last executing test programs:

2m50.962429347s ago: executing program 1 (id=811):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
sendmmsg$alg(r1, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x480d4)

2m50.666387467s ago: executing program 1 (id=813):
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0)

2m50.587340646s ago: executing program 1 (id=815):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
close(r1)

2m50.537015129s ago: executing program 1 (id=817):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='+', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40801)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1}, 0x0)

2m50.457765392s ago: executing program 2 (id=819):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000cac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m50.322920875s ago: executing program 0 (id=821):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x12, 0x7f, 0x0, @multicast1}}}}}, 0x0)

2m50.236245448s ago: executing program 2 (id=822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

2m50.135335884s ago: executing program 0 (id=823):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)

2m50.057445358s ago: executing program 0 (id=824):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)

2m50.057264441s ago: executing program 2 (id=825):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054)

2m49.976005967s ago: executing program 1 (id=826):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

2m49.975833337s ago: executing program 0 (id=827):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000001d00)={0x0, 0x2710}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000004c0)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000)

2m48.464460799s ago: executing program 1 (id=828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})

2m46.075590459s ago: executing program 0 (id=829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002000200008bd0fd4eb7d082b200000000000d0001007564703a73"], 0x54}}, 0x0)

2m41.359225481s ago: executing program 2 (id=830):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x4, 0xa8, 0xe, @empty, @local, 0xb030, 0x8, 0x80000001, 0x2}})

2m38.901888059s ago: executing program 0 (id=831):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r3}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000200000000000020"], 0x48)
socket(0x1, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="866ac6839ca725a49d658addbe191d3645a79b79e71c930373ac62a02768f61b8fd2b7a2c15c93c990cb4e3bd431f4b2af02e2380becf3ceb569a63885ff987593d121615bb99cd43abb4ebaefa27517edf7b731c16275975b", 0x59}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801)
shutdown(r0, 0x1)

2m31.403609094s ago: executing program 32 (id=828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})

2m25.719034027s ago: executing program 2 (id=833):
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$tipc(0x1e, 0x2, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2m23.115427554s ago: executing program 33 (id=831):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r3}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000200000000000020"], 0x48)
socket(0x1, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="866ac6839ca725a49d658addbe191d3645a79b79e71c930373ac62a02768f61b8fd2b7a2c15c93c990cb4e3bd431f4b2af02e2380becf3ceb569a63885ff987593d121615bb99cd43abb4ebaefa27517edf7b731c16275975b", 0x59}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801)
shutdown(r0, 0x1)

2m14.785466983s ago: executing program 2 (id=835):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40)={<r9=>0x0, <r10=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000740)=""/135, 0x87}], 0x1, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {&(0x7f0000003800)=""/229, 0xe5}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r9, r10+10000000})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)

1m56.402995562s ago: executing program 34 (id=835):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40)={<r9=>0x0, <r10=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/218, 0xda}], 0x1, &(0x7f0000000080)=""/61, 0x3d}, 0x9}, {{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x5}, 0x558df09a}, {{&(0x7f00000006c0)=@nl, 0x80, &(0x7f0000000180)=[{&(0x7f0000000740)=""/135, 0x87}], 0x1, &(0x7f0000000800)=""/178, 0xb2}, 0x3}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000001a80)=""/241, 0xf1}, {&(0x7f0000001b80)=""/223, 0xdf}, {&(0x7f0000001c80)=""/123, 0x7b}, {&(0x7f0000001d00)=""/245, 0xf5}], 0x5, &(0x7f0000001e80)=""/248, 0xf8}, 0x7f}, {{&(0x7f0000001f80)=@nfc, 0x80, &(0x7f0000000940)}, 0x4}, {{&(0x7f0000002000)=@pptp, 0x80, &(0x7f0000003200)=[{&(0x7f0000002080)=""/166, 0xa6}, {&(0x7f00000009c0)=""/19, 0x13}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/158, 0x9e}], 0x4, &(0x7f0000003240)=""/18, 0x12}, 0x4}, {{&(0x7f0000003280)=@ax25={{0x3, @rose}, [@netrom, @rose, @remote, @rose, @remote, @default, @null, @null]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003300)=""/97, 0x61}], 0x1, &(0x7f00000033c0)=""/98, 0x62}, 0x9}, {{&(0x7f0000003440)=@xdp, 0x80, &(0x7f0000003900)=[{&(0x7f00000034c0)=""/206, 0xce}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/82, 0x52}, {&(0x7f00000036c0)=""/121, 0x79}, {&(0x7f0000003740)=""/165, 0xa5}, {&(0x7f0000003800)=""/229, 0xe5}], 0x6, &(0x7f0000003980)=""/137, 0x89}, 0x9}], 0x8, 0x102, &(0x7f0000003c80)={r9, r10+10000000})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810)

1m47.960493363s ago: executing program 3 (id=832):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x28, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x84)

