] bond6: left promiscuous mode
[  665.896004][ T2148] bridge2: left promiscuous mode
[  665.897727][ T2148] bridge3: left promiscuous mode
[  665.899396][ T2148] macsec1: left promiscuous mode
[  665.901122][ T2148] bridge4: left promiscuous mode
[  665.902753][ T2148] geneve2: left promiscuous mode
[  665.905124][ T2148] veth2: left promiscuous mode
[  665.906922][ T2148] veth3: left promiscuous mode
[  665.908605][ T2148] veth4: left promiscuous mode
[  665.910283][ T2148] veth5: left promiscuous mode
[  665.911993][ T2148] bond7: left promiscuous mode
[  665.914087][ T2148] bridge5: left promiscuous mode
[  665.915884][ T2148] bond8: left promiscuous mode
[  665.917675][ T2148] gre1: left promiscuous mode
[  665.919419][ T2148] gre2: left promiscuous mode
[  665.921134][ T2148] bond9: left promiscuous mode
[  665.922700][ T2148] ip6gre3: left promiscuous mode
[  665.924588][ T2148] gretap2: left promiscuous mode
[  665.926294][ T2148] bond10: left promiscuous mode
[  665.927975][ T2148] bond11: left promiscuous mode
[  665.929645][ T2148] ip6gretap1: left promiscuous mode
[  665.931343][ T2148] bond12: left promiscuous mode
[  665.933737][ T2148] wireguard0: left promiscuous mode
[  665.935523][ T2148] ip6tnl2: left promiscuous mode
[  665.937236][ T2148] mac80211_hwsim hwsim19 wlan4: left promiscuous mode
[  665.939438][ T2148] mac80211_hwsim hwsim20 wlan5: left promiscuous mode
[  665.941665][ T2148] ip6erspan0: left promiscuous mode
[  665.943876][ T2148] bond13: left promiscuous mode
[  665.945597][ T2148] bond14: left promiscuous mode
[  665.947294][ T2148] veth6: left promiscuous mode
[  665.948972][ T2148] veth7: left promiscuous mode
[  665.950595][ T2148] bridge6: left promiscuous mode
[  665.952360][ T2148] ipip1: left promiscuous mode
[  665.954299][ T2148] veth8: left promiscuous mode
[  665.956193][ T2148] veth9: left promiscuous mode
[  665.957835][ T2148] mac80211_hwsim hwsim22 wlan6: left promiscuous mode
[  665.960114][ T2148] bond15: left promiscuous mode
[  665.961767][ T2148] mac80211_hwsim hwsim23 wlan7: left promiscuous mode
[  665.964233][ T2148] gtp0: left promiscuous mode
[  665.965842][ T2148] bridge0.257: left promiscuous mode
[  665.967733][ T2148] bond16: left promiscuous mode
[  665.969468][ T2148] bridge7: left promiscuous mode
[  665.971198][ T2148] veth10: left promiscuous mode
[  665.972845][ T2148] veth11: left promiscuous mode
[  665.974990][ T2148] veth12: left promiscuous mode
[  665.976890][ T2148] veth13: left promiscuous mode
[  665.978580][ T2148] veth14: left promiscuous mode
[  665.980344][ T2148] veth15: left promiscuous mode
[  665.981998][ T2148] gretap3: left promiscuous mode
[  665.983800][ T2148] bond17: left promiscuous mode
[  665.985760][ T2148] bridge8: left promiscuous mode
[  665.987498][ T2148] mac80211_hwsim hwsim26 wlan8: left promiscuous mode
[  665.989764][ T2148] bond18: left promiscuous mode
[  665.991392][ T2148] bridge9: left promiscuous mode
[  665.993352][ T2148] bridge10: left promiscuous mode
[  665.995101][ T2148] bridge11: left promiscuous mode
[  665.996955][ T2148] bond19: left promiscuous mode
[  665.998646][ T2148] ip6tnl3: left promiscuous mode
[  666.000359][ T2148] bridge12: left promiscuous mode
[  666.002201][ T2148] gre3: left promiscuous mode
[  666.004143][ T2148] mac80211_hwsim hwsim30 wlan9: left promiscuous mode
[  666.006409][ T2148] veth16: left promiscuous mode
[  666.008156][ T2148] veth17: left promiscuous mode
[  666.009979][ T2148] bond20: left promiscuous mode
[  666.011656][ T2148] bond21: left promiscuous mode
[  666.013706][ T2148] bond22: left promiscuous mode
[  666.015397][ T2148] bond23: left promiscuous mode
[  666.017178][ T2148] wireguard1: left promiscuous mode
[  666.019138][ T2148] gtp1: left promiscuous mode
[  666.020793][ T2148] ip6tnl4: left promiscuous mode
[  666.022472][ T2148] mac80211_hwsim hwsim32 wlan10: left promiscuous mode
[  666.025086][ T2148] veth18: left promiscuous mode
[  666.026886][ T2148] veth19: left promiscuous mode
[  666.028560][ T2148] ip6tnl5: left promiscuous mode
[  666.030294][ T2148] bond24: left promiscuous mode
[  666.032008][ T2148] macvtap1: left promiscuous mode
[  666.034146][ T2148] bridge13: left promiscuous mode
[  666.035925][ T2148] veth20: left promiscuous mode
[  666.037633][ T2148] veth21: left promiscuous mode
[  666.039302][ T2148] ip6gretap2: left promiscuous mode
[  666.041085][ T2148] ip6tnl6: left promiscuous mode
[  666.042737][ T2148] ip6tnl7: left promiscuous mode
[  666.045125][ T2148] bond25: left promiscuous mode
[  666.046830][ T2148] bond26: left promiscuous mode
[  666.048534][ T2148] gretap4: left promiscuous mode
[  666.050208][ T2148] bond27: left promiscuous mode
[  666.051919][ T2148] veth22: left promiscuous mode
[  666.053876][ T2148] veth23: left promiscuous mode
[  666.055567][ T2148] bridge14: left promiscuous mode
[  666.057348][ T2148] veth24: left promiscuous mode
[  666.059017][ T2148] veth25: left promiscuous mode
[  666.060682][ T2148] mac80211_hwsim hwsim35 wlan11: left promiscuous mode
[  666.062945][ T2148] ip6gre4: left promiscuous mode
[  666.064748][ T2148] bond28: left promiscuous mode
[  666.066667][ T2148] bond29: left promiscuous mode
[  666.068390][ T2148] bond30: left promiscuous mode
[  666.070103][ T2148] mac80211_hwsim hwsim36 wlan12: left promiscuous mode
[  666.072328][ T2148] bond31: left promiscuous mode
[  666.074322][ T2148] mac80211_hwsim hwsim37 wlan13: left promiscuous mode
[  666.076814][ T2148] pim6reg99999991: left promiscuous mode
[  666.078719][ T2148] vlan4: left promiscuous mode
[  666.080423][ T2148] geneve1: left promiscuous mode
[  666.082192][ T2148] bond32: left promiscuous mode
[  666.084047][ T2148] bridge15: left promiscuous mode
[  666.086065][ T2148] mac80211_hwsim hwsim39 wlan14: left promiscuous mode
[  666.088325][ T2148] sit1: left promiscuous mode
[  666.089923][ T2148] mac80211_hwsim hwsim40 wlan15: left promiscuous mode
[  666.092123][ T2148] bond33: left promiscuous mode
[  666.094198][ T2148] gretap5: left promiscuous mode
[  666.095977][ T2148] bond34: left promiscuous mode
[  666.101034][ T2148] mac80211_hwsim hwsim44 wlan16: left promiscuous mode
[  666.106083][ T2148] gre4: left promiscuous mode
[  666.107719][ T2148] ip6tnl8: left promiscuous mode
[  666.109405][ T2148] erspan1: left promiscuous mode
[  666.111086][ T2148] syztnl0: left promiscuous mode
[  666.112734][ T2148] sit2: left promiscuous mode
[  666.114645][ T2148] sit3: left promiscuous mode
[  666.116361][ T2148] vlan5: left promiscuous mode
[  666.117965][ T2148] bond35: left promiscuous mode
[  666.119707][ T2148] geneve3: left promiscuous mode
[  666.121553][ T2148] veth26: left promiscuous mode
[  666.123666][ T2148] veth27: left promiscuous mode
[  666.125357][ T2148] ip6gre5: left promiscuous mode
[  666.127121][ T2148] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  666.129357][ T2148] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  666.131727][ T2148] vlan6: left promiscuous mode
[  666.134131][ T2148] ip6erspan1: left promiscuous mode
[  666.136178][ T2148] bond36: left promiscuous mode
[  666.137977][ T2148] bridge16: left promiscuous mode
[  666.139651][ T2148] bond37: left promiscuous mode
[  666.141314][ T2148] bond38: left promiscuous mode
[  666.142964][ T2148] vcan0: left promiscuous mode
[  666.144897][ T2148] bridge17: left promiscuous mode
[  666.146623][ T2148] veth28: left promiscuous mode
[  666.148306][ T2148] veth29: left promiscuous mode
[  666.149996][ T2148] veth30: left promiscuous mode
[  666.151700][ T2148] veth31: left promiscuous mode
[  666.154253][ T2148] ip6tnl9: left promiscuous mode
[  666.155982][ T2148] ip6tnl10: left promiscuous mode
[  666.157651][ T2148] ip6gretap0.2: left promiscuous mode
[  666.159433][ T2148] ip6gretap0: left promiscuous mode
[  666.161247][ T2148] bridge18: left promiscuous mode
[  666.162916][ T2148] mac80211_hwsim hwsim51 wlan17: left promiscuous mode
[  666.165641][ T2148] mac80211_hwsim hwsim52 wlan18: left promiscuous mode
[  666.167803][ T2148] bond39: left promiscuous mode
[  666.169538][ T2148] ipvlan3: left promiscuous mode
[  666.171257][ T2148] ipvlan4: left promiscuous mode
[  666.172883][ T2148] bond40: left promiscuous mode
[  666.174920][ T2148] veth32: left promiscuous mode
[  666.176561][ T2148] veth33: left promiscuous mode
[  666.178185][ T2148] ip6gre6: left promiscuous mode
[  666.179804][ T2148] bridge19: left promiscuous mode
[  666.181514][ T2148] mac80211_hwsim hwsim53 wlan19: left promiscuous mode
[  666.184203][ T2148] ipip2: left promiscuous mode
[  666.185844][ T2148] vxcan2: left promiscuous mode
[  666.187517][ T2148] vxcan3: left promiscuous mode
[  666.189087][ T2148] bond41: left promiscuous mode
[  666.190727][ T2148] vcan1: left promiscuous mode
[  666.192326][ T2148] vxlan1: left promiscuous mode
[  666.194352][ T2148] vxlan2: left promiscuous mode
[  666.196070][ T2148] mac80211_hwsim hwsim55 wlan20: left promiscuous mode
[  666.198340][ T2148] bond42: left promiscuous mode
[  666.200054][ T2148] bridge20: left promiscuous mode
[  666.201777][ T2148] veth34: left promiscuous mode
[  666.203794][ T2148] veth35: left promiscuous mode
[  666.205466][ T2148] veth36: left promiscuous mode
[  666.207205][ T2148] veth37: left promiscuous mode
[  666.208918][ T2148] bond43: left promiscuous mode
[  666.210578][ T2148] veth38: left promiscuous mode
[  666.212309][ T2148] veth39: left promiscuous mode
[  666.214380][ T2148] bridge21: left promiscuous mode
[  666.216115][ T2148] bond44: left promiscuous mode
[  666.217779][ T2148] geneve4: left promiscuous mode
[  666.219403][ T2148] ip6tnl11: left promiscuous mode
[  666.221099][ T2148] bond45: left promiscuous mode
[  666.222718][ T2148] geneve5: left promiscuous mode
[  666.224651][ T2148] bond46: left promiscuous mode
[  666.226401][ T2148] bond47: left promiscuous mode
[  666.228322][ T2148] bond48: left promiscuous mode
