last executing test programs:

19.51356253s ago: executing program 1 (id=1176):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000002c0)=0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="270e0000000000000000040702001400020074756e6c30000000000000000000000000000146265f270073797a3220f87321efcce91cb4dd0931200f0ba836026fc9f57c47ba9a4206e56fe9856c4ec6eea87434b8644cc53f44d643efc2c0dfbcc8567ddab7da4dc62327a0b7fd28bb33268a2dbf7255cc427ed000394ad219e00b736464196d08f5b8545b1d01376a4ede1f279375efb2a91af38a61d4108ddb505796d510ad3f2fade7df31fc13842774d14365e703e36ec0b3ce85ad459031734661b45d738e8c360c46658d84fedd1e4be0738c928ee1781fd0bdc37969fe44b127e2c6816d251b4d1049ffb086a7aad6a24d5ea5634a"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0xc0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
socket$inet6(0xa, 0x6, 0x20003)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYRES64=r3], 0x28}}, 0x4800)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, 0x0, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r13, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x0, 0x2, 0xfffffffffffffffc, 0xc3d, 0xf8a8], 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}, 0x78)

19.380538009s ago: executing program 1 (id=1178):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000100)=0x80000001, 0x4)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f4, 0x200, 0x70bd27, 0x25dfdbff, {0x1, 0x3, 0x2d, [0x80000000, 0x48, 0x3, 0x2, 0x80000001, 0x421211de, 0x7, 0x1, 0x4, 0x4, 0x4, 0xfffffffa, 0x8a, 0x7f, 0x4, 0x3, 0xfff, 0x7fff, 0x7, 0x4, 0x8, 0xfffffe00, 0x72, 0x496af011, 0x5, 0x5, 0x2, 0x6, 0x2, 0x3, 0x1, 0xfffffff9, 0x7, 0x6, 0xbb, 0x0, 0x1, 0xd, 0x1, 0x6, 0x9, 0x40, 0x6, 0xd, 0x0, 0xef5, 0x9, 0x78456aa1, 0x200, 0xd, 0xfffffffa, 0x4, 0x4, 0x3, 0x0, 0x2, 0xffff, 0xa, 0x1000, 0xbe, 0xee, 0xfffffffd, 0xfffffffb, 0x3], [0x8, 0x80, 0x4, 0x7ff, 0xffffff01, 0x81, 0xc, 0x548, 0x9, 0x4, 0x32e, 0xc, 0x1, 0x9, 0x101, 0x5dd, 0xb, 0x10001, 0x6, 0x5, 0x9, 0xff, 0xb, 0x0, 0x40, 0x7, 0x0, 0x101, 0xb32, 0x8, 0x0, 0x0, 0xfffffffe, 0x7, 0x7, 0xfffffffa, 0x2, 0x5, 0x8000, 0x8000, 0x8, 0x0, 0x100, 0x8, 0x2ef5, 0x1000, 0x7, 0x4c0, 0x297e, 0xdcc, 0xa8, 0x4, 0x1, 0x359e, 0x100, 0x7, 0x1, 0x8, 0x8, 0xb6f8, 0x8, 0x40, 0x9, 0x7], [0x1, 0x8001, 0x3, 0x0, 0x3, 0x1, 0xf4a, 0x10001, 0x6, 0x55bc, 0x1, 0x400, 0x2cd, 0x1200, 0x4b5, 0x4, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x3ff, 0xfffffffb, 0x10001, 0x4, 0x6, 0xfffffffe, 0x1ff, 0x7, 0x10001, 0xffffffff, 0x7, 0x1, 0x101, 0x0, 0x0, 0x8, 0x8, 0x5, 0x2, 0x9, 0x5, 0x7f, 0x2, 0x4, 0x3, 0x9, 0x7fffffff, 0x44e0b2f3, 0x6, 0x10000, 0x4, 0x8, 0x0, 0xffffffff, 0xe3, 0x8000, 0x7, 0x6, 0xffff, 0xffffffff, 0x7, 0xe5, 0xe4f], [0xfff, 0x10001, 0x0, 0x8, 0x7fff, 0x7, 0x0, 0x6, 0x101, 0x8, 0x8, 0x3c6, 0x6, 0x5, 0x3d31ffe4, 0x9, 0x40, 0x0, 0xfffffff6, 0x637, 0x400, 0x2, 0x7, 0x1, 0x1d4, 0x9, 0x1, 0xd5c, 0x10000, 0xefd00000, 0x5, 0x8, 0x5, 0x1, 0x5, 0x40, 0x7, 0xffffffff, 0x3, 0x2, 0x2, 0x38000000, 0x8, 0x9, 0x94c, 0x4, 0x1, 0x800, 0x69c, 0x8, 0xfffffff9, 0x9, 0x5, 0x7, 0x7fff, 0x1, 0xb53a3a, 0xcabf, 0x9, 0x0, 0x9, 0x41, 0x401, 0xfffffffd]}}, 0x420}, 0x1, 0x0, 0x0, 0x8004}, 0xdfc938363644958e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010030bd7000f9dbdf250220300cfe0117070000000008001e"], 0x2c}}, 0x20008040)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x4, 0x0, @remote}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)
close(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9886}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x33}, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x5, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200003d0900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001720000180070001007274"], 0xb4}}, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)

19.250580239s ago: executing program 1 (id=1179):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x80000)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b", 0x21}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r7, 0x0, 0x9}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
poll(&(0x7f00000002c0)=[{r7, 0x12}, {r6, 0xba}, {r6}], 0x3, 0x7ae6)
sendmmsg$alg(r5, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)="b8dce3", 0x3}, {&(0x7f0000000500)="82c3e4", 0x3}], 0x2, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX=r3, @ANYRES16=r10, @ANYRESHEX=0x0, @ANYRES64=r1], 0x118, 0x20000004}], 0x1, 0x20004000)

18.83266713s ago: executing program 1 (id=1184):
unshare(0x400)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000680)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, {0x0}, 0x0, 0x40}, 0xa0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x10, 0x2, 0x0)
socket(0x11, 0x5, 0x2772)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
r14 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c)
bind$inet6(r14, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r14, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r14, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0xa, 0x3, 0x5, 0x3}}}}]}, 0x4c}}, 0x0)

18.662365971s ago: executing program 2 (id=1187):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000740)=0x85, 0x4)
sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x24044891}}], 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0)

18.560233486s ago: executing program 1 (id=1188):
pipe(&(0x7f0000000100)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x59) (async)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async)
writev(r4, &(0x7f0000000440)=[{0x0}, {&(0x7f00000001c0)="4b1a011f8064fc", 0x7}], 0x2) (async)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 32)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0)
sendfile(r6, r8, &(0x7f0000000240)=0x6, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xd0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x0) (async, rerun: 64)
r9 = socket(0x2000000000000021, 0x2, 0x10000000000002)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) (async)
socket$kcm(0xa, 0x3, 0x87)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143040, 0x0)

18.469653409s ago: executing program 2 (id=1190):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10)
r3 = accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10, 0x80800)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x3}, @private2, @local, 0x1, 0x6, 0x0, 0x100, 0x6, 0x110022})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x6, 0x0, 0x2, 0x1, 0x0, 0x80}, 0x20)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xbd7d421f8bb09fd4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000906010200000000000000000500000a050004000000bf10"], 0x1c}}, 0x80)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8100048a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x1411, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x8008)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0)
ioctl$SIOCGSKNS(r8, 0x894c, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)
ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000000)={0x1, 0x4, 0xf, 0x0, 0x9, 0x6, 0x15, "df55db8f995273677343a77d39d8a8e03acfd2f7", "3c4ca3313e99aa1099065ffd7d9b8dac83b58166"})

18.419866264s ago: executing program 1 (id=1191):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000200), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000980)={0x1, {{0x2, 0x4e23, @loopback}}, 0x0, 0x4, [{{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e24, @broadcast}}]}, 0x290)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=r5], 0x80}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r10)
socket$pppoe(0x18, 0x1, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x2, 0x80}, {0x2, 0x3}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

18.360419446s ago: executing program 2 (id=1193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
ppoll(&(0x7f0000000000)=[{r4, 0x400}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00250327bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="ae008e040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x448c5}, 0x14)

18.354719359s ago: executing program 2 (id=1195):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
socket(0x10, 0x80002, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x1, 0x9}, 0x20) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6745208e00303a000000000000000000ff00ffff64010100ff0200000000000000000000000000010401907800000001630108f9fffb2b0000000000000000000000ffff0a010102f0ff0000000000"], 0x0)
recvmmsg(r5, &(0x7f0000000100), 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) (async)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) (async)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})

18.290574859s ago: executing program 2 (id=1196):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003480)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x6}}}]}]}]}}]}, 0x54}}, 0x20040054)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00'})
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000400"/20, @ANYRESOCT=r4, @ANYBLOB="0b000000000000000c001a8008000280041401800800040000000000ce376a28d0d4f2774c26230607d1d6f264cf9d82720d940c3d2aa32f3559fd0d8794ff9c8f"], 0x34}}, 0x0)

18.289602557s ago: executing program 2 (id=1197):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24004085}, 0x20000100)
write$nci(r0, &(0x7f00000003c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @b={0x6, 0x2, 0x2, 0x1, 0x81, 0x7, 0x6, {0x1, "af"}, 0x2, 0x7f, 0xb, 0x8, 0x1, 'j'}}, 0x12) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080028bd7000ffdbdf25380000000c00580048000000000000000c005800790000000000d158002b2acc8d5558133245000000000000000c00580051000000000000000c0058006b000000000000000c005800190000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x7)

17.117016074s ago: executing program 0 (id=1202):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
socket$kcm(0x10, 0x3, 0x10)
epoll_create1(0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xb1, 0x80}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0)
write$tun(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="01020300010002000200fff07cd8c7c657da588ae3e00300161d26d1288f99b10f540fe46c3975b406b73da92afcc5788299564128d1ea9f788c794a3b8cd767d8e934793199a330861a387adf74ed92865fb778e543648644a0f350af7291b85cd14cde2a414076f2627fe0e4cfc53c5fae6c4aecbe7f25ca6290c5582409e1f88cd129b26ef30e9a75c6ffb7adb6d8a4870972b550c987889ca453793a33071ce438852492428140dd92724621"], 0x86)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

16.149026006s ago: executing program 0 (id=1203):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x10000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0xa, [@multicast2, @remote, @multicast1]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x80}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000280)={@multicast1, 0x1, 0x0, 0x40, 0x0, [{@dev}, {@dev}, {@local}, {@broadcast}]}})
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@delqdisc={0x234, 0x25, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xf}, {0xc, 0xc}, {0x10, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7fff, 0x2222, 0x409, 0x6, 0xfffffbff, 0x7f, 0x2, 0x1000}}}}, @qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0xa821}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0xfffffff7}]}}, @TCA_STAB={0x1a4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0xa7b, 0x5, 0x0, 0x9, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x6, 0x2, 0x5, 0x65c6]}}, {{0x1c, 0x1, {0x0, 0x6e, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x9}}, {0x16, 0x2, [0x4, 0x9, 0x9, 0x4, 0x7ff, 0x61f1, 0x400, 0x40, 0x9]}}, {{0x1c, 0x1, {0x2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x7ff, 0xa}}, {0x18, 0x2, [0x5, 0x6, 0x0, 0x9, 0x2be, 0xb246, 0x5, 0x5e, 0x1, 0x1b93]}}, {{0x1c, 0x1, {0x1, 0x80, 0x7, 0x8bde, 0x2, 0x9, 0xc1f8, 0xa}}, {0x18, 0x2, [0x1, 0x1, 0x1, 0x4, 0x8, 0x4, 0xdb, 0x8128, 0x2, 0x3]}}, {{0x1c, 0x1, {0x7, 0xf, 0xfff, 0x6, 0x0, 0xc, 0x0, 0xa}}, {0x18, 0x2, [0x7f4, 0x6, 0x4, 0xc47e, 0x4, 0x9, 0x6, 0xd48, 0x8, 0x2]}}, {{0x1c, 0x1, {0x8, 0x3, 0xde, 0x40, 0x2, 0x8, 0x1000, 0x4}}, {0xc, 0x2, [0x2, 0x4, 0x9, 0x5]}}, {{0x1c, 0x1, {0x5, 0xe, 0x7, 0x5, 0x1, 0x0, 0x45, 0x5}}, {0xe, 0x2, [0xc7b, 0x101, 0x0, 0xbda, 0x6]}}, {{0x1c, 0x1, {0x40, 0x3a, 0x1, 0x3, 0x1, 0x7fffffff, 0x7ff, 0x6}}, {0x10, 0x2, [0x1ff, 0x2, 0x4, 0x0, 0x7, 0x800]}}, {{0x1c, 0x1, {0x84, 0x9, 0xfff, 0x4, 0x1, 0x545f, 0x4, 0x1}}, {0x6, 0x2, [0x50]}}]}]}, 0x234}}, 0x0)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)

16.059069573s ago: executing program 0 (id=1204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0)

16.058477091s ago: executing program 0 (id=1205):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf25170000004400068000040067636d286165732b0000000000000000000000000000000000000000000000001400000096557917d5d82cebae9347436de1ace2fe62c0790400030000"], 0x58}}, 0x4004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)="943736f5c55d7332aac535939d517c5936924fc633278e99313ceb179a3b0ceff2a570f9565d7994ea7b7440cfd2efe1966361d207fe6d15b6fe12f1cd42e9411f1bd148fbe27f9fe045be750419301033905e8229e83263e16838941a830bbf307f947aba2f41f709917ef1dc821f268907b5988f46ede2d296aff637fa6aeb00497b1865ab53bc52cc75d245205a2923db0f472e95d742e131d92feededf39db3e02234015e4a7dabb82ef4b8c44c601311d5f9292f8731e84790fda8608b5e921b1d3b5d0ea2c3bbdce725d3723dfd162c401d00be7fd90f421f6448c006c", 0xfffffffffffffdc0}], 0x1, 0x0, 0x8}, 0x4004004)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001)

15.959236516s ago: executing program 0 (id=1206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0x364}}, 0x0)

15.956891384s ago: executing program 0 (id=1207):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0xaedf}, 0x8)
unshare(0x2020600)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))

3.049211306s ago: executing program 32 (id=1191):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000200), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000980)={0x1, {{0x2, 0x4e23, @loopback}}, 0x0, 0x4, [{{0x2, 0x4e23, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e24, @broadcast}}]}, 0x290)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=r5], 0x80}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r10)
socket$pppoe(0x18, 0x1, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x2, 0x80}, {0x2, 0x3}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.008954475s ago: executing program 33 (id=1197):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24004085}, 0x20000100)
write$nci(r0, &(0x7f00000003c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @b={0x6, 0x2, 0x2, 0x1, 0x81, 0x7, 0x6, {0x1, "af"}, 0x2, 0x7f, 0xb, 0x8, 0x1, 'j'}}, 0x12) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080028bd7000ffdbdf25380000000c00580048000000000000000c005800790000000000d158002b2acc8d5558133245000000000000000c00580051000000000000000c0058006b000000000000000c005800190000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x7)

