last executing test programs:

16.849300025s ago: executing program 2 (id=1723):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4001af83, &(0x7f0000000240)={0x0, 0x5})

16.849016349s ago: executing program 2 (id=1724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff00000000711012000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='\xd4u\xe5\x84D\xff\x86\x11\x1d\xf4\x84\xea\x0e\x9f\xc4\"\xa6\r\x7f`\xcb\xb7\x8f\xaa\xdb\x0f\x89\xf48\xee\x99\xfd\xb4\xfb\xd9=\xf2\xf7\xc4\xa9~\xcf\xdc\x1d\x05\x148\a?#8H\xfd\x84\xa1c\xeex\xcd\xef\x18\xa6]?\xd7\xc4)/D\x90(\x8etSO\n:F\x95s\xf7\x031\x9b3\xeb\x97\x0e\xb4\x19\x1d\xa0<a\xe7M #(\xdf~ta\x84\xa0\x84i,\xd1\\\x00x\x978\x11\x18\xfa\xa4G\x96\x93\x1bRTq\x80;3\xe6x\x9b\xae\x06\x02V\x06t\n\xc4\x12}\\o\x17-\xeb\xa7\x06l\xbfB8F\xea\xfd\xc6s\xb1|#\x17\xdd\xa6\xe8\x82\xcc@\x1e\x7f\xd4\xe7\x9c\xb7\xe8\\\xa4\x8a]V\xea\a\x00\x83\xbb\xfaw\x11\xdc\x8e\nH\xc1j\x88c\xeb\xe0W~\xdaAU>U:\xc1\x94\x83P\x8b\xbe\xd0\xaa\xa4v\xdc\r\bZ\xe5\xc9!\xe7\xc8\xb2\x17\xca\x93\xa7\xff\xf3\x88\x96<\xc4~5\xbd\x13\x932dg\x8d>g\xb8\xe8\xbbz)\x9fC,\xd7y\xbc\x02U67\xde\xb6\b\x96E>\"\xbedB\x14\xbe1\xca\xdd\fR\xc6=\xbc-6{\xc6};\a\x14\xa6\x8fR\x80E(\xa7n\x93\xd7\\\xf1Z\x8fP\x98\x1bg\xd5\x12\xc7\x82\xef\xdf#\x8d\x19,\xb0\\\xf3\x85Z\xe4\xa4!\xe4O\xfe\x12Hz3\x10$\x8a\xe4\xab\xd6\xcc8|#]6\xde%\xdfR\xafA\xc4]ft\x95\x8b\xd7\xc6\xb63bO\x1f\x95\x17\x8f^\x83\x01\x1c\xa2W*\xe8L\xfe\xb6[\xfe\xbd', 0xfda2) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x378}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async)
write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa)
close(r1) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8) (async, rerun: 64)
r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r13, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.848535371s ago: executing program 2 (id=1725):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
write$cgroup_devices(r2, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r2, 0xec1b3000)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x40000010)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x30, 0x1, 0x1, [r7, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="9900110011000113f22c45cf7f3b00000000000000000003400c00003a76abb33cfd466ac30200288f82eb9a7915c2bf2203bd3182c6158d65caad72b63b4ffe007a7dfbbc1f24ecfa919cc9c40a28038917fa8d4c84e941c6e9fb6134d599a4df8d397e144e4771c09fd91a97818f8197e7841133770a80289448e0c6cc6efacc5f32fb3dc0e93a9ee19d50c623626cb400"/170], 0x34}], 0x1, 0x0, 0x0, 0x20008800}, 0x40)

16.779106892s ago: executing program 2 (id=1726):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="201100001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

16.777868247s ago: executing program 2 (id=1727):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r2, 0x118, 0x2, 0x0, &(0x7f00000003c0))
recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/158, 0x9e}, 0x2}], 0x1, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000ff7f0000181100005c22cc8d249aa52326826d2f0078e83fe0e07e168cb41ce4a39e71c27a0c93ff389f8b8fe321a48c8850d609ab3e", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000280ff030001000085100000fdffffff8520000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
unshare(0x2000c00)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_proto_private(r6, 0x89e6, &(0x7f0000000300)="3f7a5e431ed93f1a4b9dc5b63e840eb36c79b8b5d7ea84af946bb88eda6f2686f8a6a80f3b05c6b8a1a5423cd6644e90f179a717028b36d50fd2e3cba1c5f3ff4016")
r7 = socket$inet(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg2\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)
connect$bt_sco(r6, 0x0, 0x0)

16.429091174s ago: executing program 0 (id=1730):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@int={0x400004}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xa, 0xc8}, {0x2, 0xfffffffd}, {0x3, 0x2}, {0x1, 0x401}, {0x10, 0x4}, {0x9, 0xf7}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0xb, 0x2}, {0xb, 0x9cad}, {0xa, 0x401}, {0x8, 0xf}, {0xa, 0x4}, {0x6, 0x7}, {0xe, 0x1}]}, @struct={0xc, 0x5, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x2}, {0x8, 0x3, 0x7}, {0x0, 0x0, 0x1a2396c0}, {0x8, 0x2, 0x5}, {0x5, 0x2, 0x3}]}]}}, 0x0, 0xf2}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@exit, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000001}, @generic={0x3, 0xa, 0x5, 0x4641, 0xfffff75b}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x0, 0xfffffffd}, 0xfffffffffffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)
r5 = socket(0x10, 0x803, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r8, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
writev(r8, &(0x7f0000001300)=[{0x0}, {&(0x7f00000010c0)="985485c5", 0xfdef}], 0x2)
recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}, {&(0x7f0000000b00)=';', 0x1}], 0x2, 0x0, 0x0, 0x84}, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000)
close(r7)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x8000)
getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r11, 0x0, 0x1, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080)
sendto$packet(r0, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r9, 0x1, 0x9, 0x6, @broadcast}, 0x14)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000100)=0x18, 0x4)
ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

16.428955004s ago: executing program 1 (id=1731):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000280)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x80, "db090bd30bbca9"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001280)={{r2, 0x7fff, 0x77, 0x9, 0x12000000000, 0xd54, 0x3, 0x1ff, 0x4, 0x2a, 0x5, 0x80000001, 0x7fffffffffffffff, 0x2, 0xfffffffffffffffa}})
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4001af83, &(0x7f0000000240)={0x3, 0x7})

16.428382913s ago: executing program 1 (id=1732):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30)
connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b0301000000000020001280df0057535c3ff5ea1400028008000400e000000108000500e0000002"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="080025bd7000000000000500000005002e00000000000500743177e7a9eb435481e251380001000000c8e873c943eea41d00099fba1a9e5c871dda5c1df73dff1d33d792070f643fad0ada03a5dc3ec0eb2795770703ee97e4a708f74ccf23c073dbf4b45b033f518e69f6707ce758febc27eb183fba45adad5be92c61f4cf2677e026fb21d14ac87b7dba0bc633de012134ab4cf21bde2c7f87a43b8ceea5cecaba0451036481fe05ddf6"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10)

16.376793385s ago: executing program 1 (id=1733):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc}}]}, 0x1}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0x9}, {0x8, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x48074)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x1b4, 0x33, 0x300, 0x70bd26, 0x25dfdbff, {0x1d}, [@generic="6344d0b9505f99d2a5f40b0921e86fc5ebd4812590c5175917e9ea2b3465a808fabe3ca8fb90a6918b5615ea6ff5e95a159b646d1bdbb565074f1eb46e04741259c4bf5aefa8b762b37df79c7292b1f77e8990c3a685eb91b2aa3bb0f63504397ae5401454ea09128befac9139e159745353a410a83a53a388bf84e04b7aa88feb167a605001aa9f4ded518adb56d5e0680f3440efd09abb9568421838f49c3d66e98e0904357e9eaf7eb01a59e7833bec9319f2c066ce2b5619a6", @nested={0xe4, 0x4e, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xd7, 0x93, 0x0, 0x0, @binary="84fab7fab4e0a4651bcc8caaeaa2c139ca2b06085a37c489f66eb9ab06b6b63b2f0300442859944ff4ed21e50f800827d91f30a778d7722b33d5161695e9c0490d038d7979d63f965588ee6eaa5ee4792e8de704b60a8db8a2ae48bf1b52484dfb1941b0ba63d21ebdb02c25fcb6bc002f9674828dbba83105f426e6205282652542d20e070e2f68b5f18bc19b557333bc35a6ff8c5c988b26cdd29050414b306ca044adfa7bdf943d0781fcb342f2ba57fecb68eba6cca1385dc8d62f141c64fb9c4a26446d2df05092e75313e37fab79593b"}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000011146ff9"], 0x28}}, 0x800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x1003, 0x7}, &(0x7f0000000000)=0x90)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r4, &(0x7f0000000980)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f4305", 0x12}], 0x1)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000040)={0xbee3, 0x9, 0x7a6, 0x2, 0xfffffffe}, 0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40d38, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68010}, 0x0)

16.376517143s ago: executing program 0 (id=1734):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
close(r6)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r6, 0x0, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, 0x800, 0x10000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x7, 'ip6erspan0\x00'})
socket$inet6(0xa, 0x3, 0xe)
shutdown(r8, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x2c)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r9, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xd21cc3bc8c711a69}, 0x8044840)
setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2100000000000000600012800b000100677265746170000050000280060018000600000008000100", @ANYRES32=r2], 0x80}}, 0x0)

16.33897172s ago: executing program 0 (id=1735):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000002200010a00000080fedbdf25020001"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0xbf2c, 0x4, 0x4})
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000280))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mreq(r3, 0x29, 0x1, 0x0, &(0x7f0000000100))
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

16.268790965s ago: executing program 1 (id=1736):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@empty, 0x4e20, 0x8, 0x4e22, 0x2, 0xa, 0xc0, 0x0, 0x6}, {0x8, 0x9, 0xa, 0x7ffffffe, 0x8000000000000001, 0x2, 0xe, 0x8}, {0x3, 0x4, 0x5, 0x794}, 0x800, 0x6e6bbe, 0x3, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x2, 0x0, 0x6, 0x3, 0x6, 0x80000000}}, 0xe8)

16.267163369s ago: executing program 1 (id=1737):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x80002, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1400, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000a00)="aab93e08f43edf34345a0456b537f451c00f457118", 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4}, 0x38)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x1fc}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
socket$unix(0x1, 0x1, 0x0)

16.139191439s ago: executing program 0 (id=1738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @rand_addr, @multicast2}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40d38, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x68010}, 0x0)

16.138877627s ago: executing program 0 (id=1739):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x7f, 0x7ff}})
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
r5 = socket$kcm(0x10, 0x9, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

16.124632559s ago: executing program 0 (id=1740):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @b={0x6, 0x1, 0x1, 0x9, {0x1, 'G'}, 0x2}}, 0xa)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, 0x0, 0x0, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r12, 0x11, 0x0, 0x0, @void, @value=r11}, 0x20)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r12, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r13}, 0x20)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4001af83, &(0x7f0000000240)={0xf4240, 0x7})