[  666.230311][ T2148] bridge22: left promiscuous mode
[  666.232238][ T2148] vlan7: left promiscuous mode
[  666.234202][ T2148] bond0: left promiscuous mode
[  666.236067][ T2148] veth40: left promiscuous mode
[  666.237906][ T2148] veth41: left promiscuous mode
[  666.239542][ T2148] veth42: left promiscuous mode
[  666.241149][ T2148] veth43: left promiscuous mode
[  666.242746][ T2148] mac80211_hwsim hwsim71 wlan0: left promiscuous mode
[  666.245473][ T2148] bridge23: left promiscuous mode
[  666.247310][ T2148] bond49: left promiscuous mode
[  666.248970][ T2148] bridge24: left promiscuous mode
[  666.250654][ T2148] bond50: left promiscuous mode
[  666.252532][ T2148] ip6gre7: left promiscuous mode
[  666.254608][ T2148] bond51: left promiscuous mode
[  666.256281][ T2148] bond52: left promiscuous mode
[  666.257918][ T2148] vlan0: left promiscuous mode
[  666.259474][ T2148] erspan0: left promiscuous mode
[  666.261184][ T2148] bridge25: left promiscuous mode
[  666.262833][ T2148] vti0: left promiscuous mode
[  666.265340][ T2148] vlan1: left promiscuous mode
[  666.267009][ T2148] bond53: left promiscuous mode
[  666.268784][ T2148] bond54: left promiscuous mode
[  666.270462][ T2148] vti60: left promiscuous mode
[  666.272083][ T2148] bond55: left promiscuous mode
[  666.274312][ T2148] bond56: left promiscuous mode
[  666.276375][ T2148] bond57: left promiscuous mode
[  666.278073][ T2148] ipip3: left promiscuous mode
[  666.279783][ T2148] vlan8: left promiscuous mode
[  666.281337][ T2148] bond58: left promiscuous mode
[  666.283155][ T2148] bond59: left promiscuous mode
[  666.284920][ T2148] bridge26: left promiscuous mode
[  666.286598][ T2148] syztnl1: left promiscuous mode
[  666.288225][ T2148] bond60: left promiscuous mode
[  666.289819][ T2148] mac80211_hwsim hwsim75 wlan21: left promiscuous mode
[  666.292224][ T2148] @: left promiscuous mode
[  666.294055][ T2148] xfrm2: left promiscuous mode
[  666.295745][ T2148] bond61: left promiscuous mode
[  666.297383][ T2148] macvlan0: left promiscuous mode
[  666.299123][ T2148] bond62: left promiscuous mode
[  666.300799][ T2148] mac80211_hwsim hwsim79 wlan22: left promiscuous mode
[  666.303518][ T2148] mac80211_hwsim hwsim80 wlan23: left promiscuous mode
[  666.305923][ T2148] bond63: left promiscuous mode
[  666.307528][ T2148] bond64: left promiscuous mode
[  666.309161][ T2148] vxlan3: left promiscuous mode
[  666.310810][ T2148] bridge27: left promiscuous mode
[  666.312732][ T2148] bridge28: left promiscuous mode
[  666.315196][ T2148] macvlan1: left promiscuous mode
[  666.316982][ T2148] ip6gretap3: left promiscuous mode
[  666.318814][ T2148] bond65: left promiscuous mode
[  666.320652][ T2148] gtp2: left promiscuous mode
[  666.322506][ T2148] gre5: left promiscuous mode
[  666.324246][ T2148] bridge29: left promiscuous mode
[  666.326088][ T2148] bond66: left promiscuous mode
[  666.327714][ T2148] bridge30: left promiscuous mode
[  666.329539][ T2148] bond67: left promiscuous mode
[  666.331452][ T2148] mac80211_hwsim hwsim85 wlan24: left promiscuous mode
[  666.334222][ T2148] veth44: left promiscuous mode
[  666.335886][ T2148] veth45: left promiscuous mode
[  666.337512][ T2148] mac80211_hwsim hwsim86 wlan25: left promiscuous mode
[  666.339779][ T2148] mac80211_hwsim hwsim87 wlan26: left promiscuous mode
[  666.341996][ T2148] mac80211_hwsim hwsim88 wlan27: left promiscuous mode
[  666.344347][ T2148] mac80211_hwsim hwsim89 wlan28: left promiscuous mode
[  666.346566][ T2148] mac80211_hwsim hwsim90 wlan29: left promiscuous mode
[  666.348782][ T2148] mac80211_hwsim hwsim91 wlan30: left promiscuous mode
[  666.350959][ T2148] mac80211_hwsim hwsim92 wlan31: left promiscuous mode
[  666.353501][ T2148] mac80211_hwsim hwsim93 wlan32: left promiscuous mode
[  666.356019][ T2148] mac80211_hwsim hwsim94 wlan33: left promiscuous mode
[  666.358334][ T2148] mac80211_hwsim hwsim95 wlan34: left promiscuous mode
[  666.360588][ T2148] mac80211_hwsim hwsim96 wlan35: left promiscuous mode
[  666.362938][ T2148] mac80211_hwsim hwsim97 wlan36: left promiscuous mode
[  666.365566][ T2148] mac80211_hwsim hwsim98 wlan37: left promiscuous mode
[  666.367803][ T2148] bridge31: left promiscuous mode
[  666.369487][ T2148] veth46: left promiscuous mode
[  666.371137][ T2148] veth47: left promiscuous mode
[  666.372737][ T2148] vti61: left promiscuous mode
[  666.375072][ T2148] veth48: left promiscuous mode
[  666.376706][ T2148] veth49: left promiscuous mode
[  666.378378][ T2148] bond68: left promiscuous mode
[  666.380120][ T2148] bond69: left promiscuous mode
[  666.382014][ T2148] bond70: left promiscuous mode
[  666.384056][ T2148] ip6tnl12: left promiscuous mode
[  666.386030][ T2148] bond71: left promiscuous mode
[  666.387895][ T2148] #: left promiscuous mode
[  666.389438][ T2148] mac80211_hwsim hwsim103 wlan38: left promiscuous mode
[  666.391690][ T2148] macsec2: left promiscuous mode
[  666.393800][ T2148] gre6: left promiscuous mode
[  666.395374][ T2148] mac80211_hwsim hwsim104 wlan39: left promiscuous mode
[  666.397797][ T2148] mac80211_hwsim hwsim105 wlan40: left promiscuous mode
[  666.400347][ T2148] netdevsim netdevsim1 eth0: left promiscuous mode
[  666.402522][ T2148] netdevsim netdevsim1 eth1: left promiscuous mode
[  666.404880][ T2148] netdevsim netdevsim1 eth2: left promiscuous mode
[  666.407272][ T2148] netdevsim netdevsim1 eth3: left promiscuous mode
[  666.409384][ T2148] bond72: left promiscuous mode
[  666.411085][ T2148] bridge32: left promiscuous mode
[  666.412875][ T2148] bridge33: left promiscuous mode
[  666.415514][ T2148] bridge34: left promiscuous mode
[  666.417676][ T2148] bridge35: left promiscuous mode
[  666.419815][ T2148] bond73: left promiscuous mode
[  666.422006][ T2148] bridge36: left promiscuous mode
[  666.427245][ T2148] bridge37: left promiscuous mode
[  666.429049][ T2148] mac80211_hwsim hwsim108 wlan42: left promiscuous mode
[  666.431338][ T2148] mac80211_hwsim hwsim109 wlan43: left promiscuous mode
[  666.434336][ T2148] mac80211_hwsim hwsim110 wlan44: left promiscuous mode
[  666.436653][ T2148] pimreg9: left promiscuous mode
[  666.438399][ T2148] bond74: left promiscuous mode
[  666.440095][ T2148] veth50: left promiscuous mode
[  666.441809][ T2148] veth51: left promiscuous mode
[  666.443838][ T2148] bridge38: left promiscuous mode
[  666.445738][ T2148] vlan3: left promiscuous mode
[  666.447408][ T2148] bond75: left promiscuous mode
[  666.449239][ T2148] batadv0: left promiscuous mode
[  666.451091][ T2148] bridge39: left promiscuous mode
[  666.452872][ T2148] bridge40: left promiscuous mode
[  666.455151][ T2148] bridge41: left promiscuous mode
[  666.457055][ T2148] bond76: left promiscuous mode
[  666.458976][ T2148] >: left promiscuous mode
[  666.460664][ T2148] gtp3: left promiscuous mode
[  666.462419][ T2148] bond77: left promiscuous mode
[  666.464437][ T2148] batadv1: left promiscuous mode
[  666.466157][ T2148] bond78: left promiscuous mode
[  666.467980][ T2148] bond79: left promiscuous mode
[  666.469628][ T2148] gretap6: left promiscuous mode
[  666.471422][ T2148] bond80: left promiscuous mode
[  666.473563][ T2148] bond81: left promiscuous mode
[  666.475332][ T2148] gtp4: left promiscuous mode
[  666.476963][ T2148] ip6gre8: left promiscuous mode
[  666.478708][ T2148] gtp5: left promiscuous mode
[  666.480421][ T2148] vlan9: left promiscuous mode
[  666.482149][ T2148] bond82: left promiscuous mode
[  666.484991][ T2148] veth52: left promiscuous mode
[  666.486657][ T2148] veth53: left promiscuous mode
[  666.488286][ T2148] bridge42: left promiscuous mode
[  666.490054][ T2148] veth54: left promiscuous mode
[  666.491869][ T2148] veth55: left promiscuous mode
[  666.494735][ T2148] dvmrp6: left promiscuous mode
[  666.496567][ T2148] bond83: left promiscuous mode
[  666.498232][ T2148] bridge43: left promiscuous mode
[  666.499926][ T2148] gtp6: left promiscuous mode
[  666.501584][ T2148] bridge44: left promiscuous mode
[  666.504720][ T2148] mac80211_hwsim hwsim123 wlan1: left promiscuous mode
[  666.507030][ T2148] veth56: left promiscuous mode
[  666.508797][ T2148] veth57: left promiscuous mode
[  666.510528][ T2148] macvtap2: left promiscuous mode
[  666.512407][ T2148] macvtap2: left allmulticast mode
[  666.514812][ T2148] bond84: left promiscuous mode
[  666.516823][ T2148] bridge45: left promiscuous mode
[  666.518500][ T2148] ip6gre9: left promiscuous mode
[  666.520153][ T2148] bridge46: left promiscuous mode
[  666.521974][ T2148] mac80211_hwsim hwsim125 wlan45: left promiscuous mode
[  666.524587][ T2148] bond85: left promiscuous mode
[  666.526344][ T2148] macvlan2: left promiscuous mode
[  666.528235][ T2148] macvlan2: left allmulticast mode
[  666.530078][ T2148] bridge47: left promiscuous mode
[  666.531895][ T2148] vlan10: left promiscuous mode
[  666.533926][ T2148] geneve0: left promiscuous mode
[  666.535740][ T2148] xfrm3: left promiscuous mode
[  666.537406][ T2148] batadv2: left promiscuous mode
[  666.539473][ T2148] gtp7: left promiscuous mode
[  666.541165][ T2148] team_slave_0: left promiscuous mode
[  666.543396][ T2148] bond86: left promiscuous mode
[  666.545268][ T2148] bond87: left promiscuous mode
[  666.546986][ T2148] bridge48: left promiscuous mode
[  666.549018][ T2148] xfrm4: left promiscuous mode
[  666.551104][ T2148] vlan11: left promiscuous mode
[  666.554400][ T2148] ip6tnl14: left allmulticast mode
[  666.573287][ T2149] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  666.578519][ T7290] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  666.581608][ T7290] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  666.584893][ T7290] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  666.589024][ T7290] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  666.618617][ T2156] netlink: 'syz.1.7536': attribute type 1 has an invalid length.