0s ago: executing program 3 (id=832):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x28, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x84)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49199' (ED25519) to the list of known hosts.
syzkaller login: [   48.651197][ T5817] cgroup: Unknown subsys name 'net'
[   48.733708][ T5817] cgroup: Unknown subsys name 'cpuset'
[   48.737813][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.386978][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.582681][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.586846][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.590869][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.595047][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.598554][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.640593][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.644267][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.647741][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.652106][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.657030][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.801843][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.805279][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.807974][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.811606][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.814168][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.822196][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   54.862836][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.956988][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.961070][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.964231][ T5842] bridge_slave_0: entered allmulticast mode
[   54.967718][ T5842] bridge_slave_0: entered promiscuous mode
[   54.981270][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.984177][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.987200][ T5842] bridge_slave_1: entered allmulticast mode
[   54.990995][ T5842] bridge_slave_1: entered promiscuous mode
[   55.046881][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.050743][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.053841][ T5847] bridge_slave_0: entered allmulticast mode
[   55.057872][ T5847] bridge_slave_0: entered promiscuous mode
[   55.071298][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.075026][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.078248][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.081818][ T5847] bridge_slave_1: entered allmulticast mode
[   55.085807][ T5847] bridge_slave_1: entered promiscuous mode
[   55.104972][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.134346][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.153249][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.158737][ T5842] team0: Port device team_slave_0 added
[   55.193241][ T5842] team0: Port device team_slave_1 added
[   55.197332][ T5847] team0: Port device team_slave_0 added
[   55.228155][ T5847] team0: Port device team_slave_1 added
[   55.287593][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.290778][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.302543][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.321325][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.324275][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.335486][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.341464][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.344293][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.354873][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.364671][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.367530][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.378672][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.421210][ T5842] hsr_slave_0: entered promiscuous mode
[   55.423855][ T5842] hsr_slave_1: entered promiscuous mode
[   55.456872][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.485998][ T5847] hsr_slave_0: entered promiscuous mode
[   55.489557][ T5847] hsr_slave_1: entered promiscuous mode
[   55.492344][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.494772][ T5847] Cannot create hsr debugfs directory
[   55.659014][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.662693][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.665098][ T5855] bridge_slave_0: entered allmulticast mode
[   55.667861][ T5855] bridge_slave_0: entered promiscuous mode
[   55.689992][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.692848][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.695574][ T5855] bridge_slave_1: entered allmulticast mode
[   55.698902][ T5855] bridge_slave_1: entered promiscuous mode
[   55.741045][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.746938][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.779999][ T5855] team0: Port device team_slave_0 added
[   55.787880][ T5855] team0: Port device team_slave_1 added
[   55.805593][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.835577][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.841319][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.845934][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.848544][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.858622][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.864716][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.867494][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.876968][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.892912][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.935835][ T5855] hsr_slave_0: entered promiscuous mode
[   55.938710][ T5855] hsr_slave_1: entered promiscuous mode
[   55.941708][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   55.943650][ T5855] Cannot create hsr debugfs directory
[   55.945612][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.956579][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.976739][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.995866][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.121379][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.155350][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   56.171615][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.174066][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.185288][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.191886][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.200765][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.203135][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.211937][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.221460][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.242198][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.264970][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.292761][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.295090][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.312714][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.315066][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.408136][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.433374][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   56.461399][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.464227][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.468258][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.471295][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.575924][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.613627][   T54] Bluetooth: hci0: command tx timeout