0s ago: executing program 34 (id=1207):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000000c0)=""/80, 0x0, 0xc00, 0x0, 0x1}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={<r3=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0xaedf}, 0x8)
unshare(0x2020600)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200))
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61717' (ED25519) to the list of known hosts.
syzkaller login: [   56.223080][ T5774] cgroup: Unknown subsys name 'net'
[   56.380970][ T5774] cgroup: Unknown subsys name 'cpuset'
[   56.387160][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.454349][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.200566][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.206218][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.224728][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.228092][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.232949][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.236900][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.239855][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.243289][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.247391][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.250735][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.269599][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.276694][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.286212][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.290724][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.294197][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.600658][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   63.668052][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   63.714502][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.806159][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.810562][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.813753][ T5857] bridge_slave_0: entered allmulticast mode
[   63.818828][ T5857] bridge_slave_0: entered promiscuous mode
[   63.849027][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.851697][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.854697][ T5857] bridge_slave_1: entered allmulticast mode
[   63.859600][ T5857] bridge_slave_1: entered promiscuous mode
[   63.923338][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.927240][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.930780][ T5849] bridge_slave_0: entered allmulticast mode
[   63.934911][ T5849] bridge_slave_0: entered promiscuous mode
[   63.939486][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.942578][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.945159][ T5849] bridge_slave_1: entered allmulticast mode
[   63.949535][ T5849] bridge_slave_1: entered promiscuous mode
[   63.957846][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.970747][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.973640][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.977380][ T5853] bridge_slave_0: entered allmulticast mode
[   63.981669][ T5853] bridge_slave_0: entered promiscuous mode
[   63.988246][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.991453][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.994896][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.998436][ T5853] bridge_slave_1: entered allmulticast mode
[   64.002374][ T5853] bridge_slave_1: entered promiscuous mode
[   64.020592][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.052520][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.098201][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.115306][ T5857] team0: Port device team_slave_0 added
[   64.121139][ T5857] team0: Port device team_slave_1 added
[   64.140628][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.149163][ T5849] team0: Port device team_slave_0 added
[   64.168622][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.171451][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.182476][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.216646][ T5849] team0: Port device team_slave_1 added
[   64.220834][ T5853] team0: Port device team_slave_0 added
[   64.223467][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.226348][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.234170][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.259706][ T5853] team0: Port device team_slave_1 added
[   64.303843][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.307217][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.317791][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.348086][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.350878][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.361476][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.389033][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.391467][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.401574][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.410660][ T5857] hsr_slave_0: entered promiscuous mode
[   64.413664][ T5857] hsr_slave_1: entered promiscuous mode
[   64.427798][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.430622][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.440821][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.464557][ T5849] hsr_slave_0: entered promiscuous mode
[   64.467082][ T5849] hsr_slave_1: entered promiscuous mode
[   64.470190][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   64.472480][ T5849] Cannot create hsr debugfs directory
[   64.530777][ T5853] hsr_slave_0: entered promiscuous mode
[   64.533830][ T5853] hsr_slave_1: entered promiscuous mode
[   64.537298][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   64.539258][ T5853] Cannot create hsr debugfs directory
[   64.885326][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.897793][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.920157][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.926722][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.970190][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.982743][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.989741][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.029173][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.123359][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.131310][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.143091][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.149672][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.206581][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.238064][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.256075][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.259124][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.268551][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.285945][   T55] Bluetooth: hci2: command tx timeout
[   65.297430][  T735] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.300342][  T735] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.320406][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.343540][  T735] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.346572][  T735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.356928][   T55] Bluetooth: hci1: command tx timeout
[   65.357439][ T5856] Bluetooth: hci0: command tx timeout
[   65.381032][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.384088][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.464864][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.495323][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.532007][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.534988][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.548185][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.551172][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.604393][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.612050][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.724055][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.794959][ T5857] veth0_vlan: entered promiscuous mode
[   65.820643][ T5857] veth1_vlan: entered promiscuous mode
[   65.830930][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.854771][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.911624][ T5849] veth0_vlan: entered promiscuous mode
[   65.926228][ T5857] veth0_macvtap: entered promiscuous mode
[   65.941875][ T5853] veth0_vlan: entered promiscuous mode
[   65.948135][ T5849] veth1_vlan: entered promiscuous mode
[   65.952072][ T5857] veth1_macvtap: entered promiscuous mode
[   65.975227][ T5853] veth1_vlan: entered promiscuous mode
[   66.004912][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.029898][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.047073][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.051528][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.055500][ T5853] veth0_macvtap: entered promiscuous mode
[   66.064791][ T5696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.073411][ T5696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.083279][ T5849] veth0_macvtap: entered promiscuous mode
[   66.090156][ T5849] veth1_macvtap: entered promiscuous mode
[   66.096199][ T5853] veth1_macvtap: entered promiscuous mode
[   66.129458][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.145308][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.167759][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.191608][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.198230][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.205247][ T5696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.210042][ T5696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.234291][ T5696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.252456][ T5696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.264083][ T5696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.269159][ T5696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.277534][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.280711][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.299631][ T5696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.382455][  T735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.386329][  T735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.401767][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.412979][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.491923][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.502357][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.507451][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.533848][  T735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.546938][  T735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.630541][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.645845][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.707787][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.882542][ T5939] netlink: 'syz.0.1': attribute type 13 has an invalid length.
[   66.885929][ T5939] netlink: 'syz.0.1': attribute type 17 has an invalid length.
[   67.017906][ T5939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.050112][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.105265][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.151679][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.166571][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.356736][ T5856] Bluetooth: hci2: command tx timeout
[   67.361035][ T5962] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   67.405151][ T5962] bridge_slave_0: left allmulticast mode
[   67.413569][ T5962] bridge_slave_0: left promiscuous mode
[   67.419904][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.432173][ T5962] bridge_slave_1: left allmulticast mode
[   67.434509][ T5962] bridge_slave_1: left promiscuous mode
[   67.440068][ T5856] Bluetooth: hci0: command tx timeout
[   67.444081][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.448196][ T5856] Bluetooth: hci1: command tx timeout
[   67.458775][ T5962] bond0: (slave bond_slave_0): Releasing backup interface
[   67.468384][ T5962] bond0: (slave bond_slave_1): Releasing backup interface
[   67.480849][ T5962] team0: Port device team_slave_0 removed
[   67.491364][ T5962] team0: Port device team_slave_1 removed
[   67.494762][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.499039][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.503820][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.505308][ T5969] netlink: 'syz.1.9': attribute type 10 has an invalid length.
[   67.508072][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.519674][ T5970] Bluetooth: MGMT ver 1.23
[   67.547781][ T5969] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   67.564663][ T5969] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.597949][ T5972] C: renamed from lo (while UP)
[   67.605070][ T5972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   67.620292][ T5973] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   67.997609][ T5984] ip6gre0: entered allmulticast mode
[   68.056101][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   68.157842][  T793] cfg80211: failed to load regulatory.db
[   68.339547][ T6003] openvswitch: netlink: Message has 4 unknown bytes.
[   68.343826][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.343986][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   68.356236][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   68.416998][ T6009] netlink: 80 bytes leftover after parsing attributes in process `syz.0.20'.
[   68.480478][ T6014] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   68.499001][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.524104][ T6011] nbd: must specify a device to reconfigure
[   68.693357][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'.
[   68.878371][ T6039] geneve2: entered promiscuous mode
[   68.882526][ T5696] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   68.894227][ T5696] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   68.903278][ T5696] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   68.912857][ T5696] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   69.103234][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.110824][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.116512][ T6052] netlink: 'syz.0.34': attribute type 12 has an invalid length.
[   69.175270][ T6054] netlink: 'syz.1.35': attribute type 10 has an invalid length.
[   69.193749][ T6054] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   69.199266][ T6056] ip6gre0: left allmulticast mode
[   69.232602][ T6056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.436174][ T5856] Bluetooth: hci2: command tx timeout
[   69.446366][ T6062] pim6reg1: entered promiscuous mode
[   69.448239][ T6062] pim6reg1: entered allmulticast mode
[   69.501238][ T6067] syzkaller0: entered promiscuous mode
[   69.503376][ T6067] syzkaller0: entered allmulticast mode
[   69.509622][ T6066] tipc: Started in network mode
[   69.512291][ T6066] tipc: Node identity 4e1a9ce19719, cluster identity 4711
[   69.516710][ T5856] Bluetooth: hci0: command tx timeout
[   69.517162][   T55] Bluetooth: hci1: command tx timeout
[   69.521447][ T6066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.531325][ T6073] syzkaller0: entered promiscuous mode
[   69.533629][ T6073] syzkaller0: entered allmulticast mode
[   69.543203][ T6066] tipc: Resetting bearer <eth:syzkaller0>
[   69.568846][ T6066] tipc: Disabling bearer <eth:syzkaller0>
[   69.575081][ T6070] tipc: Started in network mode
[   69.581330][ T6070] tipc: Node identity 76cb5cde98b1, cluster identity 4711
[   69.584516][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.592720][ T6071] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   69.611924][ T6069] tipc: Resetting bearer <eth:syzkaller0>
[   69.632234][ T6069] tipc: Disabling bearer <eth:syzkaller0>
[   69.633652][ T6077] netlink: 'syz.2.42': attribute type 4 has an invalid length.
[   69.643054][ T6075] tipc: Started in network mode
[   69.644630][ T6075] tipc: Node identity a2833dddc598, cluster identity 4711
[   69.649250][ T6075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.662296][ T6077] : renamed from bond0 (while UP)
[   69.664352][ T6075] Zero length message leads to an empty skb
[   69.715082][ T6074] tipc: Disabling bearer <eth:syzkaller0>
[   69.729550][ T6080] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   69.921699][ T6095] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   70.245143][ T6099] syzkaller0: entered promiscuous mode
[   70.248551][ T6099] syzkaller0: entered allmulticast mode
[   70.262333][ T5884] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.266605][ T5884] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   70.283384][ T5884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.287507][ T5884] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   70.291515][ T5884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.294937][ T5884] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   70.329654][ T5884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.333783][ T5884] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   70.487082][ T6123] netlink: 'syz.1.55': attribute type 153 has an invalid length.
[   70.570092][ T6127] unsupported nlmsg_type 40
[   70.582400][ T6127] syz_tun: entered allmulticast mode
[   70.618437][ T6132] dvmrp1: tun_chr_ioctl cmd 1074025677
[   70.620343][ T6132] dvmrp1: linktype set to 805