[  666.639757][ T2156] bond91: entered promiscuous mode
[  666.641453][ T2156] bond91: entered allmulticast mode
[  666.643803][ T2156] 8021q: adding VLAN 0 to HW filter on device bond91
[  666.648244][ T2158] netlink: 'syz.0.7537': attribute type 4 has an invalid length.
[  666.721043][ T2171] nbd: couldn't find a device at index 2
[  666.743427][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  666.851651][ T2177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7543'.
[  666.856657][ T2177] nbd: must specify at least one socket
[  666.875921][ T2177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7543'.
[  666.980121][ T2195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7546'.
[  666.993532][ T2195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7546'.
[  667.017011][ T2197] ip6tnl0: Caught tx_queue_len zero misconfig
[  667.049449][ T2199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7546'.
[  667.064537][ T2197] veth1_to_team: Caught tx_queue_len zero misconfig
[  667.095697][ T2197] ip6gre0: entered promiscuous mode
[  667.100246][ T2197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7547'.
[  667.129254][ T2204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.133350][ T2204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.315409][ T2220] IPv6: NLM_F_REPLACE set, but no existing node found!
[  667.339338][ T2222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7554'.
[  667.486323][ T2227] lo speed is unknown, defaulting to 1000
[  667.632894][ T2236] netlink: del zone limit has 8 unknown bytes
[  667.635150][ T2235] netlink: del zone limit has 8 unknown bytes
[  667.736102][ T2248] netlink: 'syz.0.7561': attribute type 10 has an invalid length.
[  667.779685][ T2250] netlink: 'syz.0.7562': attribute type 1 has an invalid length.
[  667.859168][ T2256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7565'.
[  667.957551][ T2265] netlink: 'syz.2.7568': attribute type 11 has an invalid length.
[  667.967535][ T2265] netlink: 'syz.2.7568': attribute type 11 has an invalid length.
[  668.177516][ T2283] netlink: 'syz.1.7574': attribute type 10 has an invalid length.
[  668.228406][ T2285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.239072][ T2285] netlink: 'syz.2.7575': attribute type 1 has an invalid length.
[  668.245197][ T2287] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  668.265941][ T2285] 8021q: adding VLAN 0 to HW filter on device bond106
[  668.286310][ T2285] bond106: (slave gretap8): making interface the new active one
[  668.289219][ T2285] bond106: (slave gretap8): Enslaving as an active interface with an up link
[  668.382036][ T2297] nbd: nbd1 already in use
[  671.402192][ T2299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  671.490074][ T2317] netlink: 'syz.1.7583': attribute type 1 has an invalid length.
[  671.520733][ T2317] 8021q: adding VLAN 0 to HW filter on device bond92
[  671.536883][ T2317] bond92: (slave geneve6): making interface the new active one
[  671.541128][ T2317] bond92: (slave geneve6): Enslaving as an active interface with an up link
[  671.545187][ T5662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.555292][ T5662] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.570999][ T5662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.582894][ T5662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.587307][ T2322] __nla_validate_parse: 6 callbacks suppressed
[  671.587314][ T2322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7587'.
[  671.592969][ T2322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7587'.
[  671.686232][ T2336] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  671.738223][ T2339] netlink: 'syz.1.7591': attribute type 13 has an invalid length.
[  671.740847][ T2339] netlink: 'syz.1.7591': attribute type 17 has an invalid length.
[  671.773652][ T2339] wireguard: wg0: Could not create IPv4 socket
[  671.775656][ T2339] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  671.784073][ T8577] lo speed is unknown, defaulting to 1000
[  671.786699][ T8577] syz2: Port: 1 Link ACTIVE
[  671.794396][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7594'.
[  671.799897][ T2346] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  671.809122][ T8577] lo speed is unknown, defaulting to 1000
[  671.821351][ T2340] pim6reg1: entered promiscuous mode
[  671.825605][ T2340] pim6reg1: entered allmulticast mode
[  671.858119][ T2351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7595'.
[  671.861547][ T2351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7595'.
[  671.948236][ T2358] mac80211_hwsim hwsim115 syzkaller0: left promiscuous mode
[  671.954340][ T2358] mac80211_hwsim hwsim115 syzkaller0: left allmulticast mode
[  671.959278][ T2358] macvlan0: left promiscuous mode
[  671.961601][ T2358] macvlan0: left allmulticast mode
[  671.989973][ T2358] ip6gre0: left promiscuous mode
[  671.993701][ T2358] ip6gre0: left allmulticast mode
[  672.009243][ T2367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7597'.
[  672.018653][ T2358] bond71: left promiscuous mode
[  672.035630][ T2358] veth37: left promiscuous mode
[  672.041147][ T2358] veth37: left allmulticast mode
[  672.049864][ T2358] netlink: 'syz.0.7597': attribute type 3 has an invalid length.
[  672.166723][ T2376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7602'.
[  672.176092][ T2374] lo speed is unknown, defaulting to 1000
[  672.237185][ T2379] netlink: 'syz.0.7603': attribute type 10 has an invalid length.
[  672.240164][ T2379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7603'.
[  672.297968][ T2380] netlink: 'syz.0.7603': attribute type 10 has an invalid length.
[  672.463182][ T2379] nbd0: detected capacity change from 0 to 63
[  672.469841][   T58] block nbd0: Receive control failed (result -104)
[  672.472308][ T8114] block nbd0: Receive control failed (result -32)
[  672.503960][ T7290] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  672.564598][ T2395] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7604'.
[  672.649549][ T2399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7607'.
[  672.735096][ T2406] sysfs: cannot create duplicate filename '/class/ieee80211/1^!YVg찔
[  672.735096][ T2406] 3UH5rBn'
[  672.741887][ T2406] CPU: 1 UID: 0 PID: 2406 Comm: syz.0.7608 Not tainted syzkaller #0 PREEMPT(full) 
[  672.741899][ T2406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  672.741903][ T2406] Call Trace:
[  672.741907][ T2406]  <TASK>
[  672.741911][ T2406]  dump_stack_lvl+0xe8/0x150
[  672.741923][ T2406]  sysfs_warn_dup+0x8e/0xa0
[  672.741933][ T2406]  sysfs_do_create_link_sd+0xc0/0x110
[  672.741942][ T2406]  device_add_class_symlinks+0x1cf/0x240
[  672.741952][ T2406]  device_add+0x475/0xbb0
[  672.741962][ T2406]  wiphy_register+0x1dc5/0x2dc0
[  672.741979][ T2406]  ? __pfx_wiphy_register+0x10/0x10
[  672.741988][ T2406]  ? __pfx_netdev_run_todo+0x10/0x10
[  672.741999][ T2406]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  672.742010][ T2406]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  672.742022][ T2406]  ieee80211_register_hw+0x3d82/0x4a70
[  672.742039][ T2406]  ? ieee80211_register_hw+0x1931/0x4a70
[  672.742065][ T2406]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  672.742077][ T2406]  ? __asan_memset+0x22/0x50
[  672.742086][ T2406]  ? __hrtimer_setup+0x1b7/0x260
[  672.742094][ T2406]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  672.742105][ T2406]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  672.742125][ T2406]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  672.742132][ T2406]  ? kstrndup+0xbf/0x160
[  672.742143][ T2406]  hwsim_new_radio_nl+0xf6a/0x1c00
[  672.742160][ T2406]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  672.742172][ T2406]  ? rcu_is_watching+0x15/0xb0
[  672.742181][ T2406]  ? trace_kmalloc+0x2a/0xf0
[  672.742193][ T2406]  ? __nla_parse+0x40/0x60
[  672.742204][ T2406]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  672.742212][ T2406]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  672.742222][ T2406]  genl_family_rcv_msg_doit+0x22a/0x330
[  672.742232][ T2406]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  672.742245][ T2406]  ? bpf_lsm_capable+0x9/0x20
[  672.742252][ T2406]  ? security_capable+0x7e/0x2c0
[  672.742263][ T2406]  genl_rcv_msg+0x61c/0x7a0
[  672.742273][ T2406]  ? __pfx_genl_rcv_msg+0x10/0x10
[  672.742279][ T2406]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  672.742296][ T2406]  netlink_rcv_skb+0x232/0x4b0
[  672.742306][ T2406]  ? __pfx_genl_rcv_msg+0x10/0x10
[  672.742314][ T2406]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  672.742329][ T2406]  ? down_read+0x270/0x2e0
[  672.742336][ T2406]  ? genl_rcv+0xd/0x40
[  672.742343][ T2406]  genl_rcv+0x28/0x40
[  672.742349][ T2406]  netlink_unicast+0x75c/0x8e0
[  672.742362][ T2406]  netlink_sendmsg+0x813/0xb40
[  672.742375][ T2406]  ? __pfx_netlink_sendmsg+0x10/0x10
[  672.742386][ T2406]  ? aa_sock_msg_perm+0xf1/0x1b0
[  672.742396][ T2406]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  672.742407][ T2406]  ____sys_sendmsg+0x972/0x9f0
[  672.742417][ T2406]  ? __might_fault+0xaf/0x130
[  672.742428][ T2406]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.742441][ T2406]  ? import_iovec+0x73/0xa0
[  672.742452][ T2406]  ___sys_sendmsg+0x2a5/0x360
[  672.742461][ T2406]  ? __lock_acquire+0x6b5/0x2cf0
[  672.742471][ T2406]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.742483][ T2406]  ? futex_wait+0x2a2/0x390
[  672.742503][ T2406]  ? __fget_files+0x2a/0x420
[  672.742511][ T2406]  ? __fget_files+0x3a0/0x420
[  672.742524][ T2406]  __x64_sys_sendmsg+0x1bd/0x2a0
[  672.742535][ T2406]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  672.742567][ T2406]  ? rcu_is_watching+0x15/0xb0
[  672.742579][ T2406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.742586][ T2406]  do_syscall_64+0x15f/0xf80
[  672.742596][ T2406]  ? trace_irq_disable+0x3b/0x140
[  672.742608][ T2406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.742615][ T2406] RIP: 0033:0x7fe250f9ce59
[  672.742623][ T2406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.742629][ T2406] RSP: 002b:00007fe251d95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.742638][ T2406] RAX: ffffffffffffffda RBX: 00007fe251216090 RCX: 00007fe250f9ce59
[  672.742643][ T2406] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  672.742648][ T2406] RBP: 00007fe251032d6f R08: 0000000000000000 R09: 0000000000000000
[  672.742652][ T2406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  672.742656][ T2406] R13: 00007fe251216128 R14: 00007fe251216090 R15: 00007fff16b9d418
[  672.742668][ T2406]  </TASK>
[  672.911255][ T2408] ip6gre0: left promiscuous mode
[  672.923839][ T2408] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  672.941165][ T2412] bond93: entered promiscuous mode
[  673.022926][ T2426] netlink: 'syz.2.7613': attribute type 5 has an invalid length.