15.908736635s ago: executing program 2 (id=1741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
read$nci(r5, &(0x7f0000000200)=""/100, 0x64)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x9, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "6ad2"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.40890902s ago: executing program 1 (id=1742):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket(0x2c, 0x3, 0xe7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
unshare(0x24040400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xa8, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x68, 0x2a, [@random_vendor={0xdd, 0x3d, "7a7018f23f1c84b13d8ba625160c59ea4ff85ffb18c9bd774d415cc9e5e06ecd656a8b3ae6254086134a11e0d717c406c3a9850e9768704381a6e6f34d"}, @channel_switch={0x25, 0x3, {0x1, 0x74, 0x5}}, @challenge={0x10, 0x1, 0x72}, @dsss={0x3, 0x1, 0xb}, @cf={0x4, 0x6, {0x7f, 0x6, 0x6, 0xe}}, @supported_rates={0x1, 0x7, [{}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0x3, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf8, 0x28}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048094)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xfffffffffffffd20}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={<r10=>0x0, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x7fff, 0x3}, &(0x7f00000003c0)=0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e21, 0xfffffa90, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, 0x400, 0xfffa, 0x7, 0x352, 0x4, 0x8e7, 0xe1}, &(0x7f0000000500)=0x9c)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="490000002a000100fffffffffbdbdf253000c1800c00180008ac0f00000000001400010000000000000108002400ac1414aa0400e9110279d03804e4d31a6e413ce4be09c2d3f23d3125f25b9927add2b24e09b76d1e4964312608542f1effffffff8738c36e607c5e8764"], 0x40}], 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @mcast2, 0xc7, 0x2}, 0x20)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r14, 0x0, 0x5}, 0x18)
r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r15, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)

1.010771832s ago: executing program 32 (id=1740):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @b={0x6, 0x1, 0x1, 0x9, {0x1, 'G'}, 0x2}}, 0xa)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, 0x0, 0x0, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r12, 0x11, 0x0, 0x0, @void, @value=r11}, 0x20)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r12, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r13}, 0x20)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4001af83, &(0x7f0000000240)={0xf4240, 0x7})

8.9784ms ago: executing program 33 (id=1742):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket(0x2c, 0x3, 0xe7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
unshare(0x24040400)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r7, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xa8, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x68, 0x2a, [@random_vendor={0xdd, 0x3d, "7a7018f23f1c84b13d8ba625160c59ea4ff85ffb18c9bd774d415cc9e5e06ecd656a8b3ae6254086134a11e0d717c406c3a9850e9768704381a6e6f34d"}, @channel_switch={0x25, 0x3, {0x1, 0x74, 0x5}}, @challenge={0x10, 0x1, 0x72}, @dsss={0x3, 0x1, 0xb}, @cf={0x4, 0x6, {0x7f, 0x6, 0x6, 0xe}}, @supported_rates={0x1, 0x7, [{}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x60, 0x1}, {0x3, 0x1}]}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf8, 0x28}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048094)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xfffffffffffffd20}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={<r10=>0x0, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}, 0x7fff, 0x3}, &(0x7f00000003c0)=0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r11, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r10, @in6={{0xa, 0x4e21, 0xfffffa90, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}, 0x400, 0xfffa, 0x7, 0x352, 0x4, 0x8e7, 0xe1}, &(0x7f0000000500)=0x9c)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="490000002a000100fffffffffbdbdf253000c1800c00180008ac0f00000000001400010000000000000108002400ac1414aa0400e9110279d03804e4d31a6e413ce4be09c2d3f23d3125f25b9927add2b24e09b76d1e4964312608542f1effffffff8738c36e607c5e8764"], 0x40}], 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x1, @mcast2, 0xc7, 0x2}, 0x20)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r14, 0x0, 0x5}, 0x18)
r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r15, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)