[   70.701912][ T6140] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.857496][ T6146] bond0: (slave netdevsim0): Releasing backup interface
[   70.870753][ T6146] bond0: (slave wlan1): Releasing backup interface
[   70.947207][ T6146] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   70.978401][ T6146] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.369587][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.373511][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.515822][   T55] Bluetooth: hci2: command tx timeout
[   71.600527][   T55] Bluetooth: hci0: command tx timeout
[   71.602760][   T55] Bluetooth: hci1: command tx timeout
[   71.614326][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.629427][ T6165] veth0: entered promiscuous mode
[   71.745814][ T6169] __nla_validate_parse: 11 callbacks suppressed
[   71.745825][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'.
[   71.751628][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'.
[   71.759793][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'.
[   71.763450][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.73'.
[   71.771447][ T6171] bridge_slave_0: left allmulticast mode
[   71.782426][ T6171] bridge_slave_0: left promiscuous mode
[   71.785449][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.796567][ T6171] bridge_slave_1: left allmulticast mode
[   71.798344][ T6171] bridge_slave_1: left promiscuous mode
[   71.800275][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.808868][ T6171] bond0: (slave bond_slave_0): Releasing backup interface
[   71.818139][ T6171] bond0: (slave bond_slave_1): Releasing backup interface
[   71.828395][ T6171] team0: Port device team_slave_0 removed
[   71.834138][ T6171] team0: Port device team_slave_1 removed
[   71.842467][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.844838][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.850207][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.853438][ T6171] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.868995][ T6164] veth0: left promiscuous mode
[   72.647962][ T6176] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.826137][ T6194] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.80'.
[   72.830449][ T6194] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   72.838379][ T6194] openvswitch: netlink: Message has 1 unknown bytes.
[   72.983319][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'.
[   72.993208][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'.
[   72.997459][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   73.001208][ T6199] netlink: 'syz.0.82': attribute type 29 has an invalid length.
[   73.063374][ T6203] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   73.263017][ T6220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.266471][ T6220] syzkaller0: entered promiscuous mode
[   73.273827][ T6220] syzkaller0: entered allmulticast mode
[   73.353468][ T6225] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   73.365493][ T6225] k*]: entered promiscuous mode
[   73.375157][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'.
[   73.406845][ T6219] tipc: Resetting bearer <eth:syzkaller0>
[   73.418622][ T6219] tipc: Disabling bearer <eth:syzkaller0>
[   73.427707][ T6225] veth0_to_team: entered promiscuous mode
[   73.429982][ T6225] veth0_to_team: entered allmulticast mode
[   73.434651][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   73.504947][ T6229] vlan0: entered promiscuous mode
[   73.676859][   T55] Bluetooth: hci0: command tx timeout
[   74.030334][ T6252] bridge0: port 1(erspan0) entered blocking state
[   74.033700][ T6252] bridge0: port 1(erspan0) entered disabled state
[   74.037124][ T6252] erspan0: entered allmulticast mode
[   74.041470][ T6252] erspan0: entered promiscuous mode
[   74.127348][ T6264] netlink: 'syz.2.101': attribute type 2 has an invalid length.
[   74.295596][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.463513][ T6281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.959790][ T6308] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   75.497869][ T6326] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   75.705289][ T6330] netlink: 'syz.0.115': attribute type 1 has an invalid length.
[   75.854023][ T6344] bridge_slave_0: left allmulticast mode
[   75.857159][ T6344] bridge_slave_0: left promiscuous mode
[   75.859759][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.872154][ T6344] bridge_slave_1: left allmulticast mode
[   75.875111][ T6344] bridge_slave_1: left promiscuous mode
[   75.880560][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.891627][ T6344] : (slave bond_slave_0): Releasing backup interface
[   75.899247][ T6344] : (slave bond_slave_1): Releasing backup interface
[   75.914222][ T6344] team0: Port device team_slave_0 removed
[   75.923642][ T6344] team0: Port device team_slave_1 removed
[   75.931602][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.934573][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.940793][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.943403][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.087848][ T6358] macvlan2: entered allmulticast mode
[   76.089490][ T6358] veth1_vlan: entered allmulticast mode
[   76.094164][ T6358] veth1_vlan: left allmulticast mode
[   77.113013][ T6380] __nla_validate_parse: 18 callbacks suppressed
[   77.113033][ T6380] netlink: 148 bytes leftover after parsing attributes in process `syz.2.129'.
[   77.683721][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   77.689286][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   77.791312][ T6410] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   77.795594][ T6410] netlink: 'syz.2.139': attribute type 4 has an invalid length.
[   77.800922][ T6410] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.139'.
[   77.862908][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[   77.929823][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[   77.936250][ T6419] vlan0: entered promiscuous mode
[   77.964558][ T6419] tipc: Enabled bearer <eth:gre0>, priority 10
[   77.970692][ T6419] netlink: 22 bytes leftover after parsing attributes in process `syz.2.142'.
[   78.104345][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   78.138651][ T6432] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.145'.
[   78.597017][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'.
[   78.757368][ T6496] vxcan1: entered allmulticast mode
[   78.792615][   T13] syzkaller0: tun_net_xmit 76
[   78.794993][   T13] syzkaller0: tun_net_xmit 48
[   78.798372][ T6496] vxcan1: left allmulticast mode
[   78.800682][ T6493] syzkaller0: tun_net_xmit 76
[   78.802336][ T6493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.826600][ T5921] syzkaller0: tun_net_xmit 76
[   78.853894][ T6492] tipc: Resetting bearer <eth:syzkaller0>
[   79.079794][ T5899] tipc: Node number set to 3640892641
[   79.835831][ T5899] tipc: Node number set to 4000996574
[   80.117024][ T6492] tipc: Disabling bearer <eth:syzkaller0>
[   80.137752][ T6527] veth0_to_team: left promiscuous mode
[   80.139994][ T6527] veth0_to_team: left allmulticast mode
[   80.144524][ T6527] vlan0: left promiscuous mode
[   80.153315][ T6527] geneve2: left promiscuous mode
[   80.257893][ T6535] nftables ruleset with unbound set
[   80.679616][ T6569] syzkaller1: entered promiscuous mode
[   80.681502][ T6569] syzkaller1: entered allmulticast mode
[   80.769711][ T6574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.900650][ T6579] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[   81.401440][ T6604] netlink: 'syz.2.183': attribute type 1 has an invalid length.
[   81.405411][ T6604] netlink: 'syz.2.183': attribute type 3 has an invalid length.
[   81.605323][ T6603] veth0_to_bridge: entered promiscuous mode
[   81.762986][ T6602] veth0_to_bridge: left promiscuous mode
[   81.997714][ T6633] C: renamed from team_slave_0
[   82.008689][ T6633] netlink: 'syz.0.191': attribute type 4 has an invalid length.
[   82.015519][ T6633] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   82.080594][ T6638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.088948][ T6638] syzkaller0: entered promiscuous mode
[   82.091808][ T6638] syzkaller0: entered allmulticast mode
[   82.105038][ T6637] tipc: Resetting bearer <eth:syzkaller0>
[   82.126955][ T6637] tipc: Disabling bearer <eth:syzkaller0>
[   82.132680][ T6640] __nla_validate_parse: 10 callbacks suppressed
[   82.132691][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   82.140435][ T6640] netlink: 'syz.0.194': attribute type 1 has an invalid length.
[   82.144485][ T6640] netlink: 'syz.0.194': attribute type 2 has an invalid length.
[   82.145373][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'.
[   82.147858][ T6640] netlink: 80 bytes leftover after parsing attributes in process `syz.0.194'.
[   82.157916][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.195'.
[   82.290491][ T6651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.197'.
[   82.294087][ T6651] netlink: 48 bytes leftover after parsing attributes in process `syz.1.197'.
[   82.333480][ T6651] lo speed is unknown, defaulting to 1000
[   82.340474][ T6651] lo speed is unknown, defaulting to 1000
[   82.344160][ T6651] lo speed is unknown, defaulting to 1000
[   82.435437][ T6657] bridge0: port 1(erspan0) entered blocking state
[   82.438898][ T6657] bridge0: port 1(erspan0) entered forwarding state
[   82.446591][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.463494][ T6657] 8021q: adding VLAN 0 to HW filter on device team0
[   82.480844][ T6657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.508080][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'.
[   82.511848][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'.
[   82.579954][ T6651] infiniband syz0: set active
[   82.583398][ T5899] lo speed is unknown, defaulting to 1000
[   82.586702][ T5899] syz0: Port: 1 Link ACTIVE
[   82.590431][ T6651] infiniband syz0: added lo
[   82.598085][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'.
[   82.661217][ T6651] RDS/IB: syz0: added
[   82.663692][ T6651] smc: adding ib device syz0 with port count 1
[   82.667035][ T6651] smc:    ib device syz0 port 1 has no pnetid
[   82.671351][ T2203] lo speed is unknown, defaulting to 1000
[   82.677004][ T6651] lo speed is unknown, defaulting to 1000
[   82.889113][ T6651] lo speed is unknown, defaulting to 1000
[   82.934083][ T6676] netlink: 92 bytes leftover after parsing attributes in process `syz.0.206'.
[   82.975292][ T6678] netlink: zone id is out of range
[   82.984251][ T6679] netlink: zone id is out of range
[   82.992386][ T6678] netlink: zone id is out of range
[   83.002811][ T6679] netlink: zone id is out of range
[   83.005085][ T6678] netlink: zone id is out of range
[   83.012560][ T6679] netlink: zone id is out of range
[   83.018666][ T6678] netlink: zone id is out of range
[   83.020852][ T6679] netlink: zone id is out of range
[   83.145920][ T6657] syz.1.197 (6657) used greatest stack depth: 18912 bytes left
[   83.183694][ T6651] lo speed is unknown, defaulting to 1000
[   83.303494][ T6693] pim6reg1: entered promiscuous mode
[   83.313762][ T6693] pim6reg1: entered allmulticast mode
[   83.961302][ T6730] netlink: 'syz.1.221': attribute type 10 has an invalid length.
[   84.484467][ T6768] netlink: 'syz.0.232': attribute type 5 has an invalid length.
[   84.606954][ T6775] bridge_slave_0: entered allmulticast mode
[   84.992491][ T6812] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   85.033613][ T6812] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.044617][ T6813] vlan0: entered promiscuous mode
[   85.050837][ T6813] bridge0: entered promiscuous mode
[   85.078324][ T6812] veth3: entered promiscuous mode
[   85.084287][ T6812] bond1: (slave veth3): Enslaving as an active interface with a down link
[   85.087965][ T6816] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   85.503528][ T6846] netlink: 'syz.2.258': attribute type 4 has an invalid length.
[   85.541430][ T6842] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   85.831974][ T6868] Bluetooth: MGMT ver 1.23
[   86.022988][ T6883] validate_nla: 4 callbacks suppressed
[   86.023025][ T6883] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[   86.051187][ T6883] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.063796][ T6880] lo speed is unknown, defaulting to 1000
[   86.247339][ T6879] lo speed is unknown, defaulting to 1000
[   86.461261][ T6898] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[   87.334644][ T6923] syzkaller0: tun_net_xmit 76
[   87.349476][ T6923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.451610][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[   88.492783][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[   88.498780][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.501501][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.617800][ T6947] syzkaller0: entered promiscuous mode
[   88.620002][ T6947] syzkaller0: entered allmulticast mode
[   88.672310][ T6940] __nla_validate_parse: 19 callbacks suppressed
[   88.672325][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.678631][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.681931][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.685039][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.690490][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.694061][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.697716][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.701222][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.704444][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.708131][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   88.793063][ T6954] net_ratelimit: 56 callbacks suppressed
[   88.793089][ T6954] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.341777][ T6997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.433779][ T7000] syzkaller0: entered allmulticast mode
[   89.547093][ T7002] openvswitch: netlink: VXLAN extension 226 out of range max 1
[   90.058067][ T7040] netlink: 'syz.1.317': attribute type 10 has an invalid length.
[   90.064854][ T7040] team0: Device ipvlan1 failed to register rx_handler
[   90.140035][ T7047] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.210394][ T5885] lo speed is unknown, defaulting to 1000
[   90.376616][ T7069] bridge0: port 1(erspan0) entered disabled state
[   90.471679][ T5899] lo speed is unknown, defaulting to 1000
[   90.473910][ T5899] syz0: Port: 1 Link DOWN
[   90.482502][ T5899] lo speed is unknown, defaulting to 1000
[   90.541727][ T5921] IPVS: starting estimator thread 0...
[   90.649890][ T7086] IPVS: using max 64 ests per chain, 153600 per kthread
[   91.017545][ T7100] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   91.020495][ T7100] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   91.037511][ T7100] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   91.462015][ T7129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.498635][ T7135] block nbd2: NBD_DISCONNECT
[   91.733188][ T7154] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   91.822641][ T7165] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[   91.825983][ T7165] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   91.857565][ T7162] netdevsim netdevsim2: Direct firmware load for /. failed with error -2
[   91.861160][ T7162] netdevsim netdevsim2: Falling back to sysfs fallback for: /.
[   92.342599][ T7191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.347297][ T7191] syzkaller0: entered promiscuous mode
[   92.349860][ T7191] syzkaller0: entered allmulticast mode
[   92.360227][ T7191] tipc: Resetting bearer <eth:syzkaller0>
[   92.365743][ T7191] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   93.007611][ T7215] netlink: 'syz.2.371': attribute type 2 has an invalid length.
[   93.010360][ T7215] netlink: 'syz.2.371': attribute type 1 has an invalid length.
[   93.132413][ T7226] syzkaller0: entered promiscuous mode
[   93.135142][ T7226] syzkaller0: entered allmulticast mode
[   93.163021][ T7190] tipc: Resetting bearer <eth:syzkaller0>
[   93.179003][ T7190] tipc: Disabling bearer <eth:syzkaller0>
[   93.422000][ T7246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.426495][ T7247] syzkaller0: entered promiscuous mode
[   93.428795][ T7247] syzkaller0: entered allmulticast mode
[   93.464489][ T7251] nft_compat: unsupported protocol 5
[   93.484777][ T7247] tipc: Resetting bearer <eth:syzkaller0>
[   93.523376][ T7247] tipc: Disabling bearer <eth:syzkaller0>
[   93.723112][ T5921] IPVS: starting estimator thread 0...
[   93.733764][ T7263] IPVS: rr: FWM 3 0x00000003 - no destination available
[   93.739619][ T7262] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   93.835942][ T7265] IPVS: using max 64 ests per chain, 153600 per kthread
[   93.968698][ T7267] __nla_validate_parse: 71 callbacks suppressed
[   93.968716][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'.
[   94.004988][ T7271] : entered promiscuous mode
[   94.089842][ T7274] team0: entered allmulticast mode
[   94.216759][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.220528][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.224269][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.233952][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.237845][ T7284] netlink: 5 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.244904][ T7284] netlink: 'syz.0.389': attribute type 16 has an invalid length.
[   94.248951][ T7284] netlink: 'syz.0.389': attribute type 17 has an invalid length.