[   56.626333][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.681595][ T5847] veth0_vlan: entered promiscuous mode
[   56.689820][   T54] Bluetooth: hci1: command tx timeout
[   56.695317][ T5842] veth0_vlan: entered promiscuous mode
[   56.701666][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.711813][ T5847] veth1_vlan: entered promiscuous mode
[   56.719163][ T5842] veth1_vlan: entered promiscuous mode
[   56.748920][ T5842] veth0_macvtap: entered promiscuous mode
[   56.760629][ T5842] veth1_macvtap: entered promiscuous mode
[   56.779969][ T5847] veth0_macvtap: entered promiscuous mode
[   56.783009][ T5855] veth0_vlan: entered promiscuous mode
[   56.790476][ T5847] veth1_macvtap: entered promiscuous mode
[   56.796441][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.802802][ T5855] veth1_vlan: entered promiscuous mode
[   56.815024][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.834028][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.843786][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.846987][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.851587][   T54] Bluetooth: hci2: command tx timeout
[   56.852299][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.875010][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.884491][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.893757][ T5855] veth0_macvtap: entered promiscuous mode
[   56.905299][ T5855] veth1_macvtap: entered promiscuous mode
[   56.908357][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.913500][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.927628][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.934517][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.987808][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.006313][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.011989][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.015047][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.043281][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.047233][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.051268][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.057125][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.057643][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.061599][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.066315][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.070570][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.120976][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.124258][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.158647][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.169736][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.172377][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.206315][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.208998][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.303677][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.306920][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.310641][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.314744][ T5906] IPVS: starting estimator thread 0...
[   57.314977][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.317944][ T5913] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   57.320538][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.325546][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.330179][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.335659][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.338935][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.342936][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.355461][ T5917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.439224][ T5918] IPVS: using max 79 ests per chain, 189600 per kthread
[   57.590519][ T5936] netlink: 'syz.0.7': attribute type 10 has an invalid length.
[   57.905072][ T5936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.951923][ T5933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.007280][ T5939] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   58.012294][ T5948] netlink: 'syz.2.13': attribute type 9 has an invalid length.
[   58.015288][ T5948] netlink: 'syz.2.13': attribute type 6 has an invalid length.
[   58.042844][ T5950] sctp: [Deprecated]: syz.2.14 (pid 5950) Use of int in max_burst socket option deprecated.
[   58.042844][ T5950] Use struct sctp_assoc_value instead
[   58.141296][ T5952] Zero length message leads to an empty skb
[   58.176583][ T5933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.643006][ T5987] netpci0: tun_chr_ioctl cmd 2147767507
[   58.689745][   T54] Bluetooth: hci0: command tx timeout
[   58.770065][   T54] Bluetooth: hci1: command tx timeout
[   58.930584][   T54] Bluetooth: hci2: command tx timeout
[   59.129236][ T6012] netlink: 'syz.0.43': attribute type 10 has an invalid length.
[   59.142730][ T6012] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   59.149481][ T6012] team0: Failed to send options change via netlink (err -105)
[   59.152312][ T6012] team0: Port device dummy0 added
[   59.201714][ T5933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.902280][ T5933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.014723][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.017780][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.065161][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.090785][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.305262][ T6074] vlan2: entered promiscuous mode
[   60.307294][ T6074] batadv0: entered promiscuous mode
[   60.427791][ T6084] netlink: 'syz.2.74': attribute type 5 has an invalid length.
[   60.606856][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.769690][   T54] Bluetooth: hci0: command tx timeout
[   60.849854][   T54] Bluetooth: hci1: command tx timeout
[   61.009462][   T54] Bluetooth: hci2: command tx timeout
[   61.222200][ T6145] lo: entered allmulticast mode
[   61.224452][ T6145] lo: left allmulticast mode
[   61.432206][ T6166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.642181][ T6183] syz.1.120 uses obsolete (PF_INET,SOCK_PACKET)
[   61.867983][ T6202] netlink: 'syz.2.129': attribute type 8 has an invalid length.
[   62.216946][ T6232] warning: `syz.0.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.744751][ T6253] __nla_validate_parse: 16 callbacks suppressed
[   62.744760][ T6253] netlink: 348 bytes leftover after parsing attributes in process `syz.2.152'.
[   62.829448][ T6257] Driver unsupported XDP return value 0 on prog  (id 43) dev N/A, expect packet loss!
[   62.850228][   T54] Bluetooth: hci0: command tx timeout
[   62.929212][   T54] Bluetooth: hci1: command tx timeout
[   62.947527][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.093500][   T54] Bluetooth: hci2: command tx timeout
[   63.138786][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.163'.