[  673.043565][ T2429] mac80211_hwsim hwsim115 syzkaller0: entered promiscuous mode
[  673.045983][ T2429] mac80211_hwsim hwsim115 syzkaller0: entered allmulticast mode
[  673.131725][ T2431] lo speed is unknown, defaulting to 1000
[  673.431106][ T2453] netlink: 'syz.2.7618': attribute type 13 has an invalid length.
[  673.434120][ T2453] netlink: 'syz.2.7618': attribute type 17 has an invalid length.
[  673.698877][ T5662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  673.703906][ T5662] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  673.754481][ T2453] veth0_macvtap: left promiscuous mode
[  673.757456][ T2453] veth0_macvtap: entered promiscuous mode
[  673.771260][ T2453] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  673.890665][ T2429] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  674.284531][ T2474] bond0: Caught tx_queue_len zero misconfig
[  674.423799][ T8577] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  674.434036][ T2479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  674.445038][ T2479] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  674.619293][ T2494] ip6gre8: entered promiscuous mode
[  674.621107][ T2494] ip6gre8: entered allmulticast mode
[  674.834307][ T2506] netlink: 'syz.0.7632': attribute type 2 has an invalid length.
[  674.965086][ T7290] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  674.972874][ T7290] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  675.004865][ T6627] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  675.065195][ T5670] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  675.133616][ T5670] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  675.166560][ T2556] vlan20: entered promiscuous mode
[  675.185183][ T2559] xt_hl: Unknown Hop Limit match mode: 206
[  675.247125][ T2571] lo speed is unknown, defaulting to 1000
[  675.474156][ T2587] netem: change failed
[  675.481107][ T2586] lo speed is unknown, defaulting to 1000
[  675.662872][ T5444] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  675.667006][ T5444] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  675.672008][ T5444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  675.679195][ T5444] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  676.328355][ T2608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.583271][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  676.732417][ T2643] __nla_validate_parse: 32 callbacks suppressed
[  676.732431][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7660'.
[  676.755173][ T2643] openvswitch: : Dropping previously announced user features
[  676.784348][ T2653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7662'.
[  676.797851][ T2653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7662'.
[  676.839591][ T2664] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7663'.
[  676.902395][ T2680] bridge62: entered promiscuous mode
[  677.151936][ T2698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7671'.
[  677.157595][ T2698] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7671'.
[  677.275009][ T2713] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7674'.
[  677.285259][ T2718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7675'.
[  677.321756][ T2720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7676'.
[  677.350786][ T2723] @0: renamed from bond_slave_1
[  677.555760][ T2746] openvswitch: netlink: Message has 151 unknown bytes.
[  677.703143][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  677.800684][   T34] audit: type=1804 audit(1778902989.371:27): pid=2748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7682" name="/newroot/2735/memory.events" dev="tmpfs" ino=13956 res=1 errno=0
[  677.811019][   T34] audit: type=1800 audit(1778902989.371:28): pid=2748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7682" name="memory.events" dev="tmpfs" ino=13956 res=0 errno=0
[  677.922805][ T2760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7685'.
[  678.055780][ T2770] validate_nla: 28 callbacks suppressed
[  678.055790][ T2770] netlink: 'syz.2.7689': attribute type 5 has an invalid length.
[  678.060349][ T2770] netlink: 'syz.2.7689': attribute type 5 has an invalid length.
[  678.190029][ T2785] netlink: 'syz.2.7693': attribute type 10 has an invalid length.
[  678.278019][ T2798] netlink: 'syz.0.7696': attribute type 83 has an invalid length.
[  678.284829][ T2798] dvmrp0: entered allmulticast mode
[  678.327929][ T2800] IPVS: Unknown mcast interface: macsec0
[  678.342750][ T2801] xt_CT: You must specify a L4 protocol and not use inversions on it
[  678.383649][ T2811] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  678.386293][ T2811] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  678.388731][ T2811] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  679.134692][ T2843] bond107: (slave vxcan1): The slave device specified does not support setting the MAC address
[  679.138397][ T2843] bond107: (slave vxcan1): Error -95 calling set_mac_address
[  679.143826][    C0] ip6_tunnel: ip6gre8 xmit: Local address not yet configured!
[  679.146176][ T2846] netlink: 'syz.0.7707': attribute type 1 has an invalid length.
[  679.167541][ T2846] 8021q: adding VLAN 0 to HW filter on device bond73
[  679.181363][ T2846] bond73: (slave veth41): Enslaving as an active interface with a down link
[  679.194842][ T2848] macvlan1: entered promiscuous mode
[  679.198152][ T2848] macvlan1: entered allmulticast mode
[  679.200538][ T2848] bond107: (slave macvlan1): Error -98 calling set_mac_address
[  679.231926][ T2853] vlan7: entered promiscuous mode
[  679.251065][ T2843] ip6tnl11: entered allmulticast mode
[  679.301679][ T2855] IPVS: set_ctl: invalid protocol: 20831 10.1.1.0:20001
[  679.307374][ T2855] netlink: 'syz.2.7710': attribute type 1 has an invalid length.
[  679.309728][ T2855] netlink: 'syz.2.7710': attribute type 1 has an invalid length.
[  679.346221][ T2859] bond74: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  679.350132][ T2859] bond74 (unregistering): Released all slaves
[  679.385155][ T2868] netlink: 'syz.2.7713': attribute type 1 has an invalid length.
[  680.305553][ T2941] vlan7: entered promiscuous mode
[  680.561422][ T2956] vlan7: entered allmulticast mode
[  680.563772][ T2956] macvlan1: entered allmulticast mode
[  680.667271][ T2968] bond108 (unregistering): Released all slaves
[  680.696768][ T2966] bond74: invalid ARP target 0.0.0.0 specified for addition
[  680.699167][ T2966] bond74: option arp_ip_target: invalid value (0)
[  680.702656][ T2966] bond74 (unregistering): Released all slaves
[  680.898099][ T2985] lo speed is unknown, defaulting to 1000
[  680.904253][ T2988] netlink: 'syz.2.7738': attribute type 2 has an invalid length.
[  680.909518][ T2989] netlink: 'syz.2.7738': attribute type 2 has an invalid length.
[  681.230295][ T3014] macsec0: entered allmulticast mode
[  681.232022][ T3014] batadv0: entered allmulticast mode
[  681.234642][ T3014] 8021q: adding VLAN 0 to HW filter on device macsec0
[  681.237319][ T3014] batadv0: left allmulticast mode
[  681.346263][ T3021] 8021q: adding VLAN 0 to HW filter on device bond94
[  681.535991][ T3023] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  681.539107][ T3023] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  681.545750][ T3023] vlan19: left promiscuous mode
[  681.548367][ T3023] bond98: left promiscuous mode
[  681.550620][ T3023] vlan19: left allmulticast mode
[  681.552835][ T3023] bond98: left allmulticast mode
[  681.555243][ T3023] bond99: left promiscuous mode
[  681.557256][ T3023] bond105: left promiscuous mode
[  681.558926][ T3023] bond105: left allmulticast mode
[  681.560660][ T3023] vti4: left promiscuous mode
[  681.562663][ T3023] ip6gre8: left promiscuous mode
[  681.564555][ T3023] ip6gre8: left allmulticast mode
[  681.569045][ T3023] bridge62: left promiscuous mode
[  681.576438][ T3023] ip6tnl11: left allmulticast mode
[  681.590175][ T5444] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.596211][ T5444] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.602278][ T5444] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.606162][ T5444] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  681.745793][ T3036] vlan8: entered promiscuous mode
[  681.749374][ T3038] __nla_validate_parse: 35 callbacks suppressed
[  681.749386][ T3038] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7752'.
[  681.840716][ T3053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  681.848175][ T3053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  681.924358][ T7589] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  681.948854][ T3065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7760'.
[  681.952266][ T3065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7760'.
[  682.089153][ T3078] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7764'.
[  682.091493][ T3076] vlan13: entered promiscuous mode
[  682.193217][ T3084] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7765'.
[  682.411520][ T3105] vlan13: entered promiscuous mode
[  682.478830][ T3107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7773'.
[  682.478936][ T3108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7773'.
[  682.526405][ T3111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7774'.
[  682.529492][ T3111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7774'.
[  682.581168][ T3116] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  682.619300][ T3123] bond95: entered promiscuous mode
[  682.621274][ T3123] 8021q: adding VLAN 0 to HW filter on device bond95
[  682.651717][ T3126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7777'.
[  682.749793][ T3129] bond109 (unregistering): Released all slaves
[  683.080574][ T3143] lo speed is unknown, defaulting to 1000
[  683.203826][ T3152] validate_nla: 12 callbacks suppressed
[  683.203841][ T3152] netlink: 'syz.0.7783': attribute type 1 has an invalid length.
[  683.362032][ T3156] netlink: 'syz.0.7784': attribute type 2 has an invalid length.
[  683.366862][ T3156] netlink: 'syz.0.7784': attribute type 9 has an invalid length.
[  683.530578][ T3171] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  683.541121][ T3171] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  683.549082][ T3171] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  683.627951][ T3187] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  683.692612][ T3196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  683.698642][ T3196] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  683.701806][ T3196] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  683.817925][ T3202] netlink: 'syz.0.7798': attribute type 2 has an invalid length.
[  683.820793][ T3202] netlink: 'syz.0.7798': attribute type 8 has an invalid length.
[  683.913742][ T3214] netlink: 'syz.1.7802': attribute type 3 has an invalid length.
[  683.967680][ T3224] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  683.970864][ T3223] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  684.077535][ T3229] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  684.082583][ T3230] netlink: 'syz.2.7803': attribute type 1 has an invalid length.
[  684.109971][ T3232] tipc: Bearer <eth:xfrm0>: already 2 bearers with priority 10
[  684.113766][ T3232] tipc: Bearer <eth:xfrm0>: trying with adjusted priority
[  684.119995][ T3232] tipc: Enabling of bearer <eth:xfrm0> rejected, max 3 bearers permitted
[  684.135057][ T3237] lo speed is unknown, defaulting to 1000
[  684.196558][ T3241] netlink: 'syz.1.7810': attribute type 1 has an invalid length.
[  684.232473][ T3241] bond96: entered promiscuous mode
[  684.237719][ T3241] 8021q: adding VLAN 0 to HW filter on device bond96
[  684.257189][ T3241] 8021q: adding VLAN 0 to HW filter on device bond96
[  684.262191][ T3241] bond96: (slave vcan2): The slave device specified does not support setting the MAC address
[  684.272545][ T3241] bond96: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  684.279161][ T3241] bond96: (slave vcan2): making interface the new active one
[  684.281427][ T3241] vcan2: entered promiscuous mode
[  684.284161][ T3241] bond96: (slave vcan2): Enslaving as an active interface with an up link
[  684.668847][ T3255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  684.673613][ T3255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  684.854515][ T3280] netlink: 'syz.1.7816': attribute type 1 has an invalid length.