0s ago: executing program 34 (id=1741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
read$nci(r5, &(0x7f0000000200)=""/100, 0x64)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x9, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "6ad2"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60201' (ED25519) to the list of known hosts.
syzkaller login: [   40.651721][ T5770] cgroup: Unknown subsys name 'net'
[   40.756901][ T5770] cgroup: Unknown subsys name 'cpuset'
[   40.759781][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.989488][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.079671][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.084904][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.088377][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.101975][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.107265][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.110177][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.113310][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.117129][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.120349][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.123502][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.126234][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.129576][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.132358][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.135218][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.142974][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.252589][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   45.350911][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   45.377071][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.380153][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.383201][ T5842] bridge_slave_0: entered allmulticast mode
[   45.386798][ T5842] bridge_slave_0: entered promiscuous mode
[   45.391146][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.394212][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.397646][ T5842] bridge_slave_1: entered allmulticast mode
[   45.400777][ T5842] bridge_slave_1: entered promiscuous mode
[   45.411117][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   45.448544][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.458824][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.461842][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.465289][ T5838] bridge_slave_0: entered allmulticast mode
[   45.467872][ T5838] bridge_slave_0: entered promiscuous mode
[   45.470869][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.473197][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.476185][ T5838] bridge_slave_1: entered allmulticast mode
[   45.478944][ T5838] bridge_slave_1: entered promiscuous mode
[   45.482542][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.512263][ T5842] team0: Port device team_slave_0 added
[   45.516602][ T5842] team0: Port device team_slave_1 added
[   45.523017][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.546855][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.554551][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.557379][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.567067][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.583445][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.586548][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.589122][ T5845] bridge_slave_0: entered allmulticast mode
[   45.591675][ T5845] bridge_slave_0: entered promiscuous mode
[   45.594518][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.597852][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.608584][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.616118][ T5838] team0: Port device team_slave_0 added
[   45.618459][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.621441][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.624451][ T5845] bridge_slave_1: entered allmulticast mode
[   45.628665][ T5845] bridge_slave_1: entered promiscuous mode
[   45.644303][ T5838] team0: Port device team_slave_1 added
[   45.648428][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.659148][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.681849][ T5842] hsr_slave_0: entered promiscuous mode
[   45.684414][ T5842] hsr_slave_1: entered promiscuous mode
[   45.687264][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.689548][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.699013][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.707117][ T5845] team0: Port device team_slave_0 added
[   45.714862][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.717916][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.727496][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.733010][ T5845] team0: Port device team_slave_1 added
[   45.762218][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.764515][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.773205][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.783370][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.786353][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.795225][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.801029][ T5838] hsr_slave_0: entered promiscuous mode
[   45.803499][ T5838] hsr_slave_1: entered promiscuous mode
[   45.806172][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   45.808181][ T5838] Cannot create hsr debugfs directory
[   45.848014][ T5845] hsr_slave_0: entered promiscuous mode
[   45.850384][ T5845] hsr_slave_1: entered promiscuous mode
[   45.852785][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   45.854860][ T5845] Cannot create hsr debugfs directory
[   45.957863][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.963276][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.975557][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.979202][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.989409][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.994050][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.001653][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.011429][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.019146][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.021735][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.024160][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.026572][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.030261][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.034184][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.041978][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.046458][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.071197][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.073597][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.076125][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.078741][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.093031][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.095943][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.098761][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.101496][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.119126][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.132346][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   46.139956][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.143465][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.149422][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.152685][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.158108][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.161450][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.187784][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.190897][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.194588][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.197666][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.217212][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.235395][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.239673][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   46.248953][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.251820][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.267204][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.270245][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.278856][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   46.300060][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.303072][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.308700][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.310989][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.326765][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.349219][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.353114][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.366831][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.383385][ T5842] veth0_vlan: entered promiscuous mode
[   46.388830][ T5842] veth1_vlan: entered promiscuous mode
[   46.401422][ T5842] veth0_macvtap: entered promiscuous mode
[   46.407704][ T5842] veth1_macvtap: entered promiscuous mode
[   46.413965][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.425695][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.438362][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.445187][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.451810][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.456080][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.464181][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.474424][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.508374][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.511412][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.524452][ T5838] veth0_vlan: entered promiscuous mode
[   46.537983][ T5838] veth1_vlan: entered promiscuous mode
[   46.545065][ T5845] veth0_vlan: entered promiscuous mode
[   46.549798][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.552400][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.555592][ T5838] veth0_macvtap: entered promiscuous mode
[   46.562797][ T5845] veth1_vlan: entered promiscuous mode
[   46.567358][ T5838] veth1_macvtap: entered promiscuous mode
[   46.584118][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.592674][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.599996][ T5845] veth0_macvtap: entered promiscuous mode
[   46.603670][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.606946][ T5845] veth1_macvtap: entered promiscuous mode
[   46.620894][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.623872][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.635752][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.641884][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.655091][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.658212][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.694459][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.700302][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.711436][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.717816][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.743419][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.755065][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.767798][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.773196][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.776939][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.779753][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.798103][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.800916][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.832026][ T5925] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   46.839534][ T5925] : entered promiscuous mode
[   46.870214][ T5929] dummy0: entered promiscuous mode
[   46.872250][ T5929] vlan2: entered promiscuous mode
[   46.893552][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   46.901087][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   46.905818][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   47.035328][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'.
[   47.205004][ T5841] Bluetooth: hci2: command tx timeout
[   47.207218][ T5841] Bluetooth: hci1: command tx timeout
[   47.207613][ T5846] Bluetooth: hci0: command tx timeout
[   47.466389][ T5950] Bluetooth: MGMT ver 1.23
[   47.495511][ T5954] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'.
[   47.679382][ T5978] vlan2: entered allmulticast mode
[   47.681314][ T5978] veth1: entered allmulticast mode
[   47.683428][ T5978] batman_adv: batadv0: Adding interface: vlan2
[   47.686545][ T5978] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.695538][ T5978] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   47.743653][ T5984] trusted_key: syz.0.27 sent an empty control message without MSG_MORE.
[   47.838589][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   47.900660][ T6003] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.964211][ T6013] tipc: Started in network mode
[   47.966958][ T6013] tipc: Node identity 2, cluster identity 4711
[   47.969502][ T6013] tipc: Node number set to 2
[   48.163111][ T6028] geneve2: entered promiscuous mode
[   48.546915][ T6060] netlink: 'syz.1.61': attribute type 8 has an invalid length.
[   48.549568][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'.
[   48.554098][ T6060] bond0: entered promiscuous mode
[   48.556633][ T6060] bond_slave_0: entered promiscuous mode
[   48.558931][ T6060] bond_slave_1: entered promiscuous mode
[   48.561818][ T6060] bond0: left promiscuous mode
[   48.563672][ T6060] bond_slave_0: left promiscuous mode
[   48.567813][ T6060] bond_slave_1: left promiscuous mode
[   49.116078][ T6076] netlink: 'syz.2.70': attribute type 5 has an invalid length.
[   49.221789][ T6085] netlink: 'syz.0.71': attribute type 4 has an invalid length.
[   49.243930][ T6085] netlink: 'syz.0.71': attribute type 4 has an invalid length.
[   49.285170][ T5846] Bluetooth: hci1: command tx timeout
[   49.287559][ T5846] Bluetooth: hci2: command tx timeout
[   49.289916][ T5846] Bluetooth: hci0: command tx timeout
[   49.411228][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   49.434441][ T6103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.82'.
[   50.019583][ T6136] syz_tun: entered allmulticast mode
[   50.022348][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   50.372553][ T6136] syz_tun (unregistering): left allmulticast mode
[   50.602178][ T6166] sock: sock_set_timeout: `syz.2.101' (pid 6166) tries to set negative timeout
[   50.879867][ T6184] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET)
[   50.945842][ T6188] geneve3: entered promiscuous mode
[   50.948840][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   50.953172][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   50.957465][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   50.961171][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   50.977043][ T6191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.114'.
[   50.984177][ T6191] team0: Port device team_slave_0 removed
[   51.365004][ T5841] Bluetooth: hci0: command tx timeout
[   51.366947][ T5841] Bluetooth: hci2: command tx timeout
[   51.367752][ T5846] Bluetooth: hci1: command tx timeout
[   51.474341][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'.
[   51.478003][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'.
[   51.927701][ T6244] geneve4: entered promiscuous mode