[   94.320620][ T7289] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   94.323372][ T7289] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   94.413390][ T7295] sctp: [Deprecated]: syz.1.393 (pid 7295) Use of int in max_burst socket option deprecated.
[   94.413390][ T7295] Use struct sctp_assoc_value instead
[   94.643628][ T7303] netlink: 'syz.1.395': attribute type 1 has an invalid length.
[   94.652825][ T7303] erspan0: left promiscuous mode
[   94.654944][ T7303] bridge0: port 1(erspan0) entered disabled state
[   94.853981][ T7311] netlink: 830 bytes leftover after parsing attributes in process `syz.1.399'.
[   94.989280][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[   95.000470][ T7322] batman_adv: batadv0: Adding interface: ipvlan2
[   95.002556][ T7322] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.016470][ T7322] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   95.070088][ T7328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.242514][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   95.379839][ T7353] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.414'.
[   95.403330][ T7353] netlink: 'syz.2.414': attribute type 9 has an invalid length.
[   95.421633][ T7355] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   95.610988][ T7369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.631446][ T7369] syzkaller0: entered promiscuous mode
[   95.638554][ T7369] syzkaller0: entered allmulticast mode
[   95.704310][ T7369] tipc: Resetting bearer <eth:syzkaller0>
[   95.787683][ T7367] tipc: Resetting bearer <eth:syzkaller0>
[   95.822603][ T7367] tipc: Disabling bearer <eth:syzkaller0>
[   95.892089][ T7382] syzkaller0: entered promiscuous mode
[   95.894481][ T7382] syzkaller0: entered allmulticast mode
[   97.313938][ T7418] netlink: 'syz.2.430': attribute type 5 has an invalid length.
[   97.562097][ T7433] syzkaller1: entered promiscuous mode
[   97.566767][ T7433] syzkaller1: entered allmulticast mode
[   97.904391][ T7461] trusted_key: syz.1.437 sent an empty control message without MSG_MORE.
[   97.914824][ T7461] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   98.785349][ T7522] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[   98.831998][ T7522] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.842230][ T7525] vlan2: entered promiscuous mode
[   98.848863][ T7525] bond2: entered promiscuous mode
[   98.854202][ T7525] vlan2: entered allmulticast mode
[   98.860971][ T7525] bond2: entered allmulticast mode
[   98.918084][ T7528] batman_adv: batadv0: Adding interface: dummy0
[   98.920152][ T7528] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.931277][ T7528] batman_adv: batadv0: Interface activated: dummy0
[   98.954322][ T7528] batadv0: mtu less than device minimum
[   98.957225][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.961675][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.966455][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.971737][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.977139][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.982210][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   98.986894][ T7528] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   99.082045][ T7532] __nla_validate_parse: 18 callbacks suppressed
[   99.082062][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'.
[   99.092251][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'.
[   99.276591][ T7545] bridge0: port 1(batadv1) entered blocking state
[   99.279399][ T7545] bridge0: port 1(batadv1) entered disabled state
[   99.282045][ T7545] batadv1: entered allmulticast mode
[   99.290720][ T7545] batadv1: entered promiscuous mode
[   99.534099][ T7558] netlink: 'syz.2.463': attribute type 13 has an invalid length.
[   99.537319][ T7558] netlink: 'syz.2.463': attribute type 17 has an invalid length.
[   99.636341][ T7558] 8021q: adding VLAN 0 to HW filter on device 
[   99.645437][ T7558] team0: left allmulticast mode
[   99.651966][ T7558] 8021q: adding VLAN 0 to HW filter on device team0
[   99.654898][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   99.660705][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   99.697274][ T7564] lo speed is unknown, defaulting to 1000
[   99.786138][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   99.790242][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  100.042626][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'.
[  100.311944][ T7597] net_ratelimit: 13 callbacks suppressed
[  100.311967][ T7597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.321598][ T7597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.336552][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.477'.
[  100.346670][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'.
[  100.413736][ T7601] netlink: 664 bytes leftover after parsing attributes in process `syz.2.479'.
[  100.420490][ T7601] netlink: 664 bytes leftover after parsing attributes in process `syz.2.479'.
[  100.524234][ T7616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.482'.
[  100.590298][ T7621] erspan0: entered promiscuous mode
[  100.592669][ T7621] macvtap1: entered promiscuous mode
[  100.594715][ T7621] macvtap1: entered allmulticast mode
[  100.599269][ T7621] erspan0: entered allmulticast mode
[  100.754968][ T7628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.835269][ T7628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.866993][ T7626] lo speed is unknown, defaulting to 1000
[  100.927778][ T7628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.013064][ T7628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.110124][ T5696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.123751][ T5696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.205385][ T5696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.237875][ T5696] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.204830][ T7678] pimreg3: entered allmulticast mode
[  104.076353][ T7707] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  104.095239][ T7707] __nla_validate_parse: 8 callbacks suppressed
[  104.095257][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.510'.
[  104.381166][ T7723] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  104.388819][ T7723] netlink: 224 bytes leftover after parsing attributes in process `syz.2.516'.
[  104.610806][ T7732] netlink: 'syz.2.518': attribute type 4 has an invalid length.
[  104.613631][ T7732] netlink: 17 bytes leftover after parsing attributes in process `syz.2.518'.
[  104.870468][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  104.891677][ T7752] Illegal XDP return value 4294967289 on prog  (id 140) dev N/A, expect packet loss!
[  104.893183][ T7754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.251647][ T7773] netlink: 'syz.0.528': attribute type 13 has an invalid length.
[  105.260472][ T7773] netlink: 'syz.0.528': attribute type 17 has an invalid length.
[  105.380713][ T7773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.532703][ T7797] netlink: 'syz.0.534': attribute type 12 has an invalid length.
[  105.561554][ T7800] dvmrp1: entered allmulticast mode
[  105.654029][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'.
[  105.658965][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'.
[  105.672276][ T7800] syzkaller0: entered promiscuous mode
[  105.674447][ T7800] syzkaller0: entered allmulticast mode
[  107.127150][ T7830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.133475][ T7830] syzkaller0: entered promiscuous mode
[  107.138526][ T7830] syzkaller0: entered allmulticast mode
[  107.155978][ T7834] netlink: 27 bytes leftover after parsing attributes in process `syz.0.542'.
[  107.169988][ T7830] tipc: Resetting bearer <eth:syzkaller0>
[  107.175475][ T7829] tipc: Resetting bearer <eth:syzkaller0>
[  107.207885][ T7829] tipc: Disabling bearer <eth:syzkaller0>
[  107.433007][ T7847] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.546'.
[  107.577426][ T7844] netlink: 'syz.0.544': attribute type 10 has an invalid length.
[  107.742957][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[  107.795509][ T7860] syzkaller0: tun_net_xmit 76
[  107.798285][ T7860] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.833428][ T7859] tipc: Resetting bearer <eth:syzkaller0>
[  108.257808][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[  109.161228][ T7859] tipc: Disabling bearer <eth:syzkaller0>
[  109.172909][ T7871] 8021q: VLANs not supported on tunl0
[  109.261884][ T7876] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  109.356958][ T7886] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  109.357130][ T7876] lo speed is unknown, defaulting to 1000
[  109.423708][ T7891] netlink: 244 bytes leftover after parsing attributes in process `syz.0.559'.
[  109.630808][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'.
[  109.648880][ T7895] tipc: Enabled bearer <udp:syz0>, priority 26
[  109.756167][ T7905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.765230][ T7905] tipc: Resetting bearer <eth:syzkaller0>
[  109.892007][ T7904] tipc: Disabling bearer <eth:syzkaller0>
[  110.026909][ T7920] ip6gretap0: entered promiscuous mode
[  110.154799][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.569'.
[  110.358104][ T7938] netlink: 256 bytes leftover after parsing attributes in process `syz.0.572'.
[  110.363364][ T7938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.572'.
[  110.641653][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'.
[  110.679175][ T7949] netlink: 'syz.2.576': attribute type 1 has an invalid length.
[  110.875323][ T7964] lo speed is unknown, defaulting to 1000
[  110.956214][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[  111.199204][ T7967] hsr_slave_1 (unregistering): left promiscuous mode
[  111.704585][ T8008] pim6reg: entered allmulticast mode
[  112.000931][ T8021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.023522][ T8021] syzkaller0: entered promiscuous mode
[  112.029181][ T8021] syzkaller0: entered allmulticast mode
[  112.033711][ T8018] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  112.083632][ T8021] tipc: Resetting bearer <eth:syzkaller0>
[  112.093045][ T8020] tipc: Resetting bearer <eth:syzkaller0>
[  112.118134][ T8020] tipc: Disabling bearer <eth:syzkaller0>
[  112.162328][ T8025] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  112.163854][  T793] IPVS: starting estimator thread 0...
[  112.255934][ T8035] IPVS: using max 64 ests per chain, 153600 per kthread
[  112.262452][ T8040] dvmrp1: tun_chr_ioctl cmd 1074025677
[  112.264744][ T8040] dvmrp1: linktype set to 773
[  112.446228][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  112.459610][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'.
[  112.459634][ T8050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'.
[  112.530912][ T8047] batadv1: left allmulticast mode
[  112.532934][ T8047] batadv1: left promiscuous mode
[  112.535037][ T8047] bridge0: port 1(batadv1) entered disabled state
[  112.777623][ T8068] netlink: 'syz.0.601': attribute type 11 has an invalid length.
[  112.793948][ T8067] batman_adv: batadv0: Adding interface: ip6gretap1
[  112.809037][ T8067] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.819503][ T8067] batman_adv: batadv0: Interface activated: ip6gretap1
[  112.910283][ T8084] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  112.944897][ T8084] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.973415][ T8087] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  113.730993][ T8113] netlink: 'syz.2.615': attribute type 1 has an invalid length.
[  113.734182][ T8113] netlink: 'syz.2.615': attribute type 3 has an invalid length.
[  113.912620][ T8125] netlink: 'syz.2.616': attribute type 5 has an invalid length.
[  113.928842][ T8127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.932465][ T8127] syzkaller0: entered promiscuous mode
[  113.934429][ T8127] syzkaller0: entered allmulticast mode
[  113.947705][ T8126] tipc: Resetting bearer <eth:syzkaller0>
[  113.959791][ T8126] tipc: Disabling bearer <eth:syzkaller0>
[  114.151361][ T8140] netlink: 'syz.1.626': attribute type 3 has an invalid length.
[  114.153942][ T8140] netlink: 'syz.1.626': attribute type 3 has an invalid length.
[  114.264335][ T8147] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  114.274723][ T8147] tc_dump_action: action bad kind
[  114.685526][ T8155] syz_tun (unregistering): left allmulticast mode
[  114.873117][ T8160] __nla_validate_parse: 14 callbacks suppressed
[  114.873134][ T8160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.634'.
[  114.884712][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.634'.
[  114.888757][ T8160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.634'.
[  114.979403][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'.
[  114.988794][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'.
[  115.081758][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'.
[  115.146868][ T8176] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  115.299039][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'.
[  115.310565][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  115.314200][ T8182] batman_adv: batadv0: Removing interface: ipvlan2
[  115.318529][ T8182] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  115.322233][ T8182] batman_adv: batadv0: Removing interface: ip6gretap1
[  115.498001][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  115.531572][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.537833][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.562426][ T8207] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[  115.564987][ T8207] netlink: 244 bytes leftover after parsing attributes in process `syz.2.649'.
[  116.280482][ T8224] Bluetooth: hci0: Opcode 0x080f failed: -22
[  116.287849][ T8224] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  116.782607][ T8245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.913237][ T8252] bridge0: entered allmulticast mode
[  116.925507][ T8252] erspan0: entered allmulticast mode
[  116.937465][ T8252] netlink: 'syz.2.664': attribute type 5 has an invalid length.
[  117.025265][ T8257] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[  117.049573][ T8257] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.071102][ T8257] bond3: (slave veth3): Enslaving as an active interface with a down link
[  117.080884][ T8257] gretap1: entered promiscuous mode
[  117.372242][ T8280] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[  117.378825][   T55] Bluetooth: hci2: link tx timeout
[  117.381546][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.467457][ T5856] Bluetooth: hci2: link tx timeout
[  117.469628][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.501896][ T5856] Bluetooth: hci2: link tx timeout
[  117.503943][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.757904][ T5856] Bluetooth: hci2: link tx timeout
[  117.759805][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.900809][ T8317] syz_tun: entered allmulticast mode
[  117.975395][ T8317] syz_tun (unregistering): left allmulticast mode
[  118.329629][ T5856] Bluetooth: hci0: command tx timeout
[  118.331905][ T5861] Bluetooth: hci2: link tx timeout
[  118.333622][ T5861] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.651218][ T5861] Bluetooth: hci2: link tx timeout
[  118.653773][ T5861] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.299959][ T5861] Bluetooth: hci2: link tx timeout
[  119.301838][ T5861] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.312854][ T5861] Bluetooth: hci2: link tx timeout
[  119.315964][ T5861] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.394349][ T8328] netlink: 'syz.0.682': attribute type 2 has an invalid length.
[  119.400586][ T8329] gretap0: entered promiscuous mode
[  119.416791][ T8329] gretap0: left promiscuous mode
[  119.436101][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  119.463715][ T8338] netlink: 'syz.0.685': attribute type 1 has an invalid length.
[  119.495166][ T8338] 8021q: adding VLAN 0 to HW filter on device bond4
[  119.527883][ T8338] bond4: (slave ip6gretap1): making interface the new active one
[  119.534521][ T8338] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  119.632582][ T8350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.727426][ T8350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.845608][ T8350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.946664][   T33] audit: type=1800 audit(1757430327.037:2): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.690" name="memory.events" dev="tmpfs" ino=1253 res=0 errno=0
[  119.987552][ T8350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.102465][ T5920] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.118962][ T5920] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.137250][ T5696] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.157325][ T5696] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.478398][ T8386] lo speed is unknown, defaulting to 1000
[  120.781916][ T8396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.785153][ T8396] syzkaller0: entered promiscuous mode
[  120.788490][ T8396] syzkaller0: entered allmulticast mode
[  120.838470][ T8396] tipc: Resetting bearer <eth:syzkaller0>
[  120.898962][ T8396] __nla_validate_parse: 16 callbacks suppressed
[  120.898984][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'.
[  120.929262][ T8395] tipc: Resetting bearer <eth:syzkaller0>