[  684.918286][ T3280] netlink: 'syz.1.7816': attribute type 10 has an invalid length.
[  685.025199][ T3288] bond109: option primary_reselect: invalid value (133)
[  685.029268][ T3288] bond109 (unregistering): Released all slaves
[  685.486922][ T3340] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  685.713903][ T3354] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  686.107257][ T3389] xt_l2tp: invalid flags combination: 8
[  686.121096][ T3389] gre0: entered promiscuous mode
[  686.122754][ T3389] gre0: entered allmulticast mode
[  686.127413][ T3389] tipc: Resetting bearer <eth:gre0>
[  686.129592][ T3389] tipc: Resetting bearer <eth:gre0>
[  686.400328][ T3422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  686.504714][ T3437] openvswitch: netlink: Missing key (keys=40, expected=80)
[  686.509484][ T3437] openvswitch: netlink: Missing key (keys=40, expected=80)
[  686.711103][ T3452] bond98 (unregistering): Released all slaves
[  686.751432][ T3462] bond109: (slave bridge63): making interface the new active one
[  686.755458][ T3462] bond109: (slave bridge63): Enslaving as an active interface with an up link
[  686.764132][ T3462] ip6gretap5: entered promiscuous mode
[  686.766109][ T3462] ip6gretap5: entered allmulticast mode
[  686.774034][ T3462] bond109: (slave ip6gretap5): Enslaving as an active interface with an up link
[  686.810186][ T3469] __nla_validate_parse: 38 callbacks suppressed
[  686.810200][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7863'.
[  686.821371][ T5662] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  686.827347][ T5662] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  686.830144][ T5662] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  686.837764][ T5662] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  686.981841][ T3482] openvswitch: netlink: IP tunnel dst address not specified
[  687.028474][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.031847][ T3488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.035979][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.039195][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.051007][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.051152][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.056161][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.062224][ T3485] lo speed is unknown, defaulting to 1000
[  687.085881][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7869'.
[  687.355976][ T3498] 8021q: adding VLAN 0 to HW filter on device bond75
[  687.392569][ T3498] bond75: (slave veth43): Enslaving as an active interface with a down link
[  687.401326][ T3498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7872'.
[  687.952676][ T3530] pim6reg99999991: entered allmulticast mode
[  688.053844][ T3543] tunl0: entered promiscuous mode
[  688.057587][ T3540] IPVS: Unknown mcast interface: syz_tun
[  688.082964][ T3541] mac80211_hwsim hwsim115 syzkaller0: left promiscuous mode
[  688.086387][ T3541] mac80211_hwsim hwsim115 syzkaller0: left allmulticast mode
[  688.170021][ T3551] bridge0: left allmulticast mode
[  688.445871][ T3578] validate_nla: 41 callbacks suppressed
[  688.445885][ T3578] netlink: 'syz.0.7896': attribute type 1 has an invalid length.
[  688.450333][ T3578] netlink: 'syz.0.7896': attribute type 2 has an invalid length.
[  688.465907][ T3578] netlink: 'syz.0.7896': attribute type 1 has an invalid length.
[  688.525841][ T3590] openvswitch: netlink: Key type 326 is out of range max 32
[  688.525962][ T3585] lo speed is unknown, defaulting to 1000
[  688.531497][ T3591] netlink: 'syz.1.7902': attribute type 4 has an invalid length.
[  688.536088][ T3592] netlink: 'syz.1.7902': attribute type 4 has an invalid length.
[  688.541816][ T6627] lo speed is unknown, defaulting to 1000
[  688.545637][ T8577] lo speed is unknown, defaulting to 1000
[  688.547839][ T6627] lo speed is unknown, defaulting to 1000
[  688.740924][ T3605] xt_CT: No such helper "snmp_trap"
[  688.882629][ T3612] mac80211_hwsim hwsim115 syzkaller0: entered promiscuous mode
[  688.885985][ T3612] mac80211_hwsim hwsim115 syzkaller0: entered allmulticast mode
[  689.044613][ T3627] lo speed is unknown, defaulting to 1000
[  689.476653][ T3635] vti3: entered promiscuous mode
[  689.478884][ T3635] vti3: entered allmulticast mode
[  689.579084][ T3644] lo speed is unknown, defaulting to 1000
[  689.589715][ T3644] lo speed is unknown, defaulting to 1000
[  689.592029][ T3644] lo speed is unknown, defaulting to 1000
[  689.697438][ T3644] infiniband sqz0: set down
[  689.699399][ T6627] lo speed is unknown, defaulting to 1000
[  689.701868][ T3644] infiniband sqz0: added lo
[  689.717887][ T3644] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  689.724019][ T3644] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  689.730760][ T3644] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  689.764149][ T3644] RDS/IB: sqz0: added
[  689.766181][ T3644] smc: adding ib device sqz0 with port count 1
[  689.768791][ T3644] smc:    ib device sqz0 port 1 has no pnetid
[  689.771387][ T6627] lo speed is unknown, defaulting to 1000
[  689.775792][ T3644] lo speed is unknown, defaulting to 1000
[  689.940602][ T3644] lo speed is unknown, defaulting to 1000
[  690.034972][ T3644] lo speed is unknown, defaulting to 1000
[  704.627905][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  704.634111][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  704.637534][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  704.641430][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  704.645907][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  704.716379][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  704.744770][ T3653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  704.748011][ T3653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  704.752189][ T3662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  704.759796][ T3659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  704.766747][ T3662] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  704.769131][ T3662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  704.770398][ T3659] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  704.775817][ T3659] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  704.779528][ T3659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  704.869737][ T3651] lo speed is unknown, defaulting to 1000
[  704.985188][ T3657] lo speed is unknown, defaulting to 1000
[  704.985899][ T3651] lo speed is unknown, defaulting to 1000
[  705.104284][ T3655] lo speed is unknown, defaulting to 1000
[  705.153316][ T3657] lo speed is unknown, defaulting to 1000
[  705.360583][ T3655] lo speed is unknown, defaulting to 1000
[  705.361208][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.365151][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.367669][ T3651] bridge_slave_0: entered allmulticast mode
[  705.370601][ T3651] bridge_slave_0: entered promiscuous mode
[  705.387946][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.391085][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.395055][ T3651] bridge_slave_1: entered allmulticast mode
[  705.399366][ T3651] bridge_slave_1: entered promiscuous mode
[  705.446842][ T3651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.456354][ T3651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.499004][ T3651] team0: Port device team_slave_0 added
[  705.509854][ T3651] team0: Port device team_slave_1 added
[  705.548316][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.550626][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.559921][ T3651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.570375][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  705.572865][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  705.582650][ T3651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  705.656100][ T3651] hsr_slave_0: entered promiscuous mode
[  705.658592][ T3651] hsr_slave_1: entered promiscuous mode
[  705.869620][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.872418][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state
[  705.875464][ T3657] bridge_slave_0: entered allmulticast mode
[  705.878357][ T3657] bridge_slave_0: entered promiscuous mode
[  705.894150][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.896663][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state
[  705.899325][ T3657] bridge_slave_1: entered allmulticast mode
[  705.902370][ T3657] bridge_slave_1: entered promiscuous mode
[  705.969156][ T3657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.984569][ T3657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  706.058922][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.062696][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state
[  706.066485][ T3655] bridge_slave_0: entered allmulticast mode
[  706.070743][ T3655] bridge_slave_0: entered promiscuous mode
[  706.077772][ T3657] team0: Port device team_slave_0 added
[  706.095009][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.098164][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state
[  706.101279][ T3655] bridge_slave_1: entered allmulticast mode
[  706.105852][ T3655] bridge_slave_1: entered promiscuous mode
[  706.110911][ T3657] team0: Port device team_slave_1 added
[  706.158508][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.161483][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.171235][ T3657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.177444][ T3655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  706.181699][ T3657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.185802][ T3657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.195227][ T3657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.201966][ T3655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  706.258195][ T3655] team0: Port device team_slave_0 added
[  706.275971][ T3655] team0: Port device team_slave_1 added
[  706.289853][ T3657] hsr_slave_0: entered promiscuous mode
[  706.292410][ T3657] hsr_slave_1: entered promiscuous mode
[  706.295318][ T3657] debugfs: 'hsr0' already exists in 'hsr'
[  706.297174][ T3657] Cannot create hsr debugfs directory
[  706.329830][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.332618][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.342663][ T3655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.357907][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.360834][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.369644][ T3655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.429675][ T3655] hsr_slave_0: entered promiscuous mode
[  706.432141][ T3655] hsr_slave_1: entered promiscuous mode
[  706.434702][ T3655] debugfs: 'hsr0' already exists in 'hsr'
[  706.436455][ T3655] Cannot create hsr debugfs directory
[  706.743246][ T5610] Bluetooth: hci3: command tx timeout
[  706.823438][ T3662] Bluetooth: hci5: command tx timeout
[  706.828216][ T5610] Bluetooth: hci4: command tx timeout
[  708.823474][ T3662] Bluetooth: hci3: command tx timeout
[  708.913549][ T3662] Bluetooth: hci5: command tx timeout
[  708.913752][ T5610] Bluetooth: hci4: command tx timeout
[  710.903589][ T5610] Bluetooth: hci3: command tx timeout
[  710.983480][ T5610] Bluetooth: hci5: command tx timeout
[  710.983513][ T3662] Bluetooth: hci4: command tx timeout
[  712.993595][ T5610] Bluetooth: hci3: command tx timeout
[  713.063454][ T5610] Bluetooth: hci4: command tx timeout
[  713.063679][ T3662] Bluetooth: hci5: command tx timeout
[  732.483357][ T5058] udevd[5058]: worker [1688] /devices/virtual/block/nbd0 is taking a long time
[  764.597586][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  764.604511][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  764.608154][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  764.611165][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  764.617130][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  764.757375][ T3709] lo speed is unknown, defaulting to 1000
[  764.834514][ T3709] lo speed is unknown, defaulting to 1000
[  765.098225][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.101159][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.104685][ T3709] bridge_slave_0: entered allmulticast mode
[  765.108474][ T3709] bridge_slave_0: entered promiscuous mode
[  765.112348][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.115660][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.118698][ T3709] bridge_slave_1: entered allmulticast mode
[  765.121481][ T3709] bridge_slave_1: entered promiscuous mode
[  765.140027][ T3709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  765.145834][ T3709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  765.163551][ T3709] team0: Port device team_slave_0 added
[  765.166809][ T3709] team0: Port device team_slave_1 added
[  765.182531][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.185010][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.192910][ T3709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.198345][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.200497][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  765.208794][ T3709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.238524][ T3709] hsr_slave_0: entered promiscuous mode
[  765.240907][ T3709] hsr_slave_1: entered promiscuous mode
[  765.243137][ T3709] debugfs: 'hsr0' already exists in 'hsr'
[  765.245300][ T3709] Cannot create hsr debugfs directory
[  765.695511][ T3662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  765.701514][ T3662] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  765.713889][ T3662] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  765.715862][ T3659] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  765.728952][ T3662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  765.729420][ T3659] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  765.736189][ T3659] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  765.736237][ T3662] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  765.746978][ T3662] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  765.750354][ T3662] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  765.910684][ T3730] lo speed is unknown, defaulting to 1000
[  765.997235][ T3728] lo speed is unknown, defaulting to 1000
[  765.997612][ T3730] lo speed is unknown, defaulting to 1000