[   51.929763][ T6244] geneve4: entered allmulticast mode
[   52.136931][ T6268] Zero length message leads to an empty skb
[   52.139011][ T5719] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   52.141890][ T5719] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   52.145244][ T5719] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   52.149554][ T5719] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   52.197457][ T6278] __nla_validate_parse: 2 callbacks suppressed
[   52.197466][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   52.266341][ T6291] netlink: 'syz.0.159': attribute type 1 has an invalid length.
[   52.276377][ T6291] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.283005][ T6291] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.287331][ T6291] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   52.291788][ T6291] bond1: (slave vcan1): Error -95 calling set_mac_address
[   52.334370][ T6299] gretap1: entered promiscuous mode
[   52.338886][ T6299] bond1: (slave gretap1): making interface the new active one
[   52.343137][ T6299] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   52.358369][ T6291] macvlan2: entered promiscuous mode
[   52.360659][ T6291] macvlan2: entered allmulticast mode
[   52.363268][ T6291] bond1: entered promiscuous mode
[   52.368458][ T6291] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   52.373057][ T6291] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   52.383020][ T6291] bond1: left promiscuous mode
[   52.625667][ T6332] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   52.628923][ T6332] netlink: 144 bytes leftover after parsing attributes in process `syz.2.174'.
[   52.632428][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'.
[   52.660775][ T6334] syzkaller1: entered promiscuous mode
[   52.663329][ T6334] syzkaller1: entered allmulticast mode
[   52.840665][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   53.146187][ T6379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.444814][ T5846] Bluetooth: hci1: command tx timeout
[   53.444917][ T5841] Bluetooth: hci2: command tx timeout
[   53.447071][ T5844] Bluetooth: hci0: command tx timeout
[   53.457650][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'.
[   53.492083][ T6411] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   53.523364][ T6415] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   53.546397][ T6415] 8021q: adding VLAN 0 to HW filter on device bond4
[   53.549397][ T6415] bond3: (slave bond4): making interface the new active one
[   53.551953][ T6415] bond3: (slave bond4): Enslaving as an active interface with an up link
[   53.786712][ T6439] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.222'.
[   53.953910][ T6460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.957947][ T6460] syzkaller0: entered promiscuous mode
[   53.960046][ T6460] syzkaller0: entered allmulticast mode
[   53.966543][ T6460] tipc: Resetting bearer <eth:syzkaller0>
[   53.969149][ T6459] tipc: Resetting bearer <eth:syzkaller0>
[   53.972325][ T6459] tipc: Disabling bearer <eth:syzkaller0>
[   54.009553][ T6451] netlink: 'syz.1.227': attribute type 13 has an invalid length.
[   54.012753][ T6451] netlink: 'syz.1.227': attribute type 17 has an invalid length.
[   54.019643][ T6451] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   54.105565][ T6471] tap0: tun_chr_ioctl cmd 1074812118
[   54.119513][ T6473] netlink: 300 bytes leftover after parsing attributes in process `syz.0.237'.
[   54.380052][ T6501] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[   54.403780][ T6501] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   54.403946][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   54.427724][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   54.486681][ T6515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.507495][ T6501] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   54.577217][ T6531] netlink: 248 bytes leftover after parsing attributes in process `syz.0.265'.
[   55.412702][ T6606] tipc: Invalid UDP bearer configuration
[   55.412729][ T6606] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   55.440029][ T6612] ieee802154 phy0 wpan0: encryption failed: -22
[   55.476877][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.482910][ T6615] batadv_slave_0: entered promiscuous mode
[   55.491797][ T6615] batadv_slave_0: entered allmulticast mode
[   55.676411][   T33] audit: type=1107 audit(1756205644.984:2): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   55.684583][ T6644] tap0: tun_chr_ioctl cmd 1074025677
[   55.689103][ T6644] tap0: linktype set to 780
[   56.037379][ T6698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.147901][ T5311] IPVS: starting estimator thread 0...
[   57.209194][ T6861] __nla_validate_parse: 9 callbacks suppressed
[   57.209203][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'.
[   57.235560][ T6847] IPVS: using max 135 ests per chain, 324000 per kthread
[   57.318667][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[   57.321921][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   57.327123][ T6874] netlink: 'syz.2.372': attribute type 12 has an invalid length.
[   57.379872][ T6876] sctp: [Deprecated]: syz.0.373 (pid 6876) Use of int in maxseg socket option.
[   57.379872][ T6876] Use struct sctp_assoc_value instead
[   57.400747][ T6880] syzkaller0: entered promiscuous mode
[   57.402982][ T6880] syzkaller0: entered allmulticast mode
[   57.649165][ T6908] netlink: 'syz.2.387': attribute type 2 has an invalid length.
[   57.652154][ T6908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.387'.
[   57.977644][ T6935] netlink: 'syz.1.395': attribute type 3 has an invalid length.
[   57.980775][ T6935] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.395'.
[   58.012479][ T6938] netlink: 'syz.1.398': attribute type 1 has an invalid length.
[   58.015910][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'.
[   58.038165][ T6940] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   58.100777][ T6944] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.400'.
[   58.104119][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[   58.580042][ T7009] netlink: 104 bytes leftover after parsing attributes in process `syz.0.429'.
[   58.614566][ T7011] tipc: Started in network mode
[   58.618827][ T7011] tipc: Node identity 9af987e90b92, cluster identity 4711
[   58.622075][ T7011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.625844][ T7014] tipc: Invalid UDP bearer configuration
[   58.625874][ T7014] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   58.677537][ T7011] tipc: Resetting bearer <eth:syzkaller0>
[   58.680095][ T7016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'.
[   58.689682][ T7010] tipc: Resetting bearer <eth:syzkaller0>
[   58.748549][ T7010] tipc: Disabling bearer <eth:syzkaller0>
[   58.757503][ T7019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.760646][ T7019] syzkaller0: entered promiscuous mode
[   58.762878][ T7019] syzkaller0: entered allmulticast mode
[   58.771679][ T7019] tipc: Resetting bearer <eth:syzkaller0>
[   58.775725][ T7018] tipc: Resetting bearer <eth:syzkaller0>
[   58.778927][ T7018] tipc: Disabling bearer <eth:syzkaller0>
[   58.914953][ T7028] nbd: socks must be embedded in a SOCK_ITEM attr
[   58.917296][ T7028] block nbd0: shutting down sockets
[   58.947175][ T7034] vlan2: entered promiscuous mode
[   58.949458][ T7034] gretap0: entered promiscuous mode
[   59.565244][ T7101] Driver unsupported XDP return value 0 on prog  (id 79) dev N/A, expect packet loss!
[   59.570428][ T7100] syzkaller0: entered promiscuous mode
[   59.572618][ T7100] syzkaller0: entered allmulticast mode
[   60.721310][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.723401][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.726368][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.733467][ T7204] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   60.738213][ T7204] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   60.751960][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.754343][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.758371][ T7204] wg1 speed is unknown, defaulting to 1000
[   60.999547][ T7256] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[   61.124962][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[   61.299827][ T7286] netlink: 'syz.1.544': attribute type 32 has an invalid length.
[   61.302471][ T7286] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   61.523653][ T7300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.778028][ T7321] netlink: 'syz.1.560': attribute type 3 has an invalid length.
[   61.782473][ T7321] syz_tun: entered allmulticast mode
[   61.791672][ T7321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.801552][ T7320] syz_tun: left allmulticast mode
[   62.033158][ T7344] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[   62.042648][ T7344] team0: Port device dummy0 added
[   62.050178][ T7344] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[   62.058792][ T7344] team0: Port device dummy0 removed
[   62.061865][ T7344] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   62.111565][ T7356] bond5: entered promiscuous mode
[   62.113410][ T7356] 8021q: adding VLAN 0 to HW filter on device bond5
[   62.117276][ T7355] wg1 speed is unknown, defaulting to 1000
[   62.160223][ T7362] batadv_slave_1: entered promiscuous mode
[   62.162765][ T7361] batadv_slave_1: left promiscuous mode
[   62.265883][ T7377] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   62.373705][ T7389] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[   62.378441][ T7389] team0: Port device dummy0 added
[   62.383937][ T7389] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[   62.388311][ T7389] team0: Port device dummy0 removed
[   62.391517][ T7389] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   63.119457][ T7398] __nla_validate_parse: 7 callbacks suppressed
[   63.119467][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[   63.130385][ T7398] netlink: 84 bytes leftover after parsing attributes in process `syz.1.594'.
[   63.182356][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[   63.186067][ T7404] netlink: 'syz.1.597': attribute type 3 has an invalid length.
[   63.202517][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.600'.
[   63.321705][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'.
[   63.329611][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'.
[   63.332762][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'.
[   63.345144][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'.
[   63.348124][ T7428] netlink: 'syz.1.609': attribute type 6 has an invalid length.
[   63.420807][ T7442] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.616'.
[   63.548243][ T7461] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   63.603866][ T7465] wg1 speed is unknown, defaulting to 1000
[   63.636832][ T5311] IPVS: starting estimator thread 0...
[   63.639974][ T7465] ieee802154 phy0 wpan0: encryption failed: -22
[   63.724774][ T7467] IPVS: using max 70 ests per chain, 168000 per kthread
[   64.539085][ T7483] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[   64.542322][ T7483] netlink: 168 bytes leftover after parsing attributes in process `syz.0.634'.
[   64.596065][ T7487] bridge2: entered allmulticast mode
[   64.632322][ T5875] IPVS: stop unused estimator thread 0...
[   64.661766][ T7493] wg1 speed is unknown, defaulting to 1000
[   64.931196][ T7525] pim6reg1: entered promiscuous mode
[   64.933080][ T7525] pim6reg1: entered allmulticast mode
[   65.204610][ T7556] bridge_slave_1: left allmulticast mode
[   65.212621][ T7556] bridge_slave_1: left promiscuous mode
[   65.215647][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.220077][ T7556] bridge_slave_0: left allmulticast mode
[   65.222198][ T7556] bridge_slave_0: left promiscuous mode
[   65.224406][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.587147][ T7608] IPv6: Can't replace route, no match found
[   65.643047][ T7610] wg1 speed is unknown, defaulting to 1000
[   65.694555][ T7622] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   65.905274][ T7644] syzkaller0: entered promiscuous mode
[   65.907539][ T7644] syzkaller0: entered allmulticast mode
[   66.102216][ T7654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   66.112306][   T51] wg1 speed is unknown, defaulting to 1000
[   66.124407][ T7654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   66.611707][ T7737] bridge0: port 3(erspan0) entered blocking state
[   66.614009][ T7737] bridge0: port 3(erspan0) entered disabled state
[   66.616460][ T7737] erspan0: entered allmulticast mode
[   66.619029][ T7737] erspan0: entered promiscuous mode
[   66.622684][ T7737] bridge0: port 3(erspan0) entered blocking state
[   66.625410][ T7737] bridge0: port 3(erspan0) entered forwarding state
[   66.628837][ T7737] erspan0: left allmulticast mode
[   66.630661][ T7737] erspan0: left promiscuous mode
[   66.632478][ T7737] bridge0: port 3(erspan0) entered disabled state
[   66.799135][ T7765] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   67.333266][ T7801] netlink: 'syz.0.780': attribute type 16 has an invalid length.
[   67.957021][ T7870] wg1 speed is unknown, defaulting to 1000
[   68.289822][ T7916] __nla_validate_parse: 12 callbacks suppressed
[   68.289836][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'.
[   68.426212][ T7929] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   68.429334][ T7928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.839'.
[   68.652550][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[   68.659373][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[   68.662480][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[   68.672012][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[   68.688768][ T7960] netlink: 'syz.2.855': attribute type 20 has an invalid length.
[   68.983913][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   68.991261][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'.
[   69.000729][ T5719] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.000781][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   69.005304][ T5719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.011954][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'.
[   69.016080][ T5719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.022974][ T5719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.157971][ T8000] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[   69.204920][ T8000] nbd: socks must be embedded in a SOCK_ITEM attr
[   69.208273][ T8000] block nbd0: shutting down sockets
[   69.282150][ T8008] sctp: Trying to GSO but underlying device doesn't support it.
[   69.377858][ T8024] netlink: 'syz.0.886': attribute type 3 has an invalid length.
[   69.493073][ T8036] bridge0: port 3(macvlan2) entered blocking state
[   69.496374][ T8036] bridge0: port 3(macvlan2) entered disabled state
[   69.499591][ T8036] macvlan2: entered allmulticast mode
[   69.502266][ T8036] dummy0: entered allmulticast mode
[   69.508814][ T8036] macvlan2: entered promiscuous mode
[   69.512010][ T8036] bridge0: port 3(macvlan2) entered blocking state
[   69.515204][ T8036] bridge0: port 3(macvlan2) entered forwarding state
[   69.611774][ T8044] wg1 speed is unknown, defaulting to 1000
[   69.980661][ T8089] syzkaller1: entered promiscuous mode