[   63.147080][ T6277] tipc: Started in network mode
[   63.152229][ T6277] tipc: Node identity eef4ab36abd7, cluster identity 4711
[   63.154831][ T6277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.157522][ T6277] syzkaller0: entered promiscuous mode
[   63.159607][ T6277] syzkaller0: entered allmulticast mode
[   63.186000][ T6277] tipc: Resetting bearer <eth:syzkaller0>
[   63.194364][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   63.202911][ T6274] tipc: Disabling bearer <eth:syzkaller0>
[   63.207849][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'.
[   63.322188][ T6285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.435662][ T6285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.461945][ T6294] rdma_op ffff8880346e69f0 conn xmit_rdma 0000000000000000
[   63.505146][ T6285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.657237][ T5854] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.676075][ T5854] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.698477][ T5854] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.704217][ T5854] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.780407][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'.
[   63.783296][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'.
[   63.786169][ T6311] tipc: Invalid UDP bearer configuration
[   63.786194][ T6311] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   63.794509][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'.
[   63.888529][ T6319] netlink: 'syz.0.182': attribute type 1 has an invalid length.
[   63.909751][ T6319] netlink: 'syz.0.182': attribute type 2 has an invalid length.
[   63.921034][ T6319] netlink: 'syz.0.182': attribute type 1 has an invalid length.
[   63.930003][ T6319] netlink: 'syz.0.182': attribute type 2 has an invalid length.
[   64.035302][ T6330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.110141][   T33] audit: type=1800 audit(1756231166.848:2): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.191" name="blkio.bfq.time_recursive" dev="tmpfs" ino=439 res=0 errno=0
[   64.141708][ T6330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.170294][ T6342] tipc: Started in network mode
[   64.171907][ T6342] tipc: Node identity ea0957c4459a, cluster identity 4711
[   64.174374][ T6342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.177110][ T6342] syzkaller0: entered promiscuous mode
[   64.178992][ T6342] syzkaller0: entered allmulticast mode
[   64.202108][ T6342] tipc: Resetting bearer <eth:syzkaller0>
[   64.205837][ T6340] tipc: Resetting bearer <eth:syzkaller0>
[   64.218173][ T6340] tipc: Disabling bearer <eth:syzkaller0>
[   64.241503][ T6330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.326534][ T6330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.382086][ T6359] netlink: 'syz.2.200': attribute type 2 has an invalid length.
[   64.443782][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.469951][ T5854] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.493178][ T5854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.499444][ T5854] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.541657][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   65.546473][ T6432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.632852][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[   66.636162][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   66.640635][ T6495] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[   66.643700][ T6495] netlink: 10 bytes leftover after parsing attributes in process `syz.0.263'.
[   66.679782][ T6495] nbd: socks must be embedded in a SOCK_ITEM attr
[   66.682494][ T6495] block nbd0: shutting down sockets
[   66.792721][ T6505] netlink: 'syz.1.267': attribute type 10 has an invalid length.
[   66.806478][ T6505] macvlan0: entered promiscuous mode
[   66.813350][ T6505] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   67.984710][ T6578] __nla_validate_parse: 2 callbacks suppressed
[   67.984725][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'.
[   67.992483][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.299'.
[   67.996016][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'.
[   68.000967][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.299'.
[   68.004304][ T6578] netlink: 5 bytes leftover after parsing attributes in process `syz.2.299'.
[   68.011513][ T6578] netlink: 'syz.2.299': attribute type 16 has an invalid length.
[   68.014569][ T6578] netlink: 'syz.2.299': attribute type 17 has an invalid length.
[   68.043178][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.046313][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.067540][ T6581] IPv6: NLM_F_REPLACE set, but no existing node found!
[   68.133932][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.158126][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.351138][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.354835][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.366670][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.381458][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.722801][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'.
[   68.767357][ T6578] syz.2.299 (6578) used greatest stack depth: 19864 bytes left
[   68.854362][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[   68.941341][ T6628] netlink: 'syz.0.322': attribute type 2 has an invalid length.
[   68.953179][ T6628] netlink: 'syz.0.322': attribute type 5 has an invalid length.
[   68.986706][ T6632] netlink: 256 bytes leftover after parsing attributes in process `syz.2.323'.
[   69.172190][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[   69.186981][ T6656] erspan0: entered promiscuous mode
[   69.194976][ T6656] macvtap1: entered promiscuous mode
[   69.199631][ T6656] macvtap1: entered allmulticast mode
[   69.201426][ T6656] erspan0: entered allmulticast mode
[   69.225089][ T6660] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   69.306730][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[   69.468538][ T6689] netlink: 'syz.0.349': attribute type 2 has an invalid length.
[   70.908027][ T6783] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   70.915736][ T6783] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   70.923104][ T6783] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   71.000339][ T6793] gretap1: entered promiscuous mode
[   71.011906][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.014572][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.115512][   T33] audit: type=1800 audit(1756231173.848:3): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.395" name="memory.events" dev="tmpfs" ino=748 res=0 errno=0
[   71.496747][ T6849] Dead loop on virtual device ip6_vti0, fix it urgently!
[   72.822857][ T6956] sctp: [Deprecated]: syz.0.458 (pid 6956) Use of int in max_burst socket option.
[   72.822857][ T6956] Use struct sctp_assoc_value instead
[   72.991945][ T6972] wlan1 speed is unknown, defaulting to 1000
[   72.996355][ T6972] wlan1 speed is unknown, defaulting to 1000
[   73.001943][ T6972] wlan1 speed is unknown, defaulting to 1000