[  766.124488][ T3728] lo speed is unknown, defaulting to 1000
[  766.302523][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.305499][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.308323][ T3730] bridge_slave_0: entered allmulticast mode
[  766.311307][ T3730] bridge_slave_0: entered promiscuous mode
[  766.315351][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.317679][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.320035][ T3730] bridge_slave_1: entered allmulticast mode
[  766.322889][ T3730] bridge_slave_1: entered promiscuous mode
[  766.345761][ T3730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.354107][ T3730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.389734][ T3730] team0: Port device team_slave_0 added
[  766.400640][ T3730] team0: Port device team_slave_1 added
[  766.430085][ T3730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.432302][ T3730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.441588][ T3730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  766.449443][ T3730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  766.451830][ T3730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.460338][ T3730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  766.511370][ T3730] hsr_slave_0: entered promiscuous mode
[  766.514507][ T3730] hsr_slave_1: entered promiscuous mode
[  766.516685][ T3730] debugfs: 'hsr0' already exists in 'hsr'
[  766.518665][ T3730] Cannot create hsr debugfs directory
[  766.581295][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.584570][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.587840][ T3728] bridge_slave_0: entered allmulticast mode
[  766.591784][ T3728] bridge_slave_0: entered promiscuous mode
[  766.601244][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.603837][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.606302][ T3728] bridge_slave_1: entered allmulticast mode
[  766.609962][ T3728] bridge_slave_1: entered promiscuous mode
[  766.650434][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.663323][ T3662] Bluetooth: hci6: command tx timeout
[  766.669842][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.710971][ T3728] team0: Port device team_slave_0 added
[  766.721154][ T3728] team0: Port device team_slave_1 added
[  766.750373][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.754189][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.765316][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  766.771276][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  766.774408][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.781922][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  766.807149][ T3728] hsr_slave_0: entered promiscuous mode
[  766.809522][ T3728] hsr_slave_1: entered promiscuous mode
[  766.811642][ T3728] debugfs: 'hsr0' already exists in 'hsr'
[  766.813916][ T3728] Cannot create hsr debugfs directory
[  767.783610][ T3662] Bluetooth: hci8: command tx timeout
[  767.788860][ T3662] Bluetooth: hci7: command tx timeout
[  768.753300][ T3662] Bluetooth: hci6: command tx timeout
[  769.863448][ T3662] Bluetooth: hci7: command tx timeout
[  769.863777][ T5615] Bluetooth: hci8: command tx timeout
[  770.823500][ T5615] Bluetooth: hci6: command tx timeout
[  771.953786][ T5615] Bluetooth: hci8: command tx timeout
[  771.953837][ T3662] Bluetooth: hci7: command tx timeout
[  772.903308][ T3662] Bluetooth: hci6: command tx timeout
[  774.023488][ T3662] Bluetooth: hci7: command tx timeout
[  774.023992][ T5615] Bluetooth: hci8: command tx timeout
[  824.619226][ T3662] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  824.623399][ T3662] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  824.627998][ T3662] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  824.631720][ T3662] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  824.646602][ T3662] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  824.795941][ T3766] lo speed is unknown, defaulting to 1000
[  824.901721][ T3766] lo speed is unknown, defaulting to 1000
[  825.197236][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.200288][ T3766] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.204095][ T3766] bridge_slave_0: entered allmulticast mode
[  825.208228][ T3766] bridge_slave_0: entered promiscuous mode
[  825.213339][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.216290][ T3766] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.219383][ T3766] bridge_slave_1: entered allmulticast mode
[  825.223480][ T3766] bridge_slave_1: entered promiscuous mode
[  825.256714][ T3766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  825.263916][ T3766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  825.291627][ T3766] team0: Port device team_slave_0 added
[  825.296676][ T3766] team0: Port device team_slave_1 added
[  825.321353][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.324279][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.331740][ T3766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.336295][ T3766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.338399][ T3766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.346353][ T3766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.372957][ T3766] hsr_slave_0: entered promiscuous mode
[  825.375682][ T3766] hsr_slave_1: entered promiscuous mode
[  825.377913][ T3766] debugfs: 'hsr0' already exists in 'hsr'
[  825.379703][ T3766] Cannot create hsr debugfs directory
[  826.661291][ T5615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  826.670462][ T5615] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  826.682908][ T5615] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  826.691226][ T5610] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  826.699147][ T5610] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  826.700031][ T3659] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  826.715363][ T3659] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  826.729473][ T5610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  826.743949][ T3659] Bluetooth: hci9: command tx timeout
[  826.743957][ T5610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  826.757978][ T3659] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  826.896912][ T3785] lo speed is unknown, defaulting to 1000
[  826.997264][ T3787] lo speed is unknown, defaulting to 1000
[  826.997604][ T3785] lo speed is unknown, defaulting to 1000
[  827.149719][ T3787] lo speed is unknown, defaulting to 1000
[  827.230595][ T3785] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.234168][ T3785] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.237142][ T3785] bridge_slave_0: entered allmulticast mode
[  827.240489][ T3785] bridge_slave_0: entered promiscuous mode
[  827.244337][ T3785] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.247029][ T3785] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.249623][ T3785] bridge_slave_1: entered allmulticast mode
[  827.253630][ T3785] bridge_slave_1: entered promiscuous mode
[  827.293932][ T3785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.303888][ T3785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  827.344058][ T3785] team0: Port device team_slave_0 added
[  827.348674][ T3785] team0: Port device team_slave_1 added
[  827.372910][ T3785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.375634][ T3785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.383912][ T3785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.388596][ T3785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.390730][ T3785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.400348][ T3785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.472855][ T3785] hsr_slave_0: entered promiscuous mode
[  827.477274][ T3785] hsr_slave_1: entered promiscuous mode
[  827.480317][ T3785] debugfs: 'hsr0' already exists in 'hsr'
[  827.482568][ T3785] Cannot create hsr debugfs directory
[  827.658790][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.661826][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.665542][ T3787] bridge_slave_0: entered allmulticast mode
[  827.670161][ T3787] bridge_slave_0: entered promiscuous mode
[  827.674466][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.676785][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.679318][ T3787] bridge_slave_1: entered allmulticast mode
[  827.684160][ T3787] bridge_slave_1: entered promiscuous mode
[  827.708941][ T3787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.725575][ T3787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  827.750895][ T3787] team0: Port device team_slave_0 added
[  827.756099][ T3787] team0: Port device team_slave_1 added
[  827.792780][ T3787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.795860][ T3787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.805578][ T3787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  827.812715][ T3787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  827.815734][ T3787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  827.824873][ T3787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  827.864847][ T3787] hsr_slave_0: entered promiscuous mode
[  827.867528][ T3787] hsr_slave_1: entered promiscuous mode
[  827.869834][ T3787] debugfs: 'hsr0' already exists in 'hsr'
[  827.871664][ T3787] Cannot create hsr debugfs directory
[  828.743385][ T5615] Bluetooth: hci10: command tx timeout
[  828.823370][ T3659] Bluetooth: hci9: command tx timeout
[  828.827328][ T5615] Bluetooth: hci11: command tx timeout
[  830.823358][ T3653] Bluetooth: hci10: command tx timeout
[  830.903375][ T3819] Bluetooth: hci9: command tx timeout
[  830.905305][ T3653] Bluetooth: hci11: command tx timeout
[  831.143395][ T3653] Bluetooth: hci4: command 0x0406 tx timeout
[  831.146685][ T3819] Bluetooth: hci5: command 0x0406 tx timeout
[  831.155387][ T3819] Bluetooth: hci3: command 0x0406 tx timeout
[  832.903353][ T5615] Bluetooth: hci10: command tx timeout
[  832.983377][ T3659] Bluetooth: hci11: command tx timeout
[  832.984146][ T5615] Bluetooth: hci9: command tx timeout
[  834.983421][ T5615] Bluetooth: hci10: command tx timeout
[  835.063307][ T5615] Bluetooth: hci11: command tx timeout
[  848.263525][   T35] INFO: task syz.1.7904:3598 blocked for more than 143 seconds.
[  848.266850][   T35]       Not tainted syzkaller #0
[  848.272345][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  848.278058][   T35] task:syz.1.7904      state:D stack:25912 pid:3598  tgid:3597  ppid:5607   task_flags:0x480140 flags:0x00080002
[  848.283785][   T35] Call Trace:
[  848.285303][   T35]  <TASK>
[  848.286536][   T35]  __schedule+0x1821/0x5740
[  848.288374][   T35]  ? __pfx___schedule+0x10/0x10
[  848.290381][   T35]  ? schedule+0x90/0x360
[  848.292175][   T35]  schedule+0x164/0x360
[  848.294398][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  848.297508][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  848.307248][   T35]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  848.316167][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  848.325267][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  848.329657][   T35]  nbd_set_size+0x454/0x680
[  848.332429][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  848.334964][   T35]  ? nla_memcpy+0x5b/0xc0
[  848.336808][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  848.338921][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  848.341144][   T35]  ? rcu_is_watching+0x15/0xb0
[  848.343385][   T35]  ? trace_kmalloc+0x2a/0xf0
[  848.345388][   T35]  ? __nla_parse+0x40/0x60
[  848.347269][   T35]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  848.349765][   T35]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  848.352291][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  848.354782][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  848.357303][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.359363][   T35]  genl_rcv_msg+0x61c/0x7a0
[  848.361251][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.363574][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  848.365996][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.367884][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.369877][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.372003][   T35]  ? down_read+0x270/0x2e0
[  848.374225][   T35]  ? genl_rcv+0xd/0x40
[  848.376052][   T35]  genl_rcv+0x28/0x40
[  848.377662][   T35]  netlink_unicast+0x75c/0x8e0
[  848.379568][   T35]  netlink_sendmsg+0x813/0xb40
[  848.381502][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.383787][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.385766][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.387915][   T35]  ____sys_sendmsg+0x972/0x9f0
[  848.389920][   T35]  ? __might_fault+0xaf/0x130
[  848.391886][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  848.394394][   T35]  ? import_iovec+0x73/0xa0
[  848.396353][   T35]  ___sys_sendmsg+0x2a5/0x360
[  848.398326][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.400385][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  848.402559][   T35]  ? futex_wake+0x4ac/0x580
[  848.404682][   T35]  ? __fget_files+0x2a/0x420
[  848.406671][   T35]  ? __fget_files+0x3a0/0x420
[  848.408640][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  848.410669][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  848.412958][   T35]  ? rcu_is_watching+0x15/0xb0
[  848.415055][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.417560][   T35]  do_syscall_64+0x15f/0xf80
[  848.419486][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.421548][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.424481][   T35] RIP: 0033:0x7fa5d259ce59
[  848.426431][   T35] RSP: 002b:00007fa5d3421028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  848.429857][   T35] RAX: ffffffffffffffda RBX: 00007fa5d2815fa0 RCX: 00007fa5d259ce59
[  848.433353][   T35] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000005
[  848.436611][   T35] RBP: 00007fa5d2632d6f R08: 0000000000000000 R09: 0000000000000000
[  848.439883][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  848.443362][   T35] R13: 00007fa5d2816038 R14: 00007fa5d2815fa0 R15: 00007fff29dc41c8
[  848.446690][   T35]  </TASK>
[  848.448026][   T35] INFO: task syz.1.7904:3599 blocked for more than 143 seconds.