[   69.982738][ T8089] syzkaller1: entered allmulticast mode
[   70.048290][ T8091] netlink: 'syz.0.913': attribute type 3 has an invalid length.
[   70.463705][ T8094] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[   71.127364][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.130934][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.526273][ T5875] syzkaller0: tun_net_xmit 76
[   71.531845][ T5875] syzkaller0: tun_net_xmit 48
[   71.533874][ T8121] syzkaller0: create flow: hash 1463466654 index 1
[   71.555009][ T5311] syzkaller0: tun_net_xmit 76
[   71.557884][ T8118] syzkaller0: delete flow: hash 1463466654 index 1
[   71.632660][ T8138] netlink: 'syz.2.934': attribute type 12 has an invalid length.
[   71.866898][ T8161] sch_fq: defrate 0 ignored.
[   73.027031][ T8258] dvmrp1: tun_chr_ioctl cmd 1074025677
[   73.029898][ T8258] dvmrp1: linktype set to 773
[   73.088985][ T8264] netlink: 'syz.1.979': attribute type 1 has an invalid length.
[   73.134323][ T8264] bond1: (slave bridge3): making interface the new active one
[   73.142616][ T8264] bond1: (slave bridge3): Enslaving as an active interface with an up link
[   73.270943][ T8280] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   73.437610][ T8302] __nla_validate_parse: 12 callbacks suppressed
[   73.437624][ T8302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'.
[   73.589507][ T8332] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.602922][ T8338] wg1 speed is unknown, defaulting to 1000
[   73.614365][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'.
[   73.646228][ T8338] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1011'.
[   73.743068][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'.
[   73.747018][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'.
[   73.795710][ T8362] wg1 speed is unknown, defaulting to 1000
[   73.866218][ T8360] block nbd0: server does not support multiple connections per device.
[   73.869866][ T8360] block nbd0: shutting down sockets
[   74.618244][ T8383] sctp: [Deprecated]: syz.2.1027 (pid 8383) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.618244][ T8383] Use struct sctp_sack_info instead
[   74.729171][ T8393] netlink: 'syz.1.1035': attribute type 1 has an invalid length.
[   74.971329][ T8436] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[   74.974619][ T8436] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1049'.
[   74.978960][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'.
[   75.029280][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1056'.
[   75.066960][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[   75.132945][ T8456] veth0_to_bond: entered allmulticast mode
[   75.173762][ T8466] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   75.177024][ T8466] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   75.182729][ T8466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.191988][ T8463] lo speed is unknown, defaulting to 1000
[   75.194614][ T8463] lo speed is unknown, defaulting to 1000
[   75.200040][ T8463] lo speed is unknown, defaulting to 1000
[   75.207693][ T8463] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.226927][ T8463] lo speed is unknown, defaulting to 1000
[   75.229383][ T8463] lo speed is unknown, defaulting to 1000
[   75.231928][ T8463] lo speed is unknown, defaulting to 1000
[   75.383631][ T8499] wg1 speed is unknown, defaulting to 1000
[   75.386322][ T8499] lo speed is unknown, defaulting to 1000
[   75.708789][ T8535] netlink: 'syz.2.1097': attribute type 1 has an invalid length.
[   75.712050][ T8535] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1097'.
[   75.738750][ T8537] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   76.886172][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   77.148739][ T8624] netlink: 'syz.0.1137': attribute type 1 has an invalid length.
[   77.163584][ T8629] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[   77.462082][ T8692] netlink: 'syz.1.1171': attribute type 16 has an invalid length.
[   77.466034][ T8692] netlink: 'syz.1.1171': attribute type 3 has an invalid length.
[   77.542690][ T8706] wg1 speed is unknown, defaulting to 1000
[   77.548757][ T8706] lo speed is unknown, defaulting to 1000
[   77.601264][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.611600][ T8719] tipc: Failed to remove unknown binding: 66,1,1/0:2716831547/2716831549
[   77.615732][ T5311] IPVS: starting estimator thread 0...
[   77.620818][ T8719] tipc: Failed to remove unknown binding: 66,1,1/0:2716831547/2716831549
[   77.623840][ T8719] tipc: Failed to remove unknown binding: 66,1,1/0:2716831547/2716831549
[   77.726221][ T8720] IPVS: using max 135 ests per chain, 324000 per kthread
[   77.740341][ T8734] bond0: (slave dummy0): Releasing backup interface
[   77.746513][ T8734] bridge_slave_1: left allmulticast mode
[   77.749693][ T8734] bridge_slave_1: left promiscuous mode
[   77.752090][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.757868][ T8734] bond0: (slave bond_slave_0): Releasing backup interface
[   77.802165][ T8734] bond0: (slave bond_slave_1): Releasing backup interface
[   77.809099][ T8734] team0: Port device team_slave_1 removed
[   77.813705][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.817623][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.821328][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.824431][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.834473][ T8734] bond0: (slave wlan1): Releasing backup interface
[   77.842176][ T8734] bond1: (slave bridge3): Releasing active interface
[   77.966398][ T8759] netlink: 'syz.1.1201': attribute type 15 has an invalid length.
[   78.128801][ T8779] wg1: entered promiscuous mode
[   78.130697][ T8779] wg1: entered allmulticast mode
[   78.187344][ T8785] netlink: 'syz.1.1214': attribute type 1 has an invalid length.
[   78.517914][ T8797] __nla_validate_parse: 13 callbacks suppressed
[   78.517924][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[   78.579974][ T8803] ieee802154 phy0 wpan0: encryption failed: -22
[   78.582576][ T8803] ieee802154 phy0 wpan0: encryption failed: -22
[   78.779330][ T8820] wg1 speed is unknown, defaulting to 1000
[   78.782495][ T8820] lo speed is unknown, defaulting to 1000
[   78.972044][ T8846] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1243'.
[   79.210882][ T8872] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.261450][ T8885] veth0: entered promiscuous mode
[   79.285206][ T8885] veth0: left promiscuous mode
[   79.398728][ T8903] pimreg: entered allmulticast mode
[   79.538454][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'.
[   79.541403][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'.
[   79.630176][ T8941] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   79.658941][ T8945] wg1: entered promiscuous mode
[   79.662743][ T8945] wg1: entered allmulticast mode
[   79.712173][ T8953] netlink: 724 bytes leftover after parsing attributes in process `syz.0.1295'.
[   79.717727][ T8953] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1295'.
[   79.722760][ T8955] netlink: 'syz.2.1296': attribute type 4 has an invalid length.
[   79.769345][   T24] lo speed is unknown, defaulting to 1000
[   79.772818][   T24] syz2: Port: 1 Link DOWN
[   80.100313][ T9007] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[   80.226916][ T9018] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1325'.
[   80.281721][ T9023] netlink: 'syz.1.1327': attribute type 3 has an invalid length.
[   80.284426][ T9022] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   80.304811][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.324400][ T9027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'.
[   80.424375][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[   80.456129][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.537267][ T9047] wg1 speed is unknown, defaulting to 1000
[   80.541734][ T9047] lo speed is unknown, defaulting to 1000
[   80.667858][ T9060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1345'.
[   80.853407][ T9078] netlink: 'syz.2.1354': attribute type 10 has an invalid length.
[   80.918843][ T9086] netlink: 'syz.0.1357': attribute type 9 has an invalid length.
[   80.956180][ T9090] netlink: 'syz.0.1359': attribute type 1 has an invalid length.
[   80.959338][ T9090] netlink: 'syz.0.1359': attribute type 4 has an invalid length.
[   81.078677][ T9103] can: request_module (can-proto-5) failed.
[   81.372516][   T10] cfg80211: failed to load regulatory.db
[   81.453575][ T9122] netlink: 'syz.0.1372': attribute type 13 has an invalid length.
[   81.456584][ T9122] netlink: 'syz.0.1372': attribute type 12 has an invalid length.
[   81.503274][ T9126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.508655][ T9126] syzkaller0: entered promiscuous mode
[   81.510701][ T9126] syzkaller0: entered allmulticast mode
[   81.517774][ T9125] tipc: Resetting bearer <eth:syzkaller0>
[   81.521367][ T9125] tipc: Disabling bearer <eth:syzkaller0>
[   81.796658][ T9153] netlink: 'syz.1.1380': attribute type 1 has an invalid length.
[   81.819190][ T9153] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   81.827089][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   81.831393][ T9153] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.838023][ T9153] bond2 (unregistering): (slave ip6gretap2): Removing an active aggregator
[   81.841322][ T9153] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface
[   81.847165][ T9153] bond2 (unregistering): Released all slaves
[   81.987038][ T9163] wg1 speed is unknown, defaulting to 1000
[   81.989917][ T9163] lo speed is unknown, defaulting to 1000
[   82.228080][ T9172] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   82.308369][ T9175] dvmrp8: entered allmulticast mode
[   82.321159][ T9175] dvmrp8: left allmulticast mode
[   82.540122][ T9187] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002
[   82.542706][ T9185] bridge_slave_0: left allmulticast mode
[   82.545740][ T9185] bridge_slave_0: left promiscuous mode
[   82.547625][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.551684][ T9185] bridge_slave_1: left allmulticast mode
[   82.553983][ T9185] bridge_slave_1: left promiscuous mode
[   82.557497][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.563560][ T9185] bond0: (slave bond_slave_0): Releasing backup interface
[   82.567261][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.573242][ T9185] bond0: (slave bond_slave_1): Releasing backup interface
[   82.581004][ T9185] team0: Port device team_slave_0 removed
[   82.584634][ T9185] team0: Port device team_slave_1 removed
[   82.588039][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.591899][ T9185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.595698][ T9185] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.602159][ T9185] macvlan2: left allmulticast mode
[   82.603969][ T9185] dummy0: left allmulticast mode
[   82.607316][ T9185] macvlan2: left promiscuous mode
[   82.609936][ T9185] bridge0: port 3(macvlan2) entered disabled state
[   82.625198][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.650929][ T9185] netlink: 'syz.2.1387': attribute type 10 has an invalid length.
[   82.652460][ T9193] openvswitch: netlink: Flow actions attr not present in new flow.
[   82.660402][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.672216][ T9185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   82.675805][ T9185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.789448][ T9198] netlink: 'syz.0.1393': attribute type 1 has an invalid length.
[   82.794248][ T9198] sctp: [Deprecated]: syz.0.1393 (pid 9198) Use of int in max_burst socket option.
[   82.794248][ T9198] Use struct sctp_assoc_value instead
[   82.882842][ T9205] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   82.890498][ T9205] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   82.895604][ T9205] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   82.982365][ T9208] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.081331][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.085484][ T9216] syzkaller0: entered promiscuous mode
[   83.087759][ T9216] syzkaller0: entered allmulticast mode
[   83.093171][ T9217] tipc: Resetting bearer <eth:syzkaller0>
[   83.098881][ T9215] tipc: Resetting bearer <eth:syzkaller0>
[   83.103015][ T9215] tipc: Disabling bearer <eth:syzkaller0>
[   83.158392][ T9220] sctp: [Deprecated]: syz.1.1399 (pid 9220) Use of int in maxseg socket option.
[   83.158392][ T9220] Use struct sctp_assoc_value instead
[   83.188130][ T9222] syzkaller0: entered promiscuous mode
[   83.190627][ T9222] syzkaller0: entered allmulticast mode
[   83.487645][ T9232] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   83.493226][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.493803][ T9232] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.511730][ T9232] veth5: entered promiscuous mode
[   83.515677][ T9232] bond2: (slave veth5): Enslaving as a backup interface with a down link
[   83.531146][ T9232] bond2: (slave ip6gretap1): Removing an active aggregator
[   83.534040][ T9232] bond2: (slave ip6gretap1): Releasing backup interface
[   83.536801][ T9232] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 92:84:08:2e:6d:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   83.544954][ T9232] bond2: (slave veth5): Releasing backup interface
[   83.556056][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   83.849729][ T9250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.858104][ T9244] syzkaller0: entered promiscuous mode
[   83.860346][ T9244] syzkaller0: entered allmulticast mode
[   83.870877][ T9244] tipc: Resetting bearer <eth:syzkaller0>
[   83.878308][ T9243] tipc: Resetting bearer <eth:syzkaller0>
[   83.884412][ T9243] tipc: Disabling bearer <eth:syzkaller0>
[   84.325195][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   84.423060][ T9284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.432334][ T9284] syzkaller0: entered promiscuous mode
[   84.434589][ T9284] syzkaller0: entered allmulticast mode
[   84.443820][ T9284] tipc: Resetting bearer <eth:syzkaller0>
[   84.446966][ T9283] tipc: Resetting bearer <eth:syzkaller0>
[   84.450674][ T9283] tipc: Disabling bearer <eth:syzkaller0>
[   84.510051][ T9294] dvmrp0: entered allmulticast mode
[   84.536467][ T9299] __nla_validate_parse: 21 callbacks suppressed
[   84.536481][ T9299] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1414'.
[   84.542387][ T9299] NCSI netlink: No device for ifindex 813332851
[   84.556932][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'.
[   84.578609][ T9304] team0: Device gtp0 is up. Set it down before adding it as a team port
[   84.592563][ T9308] tipc: Started in network mode
[   84.594197][ T9308] tipc: Node identity 369e337ca4e5, cluster identity 4711
[   84.596619][ T9308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.599592][ T9308] syzkaller0: entered promiscuous mode
[   84.601360][ T9308] syzkaller0: entered allmulticast mode
[   84.608435][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'.
[   84.626107][ T9308] tipc: Resetting bearer <eth:syzkaller0>
[   84.649633][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'.
[   84.681420][ T9316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.699334][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'.
[   84.702576][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1420'.
[   84.709307][ T9319] geneve0: entered promiscuous mode