[  120.947934][ T8400] netlink: 56 bytes leftover after parsing attributes in process `syz.2.704'.
[  120.948291][ T8395] tipc: Disabling bearer <eth:syzkaller0>
[  120.963415][ T8401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.704'.
[  121.002863][ T8404] netlink: 'syz.2.705': attribute type 13 has an invalid length.
[  121.007784][ T8404] netlink: 'syz.2.705': attribute type 17 has an invalid length.
[  121.012141][ T8404] erspan0: left allmulticast mode
[  121.029065][ T8404] bridge_slave_0: left allmulticast mode
[  121.115546][ T8404] bridge0: left allmulticast mode
[  121.121580][ T8404] gretap1: left promiscuous mode
[  121.533858][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'.
[  121.538378][ T8421] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.541972][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'.
[  121.687220][ T8427] syz.1.711: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  121.693767][ T8429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.695127][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'.
[  121.697789][ T8427] CPU: 0 UID: 0 PID: 8427 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(full) 
[  121.697809][ T8427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.697818][ T8427] Call Trace:
[  121.697825][ T8427]  <TASK>
[  121.697831][ T8427]  dump_stack_lvl+0x189/0x250
[  121.697872][ T8427]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.697886][ T8427]  ? __pfx__printk+0x10/0x10
[  121.697903][ T8427]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.697919][ T8427]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.697929][ T8427]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  121.697939][ T8427]  warn_alloc+0x214/0x310
[  121.697962][ T8427]  ? __pfx_warn_alloc+0x10/0x10
[  121.697987][ T8427]  ? __get_vm_area_node+0x28f/0x300
[  121.698000][ T8427]  ? packet_set_ring+0x6f4/0x2350
[  121.698019][ T8427]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  121.698059][ T8427]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  121.698077][ T8427]  ? alloc_pages_mpol+0x3cd/0x4a0
[  121.698098][ T8427]  ? packet_set_ring+0x6f4/0x2350
[  121.698114][ T8427]  vzalloc_noprof+0xb2/0xf0
[  121.698131][ T8427]  ? packet_set_ring+0x6f4/0x2350
[  121.698145][ T8427]  packet_set_ring+0x6f4/0x2350
[  121.698169][ T8427]  ? __pfx_packet_set_ring+0x10/0x10
[  121.698201][ T8427]  ? _copy_from_user+0x94/0xb0
[  121.698222][ T8427]  packet_setsockopt+0xc5a/0x12c0
[  121.698239][ T8427]  ? __pfx_packet_setsockopt+0x10/0x10
[  121.698282][ T8427]  ? __lock_acquire+0xab9/0xd20
[  121.698299][ T8427]  ? aa_sk_perm+0x81e/0x950
[  121.698317][ T8427]  ? __pfx_aa_sk_perm+0x10/0x10
[  121.698336][ T8427]  ? __fget_files+0x2a/0x420
[  121.698347][ T8427]  ? aa_sock_opt_perm+0xff/0x1b0
[  121.698362][ T8427]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  121.698377][ T8427]  ? __pfx_packet_setsockopt+0x10/0x10
[  121.698395][ T8427]  do_sock_setsockopt+0x17c/0x1b0
[  121.698416][ T8427]  __x64_sys_setsockopt+0x13f/0x1b0
[  121.698434][ T8427]  do_syscall_64+0xfa/0x3b0
[  121.698446][ T8427]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.698455][ T8427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.698467][ T8427]  ? exc_page_fault+0x9f/0xf0
[  121.698480][ T8427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.698493][ T8427] RIP: 0033:0x7fd3d0f8ebe9
[  121.698508][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.698519][ T8427] RSP: 002b:00007fd3d1e78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  121.698534][ T8427] RAX: ffffffffffffffda RBX: 00007fd3d11c6090 RCX: 00007fd3d0f8ebe9
[  121.698543][ T8427] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005
[  121.698550][ T8427] RBP: 00007fd3d1011e19 R08: 000000000000001c R09: 0000000000000000
[  121.698558][ T8427] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  121.698565][ T8427] R13: 00007fd3d11c6128 R14: 00007fd3d11c6090 R15: 00007ffc99e02da8
[  121.698583][ T8427]  </TASK>
[  121.698590][ T8427] Mem-Info:
[  121.771180][ T8433] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.772483][ T8427] active_anon:5854 inactive_anon:0 isolated_anon:0
[  121.772483][ T8427]  active_file:1321 inactive_file:38247 isolated_file:0
[  121.772483][ T8427]  unevictable:1768 dirty:155 writeback:0
[  121.772483][ T8427]  slab_reclaimable:10056 slab_unreclaimable:106183
[  121.772483][ T8427]  mapped:18387 shmem:2471 pagetables:967
[  121.772483][ T8427]  sec_pagetables:0 bounce:0
[  121.772483][ T8427]  kernel_misc_reclaimable:0
[  121.772483][ T8427]  free:238637 free_pcp:22951 free_cma:0
[  121.784832][ T8433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.785224][ T8427] Node 0 active_anon:14708kB inactive_anon:0kB active_file:4596kB inactive_file:9480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34396kB dirty:492kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6668kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.848685][ T8427] Node 1 active_anon:8668kB inactive_anon:0kB active_file:688kB inactive_file:143508kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39152kB dirty:128kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5424kB pagetables:1600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.863024][ T8427] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.875119][ T8427] lowmem_reserve[]: 0 811 811 811 811
[  121.878223][ T8427] Node 0 DMA32 free:271992kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14656kB inactive_anon:0kB active_file:4596kB inactive_file:9480kB unevictable:3536kB writepending:492kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:41480kB local_pcp:21884kB free_cma:0kB
[  121.892508][ T8427] lowmem_reserve[]: 0 0 0 0 0
[  121.894772][ T8427] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.907432][ T8427] lowmem_reserve[]: 0 0 854 854 854
[  121.909492][ T8427] Node 1 Normal free:208604kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8736kB inactive_anon:0kB active_file:688kB inactive_file:143508kB unevictable:3536kB writepending:128kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50720kB local_pcp:15852kB free_cma:0kB
[  121.922457][ T8427] lowmem_reserve[]: 0 0 0 0 0
[  121.924554][ T8427] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  121.930156][ T8427] Node 0 DMA32: 560*4kB (UME) 357*8kB (UM) 237*16kB (UM) 40*32kB (UME) 13*64kB (UME) 35*128kB (UM) 24*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 57*4096kB (M) = 271992kB
[  121.938095][ T8427] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  121.945256][ T8427] Node 1 Normal: 275*4kB (ME) 168*8kB (UME) 239*16kB (UME) 381*32kB (UME) 141*64kB (UM) 43*128kB (UME) 10*256kB (UM) 6*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 40*4096kB (UM) = 208604kB
[  121.953465][ T8427] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  121.957667][ T8427] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.961574][ T8427] 42025 total pagecache pages
[  121.963521][ T8427] 0 pages in swap cache
[  121.965259][ T8427] Free swap  = 124996kB
[  121.967531][ T8427] Total swap = 124996kB
[  121.969334][ T8427] 786301 pages RAM
[  121.970928][ T8427] 0 pages HighMem/MovableOnly
[  121.972985][ T8427] 241348 pages reserved
[  121.974830][ T8427] 0 pages cma reserved
[  122.453966][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  122.643990][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.718'.
[  122.648788][ T8465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.739742][ T8474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.746817][ T8474] syzkaller0: entered promiscuous mode
[  122.749635][ T8474] syzkaller0: entered allmulticast mode
[  122.764580][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.724'.
[  122.768833][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.724'.
[  122.788233][ T8473] tipc: Resetting bearer <eth:syzkaller0>
[  122.805585][ T8473] tipc: Disabling bearer <eth:syzkaller0>
[  122.920554][ T8478] netlink: 'syz.2.725': attribute type 21 has an invalid length.
[  123.064489][ T8489] netlink: zone id is out of range
[  123.067271][ T8489] netlink: zone id is out of range
[  123.071426][ T8489] netlink: zone id is out of range
[  123.073776][ T8489] netlink: zone id is out of range
[  123.113999][ T8489] netlink: set zone limit has 4 unknown bytes
[  123.144652][ T8490] netlink: del zone limit has 4 unknown bytes
[  123.356380][ T8502] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  123.460289][ T8504] netlink: 'syz.1.733': attribute type 6 has an invalid length.
[  124.485884][ T5892] tipc: Node number set to 1729838557
[  124.890789][ T8597] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  125.038435][ T8599] lo speed is unknown, defaulting to 1000
[  125.628650][ T8616] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  125.754161][ T8616] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  125.770376][ T8616] bond0 (unregistering): Released all slaves
[  125.774113][ T8625] netlink: 'syz.2.767': attribute type 10 has an invalid length.
[  125.797460][ T8625] dummy0: entered promiscuous mode
[  125.800579][ T8625] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  126.019104][ T8647] netlink: 'syz.0.768': attribute type 3 has an invalid length.
[  126.206364][ T8675] netlink: 'syz.2.777': attribute type 2 has an invalid length.
[  126.213364][ T8675] k*]: entered promiscuous mode
[  126.219429][ T8675] __nla_validate_parse: 22 callbacks suppressed
[  126.219440][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[  126.230451][ T8669] bridge0: port 1(erspan0) entered blocking state
[  126.232903][ T8669] bridge0: port 1(erspan0) entered disabled state
[  126.249107][ T8669] erspan0: entered promiscuous mode
[  126.268256][ T8675] dummy0: left promiscuous mode
[  126.291035][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.779'.
[  126.512469][ T8709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.515269][ T8709] syzkaller0: entered promiscuous mode
[  126.517869][ T8709] syzkaller0: entered allmulticast mode
[  126.543024][ T8709] tipc: Resetting bearer <eth:syzkaller0>
[  126.551947][ T8708] tipc: Resetting bearer <eth:syzkaller0>
[  126.572848][ T8708] tipc: Disabling bearer <eth:syzkaller0>
[  126.579527][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'.
[  126.583423][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'.
[  126.613862][ T8714] dvmrp0: entered allmulticast mode
[  126.732034][ T8722] lo speed is unknown, defaulting to 1000
[  126.734545][ T8724] net_ratelimit: 2 callbacks suppressed
[  126.734555][ T8724] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29
[  126.861217][ T8731] openvswitch: netlink: Unknown key attributes 2
[  127.192598][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'.
[  127.205952][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'.
[  127.371419][ T8747] netlink: 'syz.1.794': attribute type 1 has an invalid length.
[  127.434971][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'.
[  127.470302][ T8747] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.621998][ T8764] netlink: 'syz.1.800': attribute type 13 has an invalid length.
[  127.625158][ T8764] netlink: 'syz.1.800': attribute type 17 has an invalid length.
[  127.694027][ T8769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.802'.
[  127.712861][ T8764] ip6gretap0: left promiscuous mode
[  127.721525][ T8764] bridge0: port 1(erspan0) entered blocking state
[  127.724447][ T8764] bridge0: port 1(erspan0) entered forwarding state
[  127.733474][ T8764] 8021q: adding VLAN 0 to HW filter on device team0
[  127.742117][ T8764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.744478][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'.
[  127.750043][ T5921] lo speed is unknown, defaulting to 1000
[  127.757011][ T5921] syz0: Port: 1 Link ACTIVE
[  127.771026][ T5885] lo speed is unknown, defaulting to 1000
[  127.781185][ T8766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.797781][ T8766] syzkaller0: entered promiscuous mode
[  127.803371][ T8766] syzkaller0: entered allmulticast mode
[  127.829570][ T8766] tipc: Resetting bearer <eth:syzkaller0>
[  127.837765][ T8767] lo speed is unknown, defaulting to 1000
[  127.841312][ T8765] tipc: Resetting bearer <eth:syzkaller0>
[  127.855144][ T8765] tipc: Disabling bearer <eth:syzkaller0>
[  127.862567][ T8776] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.865524][ T8776] syzkaller0: entered promiscuous mode
[  127.868322][ T8776] syzkaller0: entered allmulticast mode
[  127.892881][ T8776] tipc: Resetting bearer <eth:syzkaller0>
[  128.114195][ T8785] IPVS: Unknown mcast interface: veth1_to_bridge
[  128.121831][ T8785] IPVS: stopping backup sync thread 6326 ...
[  128.625184][ T8775] tipc: Resetting bearer <eth:syzkaller0>
[  128.668447][ T8775] tipc: Disabling bearer <eth:syzkaller0>
[  129.055140][ T8811] netlink: 'syz.0.809': attribute type 83 has an invalid length.
[  129.092154][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'.
[  129.120478][ T8817] netlink: 'syz.1.808': attribute type 13 has an invalid length.
[  129.123859][ T8817] netlink: 'syz.1.808': attribute type 17 has an invalid length.
[  129.154430][ T8817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.248394][ T8809] lo speed is unknown, defaulting to 1000
[  129.359860][ T8827] netlink: 'syz.0.813': attribute type 1 has an invalid length.
[  130.490176][ T8863] netlink: 'syz.2.824': attribute type 9 has an invalid length.
[  130.604170][ T8870] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000
[  131.033777][ T8907] net veth1_virt_wifi : renamed from virt_wifi0
[  132.536898][ T8933] __nla_validate_parse: 11 callbacks suppressed
[  132.536908][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  132.546302][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  132.582711][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.838'.
[  132.830472][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'.
[  132.847456][ T8958] tipc: Enabling of bearer <et:g> rejected, media not registered
[  132.892237][ T8962] netlink: 'syz.0.846': attribute type 4 has an invalid length.
[  132.895457][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'.
[  132.901034][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'.
[  132.903902][ T8962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'.
[  132.918427][ T8957] tipc: Enabled bearer <udp:syz2>, priority 26
[  132.925114][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'.
[  132.938893][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'.
[  132.951971][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'.
[  133.077247][ T8983] netlink: zone id is out of range
[  133.079251][ T8983] netlink: zone id is out of range
[  133.080907][ T8983] netlink: zone id is out of range
[  133.082822][ T8983] netlink: zone id is out of range
[  133.084498][ T8983] netlink: zone id is out of range
[  133.086812][ T8983] netlink: zone id is out of range
[  133.088969][ T8983] netlink: zone id is out of range
[  133.091459][ T8983] netlink: zone id is out of range
[  133.093287][ T8983] netlink: zone id is out of range
[  133.095492][ T8983] netlink: get zone limit has 8 unknown bytes
[  133.348342][ T9001] netlink: 'syz.2.860': attribute type 7 has an invalid length.
[  134.051664][ T9008] syzkaller1: entered promiscuous mode
[  134.053916][ T9008] syzkaller1: entered allmulticast mode
[  134.339717][ T9034] xt_HMARK: proto mask must be zero with L3 mode
[  135.163539][ T9068] netlink: 'syz.0.875': attribute type 9 has an invalid length.
[  135.855555][ T9119] macvtap2: entered promiscuous mode
[  135.860138][ T9119] vlan0: entered promiscuous mode
[  135.862534][ T9119] macvtap2: entered allmulticast mode
[  135.864393][ T9119] vlan0: entered allmulticast mode
[  135.868135][ T9119] veth0_vlan: entered allmulticast mode
[  135.886089][ T9122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.889490][ T9122] syzkaller0: entered promiscuous mode
[  135.892024][ T9122] syzkaller0: entered allmulticast mode
[  135.925088][ T9122] tipc: Resetting bearer <eth:syzkaller0>
[  135.929764][ T9126] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  136.014458][ T9131] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  136.137875][ T9146] sctp: [Deprecated]: syz.1.894 (pid 9146) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.137875][ T9146] Use struct sctp_sack_info instead
[  136.167428][ T9147] lo speed is unknown, defaulting to 1000
[  136.469351][ T9163] nbd: socks must be embedded in a SOCK_ITEM attr
[  136.475060][ T9163] block nbd0: shutting down sockets
[  136.565155][ T9156] lo speed is unknown, defaulting to 1000
[  136.883563][ T9178] siw: device registration error -23
[  136.901707][ T9178] netlink: 'syz.0.907': attribute type 10 has an invalid length.
[  136.955590][ T9178] 8021q: adding VLAN 0 to HW filter on device team0
[  136.964336][ T9178] bond0: (slave team0): Enslaving as an active interface with an up link
[  137.292724][ T9194] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.328812][ T9194] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[  137.331731][ T9194] netlink: 'syz.2.912': attribute type 2 has an invalid length.
[  137.471700][ T9205] syzkaller0: entered promiscuous mode
[  137.473827][ T9205] syzkaller0: entered allmulticast mode
[  138.463371][ T9217] rdma_rxe: rxe_newlink: failed to add lo
[  138.971677][ T9217] net_ratelimit: 3 callbacks suppressed
[  138.971686][ T9217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.157418][ T9228] bond0: entered promiscuous mode
[  139.161080][ T9228] batadv0: entered promiscuous mode