[  848.451126][   T35]       Not tainted syzkaller #0
[  848.453361][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.456960][   T35] task:syz.1.7904      state:D stack:27904 pid:3599  tgid:3597  ppid:5607   task_flags:0x400040 flags:0x00080002
[  848.461722][   T35] Call Trace:
[  848.463346][   T35]  <TASK>
[  848.464594][   T35]  __schedule+0x1821/0x5740
[  848.466523][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.468602][   T35]  ? __pfx___schedule+0x10/0x10
[  848.470619][   T35]  ? schedule+0x90/0x360
[  848.472400][   T35]  schedule+0x164/0x360
[  848.474292][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.476551][   T35]  __mutex_lock+0x7f7/0x1550
[  848.478498][   T35]  ? __mutex_lock+0x608/0x1550
[  848.480481][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.482424][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.484909][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.487061][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.488971][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.491095][   T35]  ? __pfx_ref_tracker_free+0x10/0x10
[  848.493546][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.495632][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.497673][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.499892][   T35]  ? down_read+0x270/0x2e0
[  848.501732][   T35]  ? genl_rcv+0xd/0x40
[  848.503850][   T35]  genl_rcv+0x28/0x40
[  848.505580][   T35]  netlink_unicast+0x75c/0x8e0
[  848.507596][   T35]  netlink_sendmsg+0x813/0xb40
[  848.509546][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.511727][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.513973][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.516170][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.518350][   T35]  __sys_sendto+0x672/0x710
[  848.520243][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  848.522301][   T35]  ? fd_install+0x94/0x3d0
[  848.524257][   T35]  ? fd_install+0x306/0x3d0
[  848.526138][   T35]  __x64_sys_sendto+0xde/0x100
[  848.528111][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.530602][   T35]  do_syscall_64+0x15f/0xf80
[  848.532558][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.534836][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.537315][   T35] RIP: 0033:0x7fa5d255d68e
[  848.539095][   T35] RSP: 002b:00007fa5d33fee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  848.542352][   T35] RAX: ffffffffffffffda RBX: 00007fa5d34006c0 RCX: 00007fa5d255d68e
[  848.545713][   T35] RDX: 0000000000000020 RSI: 00007fa5d33ff000 RDI: 0000000000000006
[  848.548882][   T35] RBP: 0000000000000000 R08: 00007fa5d33fef04 R09: 000000000000000c
[  848.552002][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  848.555502][   T35] R13: 00007fa5d33fef58 R14: 00007fa5d33ff000 R15: 0000000000000000
[  848.558874][   T35]  </TASK>
[  848.560180][   T35] INFO: task syz.2.7912:3632 blocked for more than 143 seconds.
[  848.563353][   T35]       Not tainted syzkaller #0
[  848.565306][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.568706][   T35] task:syz.2.7912      state:D stack:28760 pid:3632  tgid:3631  ppid:5611   task_flags:0x400040 flags:0x00080002
[  848.573800][   T35] Call Trace:
[  848.575274][   T35]  <TASK>
[  848.576522][   T35]  __schedule+0x1821/0x5740
[  848.578419][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.580528][   T35]  ? __pfx___schedule+0x10/0x10
[  848.582559][   T35]  ? schedule+0x90/0x360
[  848.584808][   T35]  schedule+0x164/0x360
[  848.586610][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.588877][   T35]  __mutex_lock+0x7f7/0x1550
[  848.590832][   T35]  ? kernel_text_address+0xa5/0xe0
[  848.592956][   T35]  ? __mutex_lock+0x608/0x1550
[  848.595066][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.597015][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.598606][   T35]  ? stack_trace_save+0xa9/0x100
[  848.600118][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.601820][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.603558][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.605009][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.606580][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.608087][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.609639][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.611477][   T35]  ? down_read+0x270/0x2e0
[  848.612906][   T35]  ? genl_rcv+0xd/0x40
[  848.614435][   T35]  genl_rcv+0x28/0x40
[  848.615706][   T35]  netlink_unicast+0x75c/0x8e0
[  848.617326][   T35]  netlink_sendmsg+0x813/0xb40
[  848.619112][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.620735][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.622320][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.624113][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.625850][   T35]  __sys_sendto+0x672/0x710
[  848.627257][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  848.628872][   T35]  ? exc_page_fault+0x6a/0xc0
[  848.630341][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  848.632001][   T35]  __x64_sys_sendto+0xde/0x100
[  848.633558][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.635448][   T35]  do_syscall_64+0x15f/0xf80
[  848.636905][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.638477][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.640330][   T35] RIP: 0033:0x7fb64f35d68e
[  848.641736][   T35] RSP: 002b:00007fb6501bde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  848.644444][   T35] RAX: ffffffffffffffda RBX: 00007fb6501bf6c0 RCX: 00007fb64f35d68e
[  848.647307][   T35] RDX: 0000000000000024 RSI: 00007fb6501be000 RDI: 0000000000000003
[  848.650422][   T35] RBP: 0000000000000000 R08: 00007fb6501bdf04 R09: 000000000000000c
[  848.654021][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  848.657431][   T35] R13: 00007fb6501bdf58 R14: 00007fb6501be000 R15: 0000000000000000
[  848.660782][   T35]  </TASK>
[  848.662140][   T35] INFO: task syz.2.7912:3633 blocked for more than 143 seconds.
[  848.666483][   T35]       Not tainted syzkaller #0
[  848.668697][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.672407][   T35] task:syz.2.7912      state:D stack:28760 pid:3633  tgid:3631  ppid:5611   task_flags:0x400040 flags:0x00080002
[  848.677389][   T35] Call Trace:
[  848.678779][   T35]  <TASK>
[  848.680006][   T35]  __schedule+0x1821/0x5740
[  848.681534][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.683251][   T35]  ? __pfx___schedule+0x10/0x10
[  848.684789][   T35]  ? schedule+0x90/0x360
[  848.686113][   T35]  schedule+0x164/0x360
[  848.687437][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.689119][   T35]  __mutex_lock+0x7f7/0x1550
[  848.690566][   T35]  ? kernel_text_address+0xa5/0xe0
[  848.692178][   T35]  ? __mutex_lock+0x608/0x1550
[  848.693847][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.695397][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.697004][   T35]  ? stack_trace_save+0xa9/0x100
[  848.698548][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.700115][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.701702][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.703232][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.704840][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.706335][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.707905][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.709564][   T35]  ? down_read+0x270/0x2e0
[  848.710984][   T35]  ? genl_rcv+0xd/0x40
[  848.712263][   T35]  genl_rcv+0x28/0x40
[  848.713661][   T35]  netlink_unicast+0x75c/0x8e0
[  848.715190][   T35]  netlink_sendmsg+0x813/0xb40
[  848.716714][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.718391][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.720000][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.721664][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.723761][   T35]  __sys_sendto+0x672/0x710
[  848.725243][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  848.726824][   T35]  ? fd_install+0x94/0x3d0
[  848.728219][   T35]  ? fd_install+0x306/0x3d0
[  848.729651][   T35]  __x64_sys_sendto+0xde/0x100
[  848.731182][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.733258][   T35]  do_syscall_64+0x15f/0xf80
[  848.734816][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.736472][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.738364][   T35] RIP: 0033:0x7fb64f35d68e
[  848.739765][   T35] RSP: 002b:00007fb65019ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  848.742320][   T35] RAX: ffffffffffffffda RBX: 00007fb65019e6c0 RCX: 00007fb64f35d68e
[  848.745538][   T35] RDX: 0000000000000020 RSI: 00007fb65019d000 RDI: 0000000000000004
[  848.748060][   T35] RBP: 0000000000000000 R08: 00007fb65019cf04 R09: 000000000000000c
[  848.750501][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  848.752963][   T35] R13: 00007fb65019cf58 R14: 00007fb65019d000 R15: 0000000000000000
[  848.755501][   T35]  </TASK>
[  848.756513][   T35] INFO: task syz.2.7912:3638 blocked for more than 143 seconds.
[  848.758806][   T35]       Not tainted syzkaller #0
[  848.760324][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.762963][   T35] task:syz.2.7912      state:D stack:28128 pid:3638  tgid:3631  ppid:5611   task_flags:0x400140 flags:0x00080002
[  848.767946][   T35] Call Trace:
[  848.769006][   T35]  <TASK>
[  848.769965][   T35]  __schedule+0x1821/0x5740
[  848.771401][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.772962][   T35]  ? __pfx___schedule+0x10/0x10
[  848.774890][   T35]  ? schedule+0x90/0x360
[  848.776228][   T35]  schedule+0x164/0x360
[  848.777535][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.779226][   T35]  __mutex_lock+0x7f7/0x1550
[  848.780664][   T35]  ? kernel_text_address+0xa5/0xe0
[  848.782278][   T35]  ? __mutex_lock+0x608/0x1550
[  848.783860][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.785289][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.786875][   T35]  ? stack_trace_save+0xa9/0x100
[  848.788414][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.789965][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.791569][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.793089][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.794670][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.796178][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.797734][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.799391][   T35]  ? down_read+0x270/0x2e0
[  848.800798][   T35]  ? genl_rcv+0xd/0x40
[  848.802073][   T35]  genl_rcv+0x28/0x40
[  848.803416][   T35]  netlink_unicast+0x75c/0x8e0
[  848.804922][   T35]  netlink_sendmsg+0x813/0xb40
[  848.806458][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.808125][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.809671][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.811348][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.813109][   T35]  __sys_sendto+0x672/0x710
[  848.814556][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  848.816243][   T35]  ? fd_install+0x94/0x3d0
[  848.817650][   T35]  ? fd_install+0x306/0x3d0
[  848.819106][   T35]  __x64_sys_sendto+0xde/0x100
[  848.820603][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.822554][   T35]  do_syscall_64+0x15f/0xf80
[  848.824446][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.826092][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.827947][   T35] RIP: 0033:0x7fb64f35d68e
[  848.829335][   T35] RSP: 002b:00007fb65017be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  848.831930][   T35] RAX: ffffffffffffffda RBX: 00007fb65017d6c0 RCX: 00007fb64f35d68e
[  848.834685][   T35] RDX: 0000000000000020 RSI: 00007fb65017c000 RDI: 0000000000000005
[  848.837242][   T35] RBP: 0000000000000000 R08: 00007fb65017bf04 R09: 000000000000000c
[  848.839703][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  848.842164][   T35] R13: 00007fb65017bf58 R14: 00007fb65017c000 R15: 0000000000000000
[  848.844718][   T35]  </TASK>
[  848.845703][   T35] INFO: task syz.2.7912:3641 blocked for more than 143 seconds.