[   84.711202][ T9319] geneve0: entered allmulticast mode
[   84.714624][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   84.717630][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   84.720679][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   84.723596][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   84.784211][ T9335] bond3: (slave bridge3): Enslaving as a backup interface with an up link
[   84.788460][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[   84.791243][ T9324] wg1 speed is unknown, defaulting to 1000
[   84.857966][ T9331] tipc: Resetting bearer <eth:syzkaller0>
[   84.866547][ T9324] lo speed is unknown, defaulting to 1000
[   84.869024][ T9334] veth1_macvtap: left promiscuous mode
[   84.878093][   T51] wg1 speed is unknown, defaulting to 1000
[   84.880156][ T5875] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.883199][   T51] syz0: Port: 1 Link DOWN
[   84.885223][ T5875] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.888265][ T5875] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   84.891847][ T5875] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.895241][ T5875] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.898448][ T5875] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   84.908438][ T5875] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.911495][ T5875] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.915696][ T5875] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   84.919660][ T5875] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.922739][ T5875] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.925927][ T5875] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   84.997091][ T9334] wg1: left promiscuous mode
[   85.000069][ T9334] wg1: left allmulticast mode
[   85.021040][ T9334] veth0_to_bond: left allmulticast mode
[   85.042170][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.050034][ T9334] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.108028][ T9334] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   85.112480][ T9334] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   85.121616][ T9334] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   85.127433][ T9334] vlan2: left allmulticast mode
[   85.129194][ T9334] veth1: left allmulticast mode
[   85.146487][ T9334] gretap1: left promiscuous mode
[   85.150822][ T9334] bond5: left promiscuous mode
[   85.200221][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.207220][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.212375][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.216790][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.317966][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'.
[   85.337915][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'.
[   85.399915][ T9356] validate_nla: 6 callbacks suppressed
[   85.399926][ T9356] netlink: 'syz.1.1426': attribute type 1 has an invalid length.
[   85.636809][ T9358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.641126][ T9358] syzkaller0: entered promiscuous mode
[   85.643064][ T9358] syzkaller0: entered allmulticast mode
[   85.648445][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'.
[   85.670956][ T9358] netlink: 'syz.0.1429': attribute type 10 has an invalid length.
[   85.679540][ T9357] tipc: Resetting bearer <eth:syzkaller0>
[   85.687800][ T9357] tipc: Disabling bearer <eth:syzkaller0>
[   85.694911][  T792] tipc: Node number set to 2457547644
[   86.156161][ T9370] netem: invalid attributes len -16
[   86.157976][ T9370] netem: change failed
[   86.179624][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.195615][ T9370] wg1: left promiscuous mode
[   86.197419][ T9370] wg1: left allmulticast mode
[   86.290613][ T9370] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   86.293091][ T9370] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   86.300447][ T9370] geneve2: left promiscuous mode
[   86.304023][ T9370] geneve3: left promiscuous mode
[   86.307733][ T9370] geneve4: left promiscuous mode
[   86.309346][ T9370] geneve4: left allmulticast mode
[   86.312874][ T9370] vlan2: left promiscuous mode
[   86.314432][ T9370] gretap0: left promiscuous mode
[   86.317941][ T9370] bridge2: left allmulticast mode
[   86.331597][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.335607][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.339190][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   86.344810][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.348408][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.351904][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   86.357845][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.364424][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.370882][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   86.375474][ T9382] bond3: (slave bridge3): Releasing backup interface
[   86.379548][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.382596][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.385532][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   86.399048][ T9383] wg1 speed is unknown, defaulting to 1000
[   86.403080][ T9382] wg1 speed is unknown, defaulting to 1000
[   86.407119][ T9383] lo speed is unknown, defaulting to 1000
[   86.416214][ T9382] lo speed is unknown, defaulting to 1000
[   86.534286][ T9397] wg1 speed is unknown, defaulting to 1000
[   86.542298][ T9397] lo speed is unknown, defaulting to 1000
[   86.559990][ T9399] wg1 speed is unknown, defaulting to 1000
[   86.562471][ T9399] lo speed is unknown, defaulting to 1000
[   86.581976][ T9397] geneve0: entered promiscuous mode
[   86.584141][ T9397] geneve0: entered allmulticast mode
[   86.655415][ T9407] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   86.658266][ T9407] team0: Device ipvlan3 is already an upper device of the team interface
[   87.438640][ T9413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.441773][ T9413] syzkaller0: entered promiscuous mode
[   87.444078][ T9413] syzkaller0: entered allmulticast mode
[   87.451326][ T9413] tipc: Resetting bearer <eth:syzkaller0>
[   87.460144][ T9412] tipc: Resetting bearer <eth:syzkaller0>
[   87.462563][ T9412] tipc: Disabling bearer <eth:syzkaller0>
[   87.610133][ T9428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.820668][ T9435] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   87.824948][ T9435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.852443][ T9439] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   87.894048][ T9441] batadv_slave_0: left promiscuous mode
[   87.896649][ T9441] batadv_slave_0: left allmulticast mode
[   87.900718][ T9441] tipc: Resetting bearer <eth:syzkaller0>
[   87.903697][ T9441] syzkaller0: left promiscuous mode
[   87.908135][ T9441] syzkaller0: left allmulticast mode
[   87.912832][ T9441] veth5: left promiscuous mode
[   87.915591][ T9441] geneve0: left promiscuous mode
[   87.917618][ T9441] geneve0: left allmulticast mode
[   87.929285][ T9441] @: renamed from veth0_vlan
[   88.055194][ T9443] wg1 speed is unknown, defaulting to 1000
[   88.057954][ T9443] lo speed is unknown, defaulting to 1000
[   88.131253][ T9443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.256269][ T9462] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.259745][ T9462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.340993][ T9468] netlink: 'syz.0.1456': attribute type 12 has an invalid length.
[   88.476849][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.480647][ T9480] 8021q: adding VLAN 0 to HW filter on device team0
[   88.490073][ T9480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.524363][ T9487] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   88.531248][ T9487] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   88.597541][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.600533][ T9490] syzkaller0: entered promiscuous mode
[   88.602526][ T9490] syzkaller0: entered allmulticast mode
[   88.626061][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[   88.631285][ T9489] tipc: Disabling bearer <eth:syzkaller0>
[   88.645288][ T5872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.648610][ T5872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.652028][ T5872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.656450][ T5872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.840479][ T9512] gretap1: entered allmulticast mode
[   88.888197][ T9517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.890558][ T9519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.902853][ T9517] syzkaller0: entered promiscuous mode
[   88.924007][ T9517] syzkaller0: entered allmulticast mode
[   88.928370][ T9517] tipc: Resetting bearer <eth:syzkaller0>
[   88.930744][ T9516] tipc: Resetting bearer <eth:syzkaller0>
[   88.933194][ T9516] tipc: Disabling bearer <eth:syzkaller0>
[   89.009532][ T9523] netlink: 'syz.1.1472': attribute type 12 has an invalid length.
[   89.049016][ T9525] netlink: 'syz.1.1473': attribute type 2 has an invalid length.
[   89.053485][ T9525] k*]: entered promiscuous mode
[   89.065953][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.068639][ T9525] 8021q: adding VLAN 0 to HW filter on device team0
[   89.072459][ T9525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.151918][ T9534] gtp0: entered promiscuous mode
[   89.181634][ T9536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.184540][ T9536] syzkaller0: entered promiscuous mode
[   89.187020][ T9536] syzkaller0: entered allmulticast mode
[   89.192041][ T9536] tipc: Resetting bearer <eth:syzkaller0>
[   89.355731][ T9535] tipc: Resetting bearer <eth:syzkaller0>
[   89.358956][ T9535] tipc: Disabling bearer <eth:syzkaller0>
[   89.586804][ T9545] __nla_validate_parse: 20 callbacks suppressed
[   89.586820][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'.
[   89.622723][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'.
[   89.627727][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1480'.
[   89.633340][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[   89.636701][ T9547] netlink: 'syz.0.1480': attribute type 30 has an invalid length.
[   89.643405][ T5872] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.647958][ T5872] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.651842][ T5872] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.656483][ T5872] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.730834][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1484'.
[   89.758702][ T9555] batman_adv: batadv0: Adding interface: dummy0
[   89.761841][ T9555] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.772433][ T9555] batman_adv: batadv0: Interface activated: dummy0
[   89.778878][ T9559] bond0: (slave dummy0): Releasing backup interface
[   89.783394][ T9559] bond0: (slave bond_slave_0): Releasing backup interface
[   89.788784][ T9559] bond0: (slave bond_slave_1): Releasing backup interface
[   89.793191][ T9559] team0: Port device team_slave_0 removed
[   89.798391][ T9559] team0: Port device team_slave_1 removed
[   89.801038][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.804543][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.808766][ T9559] bond0: (slave wlan1): Releasing backup interface
[   89.811662][ T9559] batman_adv: batadv0: Removing interface: vlan2
[   89.814309][ T9559] bond1: (slave gretap1): Releasing active interface
[   89.818237][ T9559] bond3: (slave bond4): Releasing backup interface
[   89.824098][ T9555] batadv0: mtu less than device minimum
[   89.826453][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'.
[   89.826639][ T9559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.834588][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.838913][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.843098][ T9555] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   89.858992][ T9563] batman_adv: batadv0: Adding interface: ip6gretap3
[   89.861672][ T9563] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.871176][ T9563] batman_adv: batadv0: Interface activated: ip6gretap3
[   89.909539][ T9565] sctp: [Deprecated]: syz.1.1488 (pid 9565) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.909539][ T9565] Use struct sctp_sack_info instead
[   89.916231][ T9565] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   89.931410][ T9569] sctp: [Deprecated]: syz.1.1488 (pid 9569) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.931410][ T9569] Use struct sctp_sack_info instead
[   89.937788][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'.
[   89.958140][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'.
[   90.238196][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'.
[   90.241811][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'.
[   90.246208][ T9591] netlink: 'syz.1.1492': attribute type 14 has an invalid length.
[   90.303310][ T9605] sctp: [Deprecated]: syz.0.1496 (pid 9605) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.303310][ T9605] Use struct sctp_sack_info instead
[   90.315740][ T9595] syzkaller1: entered promiscuous mode
[   90.317782][ T9595] syzkaller1: entered allmulticast mode
[   90.393387][ T9611] syzkaller0: entered promiscuous mode
[   90.396231][ T9611] syzkaller0: entered allmulticast mode
[   90.485022][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.489365][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.532848][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   90.539048][ T9630] netlink: 'syz.0.1499': attribute type 10 has an invalid length.
[   90.539179][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   90.556589][ T9630] team0: Port device dummy0 added
[   90.565583][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   90.566086][ T9630] netlink: 'syz.0.1499': attribute type 10 has an invalid length.
[   90.571746][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   90.588699][ T9630] team0: Port device dummy0 removed
[   90.593114][ T9630] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   90.599666][ T9634] sctp: [Deprecated]: syz.1.1503 (pid 9634) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.599666][ T9634] Use struct sctp_sack_info instead
[   90.617991][ T9634] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   90.637237][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.1.1503 Not tainted syzkaller #0 PREEMPT(full) 
[   90.637257][ T9634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.637264][ T9634] Call Trace:
[   90.637271][ T9634]  <TASK>
[   90.637277][ T9634]  dump_stack_lvl+0x189/0x250
[   90.637296][ T9634]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.637309][ T9634]  ? __pfx__printk+0x10/0x10
[   90.637322][ T9634]  ? kernfs_root+0x1c/0x230
[   90.637336][ T9634]  ? kernfs_path_from_node+0x2f/0x290
[   90.637350][ T9634]  ? kernfs_path_from_node+0x250/0x290
[   90.637360][ T9634]  ? kernfs_path_from_node+0x2f/0x290
[   90.637370][ T9634]  sysfs_warn_dup+0x8e/0xa0
[   90.637379][ T9634]  sysfs_do_create_link_sd+0xc0/0x110
[   90.637390][ T9634]  device_add_class_symlinks+0x1cf/0x240
[   90.637403][ T9634]  device_add+0x475/0xb50
[   90.637415][ T9634]  wiphy_register+0x1ba6/0x28d0
[   90.637436][ T9634]  ? __pfx_wiphy_register+0x10/0x10
[   90.637449][ T9634]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   90.637462][ T9634]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   90.637480][ T9634]  ieee80211_register_hw+0x3484/0x4100
[   90.637523][ T9634]  ? ieee80211_register_hw+0x14a1/0x4100