[  139.166695][ T9228] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  139.176397][ T9228] 8021q: adding VLAN 0 to HW filter on device hsr1
[  139.267426][ T9235] __nla_validate_parse: 30 callbacks suppressed
[  139.267441][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'.
[  139.285436][ T9239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.294135][ T9239] syzkaller0: entered promiscuous mode
[  139.297554][ T9239] syzkaller0: entered allmulticast mode
[  139.302544][ T9239] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.928'.
[  139.313182][ T9237] tipc: Resetting bearer <eth:syzkaller0>
[  139.340632][ T9241] netlink: 'syz.2.929': attribute type 22 has an invalid length.
[  139.340640][ T9237] tipc: Disabling bearer <eth:syzkaller0>
[  139.372355][ T9243] netlink: 100 bytes leftover after parsing attributes in process `syz.0.930'.
[  139.383300][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  139.422034][ T9243] 8021q: adding VLAN 0 to HW filter on device bond5
[  139.442042][ T9245] netlink: 'syz.2.929': attribute type 11 has an invalid length.
[  139.533326][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'.
[  139.542503][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'.
[  139.733702][ T9264] xt_policy: neither incoming nor outgoing policy selected
[  139.958884][ T9267] batman_adv: batadv0: Interface deactivated: dummy0
[  140.000287][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  140.351486][ T9267] veth3: left promiscuous mode
[  140.358716][ T9267] vlan2: left promiscuous mode
[  140.360293][ T9267] bond2: left promiscuous mode
[  140.362483][ T9267] vlan2: left allmulticast mode
[  140.364498][ T9267] bond2: left allmulticast mode
[  140.368812][ T9267] erspan0: left allmulticast mode
[  140.371264][ T9267] macvtap1: left promiscuous mode
[  140.373272][ T9267] macvtap1: left allmulticast mode
[  140.391249][ T9267] vlan0: left allmulticast mode
[  140.393136][ T9267] veth0_vlan: left allmulticast mode
[  140.395027][ T9267] vlan0: left promiscuous mode
[  140.398121][ T9267] macvtap2: left promiscuous mode
[  140.399856][ T9267] macvtap2: left allmulticast mode
[  140.412634][ T9271] bridge0: port 2(veth1_to_bridge) entered blocking state
[  140.415574][ T9271] bridge0: port 2(veth1_to_bridge) entered disabled state
[  140.419235][ T9271] veth1_to_bridge: entered allmulticast mode
[  140.422876][ T9271] veth1_to_bridge: entered promiscuous mode
[  140.431568][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.436828][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.441273][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.453621][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.457182][ T9274] lo speed is unknown, defaulting to 1000
[  140.509074][ T9280] netlink: 'syz.1.941': attribute type 3 has an invalid length.
[  140.609525][ T9286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.690934][ T9292] tipc: Resetting bearer <eth:syzkaller0>
[  140.704341][ T9285] tipc: Disabling bearer <eth:syzkaller0>
[  140.774005][ T9296] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.866461][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'.
[  141.070888][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f68a800: rx timeout, send abort
[  141.227659][ T9314] IPVS: Scheduler module ip_vs_sip not found
[  141.571630][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f68ac00: rx timeout, send abort
[  141.575354][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f68a800: abort rx timeout. Force session deactivation
[  141.809703][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'.
[  141.868911][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'.
[  141.887742][ T9334] lo speed is unknown, defaulting to 1000
[  142.075075][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f68ac00: abort rx timeout. Force session deactivation
[  142.743878][ T9353] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  143.244509][ T9388] netlink: 'syz.2.974': attribute type 13 has an invalid length.
[  143.248038][ T9388] netlink: 'syz.2.974': attribute type 17 has an invalid length.
[  143.264501][ T9388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.299234][ T9386] lo speed is unknown, defaulting to 1000
[  143.660174][ T9408] netlink: 'syz.1.981': attribute type 29 has an invalid length.
[  143.664153][ T9408] netlink: 'syz.1.981': attribute type 29 has an invalid length.
[  143.721184][ T9410] netlink: 'syz.1.982': attribute type 1 has an invalid length.
[  144.439002][ T9427] netlink: 'syz.2.989': attribute type 29 has an invalid length.
[  144.442276][ T9427] netlink: 'syz.2.989': attribute type 29 has an invalid length.
[  144.445548][ T9427] __nla_validate_parse: 4 callbacks suppressed
[  144.445561][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  144.712621][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.995'.
[  144.726258][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  144.801223][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  144.802015][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  145.148508][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  145.161819][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.161945][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  145.170322][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.178299][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.181232][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.241312][ T9477] netlink: 'syz.1.1003': attribute type 13 has an invalid length.
[  145.763933][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.379145][ T9520] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1013'.
[  146.379200][ T9521] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1013'.
[  146.382851][ T9520] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  146.382868][ T9520] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  146.400094][ T9521] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  146.402822][ T9521] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  146.424682][ T9523] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1014'.
[  146.534208][ T9531] vlan3: entered promiscuous mode
[  146.536528][ T9531] macvtap0: entered promiscuous mode
[  146.861426][ T9544] netlink: 'syz.2.1023': attribute type 4 has an invalid length.
[  146.871774][ T9546] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  146.877457][ T9546] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  147.824803][ T9568] syzkaller0: entered promiscuous mode
[  147.827382][ T9568] syzkaller0: entered allmulticast mode
[  148.797254][   T40] wlan0: Trigger new scan to find an IBSS to join
[  149.473089][ T9573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.489117][ T9581] syzkaller0: entered promiscuous mode
[  149.491424][ T9581] syzkaller0: entered allmulticast mode
[  149.567750][ T9595] __nla_validate_parse: 4 callbacks suppressed
[  149.567768][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'.
[  149.574747][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'.
[  149.792771][ T9609] veth0: entered promiscuous mode
[  149.802466][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1038'.
[  149.835459][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'.
[  149.898514][ T9619] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[  149.901654][ T9619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1039'.
[  149.958971][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'.
[  149.962770][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'.
[  149.969124][ T9623] netlink: 'syz.1.1040': attribute type 18 has an invalid length.
[  150.086213][ T9634] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  150.092446][ T9635] syz_tun: entered allmulticast mode
[  150.097797][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'.
[  150.101733][ T9635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'.
[  150.133513][ T9638] ip6gre1: entered allmulticast mode
[  150.211281][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'.
[  150.238934][ T9645] netlink: 'syz.2.1047': attribute type 2 has an invalid length.
[  150.434517][ T9658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.442583][ T9659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.451526][ T9658] syzkaller0: entered promiscuous mode
[  150.453507][ T9658] syzkaller0: entered allmulticast mode
[  150.493957][ T9658] tipc: Resetting bearer <eth:syzkaller0>
[  150.598044][ T9659] tipc: Resetting bearer <eth:syzkaller0>
[  150.612023][ T9659] tipc: Disabling bearer <eth:syzkaller0>
[  150.718422][ T9669] sctp: [Deprecated]: syz.0.1054 (pid 9669) Use of int in maxseg socket option.
[  150.718422][ T9669] Use struct sctp_assoc_value instead
[  150.723280][ T9669] netlink: 'syz.0.1054': attribute type 9 has an invalid length.
[  150.871896][ T9628] syz_tun: left allmulticast mode
[  150.913358][ T9671] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  150.922296][ T9671] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.641076][ T9698] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[  151.643900][ T9698] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001
[  151.836102][   T36] wlan0: Trigger new scan to find an IBSS to join
[  151.952210][ T9720] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  151.954890][ T9720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.092385][ T9728] netlink: 'syz.0.1071': attribute type 9 has an invalid length.
[  152.099870][ T9728] netlink: 'syz.0.1071': attribute type 7 has an invalid length.
[  152.103286][ T9728] netlink: 'syz.0.1071': attribute type 8 has an invalid length.
[  152.346432][ T9755] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.464783][ T9766] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  152.467082][ T9761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.567839][ T9773] sit0: entered promiscuous mode
[  152.574230][ T9773] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  152.578889][ T9775] netlink: 'syz.2.1083': attribute type 1 has an invalid length.
[  152.613549][ T9776] netlink: 'syz.0.1084': attribute type 5 has an invalid length.
[  152.668485][ T9776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.824715][ T9788] team1: entered promiscuous mode
[  152.828808][ T9788] team1: entered allmulticast mode
[  152.831085][ T9788] 8021q: adding VLAN 0 to HW filter on device team1
[  152.906440][ T9786] vcan0: Master is either lo or non-ether device
[  152.992890][ T9795] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  153.043402][ T9799] team_slave_1: entered promiscuous mode
[  153.045270][ T9799] team_slave_1: entered allmulticast mode
[  153.068325][ T9801] netlink: 'syz.1.1091': attribute type 12 has an invalid length.
[  153.118279][ T9805] netlink: 'syz.2.1092': attribute type 15 has an invalid length.
[  153.120978][ T9805] netlink: 'syz.2.1092': attribute type 15 has an invalid length.
[  153.282535][ T9817] sit0: left promiscuous mode
[  153.328587][ T9823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.345358][ T9823] tipc: Disabling bearer <eth:syzkaller0>
[  153.515889][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.735180][ T9847] netlink: 'syz.0.1103': attribute type 20 has an invalid length.
[  154.055225][ T9855] erspan0: left promiscuous mode
[  154.109230][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.114520][ T9855] 8021q: adding VLAN 0 to HW filter on device team0
[  154.117670][ T9855] batman_adv: batadv0: Interface activated: dummy0
[  154.120226][ T9855] batadv0: mtu less than device minimum
[  154.123987][ T9855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.128296][ T9855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.132382][ T9855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.136529][ T9855] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  154.432167][ T9876] lo speed is unknown, defaulting to 1000
[  154.439680][ T9880] bridge6: port 1(veth0_to_bond) entered blocking state
[  154.443943][ T9880] bridge6: port 1(veth0_to_bond) entered disabled state
[  154.447466][ T9880] veth0_to_bond: entered allmulticast mode
[  154.451202][ T9880] veth0_to_bond: entered promiscuous mode
[  154.733470][ T9894] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.805437][ T9899] __nla_validate_parse: 31 callbacks suppressed
[  154.805449][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1119'.
[  154.814695][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'.
[  154.819131][ T9899] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1119'.
[  154.822736][ T9899] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1119'.
[  154.878198][ T1091] wlan0: Trigger new scan to find an IBSS to join
[  154.906127][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'.
[  155.071986][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'.
[  155.075101][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'.
[  155.081036][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1124'.
[  155.083971][ T9924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1124'.
[  155.112193][ T9915] tipc: Resetting bearer <eth:gre0>
[  155.239097][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  155.254943][ T9915] tipc: Resetting bearer <eth:syzkaller0>
[  155.279079][ T5696] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.282933][ T5696] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.286081][ T5696] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.291100][ T5696] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.296433][ T5696] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.300217][ T5696] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.303208][ T5696] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.306805][ T5696] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.497842][ T9932] lo speed is unknown, defaulting to 1000
[  155.807613][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.991699][ T9944] lo speed is unknown, defaulting to 1000
[  156.734546][T10000] syz_tun: entered allmulticast mode
[  156.736780][T10000] syz_tun: left allmulticast mode
[  156.823270][T10011] lo: entered allmulticast mode
[  156.888357][T10020] lo: left allmulticast mode
[  157.787390][T10025] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  157.938708][T10051] 8021q: adding VLAN 0 to HW filter on device bond6
[  157.943614][T10051] bond0: (slave bond6): Enslaving as an active interface with a down link
[  158.138192][T10061] lo speed is unknown, defaulting to 1000
[  158.196247][T10070] lo: entered allmulticast mode
[  158.248458][T10072] lo: left allmulticast mode
[  158.685263][T10092] net_ratelimit: 18 callbacks suppressed
[  158.685278][T10092] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  158.989027][T10115] lo speed is unknown, defaulting to 1000
[  159.203013][T10128] validate_nla: 10 callbacks suppressed
[  159.203032][T10128] netlink: 'syz.1.1179': attribute type 1 has an invalid length.
[  159.360526][T10124] bond2 (unregistering): Released all slaves
[  159.535880][T10156] netlink: 'syz.1.1184': attribute type 10 has an invalid length.
[  159.552745][T10156] netlink: 'syz.1.1184': attribute type 10 has an invalid length.
[  159.563728][T10151] vlan3: entered promiscuous mode
[  159.566512][T10151] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  159.638148][T10167] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.917441][T10187] __nla_validate_parse: 15 callbacks suppressed
[  159.917459][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'.
[  160.039334][T10204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1196'.
[  160.042926][T10196] lo speed is unknown, defaulting to 1000
[  160.093198][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'.
[  160.821510][T10208] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  160.828973][T10215] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.832539][T10215] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  160.877990][T10215] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.880428][T10215] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  162.328300][T10241] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1205'.
[  162.331911][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'.
[  162.366902][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  322.238063][   T34] INFO: task kworker/0:3:5839 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  322.241018][   T34]       Not tainted syzkaller #0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  322.243490][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.248321][   T34] task:kworker/0:3     state:D stack:23336 pid:5839  tgid:5839  ppid:2      task_flags:0x4208060 flags:0x00004000
[  322.252979][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  322.255751][   T34] Call Trace:
[  322.257084][   T34]  <TASK>
[  322.258319][   T34]  __schedule+0x1798/0x4cc0
[  322.260283][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  322.262408][   T34]  ? __pfx___schedule+0x10/0x10
[  322.264543][   T34]  ? schedule+0x91/0x360
[  322.266507][   T34]  schedule+0x165/0x360
[  322.285808][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.288077][   T34]  __mutex_lock+0x7e6/0x1350
[  322.289985][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.291888][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  322.294763][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.305529][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  322.308526][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  322.310902][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  322.313648][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  322.316404][   T34]  process_scheduled_works+0xae1/0x17b0