[   73.006348][ T6972] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.024103][ T6972] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   73.053810][ T6972] wlan1 speed is unknown, defaulting to 1000
[   73.057213][ T6972] wlan1 speed is unknown, defaulting to 1000
[   73.061805][ T6972] wlan1 speed is unknown, defaulting to 1000
[   73.101765][ T6977] __nla_validate_parse: 9 callbacks suppressed
[   73.101776][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'.
[   73.138823][ T6981] netlink: 'syz.1.470': attribute type 10 has an invalid length.
[   73.155663][ T6977] bridge2: port 1(veth3) entered blocking state
[   73.157858][ T6977] bridge2: port 1(veth3) entered disabled state
[   73.171960][ T6977] veth3: entered allmulticast mode
[   73.174522][ T6977] veth3: entered promiscuous mode
[   73.182654][ T6981] team0: Port device dummy0 added
[   73.186146][ T6981] netlink: 'syz.1.470': attribute type 10 has an invalid length.
[   73.188301][ T6977] bridge2: port 2(veth0_to_bond) entered blocking state
[   73.192505][ T6977] bridge2: port 2(veth0_to_bond) entered disabled state
[   73.194859][ T6977] veth0_to_bond: entered allmulticast mode
[   73.197643][ T6977] veth0_to_bond: entered promiscuous mode
[   73.207008][ T6981] team0: Port device dummy0 removed
[   73.211022][ T6981] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   73.216738][ T6977] vlan2: entered allmulticast mode
[   73.218436][ T6977] veth1: entered allmulticast mode
[   73.220527][ T6977] bridge2: port 3(vlan2) entered blocking state
[   73.222574][ T6977] bridge2: port 3(vlan2) entered disabled state
[   73.226267][ T6977] vlan2: entered promiscuous mode
[   73.228188][ T6977] veth1: entered promiscuous mode
[   73.301282][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[   73.304464][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[   73.309281][ T6995] netlink: 'syz.0.477': attribute type 1 has an invalid length.
[   73.312166][ T6995] netlink: 10 bytes leftover after parsing attributes in process `syz.0.477'.
[   73.349715][ T6995] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.352563][ T6995] block nbd0: shutting down sockets
[   73.401590][ T7005] tun0: tun_chr_ioctl cmd 2148553947
[   73.555536][ T7027] netlink: 140 bytes leftover after parsing attributes in process `syz.2.493'.
[   73.679350][ T7043] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   73.684634][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'.
[   73.687550][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'.
[   73.704963][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'.
[   73.707988][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'.
[   73.733925][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'.
[   73.887938][ T7067] wlan1 speed is unknown, defaulting to 1000
[   74.388051][ T7079] netlink: 'syz.0.515': attribute type 5 has an invalid length.
[   74.747854][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.453244][ T7157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.620374][ T7166] bridge0: port 3(vlan2) entered blocking state
[   75.622576][ T7166] bridge0: port 3(vlan2) entered disabled state
[   75.624759][ T7166] vlan2: entered allmulticast mode
[   75.626465][ T7166] bridge0: entered allmulticast mode
[   75.639925][ T7166] vlan2: left allmulticast mode
[   75.642831][ T7166] bridge0: left allmulticast mode
[   75.705958][ T7172] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[   75.710827][   T10] IPVS: starting estimator thread 0...
[   75.760275][ T7184] macvtap2: entered promiscuous mode
[   75.762398][ T7184] macvtap2: entered allmulticast mode
[   75.799366][ T7177] IPVS: using max 77 ests per chain, 184800 per kthread
[   75.847386][ T7196] tipc: Failed to remove unknown binding: 66,1,1/0:4276266954/4276266956
[   75.864355][ T7196] tipc: Failed to remove unknown binding: 66,1,1/0:4276266954/4276266956
[   75.867210][ T7196] tipc: Failed to remove unknown binding: 66,1,1/0:4276266954/4276266956
[   76.023561][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.892251][ T7228] netlink: 'syz.0.580': attribute type 7 has an invalid length.
[   77.870964][ T7273] macvlan1: entered promiscuous mode
[   77.874006][ T7273] ipvlan0: entered promiscuous mode
[   77.876620][ T7273] ipvlan0: left promiscuous mode
[   77.883632][ T7273] macvlan1: left promiscuous mode
[   78.511492][ T7329] __nla_validate_parse: 20 callbacks suppressed
[   78.511507][ T7329] netlink: 732 bytes leftover after parsing attributes in process `syz.0.625'.
[   78.517298][ T7329] netlink: 732 bytes leftover after parsing attributes in process `syz.0.625'.
[   78.695688][ T7350] netlink: 128 bytes leftover after parsing attributes in process `syz.2.634'.
[   78.927427][ T7360] sctp: [Deprecated]: syz.2.639 (pid 7360) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.927427][ T7360] Use struct sctp_sack_info instead
[   79.010995][ T7369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.026299][ T7369] syzkaller0: entered promiscuous mode
[   79.028346][ T7369] syzkaller0: entered allmulticast mode
[   79.038633][ T7369] netlink: 21 bytes leftover after parsing attributes in process `syz.1.644'.
[   79.043252][ T7369] tipc: Resetting bearer <eth:syzkaller0>
[   79.046614][ T7366] tipc: Resetting bearer <eth:syzkaller0>
[   79.053443][ T7366] tipc: Disabling bearer <eth:syzkaller0>
[   79.114373][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[   79.118221][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'.
[   79.121893][ T7379] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   79.179038][ T7382] geneve2: entered promiscuous mode
[   79.187552][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.651'.
[   79.294489][ T7399] netlink: 830 bytes leftover after parsing attributes in process `syz.0.657'.
[   79.528808][ T7414] netlink: 'syz.1.664': attribute type 8 has an invalid length.
[   79.925876][ T7437] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[   80.023778][ T7445] netlink: 'syz.2.680': attribute type 6 has an invalid length.
[   80.524106][ T7490] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.698'.
[   80.625542][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'.
[   80.704965][ T7512] netlink: 'syz.2.708': attribute type 10 has an invalid length.
[   80.708099][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.726808][ T7512] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   80.996744][ T7538] wlan1 speed is unknown, defaulting to 1000
[   81.180534][ T7555] netlink: 'syz.1.727': attribute type 4 has an invalid length.
[   81.263420][    T9] cfg80211: failed to load regulatory.db
[   81.276611][ T7568] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[   82.209850][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[   82.698046][ T7686] ip6tnl1: entered promiscuous mode
[   83.851444][ T7733] wlan1 speed is unknown, defaulting to 1000
[   83.998015][ T7740] __nla_validate_parse: 9 callbacks suppressed
[   83.998024][ T7740] netlink: 96 bytes leftover after parsing attributes in process `syz.2.808'.
[   84.218506][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.314837][ T7733] netlink: 152 bytes leftover after parsing attributes in process `syz.0.805'.