[   90.637540][ T9634]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   90.637553][ T9634]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.637572][ T9634]  ? __hrtimer_setup+0x187/0x210
[   90.637582][ T9634]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   90.637602][ T9634]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   90.637622][ T9634]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   90.637634][ T9634]  ? trace_kmalloc+0x1f/0xd0
[   90.637647][ T9634]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   90.637660][ T9634]  ? kstrndup+0xbf/0x160
[   90.637673][ T9634]  hwsim_new_radio_nl+0xea4/0x1b10
[   90.637687][ T9634]  ? __pfx___nla_validate_parse+0x10/0x10
[   90.637709][ T9634]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.637731][ T9634]  ? __nla_parse+0x40/0x60
[   90.637748][ T9634]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   90.637766][ T9634]  genl_family_rcv_msg_doit+0x215/0x300
[   90.637780][ T9634]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   90.637796][ T9634]  ? bpf_lsm_capable+0x9/0x20
[   90.637811][ T9634]  ? security_capable+0x7e/0x2e0
[   90.637828][ T9634]  genl_rcv_msg+0x60e/0x790
[   90.637842][ T9634]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.637853][ T9634]  ? __kasan_slab_alloc+0x6c/0x80
[   90.637868][ T9634]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   90.637881][ T9634]  ? __netlink_lookup+0xbd/0x810
[   90.637890][ T9634]  ? rcu_is_watching+0x15/0xb0
[   90.637904][ T9634]  netlink_rcv_skb+0x208/0x470
[   90.637920][ T9634]  ? __pfx_genl_rcv_msg+0x10/0x10
[   90.637933][ T9634]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   90.637951][ T9634]  ? lock_release+0x4b/0x3e0
[   90.637968][ T9634]  ? down_read+0x1ad/0x2e0
[   90.637980][ T9634]  genl_rcv+0x28/0x40
[   90.637991][ T9634]  netlink_unicast+0x82f/0x9e0
[   90.638008][ T9634]  ? __pfx_netlink_unicast+0x10/0x10
[   90.638022][ T9634]  ? netlink_sendmsg+0x642/0xb30
[   90.638038][ T9634]  ? skb_put+0x11b/0x210
[   90.638049][ T9634]  netlink_sendmsg+0x805/0xb30
[   90.638068][ T9634]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.638085][ T9634]  ? aa_sock_msg_perm+0xf1/0x1d0
[   90.638096][ T9634]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   90.638109][ T9634]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.638125][ T9634]  __sock_sendmsg+0x21c/0x270
[   90.638141][ T9634]  ____sys_sendmsg+0x505/0x830
[   90.638154][ T9634]  ? __pfx_____sys_sendmsg+0x10/0x10
[   90.638167][ T9634]  ? import_iovec+0x74/0xa0
[   90.638182][ T9634]  ___sys_sendmsg+0x21f/0x2a0
[   90.638194][ T9634]  ? __pfx____sys_sendmsg+0x10/0x10
[   90.638207][ T9634]  ? futex_wake+0x4b2/0x560
[   90.638231][ T9634]  ? __fget_files+0x2a/0x420
[   90.638248][ T9634]  ? __fget_files+0x3a0/0x420
[   90.638267][ T9634]  __x64_sys_sendmsg+0x19b/0x260
[   90.638279][ T9634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   90.638294][ T9634]  ? rcu_is_watching+0x15/0xb0
[   90.638306][ T9634]  ? rcu_is_watching+0x15/0xb0
[   90.638318][ T9634]  do_syscall_64+0xfa/0x3b0
[   90.638335][ T9634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.638347][ T9634]  ? exc_page_fault+0x9f/0xf0
[   90.638362][ T9634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.638373][ T9634] RIP: 0033:0x7fbd2478ebe9
[   90.638385][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.638395][ T9634] RSP: 002b:00007fbd2567c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.638409][ T9634] RAX: ffffffffffffffda RBX: 00007fbd249b5fa0 RCX: 00007fbd2478ebe9
[   90.638418][ T9634] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[   90.638425][ T9634] RBP: 00007fbd24811e19 R08: 0000000000000000 R09: 0000000000000000
[   90.638432][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.638439][ T9634] R13: 00007fbd249b6038 R14: 00007fbd249b5fa0 R15: 00007ffcfdace8a8
[   90.638452][ T9634]  </TASK>
[   90.918576][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv1
[   90.922265][ T9649] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   90.926128][ T9649] team0: Failed to send options change via netlink (err -105)
[   90.929237][ T9649] team0: Port device batadv1 added
[   90.996652][ T9657] syzkaller0: entered promiscuous mode
[   90.998905][ T9657] syzkaller0: entered allmulticast mode
[   91.003064][ T9657] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   91.128538][ T9665] netlink: 'syz.1.1509': attribute type 32 has an invalid length.
[   91.192627][ T9673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.207740][ T9673] syzkaller0: entered promiscuous mode
[   91.209889][ T9673] syzkaller0: entered allmulticast mode
[   91.214551][ T9665] tipc: Resetting bearer <eth:syzkaller0>
[   91.223071][ T9665] netlink: 'syz.1.1509': attribute type 32 has an invalid length.
[   91.262991][ T9665] tipc: Resetting bearer <eth:syzkaller0>
[   91.268887][ T9665] tipc: Disabling bearer <eth:syzkaller0>
[   91.305233][ T9687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.322227][ T9690] tipc: Resetting bearer <eth:syzkaller0>
[   92.109595][ T9686] tipc: Disabling bearer <eth:syzkaller0>
[   92.162836][ T9766] netlink: 'syz.1.1514': attribute type 1 has an invalid length.
[   92.169559][ T9766] netlink: 'syz.1.1514': attribute type 1 has an invalid length.
[   92.174052][ T9766] netlink: 'syz.1.1514': attribute type 1 has an invalid length.
[   92.190237][ T9766] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.208397][ T9769] ip6gre1: entered allmulticast mode
[   92.349532][ T9781] netlink: 'syz.2.1518': attribute type 13 has an invalid length.
[   92.401810][ T9781] vxcan2: entered promiscuous mode
[   92.484534][ T9784] netlink: 'syz.2.1519': attribute type 1 has an invalid length.
[   92.504291][ T9784] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.539546][ T9795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   92.544066][ T9795] syzkaller0: entered promiscuous mode
[   92.546405][ T9795] syzkaller0: entered allmulticast mode
[   92.597173][ T9802] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   92.601831][ T9802] bond0 (unregistering): Released all slaves
[   92.716053][ T9807] veth9: entered promiscuous mode
[   92.723252][ T9810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.727213][ T9810] syzkaller0: entered promiscuous mode
[   92.729608][ T9810] syzkaller0: entered allmulticast mode
[   92.739342][ T9810] tipc: Resetting bearer <eth:syzkaller0>
[   92.743090][ T9809] tipc: Resetting bearer <eth:syzkaller0>
[   92.747630][ T9809] tipc: Disabling bearer <eth:syzkaller0>
[   92.757877][ T9807] erspan0: entered allmulticast mode
[   92.912399][ T9825] geneve2: entered promiscuous mode
[   92.920836][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.924469][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.929292][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.933723][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.986607][ T9833] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.042505][ T9841] vlan0: entered allmulticast mode
[   93.044235][ T9841] erspan0: entered allmulticast mode
[   93.209372][ T9860] batman_adv: batadv0: Interface deactivated: dummy0
[   93.228123][ T9860] batman_adv: batadv0: Interface deactivated: ip6gretap3
[   93.242802][ T5875] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.247159][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[   93.250892][ T5875] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.255364][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[   93.262906][ T5875] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.266544][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[   93.269545][ T5875] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.272432][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[   93.297025][ T9865] gtp0: entered promiscuous mode
[   93.298803][ T9865] gtp0: entered allmulticast mode
[   93.331337][ T9872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.333857][ T9872] syzkaller0: entered promiscuous mode
[   93.336999][ T9872] syzkaller0: entered allmulticast mode
[   93.342877][ T9872] tipc: Resetting bearer <eth:syzkaller0>
[   93.346251][ T9871] tipc: Resetting bearer <eth:syzkaller0>
[   93.350169][ T9871] tipc: Disabling bearer <eth:syzkaller0>
[   93.366195][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[   93.694936][ T9878] blkio.reset_stats is deprecated
[   93.841803][ T9888] bond0 (unregistering): Released all slaves
[   93.864077][ T9890] bridge_slave_0: left allmulticast mode
[   93.868713][ T9890] bridge_slave_0: left promiscuous mode
[   93.871225][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.935997][ T9903] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   93.990177][ T9913] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   93.996525][ T9913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.006195][ T9912] tipc: Disabling bearer <eth:syzkaller0>
[   94.031455][ T9917] team0: Port device batadv1 removed
[   94.056033][ T9917] wg1 speed is unknown, defaulting to 1000
[   94.059132][ T9917] lo speed is unknown, defaulting to 1000
[   94.091524][ T9923] netlink: 'syz.1.1558': attribute type 1 has an invalid length.
[   94.184531][ T9927] tipc: Resetting bearer <eth:syzkaller0>
[   94.259939][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.278162][ T9950] bond0: (slave rose0): Enslaving as an active interface with an up link
[   94.306215][ T9957] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   94.336735][ T9954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.354435][ T9954] syzkaller0: entered promiscuous mode
[   94.358288][ T9954] syzkaller0: entered allmulticast mode
[   94.381340][ T9954] tipc: Resetting bearer <eth:syzkaller0>
[   94.405506][ T9953] tipc: Resetting bearer <eth:syzkaller0>
[   94.434109][ T9953] tipc: Disabling bearer <eth:syzkaller0>
[   94.482508][ T9985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.492040][ T9979] netlink: 'syz.1.1571': attribute type 11 has an invalid length.
[   94.538767][ T9995] ip6tnl3: entered promiscuous mode
[   94.541074][ T9995] ip6tnl3: entered allmulticast mode
[   94.553077][ T9991] syzkaller0: entered promiscuous mode
[   94.562135][ T9991] syzkaller0: entered allmulticast mode
[   94.612008][T10000] macsec1: entered promiscuous mode
[   94.613893][T10000] batadv0: entered promiscuous mode
[   94.617105][T10000] macsec1: entered allmulticast mode
[   94.618955][T10000] batadv0: entered allmulticast mode
[   94.621888][T10000] batadv0: left allmulticast mode
[   94.623756][T10000] batadv0: left promiscuous mode
[   94.668006][T10007] __nla_validate_parse: 30 callbacks suppressed
[   94.668022][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'.
[   94.701324][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'.
[   94.706286][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'.
[   94.709523][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1579'.
[   94.718218][T10019] ip6gre2: entered allmulticast mode
[   94.788303][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'.
[   94.802100][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'.
[   94.808065][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'.
[   94.835470][T10035] batadv_slave_0: entered promiscuous mode
[   94.837702][T10035] batadv_slave_0: entered allmulticast mode
[   94.937334][T10052] batman_adv: batadv0: Removing interface: dummy0
[   94.940597][T10052] batman_adv: batadv0: Removing interface: ip6gretap3
[   95.039164][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'.
[   95.261596][T10079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.264947][T10079] syzkaller0: entered promiscuous mode
[   95.267342][T10079] syzkaller0: entered allmulticast mode
[   95.274455][T10079] tipc: Resetting bearer <eth:syzkaller0>
[   95.280227][T10078] tipc: Resetting bearer <eth:syzkaller0>
[   95.283195][T10078] tipc: Disabling bearer <eth:syzkaller0>
[   95.419256][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[   95.478538][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.481373][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.524019][T10092] syzkaller0: entered promiscuous mode
[   95.526054][T10092] syzkaller0: entered allmulticast mode
[   95.631790][T10094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1601'.
[   95.886514][T10133] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.985313][T10150] validate_nla: 7 callbacks suppressed
[   95.985322][T10150] netlink: 'syz.2.1615': attribute type 4 has an invalid length.
[   96.736698][T10225] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[   96.745746][T10225] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[   96.750952][T10225] netlink: 'syz.1.1622': attribute type 1 has an invalid length.
[   96.765155][T10225] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.776999][T10225] bond3: (slave wlan0): Opening slave failed
[   96.787285][T10231] wg1 speed is unknown, defaulting to 1000
[   96.789431][T10231] lo speed is unknown, defaulting to 1000
[   96.897036][T10243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.899571][T10244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.902797][T10244] syzkaller0: entered promiscuous mode
[   96.904910][T10244] syzkaller0: entered allmulticast mode
[   96.909104][T10243] tipc: Resetting bearer <eth:syzkaller0>
[   96.915296][T10241] tipc: Resetting bearer <eth:syzkaller0>
[   96.919040][T10241] tipc: Disabling bearer <eth:syzkaller0>
[   96.923660][T10231] netlink: 'syz.0.1623': attribute type 13 has an invalid length.
[   96.926857][T10231] netlink: 'syz.0.1623': attribute type 17 has an invalid length.
[   96.931941][T10231] net_ratelimit: 36 callbacks suppressed
[   96.931949][T10231] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   97.003658][T10246] netlink: 'syz.1.1627': attribute type 7 has an invalid length.
[   97.007639][T10246] IPv6: sit2: Disabled Multicast RS
[   97.167134][T10267] IPv6: sit3: Disabled Multicast RS
[   97.169869][T10267] sit3: entered allmulticast mode
[   97.258339][T10268] batadv_slave_0: left promiscuous mode
[   97.260693][T10268] batadv_slave_0: left allmulticast mode
[   97.266128][T10268] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   97.287334][T10268] ip6gre1: left allmulticast mode
[   97.302430][T10268] geneve2: left promiscuous mode
[   97.316013][T10268] ip6gre2: left allmulticast mode
[   97.332760][ T5875] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.337594][ T5875] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.341597][ T5875] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.345694][ T5875] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.348653][ T5875] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.351556][ T5875] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.354528][ T5875] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.358268][ T5875] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.377681][T10271] bridge0: entered promiscuous mode
[   97.379671][T10271] macsec0: entered promiscuous mode
[   97.381373][T10271] macsec0: entered allmulticast mode
[   97.383375][T10271] bridge0: entered allmulticast mode
[   97.385834][T10271] bridge0: port 1(macsec0) entered blocking state
[   97.387952][T10271] bridge0: port 1(macsec0) entered disabled state
[   97.390860][T10271] bridge0: left allmulticast mode
[   97.392542][T10271] bridge0: left promiscuous mode
[   97.452761][T10285] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   97.524211][T10294] batadv_slave_1: entered promiscuous mode