[  322.318614][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  322.321002][   T34]  worker_thread+0x8a0/0xda0
[  322.322916][   T34]  kthread+0x711/0x8a0
[  322.324524][   T34]  ? __pfx_worker_thread+0x10/0x10
[  322.326943][   T34]  ? __pfx_kthread+0x10/0x10
[  322.328924][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  322.330997][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.333173][   T34]  ? __pfx_kthread+0x10/0x10
[  322.335056][   T34]  ret_from_fork+0x3fc/0x770
[  322.337428][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  322.339537][   T34]  ? __switch_to_asm+0x39/0x70
[  322.341486][   T34]  ? __switch_to_asm+0x33/0x70
[  322.343358][   T34]  ? __pfx_kthread+0x10/0x10
[  322.345184][   T34]  ret_from_fork_asm+0x1a/0x30
[  322.347243][   T34]  </TASK>
[  322.348533][   T34] INFO: task syz-executor:5857 blocked for more than 143 seconds.
[  322.351564][   T34]       Not tainted syzkaller #0
[  322.353512][   T34]       Blocked by coredump.
[  322.355276][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.358756][   T34] task:syz-executor    state:D stack:20792 pid:5857  tgid:5857  ppid:1      task_flags:0x40054c flags:0x00004006
[  322.363368][   T34] Call Trace:
[  322.364718][   T34]  <TASK>
[  322.366375][   T34]  __schedule+0x1798/0x4cc0
[  322.368280][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.370477][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.372392][   T34]  ? __pfx___schedule+0x10/0x10
[  322.374338][   T34]  ? schedule+0x91/0x360
[  322.377777][   T34]  schedule+0x165/0x360
[  322.379283][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.381297][   T34]  __mutex_lock+0x7e6/0x1350
[  322.383086][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.385016][   T34]  ? rfkill_unregister+0xc8/0x220
[  322.387326][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.389348][   T34]  ? __pfx_device_del+0x10/0x10
[  322.391223][   T34]  ? hci_sock_dev_event+0x42d/0x600
[  322.393288][   T34]  rfkill_unregister+0xc8/0x220
[  322.395239][   T34]  hci_unregister_dev+0x374/0x510
[  322.397721][   T34]  vhci_release+0x152/0x1a0
[  322.399588][   T34]  ? __pfx_vhci_release+0x10/0x10
[  322.401539][   T34]  __fput+0x44c/0xa70
[  322.403085][   T34]  task_work_run+0x1d4/0x260
[  322.404975][   T34]  ? __pfx_task_work_run+0x10/0x10
[  322.407385][   T34]  ? kmem_cache_free+0x18f/0x400
[  322.409426][   T34]  do_exit+0x6b5/0x2300
[  322.411073][   T34]  ? do_raw_spin_lock+0x121/0x290
[  322.413093][   T34]  ? __pfx_do_exit+0x10/0x10
[  322.414950][   T34]  do_group_exit+0x21c/0x2d0
[  322.418400][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.420502][   T34]  get_signal+0x1286/0x1340
[  322.422330][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  322.424466][   T34]  ? __pfx___x64_sys_wait4+0x10/0x10
[  322.427166][   T34]  ? fput_close_sync+0x119/0x200
[  322.429166][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  322.431606][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  322.433800][   T34]  exit_to_user_mode_loop+0x75/0x110
[  322.436112][   T34]  do_syscall_64+0x2bd/0x3b0
[  322.438005][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.440028][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.442416][   T34]  ? exc_page_fault+0x9f/0xf0
[  322.444190][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.446732][   T34] RIP: 0033:0x7fdb52984e57
[  322.448527][   T34] RSP: 002b:00007ffc7a03ac10 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  322.451731][   T34] RAX: fffffffffffffe00 RBX: 000000000000054c RCX: 00007fdb52984e57
[  322.454844][   T34] RDX: 0000000040000000 RSI: 00007ffc7a03ac7c RDI: 00000000ffffffff
[  322.458321][   T34] RBP: 00007ffc7a03ac7c R08: 0000000000000000 R09: 0000000000000000
[  322.461388][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001d0
[  322.464480][   T34] R13: 0000555566586590 R14: 0000000000027108 R15: 00007ffc7a03acd0
[  322.467784][   T34]  </TASK>
[  322.469177][   T34] INFO: task syz.1.1191:10215 blocked for more than 143 seconds.
[  322.472196][   T34]       Not tainted syzkaller #0
[  322.474218][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.477733][   T34] task:syz.1.1191      state:D stack:25216 pid:10215 tgid:10188 ppid:5849   task_flags:0x400140 flags:0x00004006
[  322.482691][   T34] Call Trace:
[  322.483995][   T34]  <TASK>
[  322.485156][   T34]  __schedule+0x1798/0x4cc0
[  322.487441][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.489389][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.491309][   T34]  ? __pfx___schedule+0x10/0x10
[  322.493276][   T34]  ? schedule+0x91/0x360
[  322.494974][   T34]  schedule+0x165/0x360
[  322.496857][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.498971][   T34]  __mutex_lock+0x7e6/0x1350
[  322.500822][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.502699][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  322.504759][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.506875][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.508984][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.511355][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.513837][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  322.516506][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  322.518572][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  322.520810][   T34]  rfkill_set_block+0x1d2/0x440
[  322.522700][   T34]  rfkill_fop_write+0x44b/0x570
[  322.524647][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  322.526924][   T34]  ? security_kernfs_init_security+0x240/0x290
[  322.529349][   T34]  ? rw_verify_area+0x255/0x4d0
[  322.531262][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.533204][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  322.535316][   T34]  vfs_write+0x27e/0xb30
[  322.537306][   T34]  ? __pfx_vfs_write+0x10/0x10
[  322.539259][   T34]  ? __fget_files+0x2a/0x420
[  322.541073][   T34]  ? __fget_files+0x2a/0x420
[  322.542890][   T34]  ? __fget_files+0x3a0/0x420
[  322.544585][   T34]  ? __fget_files+0x2a/0x420
[  322.546783][   T34]  ksys_write+0x145/0x250
[  322.548550][   T34]  ? __pfx_ksys_write+0x10/0x10
[  322.550313][   T34]  ? rcu_is_watching+0x15/0xb0
[  322.551854][   T34]  ? do_syscall_64+0xbe/0x3b0
[  322.553549][   T34]  do_syscall_64+0xfa/0x3b0
[  322.554957][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.556711][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.558621][   T34]  ? exc_page_fault+0x9f/0xf0
[  322.560069][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.561933][   T34] RIP: 0033:0x7fd3d0f8ebe9
[  322.563322][   T34] RSP: 002b:00007fd3d1e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  322.565993][   T34] RAX: ffffffffffffffda RBX: 00007fd3d11c6270 RCX: 00007fd3d0f8ebe9
[  322.568713][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005
[  322.571572][   T34] RBP: 00007fd3d1011e19 R08: 0000000000000000 R09: 0000000000000000
[  322.574005][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.576680][   T34] R13: 00007fd3d11c6308 R14: 00007fd3d11c6270 R15: 00007ffc99e02da8
[  322.579052][   T34]  </TASK>
[  322.580086][   T34] INFO: task syz.2.1197:10206 blocked for more than 143 seconds.
[  322.582481][   T34]       Not tainted syzkaller #0
[  322.583961][   T34]       Blocked by coredump.
[  322.585992][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.588560][   T34] task:syz.2.1197      state:D stack:25096 pid:10206 tgid:10206 ppid:5857   task_flags:0x40004c flags:0x00004002
[  322.592391][   T34] Call Trace:
[  322.593511][   T34]  <TASK>
[  322.594468][   T34]  __schedule+0x1798/0x4cc0
[  322.596241][   T34]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  322.598327][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.599895][   T34]  ? __pfx___schedule+0x10/0x10
[  322.601934][   T34]  ? schedule+0x91/0x360
[  322.603574][   T34]  schedule+0x165/0x360
[  322.605080][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.607523][   T34]  __mutex_lock+0x7e6/0x1350
[  322.609183][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.610777][   T34]  ? rfkill_unregister+0xc8/0x220
[  322.612860][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.614933][   T34]  ? __pfx_device_del+0x10/0x10
[  322.617160][   T34]  rfkill_unregister+0xc8/0x220
[  322.618948][   T34]  nfc_unregister_device+0x96/0x2a0
[  322.620754][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  322.622936][   T34]  virtual_ncidev_close+0x56/0x90
[  322.624678][   T34]  __fput+0x44c/0xa70
[  322.626184][   T34]  task_work_run+0x1d4/0x260
[  322.628042][   T34]  ? __pfx_task_work_run+0x10/0x10
[  322.630178][   T34]  do_exit+0x6b5/0x2300
[  322.631729][   T34]  ? preempt_schedule_common+0x83/0xd0
[  322.633775][   T34]  ? preempt_schedule+0xae/0xc0
[  322.636149][   T34]  ? __pfx_do_exit+0x10/0x10
[  322.638021][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  322.639696][   T34]  do_group_exit+0x21c/0x2d0
[  322.641083][   T34]  __x64_sys_exit_group+0x3f/0x40
[  322.642935][   T34]  x64_sys_call+0x21f7/0x2200
[  322.644763][   T34]  do_syscall_64+0xfa/0x3b0
[  322.646783][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.648528][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.650579][   T34]  ? exc_page_fault+0x9f/0xf0
[  322.652405][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.654648][   T34] RIP: 0033:0x7fdb5298ebe9
[  322.656561][   T34] RSP: 002b:00007ffc7a03a578 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  322.659768][   T34] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fdb5298ebe9
[  322.662771][   T34] RDX: 00007fdb529461d7 RSI: 0000000000000000 RDI: 000000000000000b
[  322.666164][   T34] RBP: 0000000000000003 R08: 00007ffc7a03a8b7 R09: 000000000000000b
[  322.669251][   T34] R10: 00007fdb52bc5fa0 R11: 0000000000000246 R12: 00007fdb52bc627c
[  322.672280][   T34] R13: 00007fdb52bc6270 R14: 00000000000006a9 R15: 0000000000000003
[  322.675165][   T34]  </TASK>
[  322.676622][   T34] INFO: task syz.0.1207:10247 blocked for more than 143 seconds.
[  322.679603][   T34]       Not tainted syzkaller #0
[  322.681556][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.684891][   T34] task:syz.0.1207      state:D stack:27016 pid:10247 tgid:10246 ppid:5853   task_flags:0x400140 flags:0x00004004
[  322.689768][   T34] Call Trace:
[  322.691137][   T34]  <TASK>
[  322.692312][   T34]  __schedule+0x1798/0x4cc0
[  322.694074][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.696349][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.698345][   T34]  ? __pfx___schedule+0x10/0x10
[  322.700294][   T34]  ? schedule+0x91/0x360
[  322.701997][   T34]  schedule+0x165/0x360
[  322.703667][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.705935][   T34]  __mutex_lock+0x7e6/0x1350
[  322.708220][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.710144][   T34]  ? rfkill_fop_open+0x12d/0x820
[  322.712048][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.714063][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  322.716452][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  322.718363][   T34]  rfkill_fop_open+0x12d/0x820
[  322.720246][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  322.722334][   T34]  misc_open+0x2bc/0x330
[  322.724022][   T34]  chrdev_open+0x4cc/0x5e0
[  322.726250][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.728152][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  322.730525][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.732311][   T34]  do_dentry_open+0x953/0x13f0
[  322.733965][   T34]  vfs_open+0x3b/0x340
[  322.735251][   T34]  ? path_openat+0x2ecd/0x3830
[  322.737193][   T34]  path_openat+0x2ee5/0x3830
[  322.738946][   T34]  ? arch_stack_walk+0xfc/0x150
[  322.740871][   T34]  ? stack_depot_save_flags+0x40/0x860
[  322.742974][   T34]  ? __pfx_path_openat+0x10/0x10
[  322.744752][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.747167][   T34]  do_filp_open+0x1fa/0x410
[  322.748710][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.750654][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  322.752396][   T34]  ? _raw_spin_unlock+0x28/0x50
[  322.754093][   T34]  ? alloc_fd+0x64c/0x6c0
[  322.756024][   T34]  do_sys_openat2+0x121/0x1c0
[  322.757767][   T34]  ? __se_sys_futex+0x36f/0x400
[  322.759454][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  322.761363][   T34]  ? __pfx___se_sys_futex+0x10/0x10
[  322.763239][   T34]  __x64_sys_openat+0x138/0x170
[  322.765142][   T34]  do_syscall_64+0xfa/0x3b0
[  322.767154][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.769247][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.771473][   T34]  ? exc_page_fault+0x9f/0xf0
[  322.773204][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.775613][   T34] RIP: 0033:0x7fd169f8ebe9
[  322.777389][   T34] RSP: 002b:00007fd16ad88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  322.780059][   T34] RAX: ffffffffffffffda RBX: 00007fd16a1c5fa0 RCX: 00007fd169f8ebe9
[  322.783031][   T34] RDX: 0000000000105000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  322.786137][   T34] RBP: 00007fd16a011e19 R08: 0000000000000000 R09: 0000000000000000
[  322.789116][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.792190][   T34] R13: 00007fd16a1c6038 R14: 00007fd16a1c5fa0 R15: 00007ffd578a08f8
[  322.795225][   T34]  </TASK>
[  322.798278][   T34] INFO: task syz.0.1207:10248 blocked for more than 143 seconds.
[  322.800843][   T34]       Not tainted syzkaller #0
[  322.802549][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.806142][   T34] task:syz.0.1207      state:D stack:26856 pid:10248 tgid:10246 ppid:5853   task_flags:0x400040 flags:0x00004004
[  322.810329][   T34] Call Trace:
[  322.811459][   T34]  <TASK>
[  322.812370][   T34]  __schedule+0x1798/0x4cc0
[  322.813935][   T34]  ? kasan_save_free_info+0x46/0x50
[  322.816183][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.818068][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.819850][   T34]  ? __pfx___schedule+0x10/0x10
[  322.821608][   T34]  ? schedule+0x91/0x360
[  322.822888][   T34]  schedule+0x165/0x360
[  322.824174][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.826164][   T34]  __mutex_lock+0x7e6/0x1350
[  322.827663][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.829211][   T34]  ? misc_open+0x51/0x330
[  322.830670][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.832512][   T34]  misc_open+0x51/0x330
[  322.834188][   T34]  chrdev_open+0x4cc/0x5e0
[  322.835875][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.838223][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  322.840764][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.842723][   T34]  do_dentry_open+0x953/0x13f0
[  322.844594][   T34]  vfs_open+0x3b/0x340
[  322.846694][   T34]  ? path_openat+0x2ecd/0x3830
[  322.848577][   T34]  path_openat+0x2ee5/0x3830
[  322.850367][   T34]  ? arch_stack_walk+0xfc/0x150
[  322.852342][   T34]  ? stack_depot_save_flags+0x40/0x860
[  322.854039][   T34]  ? __pfx_path_openat+0x10/0x10
[  322.855576][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.857727][   T34]  do_filp_open+0x1fa/0x410
[  322.859427][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.861188][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  322.862862][   T34]  ? _raw_spin_unlock+0x28/0x50
[  322.864723][   T34]  ? alloc_fd+0x64c/0x6c0
[  322.866754][   T34]  do_sys_openat2+0x121/0x1c0
[  322.868682][   T34]  ? __se_sys_futex+0x36f/0x400
[  322.870577][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  322.872628][   T34]  ? __x64_sys_epoll_ctl+0x163/0x1a0
[  322.874732][   T34]  ? rcu_is_watching+0x15/0xb0
[  322.882411][   T34]  __x64_sys_openat+0x138/0x170
[  322.884420][   T34]  do_syscall_64+0xfa/0x3b0
[  322.886718][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.888506][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.890620][   T34]  ? exc_page_fault+0x9f/0xf0
[  322.892133][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.894037][   T34] RIP: 0033:0x7fd169f8ebe9
[  322.895447][   T34] RSP: 002b:00007fd16ad67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  322.898258][   T34] RAX: ffffffffffffffda RBX: 00007fd16a1c6090 RCX: 00007fd169f8ebe9
[  322.901036][   T34] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  322.904127][   T34] RBP: 00007fd16a011e19 R08: 0000000000000000 R09: 0000000000000000
[  322.907555][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.910646][   T34] R13: 00007fd16a1c6128 R14: 00007fd16a1c6090 R15: 00007ffd578a08f8
[  322.913765][   T34]  </TASK>
[  322.915036][   T34] INFO: task syz-executor:10252 blocked for more than 144 seconds.
[  322.918339][   T34]       Not tainted syzkaller #0
[  322.920336][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  322.923716][   T34] task:syz-executor    state:D stack:28040 pid:10252 tgid:10252 ppid:1      task_flags:0x400040 flags:0x00004000
[  322.928613][   T34] Call Trace:
[  322.929983][   T34]  <TASK>
[  322.931184][   T34]  __schedule+0x1798/0x4cc0
[  322.932965][   T34]  ? kasan_save_free_info+0x46/0x50
[  322.935056][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.937341][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.939222][   T34]  ? __pfx___schedule+0x10/0x10
[  322.941127][   T34]  ? schedule+0x91/0x360
[  322.942779][   T34]  schedule+0x165/0x360