[   84.601379][ T7767] netlink: 248 bytes leftover after parsing attributes in process `syz.2.819'.
[   85.032900][ T7791] ieee802154 phy0 wpan0: encryption failed: -22
[   90.337304][    C0] sched: DL replenish lagged too much
[  128.455159][ T5234] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  130.485302][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.693004][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.699653][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.754700][ T7826] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  157.838033][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.860894][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.426829][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.515985][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.518696][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  163.340523][   T54] Bluetooth: hci0: command tx timeout
[  165.440869][   T54] Bluetooth: hci0: command tx timeout
[  167.519336][   T54] Bluetooth: hci0: command tx timeout
[  169.801276][   T54] Bluetooth: hci0: command tx timeout
[  172.934069][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.940825][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.963300][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.966277][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.973585][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.142851][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.146251][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.159765][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.163047][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.165844][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.270121][   T54] Bluetooth: hci1: command tx timeout
[  175.349921][   T54] Bluetooth: hci2: command tx timeout
[  177.633743][   T54] Bluetooth: hci1: command tx timeout
[  177.635606][   T54] Bluetooth: hci2: command tx timeout
[  179.661131][ T5845] Bluetooth: hci2: command tx timeout
[  179.663341][ T5845] Bluetooth: hci1: command tx timeout
[  181.751954][   T54] Bluetooth: hci1: command tx timeout
[  181.753799][   T54] Bluetooth: hci2: command tx timeout
[  185.022350][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.172872][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.243021][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.338843][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.445201][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.752857][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.817581][   T54] Bluetooth: hci0: command tx timeout
[  189.923130][   T54] Bluetooth: hci0: command tx timeout
[  192.060846][   T54] Bluetooth: hci0: command tx timeout
[  194.009978][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.019819][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.367884][   T54] Bluetooth: hci0: command tx timeout
[  194.482379][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.495672][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.222584][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.801115][ T7852] wlan1 speed is unknown, defaulting to 1000
[  215.912181][ T7841] wlan1 speed is unknown, defaulting to 1000
[  217.242673][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  217.312954][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  217.316512][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.323946][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.327087][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.135322][   T12] bridge_slave_1: left allmulticast mode
[  218.143865][   T12] bridge_slave_1: left promiscuous mode
[  218.159862][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.223508][   T12] bridge_slave_0: left allmulticast mode
[  219.231163][   T12] bridge_slave_0: left promiscuous mode
[  219.336197][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.896376][ T5845] Bluetooth: hci2: command tx timeout
[  221.973150][ T5845] Bluetooth: hci2: command tx timeout
[  224.079937][ T5845] Bluetooth: hci2: command tx timeout
[  226.170247][ T5845] Bluetooth: hci2: command tx timeout
[  249.172342][ T5845] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  249.497910][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.598307][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.503960][ T7870] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  255.914612][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.919476][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  285.304415][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  285.425577][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  285.478012][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  285.705385][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  285.786869][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  289.219803][   T54] Bluetooth: hci3: command tx timeout
[  291.361167][   T54] Bluetooth: hci3: command tx timeout
[  293.423651][   T54] Bluetooth: hci3: command tx timeout
[  293.592929][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  293.596581][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  293.602829][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  293.606223][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  293.612740][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  294.107620][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.122563][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.126488][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  294.191310][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  294.193976][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  295.504558][   T54] Bluetooth: hci3: command tx timeout
[  296.541894][ T5845] Bluetooth: hci4: command tx timeout
[  296.692774][ T5845] Bluetooth: hci5: command tx timeout
[  298.517574][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  298.630324][ T5845] Bluetooth: hci4: command tx timeout
[  298.994990][ T5845] Bluetooth: hci5: command tx timeout
[  300.693260][ T5845] Bluetooth: hci4: command tx timeout
[  301.040510][ T5845] Bluetooth: hci5: command tx timeout
[  302.790078][ T5845] Bluetooth: hci4: command tx timeout
[  303.179170][ T5845] Bluetooth: hci5: command tx timeout
[  308.751153][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  317.000639][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.006666][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  344.785134][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  358.323456][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  358.410472][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  358.561589][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  358.810875][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  358.918376][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  359.614593][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  359.618483][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  359.626856][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  359.636972][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  359.654026][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  361.495846][ T5845] Bluetooth: hci6: command tx timeout