[  848.848078][   T35]       Not tainted syzkaller #0
[  848.849607][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.852268][   T35] task:syz.2.7912      state:D stack:28224 pid:3641  tgid:3631  ppid:5611   task_flags:0x400140 flags:0x00080002
[  848.856037][   T35] Call Trace:
[  848.857195][   T35]  <TASK>
[  848.858187][   T35]  __schedule+0x1821/0x5740
[  848.859629][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.861190][   T35]  ? __pfx___schedule+0x10/0x10
[  848.862820][   T35]  ? schedule+0x90/0x360
[  848.864268][   T35]  schedule+0x164/0x360
[  848.865554][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.867192][   T35]  __mutex_lock+0x7f7/0x1550
[  848.868607][   T35]  ? kernel_text_address+0xa5/0xe0
[  848.870595][   T35]  ? __mutex_lock+0x608/0x1550
[  848.872396][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.873999][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.875878][   T35]  ? stack_trace_save+0xa9/0x100
[  848.877577][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.879129][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.880842][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.882416][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.884431][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.886282][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.887948][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.889590][   T35]  ? down_read+0x270/0x2e0
[  848.890997][   T35]  ? genl_rcv+0xd/0x40
[  848.892272][   T35]  genl_rcv+0x28/0x40
[  848.893652][   T35]  netlink_unicast+0x75c/0x8e0
[  848.895168][   T35]  netlink_sendmsg+0x813/0xb40
[  848.896667][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.898333][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.899893][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.901534][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.903637][   T35]  __sys_sendto+0x672/0x710
[  848.905136][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  848.906712][   T35]  ? fd_install+0x94/0x3d0
[  848.908112][   T35]  ? fd_install+0x306/0x3d0
[  848.909533][   T35]  __x64_sys_sendto+0xde/0x100
[  848.911037][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.912946][   T35]  do_syscall_64+0x15f/0xf80
[  848.914516][   T35]  ? trace_irq_disable+0x3b/0x140
[  848.916111][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.917957][   T35] RIP: 0033:0x7fb64f35d68e
[  848.919430][   T35] RSP: 002b:00007fb64d1f2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  848.922614][   T35] RAX: ffffffffffffffda RBX: 00007fb64d1f46c0 RCX: 00007fb64f35d68e
[  848.926033][   T35] RDX: 0000000000000020 RSI: 00007fb64d1f3000 RDI: 0000000000000009
[  848.929247][   T35] RBP: 0000000000000000 R08: 00007fb64d1f2f04 R09: 000000000000000c
[  848.932467][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  848.935854][   T35] R13: 00007fb64d1f2f58 R14: 00007fb64d1f3000 R15: 0000000000000000
[  848.939068][   T35]  </TASK>
[  848.940394][   T35] INFO: task syz.0.7914:3640 blocked for more than 144 seconds.
[  848.943688][   T35]       Not tainted syzkaller #0
[  848.945704][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  848.948429][   T35] task:syz.0.7914      state:D stack:27584 pid:3640  tgid:3639  ppid:5614   task_flags:0x400140 flags:0x00080002
[  848.952317][   T35] Call Trace:
[  848.953596][   T35]  <TASK>
[  848.954699][   T35]  __schedule+0x1821/0x5740
[  848.956160][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.957785][   T35]  ? __pfx___schedule+0x10/0x10
[  848.959350][   T35]  ? schedule+0x90/0x360
[  848.960774][   T35]  schedule+0x164/0x360
[  848.962177][   T35]  schedule_preempt_disabled+0x13/0x30
[  848.964119][   T35]  __mutex_lock+0x7f7/0x1550
[  848.965664][   T35]  ? kernel_text_address+0xa5/0xe0
[  848.967318][   T35]  ? __mutex_lock+0x608/0x1550
[  848.969064][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  848.970550][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  848.972136][   T35]  ? stack_trace_save+0xa9/0x100
[  848.973893][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  848.975450][   T35]  ? radix_tree_lookup+0x240/0x290
[  848.977059][   T35]  genl_rcv_msg+0x10b/0x7a0
[  848.978476][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.980056][   T35]  netlink_rcv_skb+0x232/0x4b0
[  848.981545][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  848.983490][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  848.985281][   T35]  ? down_read+0x270/0x2e0
[  848.986672][   T35]  ? genl_rcv+0xd/0x40
[  848.987961][   T35]  genl_rcv+0x28/0x40
[  848.989209][   T35]  netlink_unicast+0x75c/0x8e0
[  848.990706][   T35]  netlink_sendmsg+0x813/0xb40
[  848.992230][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.994074][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  848.995696][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  848.997350][   T35]  ____sys_sendmsg+0x972/0x9f0
[  848.998869][   T35]  ? __might_fault+0xaf/0x130
[  849.000331][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  849.001992][   T35]  ? import_iovec+0x73/0xa0
[  849.003548][   T35]  ___sys_sendmsg+0x2a5/0x360
[  849.005387][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  849.007333][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  849.009348][   T35]  ? futex_wait+0x2a2/0x390
[  849.011135][   T35]  ? __fget_files+0x2a/0x420
[  849.012947][   T35]  ? __fget_files+0x3a0/0x420
[  849.014790][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  849.016368][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  849.018114][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.020026][   T35]  do_syscall_64+0x15f/0xf80
[  849.021464][   T35]  ? trace_irq_disable+0x3b/0x140
[  849.023190][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.025249][   T35] RIP: 0033:0x7fe250f9ce59
[  849.026629][   T35] RSP: 002b:00007fe251db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  849.029496][   T35] RAX: ffffffffffffffda RBX: 00007fe251215fa0 RCX: 00007fe250f9ce59
[  849.031986][   T35] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  849.034674][   T35] RBP: 00007fe251032d6f R08: 0000000000000000 R09: 0000000000000000
[  849.037252][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  849.039862][   T35] R13: 00007fe251216038 R14: 00007fe251215fa0 R15: 00007fff16b9d418
[  849.042247][   T35]  </TASK>
[  849.043446][   T35] 
[  849.043446][   T35] Showing all locks held in the system:
[  849.046037][   T35] 1 lock held by khungtaskd/35:
[  849.047539][   T35]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  849.050601][   T35] 2 locks held by getty/5436:
[  849.052093][   T35]  #0: ffff88810c1f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  849.055315][   T35]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  849.058724][   T35] 1 lock held by udevd/1688:
[  849.060313][   T35]  #0: ffff88810a96d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  849.064173][   T35] 6 locks held by syz.1.7904/3598:
[  849.065999][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.068603][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.071316][   T35]  #2: ffff88810aa21a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  849.074632][   T35]  #3: ffff88810aa2c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  849.077514][   T35]  #4: ffff88810aa2c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  849.081149][   T35]  #5: ffff88810aa2c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  849.085270][   T35] 2 locks held by syz.1.7904/3599:
[  849.087120][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.089954][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.092930][   T35] 2 locks held by syz.2.7912/3632:
[  849.094970][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.097868][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.101123][   T35] 2 locks held by syz.2.7912/3633:
[  849.103262][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.106422][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.109798][   T35] 2 locks held by syz.2.7912/3638:
[  849.111763][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.114899][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.117915][   T35] 2 locks held by syz.2.7912/3641:
[  849.119712][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.122905][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.126487][   T35] 2 locks held by syz.0.7914/3640:
[  849.128484][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.131647][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.134998][   T35] 2 locks held by syz-executor/3651:
[  849.137010][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.139977][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.146630][   T35] 2 locks held by syz-executor/3655:
[  849.148657][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.151720][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.155235][   T35] 2 locks held by syz-executor/3657:
[  849.157166][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.159685][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.162472][   T35] 2 locks held by syz-executor/3709:
[  849.164338][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.166929][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.169662][   T35] 2 locks held by syz-executor/3728:
[  849.171305][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.173985][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.176800][   T35] 2 locks held by syz-executor/3730:
[  849.178477][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.181163][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.184480][   T35] 2 locks held by syz-executor/3766:
[  849.186056][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.188501][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.191276][   T35] 2 locks held by syz-executor/3785:
[  849.193435][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.196528][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.199323][   T35] 2 locks held by syz-executor/3787:
[  849.200965][   T35]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  849.203583][   T35]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  849.206790][   T35] 
[  849.207639][   T35] =============================================
[  849.207639][   T35] 
[  849.210307][   T35] NMI backtrace for cpu 0
[  849.210314][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  849.210323][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  849.210327][   T35] Call Trace:
[  849.210332][   T35]  <TASK>
[  849.210337][   T35]  dump_stack_lvl+0xe8/0x150
[  849.210347][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  849.210357][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  849.210365][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  849.210374][   T35]  sys_info+0x135/0x170
[  849.210382][   T35]  watchdog+0xfd3/0x1030
[  849.210395][   T35]  ? watchdog+0x1c9/0x1030
[  849.210411][   T35]  kthread+0x389/0x470
[  849.210422][   T35]  ? __pfx_watchdog+0x10/0x10
[  849.210430][   T35]  ? __pfx_kthread+0x10/0x10
[  849.210439][   T35]  ret_from_fork+0x514/0xb70
[  849.210449][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  849.210456][   T35]  ? __switch_to+0xc79/0x1410
[  849.210466][   T35]  ? __pfx_kthread+0x10/0x10
[  849.210482][   T35]  ret_from_fork_asm+0x1a/0x30
[  849.210495][   T35]  </TASK>
[  849.210498][   T35] Sending NMI from CPU 0 to CPUs 1:
[  849.246906][    C1] NMI backtrace for cpu 1
[  849.246922][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  849.246930][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  849.246936][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  849.246952][    C1] Code: ab 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 a1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  849.246958][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000206
[  849.246966][    C1] RAX: 000000000070d1b1 RBX: ffffffff819a958a RCX: 0000000080000001
[  849.246971][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6ba3 RDI: ffffffff8c28af60
[  849.246975][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  849.246980][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  849.246985][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  849.246989][    C1] FS:  0000000000000000(0000) GS:ffff8882a928a000(0000) knlGS:0000000000000000
[  849.246995][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  849.246999][    C1] CR2: 000055dec1bfcdc8 CR3: 000000016e994000 CR4: 00000000000006f0
[  849.247028][    C1] Call Trace:
[  849.247033][    C1]  <TASK>
[  849.247037][    C1]  default_idle+0x9/0x20
[  849.247044][    C1]  default_idle_call+0x72/0xb0
[  849.247052][    C1]  do_idle+0x36a/0x5f0
[  849.247063][    C1]  ? __pfx_do_idle+0x10/0x10
[  849.247072][    C1]  cpu_startup_entry+0x43/0x60
[  849.247079][    C1]  start_secondary+0x101/0x110
[  849.247086][    C1]  common_startup_64+0x13e/0x147
[  849.247097][    C1]  </TASK>
[  849.300008][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  849.302017][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  849.305131][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  849.308235][   T35] Call Trace:
[  849.309285][   T35]  <TASK>
[  849.310225][   T35]  vpanic+0x56c/0xa60
[  849.311507][   T35]  ? __pfx___schedule+0x10/0x10
[  849.313025][   T35]  ? __pfx_vpanic+0x10/0x10
[  849.314443][   T35]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  849.316367][   T35]  panic+0xc5/0xd0
[  849.317544][   T35]  ? __pfx_panic+0x10/0x10
[  849.318899][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  849.320537][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  849.322448][   T35]  watchdog+0x102c/0x1030
[  849.323833][   T35]  ? watchdog+0x1c9/0x1030
[  849.325232][   T35]  kthread+0x389/0x470
[  849.326512][   T35]  ? __pfx_watchdog+0x10/0x10
[  849.327973][   T35]  ? __pfx_kthread+0x10/0x10
[  849.329401][   T35]  ret_from_fork+0x514/0xb70
[  849.330861][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  849.332612][   T35]  ? __switch_to+0xc79/0x1410
[  849.334419][   T35]  ? __pfx_kthread+0x10/0x10
[  849.336254][   T35]  ret_from_fork_asm+0x1a/0x30
[  849.338126][   T35]  </TASK>
[  849.340028][   T35] Kernel Offset: disabled
[  849.341716][   T35] Rebooting in 86400 seconds..