[  322.944422][   T34]  schedule_preempt_disabled+0x13/0x30
[  322.947182][   T34]  __mutex_lock+0x7e6/0x1350
[  322.949015][   T34]  ? __mutex_lock+0x5bb/0x1350
[  322.950923][   T34]  ? misc_open+0x51/0x330
[  322.952656][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  322.954658][   T34]  misc_open+0x51/0x330
[  322.956493][   T34]  chrdev_open+0x4cc/0x5e0
[  322.958371][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.960328][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  322.962859][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  322.964814][   T34]  do_dentry_open+0x953/0x13f0
[  322.967168][   T34]  vfs_open+0x3b/0x340
[  322.968849][   T34]  ? path_openat+0x2ecd/0x3830
[  322.970756][   T34]  path_openat+0x2ee5/0x3830
[  322.972621][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  322.974821][   T34]  ? count_memcg_event_mm+0x21/0x260
[  322.976828][   T34]  ? __pfx_path_openat+0x10/0x10
[  322.978615][   T34]  ? __pfx___up_read+0x10/0x10
[  322.980304][   T34]  ? do_user_addr_fault+0xbc1/0x1390
[  322.982021][   T34]  do_filp_open+0x1fa/0x410
[  322.983527][   T34]  ? __lock_acquire+0xab9/0xd20
[  322.985157][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  322.987067][   T34]  ? _raw_spin_unlock+0x28/0x50
[  322.988642][   T34]  ? alloc_fd+0x64c/0x6c0
[  322.990109][   T34]  do_sys_openat2+0x121/0x1c0
[  322.992000][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  322.993926][   T34]  ? fd_install+0x97/0x540
[  322.995519][   T34]  ? fd_install+0x30d/0x540
[  322.997619][   T34]  __x64_sys_openat+0x138/0x170
[  322.999590][   T34]  do_syscall_64+0xfa/0x3b0
[  323.001387][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.003405][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.005814][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.007391][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.009629][   T34] RIP: 0033:0x7f9d7f58d4d1
[  323.011421][   T34] RSP: 002b:00007fffad1d4f80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  323.014177][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9d7f58d4d1
[  323.016854][   T34] RDX: 0000000000000002 RSI: 00007f9d7f612822 RDI: 00000000ffffff9c
[  323.019350][   T34] RBP: 00007f9d7f612822 R08: 0000000000000000 R09: 00007f9d802fd6c0
[  323.022193][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  323.024797][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  323.027835][   T34]  </TASK>
[  323.028851][   T34] INFO: task syz-executor:10253 blocked for more than 144 seconds.
[  323.031634][   T34]       Not tainted syzkaller #0
[  323.033521][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.036759][   T34] task:syz-executor    state:D stack:27240 pid:10253 tgid:10253 ppid:1      task_flags:0x400040 flags:0x00004000
[  323.040582][   T34] Call Trace:
[  323.041909][   T34]  <TASK>
[  323.043110][   T34]  __schedule+0x1798/0x4cc0
[  323.044926][   T34]  ? kasan_save_free_info+0x46/0x50
[  323.047233][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.049152][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.051114][   T34]  ? __pfx___schedule+0x10/0x10
[  323.053033][   T34]  ? schedule+0x91/0x360
[  323.054701][   T34]  schedule+0x165/0x360
[  323.056681][   T34]  schedule_preempt_disabled+0x13/0x30
[  323.058805][   T34]  __mutex_lock+0x7e6/0x1350
[  323.060677][   T34]  ? __mutex_lock+0x5bb/0x1350
[  323.062602][   T34]  ? misc_open+0x51/0x330
[  323.064304][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  323.066526][   T34]  misc_open+0x51/0x330
[  323.068221][   T34]  chrdev_open+0x4cc/0x5e0
[  323.069945][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  323.071887][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  323.074373][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  323.076420][   T34]  do_dentry_open+0x953/0x13f0
[  323.078304][   T34]  vfs_open+0x3b/0x340
[  323.079884][   T34]  ? path_openat+0x2ecd/0x3830
[  323.081823][   T34]  path_openat+0x2ee5/0x3830
[  323.083683][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  323.086213][   T34]  ? count_memcg_event_mm+0x21/0x260
[  323.088377][   T34]  ? __pfx_path_openat+0x10/0x10
[  323.090341][   T34]  ? __pfx___up_read+0x10/0x10
[  323.092232][   T34]  ? do_user_addr_fault+0xbc1/0x1390
[  323.094138][   T34]  do_filp_open+0x1fa/0x410
[  323.096225][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.098159][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  323.100115][   T34]  ? _raw_spin_unlock+0x28/0x50
[  323.102030][   T34]  ? alloc_fd+0x64c/0x6c0
[  323.103748][   T34]  do_sys_openat2+0x121/0x1c0
[  323.105814][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.107871][   T34]  ? fd_install+0x97/0x540
[  323.109665][   T34]  ? fd_install+0x30d/0x540
[  323.111495][   T34]  __x64_sys_openat+0x138/0x170
[  323.113412][   T34]  do_syscall_64+0xfa/0x3b0
[  323.115188][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.118506][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.120862][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.122679][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.124948][   T34] RIP: 0033:0x7fd88258d4d1
[  323.126915][   T34] RSP: 002b:00007ffcb16cce80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  323.130206][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd88258d4d1
[  323.133247][   T34] RDX: 0000000000000002 RSI: 00007fd882612822 RDI: 00000000ffffff9c
[  323.136632][   T34] RBP: 00007fd882612822 R08: 0000000000000000 R09: 00007fd8832fd6c0
[  323.139601][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  323.142647][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  323.146016][   T34]  </TASK>
[  323.147335][   T34] INFO: task syz-executor:10256 blocked for more than 144 seconds.
[  323.150170][   T34]       Not tainted syzkaller #0
[  323.152100][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.155317][   T34] task:syz-executor    state:D stack:28040 pid:10256 tgid:10256 ppid:1      task_flags:0x400040 flags:0x00004000
[  323.160121][   T34] Call Trace:
[  323.161429][   T34]  <TASK>
[  323.162628][   T34]  __schedule+0x1798/0x4cc0
[  323.164400][   T34]  ? kasan_save_free_info+0x46/0x50
[  323.166617][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.168529][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.170426][   T34]  ? __pfx___schedule+0x10/0x10
[  323.172320][   T34]  ? schedule+0x91/0x360
[  323.173989][   T34]  schedule+0x165/0x360
[  323.175593][   T34]  schedule_preempt_disabled+0x13/0x30
[  323.177954][   T34]  __mutex_lock+0x7e6/0x1350
[  323.179781][   T34]  ? __mutex_lock+0x5bb/0x1350
[  323.181661][   T34]  ? misc_open+0x51/0x330
[  323.183373][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  323.185367][   T34]  misc_open+0x51/0x330
[  323.187215][   T34]  chrdev_open+0x4cc/0x5e0
[  323.188941][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  323.190851][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  323.193324][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  323.195281][   T34]  do_dentry_open+0x953/0x13f0
[  323.197454][   T34]  vfs_open+0x3b/0x340
[  323.199087][   T34]  ? path_openat+0x2ecd/0x3830
[  323.200945][   T34]  path_openat+0x2ee5/0x3830
[  323.202772][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  323.204850][   T34]  ? count_memcg_event_mm+0x21/0x260
[  323.207391][   T34]  ? __pfx_path_openat+0x10/0x10
[  323.209402][   T34]  ? __pfx___up_read+0x10/0x10
[  323.211273][   T34]  ? do_user_addr_fault+0xbc1/0x1390
[  323.213355][   T34]  do_filp_open+0x1fa/0x410
[  323.215151][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.217157][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  323.219132][   T34]  ? _raw_spin_unlock+0x28/0x50
[  323.221022][   T34]  ? alloc_fd+0x64c/0x6c0
[  323.222739][   T34]  do_sys_openat2+0x121/0x1c0
[  323.224590][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  323.227254][   T34]  ? fd_install+0x97/0x540
[  323.228737][   T34]  ? fd_install+0x30d/0x540
[  323.230378][   T34]  __x64_sys_openat+0x138/0x170
[  323.232343][   T34]  do_syscall_64+0xfa/0x3b0
[  323.234154][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.236468][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.238848][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.240704][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.243014][   T34] RIP: 0033:0x7f73f4d8d4d1
[  323.244864][   T34] RSP: 002b:00007ffe899887e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  323.248402][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f73f4d8d4d1
[  323.251512][   T34] RDX: 0000000000000002 RSI: 00007f73f4e12822 RDI: 00000000ffffff9c
[  323.254630][   T34] RBP: 00007f73f4e12822 R08: 0000000000000000 R09: 00007f73f5afd6c0
[  323.257874][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  323.261198][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  323.264428][   T34]  </TASK>
[  323.266122][   T34] 
[  323.266122][   T34] Showing all locks held in the system:
[  323.269196][   T34] 1 lock held by khungtaskd/34:
[  323.271199][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  323.275032][   T34] 2 locks held by kworker/u9:3/1001:
[  323.277528][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  323.282033][   T34]  #1: ffffc900067a7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  323.287207][   T34] 2 locks held by getty/5675:
[  323.289155][   T34]  #0: ffff8880268b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  323.293014][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  323.297344][   T34] 3 locks held by kworker/0:3/5839:
[  323.299464][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  323.305356][   T34]  #1: ffffc900035cfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  323.311120][   T34]  #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  323.315960][   T34] 1 lock held by syz-executor/5857:
[  323.318009][   T34]  #0: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  323.321957][   T34] 2 locks held by syz.1.1191/10215:
[  323.323950][   T34]  #0: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  323.328240][   T34]  #1: ffff888125d3b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  323.331981][   T34] 2 locks held by syz.2.1197/10206:
[  323.334018][   T34]  #0: ffff888125d3b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  323.338021][   T34]  #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  323.341940][   T34] 2 locks held by syz.0.1207/10247:
[  323.343985][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.347506][   T34]  #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  323.351418][   T34] 1 lock held by syz.0.1207/10248:
[  323.353452][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.357067][   T34] 1 lock held by syz-executor/10252:
[  323.359179][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.362513][   T34] 1 lock held by syz-executor/10253:
[  323.364570][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.368117][   T34] 1 lock held by syz-executor/10256:
[  323.370206][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.373536][   T34] 1 lock held by syz-executor/10259:
[  323.375608][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.379076][   T34] 1 lock held by syz-executor/10260:
[  323.381138][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.384434][   T34] 1 lock held by syz-executor/10262:
[  323.386937][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.390389][   T34] 1 lock held by syz-executor/10265:
[  323.392464][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.395989][   T34] 1 lock held by syz-executor/10266:
[  323.398094][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.401322][   T34] 1 lock held by syz-executor/10268:
[  323.403385][   T34]  #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  323.407210][   T34] 
[  323.408189][   T34] =============================================
[  323.408189][   T34] 
[  323.411418][   T34] NMI backtrace for cpu 0
[  323.411436][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  323.411450][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.411458][   T34] Call Trace:
[  323.411468][   T34]  <TASK>
[  323.411477][   T34]  dump_stack_lvl+0x189/0x250
[  323.411502][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.411515][   T34]  ? __pfx__printk+0x10/0x10
[  323.411539][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  323.411559][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  323.411576][   T34]  ? __pfx__printk+0x10/0x10
[  323.411600][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  323.411620][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  323.411639][   T34]  watchdog+0xf93/0xfe0
[  323.411661][   T34]  ? watchdog+0x1de/0xfe0
[  323.411681][   T34]  kthread+0x711/0x8a0
[  323.411701][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.411715][   T34]  ? __pfx_kthread+0x10/0x10
[  323.411731][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.411751][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.411765][   T34]  ? __pfx_kthread+0x10/0x10
[  323.411780][   T34]  ret_from_fork+0x3fc/0x770
[  323.411795][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.411810][   T34]  ? __switch_to_asm+0x39/0x70
[  323.411824][   T34]  ? __switch_to_asm+0x33/0x70
[  323.411836][   T34]  ? __pfx_kthread+0x10/0x10
[  323.411850][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.411874][   T34]  </TASK>
[  323.411879][   T34] Sending NMI from CPU 0 to CPUs 1:
[  323.470596][    C1] NMI backtrace for cpu 1
[  323.470617][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  323.470633][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.470642][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  323.470664][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  323.470676][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  323.470689][    C1] RAX: cfe63afc4f2dd400 RBX: ffffffff819683f8 RCX: cfe63afc4f2dd400
[  323.470699][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d08 RDI: ffffffff8be33880
[  323.470708][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  323.470717][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39230
[  323.470726][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d4000
[  323.470735][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  323.470746][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.470754][    C1] CR2: 000055fdb2b82e68 CR3: 000000000df36000 CR4: 00000000000006f0
[  323.470789][    C1] Call Trace:
[  323.470798][    C1]  <TASK>
[  323.470805][    C1]  default_idle+0x13/0x20
[  323.470821][    C1]  default_idle_call+0x74/0xb0
[  323.470838][    C1]  do_idle+0x1e8/0x510
[  323.470854][    C1]  ? __pfx_do_idle+0x10/0x10
[  323.470872][    C1]  cpu_startup_entry+0x44/0x60
[  323.470884][    C1]  start_secondary+0x101/0x110
[  323.470904][    C1]  common_startup_64+0x13e/0x147
[  323.470929][    C1]  </TASK>
[  323.471647][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  323.535188][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  323.538719][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.542620][   T34] Call Trace:
[  323.543975][   T34]  <TASK>
[  323.545211][   T34]  dump_stack_lvl+0x99/0x250
[  323.547042][   T34]  ? __asan_memcpy+0x40/0x70
[  323.548849][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.550911][   T34]  ? __pfx__printk+0x10/0x10
[  323.552738][   T34]  vpanic+0x281/0x750
[  323.554349][   T34]  ? __pfx_vpanic+0x10/0x10
[  323.556167][   T34]  ? preempt_schedule+0xae/0xc0
[  323.558251][   T34]  ? preempt_schedule_common+0x83/0xd0
[  323.560474][   T34]  panic+0xb9/0xc0
[  323.562045][   T34]  ? __pfx_panic+0x10/0x10
[  323.563841][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  323.565963][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  323.568467][   T34]  watchdog+0xfd2/0xfe0
[  323.570186][   T34]  ? watchdog+0x1de/0xfe0
[  323.571898][   T34]  kthread+0x711/0x8a0
[  323.573534][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.575427][   T34]  ? __pfx_kthread+0x10/0x10
[  323.577316][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.579397][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.581437][   T34]  ? __pfx_kthread+0x10/0x10
[  323.583281][   T34]  ret_from_fork+0x3fc/0x770
[  323.585177][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.587234][   T34]  ? __switch_to_asm+0x39/0x70
[  323.589226][   T34]  ? __switch_to_asm+0x33/0x70
[  323.591179][   T34]  ? __pfx_kthread+0x10/0x10
[  323.593074][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.595051][   T34]  </TASK>
[  323.597155][   T34] Kernel Offset: disabled
[  323.598902][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:08:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881083e0237 R9 =1ffff1102107c046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d1 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe09a10bb8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000029b93 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88801bc89e38 RBP=ffff88801bc89df0 RSP=ffffc900030ef590
R8 =ffff88801bc89e3b R9 =1ffff110037913c7 R10=dffffc0000000000 R11=ffffed10037913c8
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffff88801bc89e38
RIP=ffffffff822e516b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5e652f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f5e647976c3 00007f5e647976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=06060168e6208008 0015e00300000007 XMM07=d003001000000000 02100015b00301a0
XMM08=1000139003000000 70bd2a0000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