[  361.970740][ T5845] Bluetooth: hci7: command tx timeout
[  363.582060][ T5845] Bluetooth: hci6: command tx timeout
[  364.291311][ T5845] Bluetooth: hci7: command tx timeout
[  365.699737][ T5845] Bluetooth: hci6: command tx timeout
[  366.418506][ T5845] Bluetooth: hci7: command tx timeout
[  367.827089][ T5845] Bluetooth: hci6: command tx timeout
[  368.728073][ T5845] Bluetooth: hci7: command tx timeout
[  376.344477][   T35] INFO: task kworker/u10:1:32 blocked for more than 143 seconds.
[  376.351151][   T35]       Not tainted syzkaller #0
[  376.352853][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.355790][   T35] task:kworker/u10:1   state:D stack:24088 pid:32    tgid:32    ppid:2      task_flags:0x4208160 flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  376.963596][   T35] Workqueue: events_unbound linkwatch_event
[  376.966205][   T35] Call Trace:
[  376.967662][   T35]  <TASK>
[  376.968965][   T35]  __schedule+0x1798/0x4cc0
[  377.256432][   T35]  ? __lock_acquire+0xab9/0xd20
[  377.258621][   T35]  ? __lock_acquire+0xab9/0xd20
[  377.269325][   T35]  ? __pfx___schedule+0x10/0x10
[  377.271446][   T35]  ? schedule+0x91/0x360
[  377.273258][   T35]  schedule+0x165/0x360
[  377.275025][   T35]  schedule_preempt_disabled+0x13/0x30
[  377.277346][   T35]  __mutex_lock+0x7e6/0x1360
[  378.437835][   T35]  ? look_up_lock_class+0x74/0x170
[  378.449164][   T35]  ? __mutex_lock+0x5b6/0x1360
[  378.450853][   T35]  ? linkwatch_event+0xe/0x60
[  378.452477][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  378.454178][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  378.455937][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  378.457835][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  378.463515][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.471536][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  379.125871][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  379.142045][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  379.144879][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  379.148401][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  379.154306][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  379.832320][   T35]  linkwatch_event+0xe/0x60
[  379.834183][   T35]  process_scheduled_works+0xae1/0x17b0
[  379.836435][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  379.838882][   T35]  worker_thread+0x8a0/0xda0
[  379.990029][   T35]  kthread+0x711/0x8a0
[  379.991775][   T35]  ? __pfx_worker_thread+0x10/0x10
[  379.993888][   T35]  ? __pfx_kthread+0x10/0x10
[  379.995801][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  379.997954][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.329491][   T35]  ? __pfx_kthread+0x10/0x10
[  380.331055][   T35]  ret_from_fork+0x3fc/0x770
[  380.332578][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  380.334261][   T35]  ? __switch_to_asm+0x39/0x70
[  380.335880][   T35]  ? __switch_to_asm+0x33/0x70
[  380.337549][   T35]  ? __pfx_kthread+0x10/0x10
[  380.913735][   T35]  ret_from_fork_asm+0x1a/0x30
[  380.915816][   T35]  </TASK>
[  380.917171][   T35] INFO: task dhcpcd:5591 blocked for more than 147 seconds.
[  381.144398][   T35]       Not tainted syzkaller #0
[  381.146122][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  381.148982][   T35] task:dhcpcd          state:D stack:21352 pid:5591  tgid:5591  ppid:5590   task_flags:0x400140 flags:0x00004002
[  381.386356][ T5845] Bluetooth: hci8: command tx timeout
[  381.960459][   T35] Call Trace:
[  381.961656][   T35]  <TASK>
[  381.962692][   T35]  __schedule+0x1798/0x4cc0
[  381.964215][   T35]  ? __lock_acquire+0xab9/0xd20
[  381.966129][   T35]  ? __lock_acquire+0xab9/0xd20
[  381.967956][   T35]  ? __pfx___schedule+0x10/0x10
[  382.220371][   T35]  ? schedule+0x91/0x360
[  382.221895][   T35]  schedule+0x165/0x360
[  382.223400][   T35]  schedule_preempt_disabled+0x13/0x30
[  382.225323][   T35]  __mutex_lock+0x7e6/0x1360
[  382.226898][   T35]  ? __mutex_lock+0x5b6/0x1360
[  382.228507][   T35]  ? devinet_ioctl+0x323/0x1b50
[  382.249590][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  382.251355][   T35]  ? bpf_lsm_capable+0x9/0x20
[  382.252854][   T35]  ? security_capable+0x7e/0x2e0
[  382.254518][   T35]  devinet_ioctl+0x323/0x1b50
[  382.256094][   T35]  ? __pfx_devinet_ioctl+0x10/0x10
[  382.257777][   T35]  ? get_user_ifreq+0x12c/0x180
[  382.560678][   T35]  inet_ioctl+0x3c0/0x4c0
[  382.562266][   T35]  ? __pfx_inet_ioctl+0x10/0x10
[  382.563941][   T35]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  382.565634][   T35]  sock_do_ioctl+0xdc/0x300
[  382.567194][   T35]  ? __pfx_sock_do_ioctl+0x10/0x10
[  382.568929][   T35]  ? __lock_acquire+0xab9/0xd20
[  382.581045][   T35]  sock_ioctl+0x576/0x790
[  382.582536][   T35]  ? __pfx_sock_ioctl+0x10/0x10
[  382.584191][   T35]  ? fd_install+0x30d/0x540
[  382.585750][   T35]  ? bpf_lsm_file_ioctl+0x9/0x20
[  382.587402][   T35]  ? __pfx_sock_ioctl+0x10/0x10
[  382.658314][   T35]  __se_sys_ioctl+0xfc/0x170
[  382.671979][   T35]  do_syscall_64+0xfa/0x3b0
[  382.673518][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.675275][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.677463][   T35]  ? exc_page_fault+0x9f/0xf0
[  382.678999][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.992214][   T35] RIP: 0033:0x7f29b71a8d49
[  382.993777][   T35] RSP: 002b:00007ffd98d37dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  382.996781][   T35] RAX: ffffffffffffffda RBX: 00007f29b70da6c0 RCX: 00007f29b71a8d49
[  383.081756][   T35] RDX: 00007ffd98d47fc8 RSI: 0000000000008914 RDI: 0000000000000010
[  383.084413][   T35] RBP: 00007ffd98d58188 R08: 00007ffd98d47f88 R09: 00007ffd98d47f38
[  383.087016][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.109908][   T35] R13: 00007ffd98d47fc8 R14: 0000000000000028 R15: 0000000000008914
[  383.113063][   T35]  </TASK>
[  383.153348][   T35] INFO: task kworker/1:4:5885 blocked for more than 150 seconds.
[  383.156218][   T35]       Not tainted syzkaller #0
[  383.157920][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.549678][ T5845] Bluetooth: hci8: command tx timeout
[  383.620184][   T35] task:kworker/1:4     state:D stack:23016 pid:5885  tgid:5885  ppid:2      task_flags:0x4208060 flags:0x00004000
[  383.624221][   T35] Workqueue: events switchdev_deferred_process_work
[  383.626441][   T35] Call Trace:
[  383.627584][   T35]  <TASK>
[  383.628573][   T35]  __schedule+0x1798/0x4cc0
[  384.320038][   T35]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.322250][   T35]  ? __pfx___schedule+0x10/0x10
[  384.323952][   T35]  ? schedule+0x91/0x360
[  384.325396][   T35]  schedule+0x165/0x360
[  384.326903][   T35]  schedule_preempt_disabled+0x13/0x30
[  384.328770][   T35]  __mutex_lock+0x7e6/0x1360
[  385.575777][ T5845] Bluetooth: hci8: command tx timeout
[  386.331435][   T35]  ? look_up_lock_class+0x74/0x170
[  386.333593][   T35]  ? __mutex_lock+0x5b6/0x1360
[  386.335610][   T35]  ? switchdev_deferred_process_work+0xe/0x20
[  386.338128][   T35]  ? __pfx___mutex_lock+0x10/0x10

VM DIAGNOSIS:
18:04:39  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff901690f4 RBX=ffffffff901690f4 RCX=ffffffff901690fc RDX=ffffffff90c22432
RSI=ffffffff90c22432 RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc90000006d38
R8 =0000000000000005 R9 =ffffffff8172c195 R10=ffffc90000006e58 R11=ffffffff81ac3910
R12=ffffffff90c22436 R13=0000000000000000 R14=ffffc90000006e08 R15=ffffffff901690f8
RIP=ffffffff8172c455 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9a9cce8030 CR3=000000010a232000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000005 RCX=ffffffff934e5018 RDX=0000000000000005
RSI=ffff88801afd6220 RDI=ffff88801afd5640 RBP=0000000000000020 RSP=ffffc900001dfe58
R8 =0000000000000000 R9 =ffffffff89ebfca1 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000000022000 R13=0000000000000000 R14=ffff88801afd6220 R15=ffff88801afd6130
RIP=ffffffff819d8c30 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9a9d8e8740 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000055557f52a7e0 000055557f52a7e0 XMM01=00007f9a9cd87468 00007f9a9cd87480
XMM02=00007f9a9cd87498 00007f9a9cd87470 XMM03=00007f9a9cd874a8 00007f9a9cd874a0
XMM04=00007f9a9d8ed100 00007f9a9cd87460 XMM05=00007f9a9cd87478 00007f9a9cd874c0
XMM06=00007f9a9cd874b8 00007f9a9cd874b0 XMM07=00007f9a9cd874a8 00007f9a9cd874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