[   97.768871][T10321] syzkaller1: entered promiscuous mode
[   97.771094][T10321] syzkaller1: entered allmulticast mode
[   97.890187][T10330] netlink: 'syz.1.1652': attribute type 10 has an invalid length.
[   97.893696][T10330] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   97.897634][T10330] bond0: (slave wlan1): Opening slave failed
[   97.902455][T10330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.909211][T10330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.140026][T10346] netlink: 'syz.0.1658': attribute type 10 has an invalid length.
[   98.285996][T10358] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[   98.455491][T10380] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   98.481782][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.791549][T10393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.795453][T10393] syzkaller0: entered promiscuous mode
[   98.798180][T10393] syzkaller0: entered allmulticast mode
[   98.804124][T10393] tipc: Resetting bearer <eth:syzkaller0>
[   98.808614][T10392] tipc: Resetting bearer <eth:syzkaller0>
[   98.812561][T10392] tipc: Disabling bearer <eth:syzkaller0>
[   98.881241][T10399] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   98.900000][T10401] sctp: [Deprecated]: syz.1.1677 (pid 10401) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.900000][T10401] Use struct sctp_sack_info instead
[   99.017579][T10407] ip6gre1: entered promiscuous mode
[   99.043364][T10411] wg1 speed is unknown, defaulting to 1000
[   99.048865][T10411] lo speed is unknown, defaulting to 1000
[   99.063342][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   99.067271][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   99.073613][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   99.078026][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   99.095499][T10413] wg1 speed is unknown, defaulting to 1000
[   99.098837][T10413] lo speed is unknown, defaulting to 1000
[   99.110744][T10411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   99.432898][T10456] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   99.481891][T10488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.484497][T10488] syzkaller0: entered promiscuous mode
[   99.487668][T10488] syzkaller0: entered allmulticast mode
[   99.492601][T10488] tipc: Resetting bearer <eth:syzkaller0>
[   99.496016][T10487] tipc: Resetting bearer <eth:syzkaller0>
[   99.500724][T10487] tipc: Disabling bearer <eth:syzkaller0>
[   99.576357][T10495] macvlan3: entered promiscuous mode
[   99.578236][T10495] hsr0: entered promiscuous mode
[   99.580119][T10495] macvlan3: entered allmulticast mode
[   99.581982][T10495] hsr0: entered allmulticast mode
[   99.583655][T10495] hsr_slave_0: entered allmulticast mode
[   99.586944][T10495] hsr_slave_1: entered allmulticast mode
[  100.361921][T10508] dvmrp8: entered allmulticast mode
[  100.366369][T10510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.373152][T10508] wg1 speed is unknown, defaulting to 1000
[  100.381542][T10508] lo speed is unknown, defaulting to 1000
[  100.403275][T10513] __nla_validate_parse: 25 callbacks suppressed
[  100.403285][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1711'.
[  100.409695][T10513] batadv0: entered promiscuous mode
[  100.412260][T10513] batadv0: entered allmulticast mode
[  100.414270][T10513] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  100.428275][T10507] dvmrp8: left allmulticast mode
[  100.460873][T10518] sctp: [Deprecated]: syz.2.1712 (pid 10518) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.460873][T10518] Use struct sctp_sack_info instead
[  101.880794][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1714'.
[  101.884639][T10525] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.972929][T10544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1716'.
[  101.987939][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.990862][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.995845][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.998853][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.004305][T10528] validate_nla: 5 callbacks suppressed
[  102.004312][T10528] netlink: 'syz.2.1715': attribute type 10 has an invalid length.
[  102.011992][T10528] batadv0: left promiscuous mode
[  102.013712][T10528] batadv0: left allmulticast mode
[  102.074507][T10549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.099719][T10551] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  102.104803][T10551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1720'.
[  102.177305][T10556] netlink: 'syz.2.1721': attribute type 13 has an invalid length.
[  102.179955][T10556] netlink: 'syz.2.1721': attribute type 17 has an invalid length.
[  102.196623][T10556] erspan0: left allmulticast mode
[  102.216348][T10556] 8021q: adding VLAN 0 to HW filter on device team0
[  102.220999][T10556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.227585][   T10] lo speed is unknown, defaulting to 1000
[  102.230050][   T10] syz2: Port: 1 Link ACTIVE
[  102.245157][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.413108][T10566] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.480328][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  102.664834][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  102.776418][T10575] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  102.847681][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'.
[  102.873607][T10587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1733'.
[  102.908947][ T5872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.915959][ T5872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.918976][T10589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1734'.
[  102.922314][ T5872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.927185][T10589] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  102.930854][ T5872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.049064][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'.
[  103.052055][T10599] team0: Master is either lo or non-ether device
[  103.106850][T10601] hsr0: left allmulticast mode
[  103.108535][T10601] hsr_slave_0: left allmulticast mode
[  103.110425][T10601] hsr_slave_1: left allmulticast mode
[  103.112312][T10601] hsr0: left promiscuous mode
[  103.125903][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.129260][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.141904][T10603] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1739'.
[  103.223411][ T5875] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  103.574919][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  104.675923][T10621] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  104.678127][T10621] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  104.682718][T10621] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  104.685346][T10621] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  104.688907][T10621] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  104.691275][T10621] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  107.044943][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.284844][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.294908][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.566517][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.568592][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  163.924870][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.006193][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.008712][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  229.844849][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.446927][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.449640][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  265.694095][   T34] INFO: task kworker/1:3:5883 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  265.697049][   T34]       Not tainted syzkaller #0
[  265.699175][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  265.702169][   T34] task:kworker/1:3     state:D stack:24304 pid:5883  tgid:5883  ppid:2      task_flags:0x4208060 flags:0x00004000
[  265.706319][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  265.708706][   T34] Call Trace:
[  265.710105][   T34]  <TASK>
[  265.711217][   T34]  __schedule+0x1798/0x4cc0
[  265.712980][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  265.714907][   T34]  ? __pfx___schedule+0x10/0x10
[  265.716692][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  265.718795][   T34]  ? lock_release+0x4b/0x3e0
[  265.724791][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.726738][   T34]  schedule+0x165/0x360
[  265.728415][   T34]  schedule_preempt_disabled+0x13/0x30
[  265.730587][   T34]  __mutex_lock+0x7e6/0x1350
[  265.732427][   T34]  ? __mutex_lock+0x5bb/0x1350
[  265.739424][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  265.741976][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  265.744051][   T34]  ? lock_acquire+0x5f/0x360
[  265.746001][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  265.748208][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  265.750591][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  265.752898][   T34]  process_scheduled_works+0xae1/0x17b0
[  265.755683][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.758120][   T34]  worker_thread+0x8a0/0xda0
[  265.760054][   T34]  kthread+0x711/0x8a0
[  265.761737][   T34]  ? __pfx_worker_thread+0x10/0x10
[  265.763832][   T34]  ? __pfx_kthread+0x10/0x10
[  265.765839][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.767798][   T34]  ? __pfx_kthread+0x10/0x10
[  265.769682][   T34]  ret_from_fork+0x3fc/0x770
[  265.771602][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  265.773755][   T34]  ? __switch_to_asm+0x39/0x70
[  265.776407][   T34]  ? __switch_to_asm+0x33/0x70
[  265.778425][   T34]  ? __pfx_kthread+0x10/0x10
[  265.780359][   T34]  ret_from_fork_asm+0x1a/0x30
[  265.782300][   T34]  </TASK>
[  265.783557][   T34] INFO: task syz.0.1740:10604 blocked for more than 143 seconds.
[  265.786682][   T34]       Not tainted syzkaller #0
[  265.788604][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  265.791993][   T34] task:syz.0.1740      state:D stack:25224 pid:10604 tgid:10604 ppid:5845   task_flags:0x400040 flags:0x00004004
[  265.797402][   T34] Call Trace:
[  265.798745][   T34]  <TASK>
[  265.799962][   T34]  __schedule+0x1798/0x4cc0
[  265.801815][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.803759][   T34]  ? __pfx_bpf_trace_run2+0x10/0x10
[  265.805996][   T34]  ? __pfx___schedule+0x10/0x10
[  265.808051][   T34]  ? schedule+0x91/0x360
[  265.809830][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.811853][   T34]  ? lock_release+0x4b/0x3e0
[  265.813717][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.816981][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.819508][   T34]  schedule+0x165/0x360
[  265.821272][   T34]  schedule_preempt_disabled+0x13/0x30
[  265.823563][   T34]  __mutex_lock+0x7e6/0x1350
[  265.825607][   T34]  ? __mutex_lock+0x5bb/0x1350
[  265.827576][   T34]  ? rfkill_unregister+0xc8/0x220
[  265.829648][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  265.831779][   T34]  ? __pfx_device_del+0x10/0x10
[  265.833869][   T34]  rfkill_unregister+0xc8/0x220
[  265.836592][   T34]  nfc_unregister_device+0x96/0x2a0
[  265.838815][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  265.841288][   T34]  virtual_ncidev_close+0x56/0x90
[  265.842883][   T34]  __fput+0x44c/0xa70
[  265.844130][   T34]  task_work_run+0x1d4/0x260
[  265.845802][   T34]  ? __pfx_task_work_run+0x10/0x10
[  265.847632][   T34]  ? __pfx___se_sys_close_range+0x10/0x10
[  265.849624][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.851210][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.852782][   T34]  exit_to_user_mode_loop+0xec/0x110
[  265.854523][   T34]  do_syscall_64+0x2bd/0x3b0
[  265.856426][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.858500][   T34]  ? exc_page_fault+0x9f/0xf0
[  265.860080][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.862055][   T34] RIP: 0033:0x7f56ab98ebe9
[  265.863537][   T34] RSP: 002b:00007ffc176032f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  265.866312][   T34] RAX: 0000000000000000 RBX: 00007f56abbb7da0 RCX: 00007f56ab98ebe9
[  265.868906][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  265.871463][   T34] RBP: 00007f56abbb7da0 R08: 0000000000000220 R09: 0000001e176035ef
[  265.873964][   T34] R10: 00007f56abbb7cb0 R11: 0000000000000246 R12: 00000000000195c1
[  265.876995][   T34] R13: 00007f56abbb6090 R14: ffffffffffffffff R15: 00007ffc17603410
[  265.879741][   T34]  </TASK>
[  265.880777][   T34] INFO: task syz.2.1741:10616 blocked for more than 143 seconds.
[  265.883312][   T34]       Not tainted syzkaller #0
[  265.885443][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  265.888320][   T34] task:syz.2.1741      state:D stack:26056 pid:10616 tgid:10610 ppid:5838   task_flags:0x400040 flags:0x00004006
[  265.891918][   T34] Call Trace:
[  265.892999][   T34]  <TASK>
[  265.893927][   T34]  __schedule+0x1798/0x4cc0
[  265.895915][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.897643][   T34]  ? __pfx_bpf_trace_run2+0x10/0x10
[  265.899393][   T34]  ? __pfx___schedule+0x10/0x10
[  265.901044][   T34]  ? schedule+0x91/0x360
[  265.902629][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.904317][   T34]  ? lock_release+0x4b/0x3e0
[  265.908065][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.910077][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.912287][   T34]  schedule+0x165/0x360
[  265.913796][   T34]  schedule_preempt_disabled+0x13/0x30
[  265.916125][   T34]  __mutex_lock+0x7e6/0x1350
[  265.917882][   T34]  ? __mutex_lock+0x5bb/0x1350
[  265.919620][   T34]  ? rfkill_unregister+0xc8/0x220
[  265.921379][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  265.923168][   T34]  ? __pfx_device_del+0x10/0x10
[  265.924856][   T34]  rfkill_unregister+0xc8/0x220
[  265.926510][   T34]  nfc_unregister_device+0x96/0x2a0
[  265.928236][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  265.930049][   T34]  virtual_ncidev_close+0x56/0x90
[  265.931713][   T34]  __fput+0x44c/0xa70
[  265.933138][   T34]  task_work_run+0x1d4/0x260
[  265.935160][   T34]  ? __pfx_task_work_run+0x10/0x10
[  265.936908][   T34]  get_signal+0x11ed/0x1340
[  265.938657][   T34]  ? task_work_add+0x377/0x420
[  265.940256][   T34]  ? __pfx_vfs_read+0x10/0x10
[  265.941833][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  265.943680][   T34]  ? __pfx___fput_deferred+0x10/0x10
[  265.945528][   T34]  ? __fget_files+0x2a/0x420
[  265.947180][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  265.949152][   T34]  ? __pfx_ksys_read+0x10/0x10
[  265.950697][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.952240][   T34]  ? rcu_is_watching+0x15/0xb0
[  265.953771][   T34]  exit_to_user_mode_loop+0x75/0x110
[  265.955983][   T34]  do_syscall_64+0x2bd/0x3b0
[  265.957708][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.959998][   T34]  ? exc_page_fault+0x9f/0xf0
[  265.961661][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.963579][   T34] RIP: 0033:0x7f7e15d8ebe9
[  265.965121][   T34] RSP: 002b:00007f7e16b65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  265.967927][   T34] RAX: fffffffffffffff2 RBX: 00007f7e15fb6180 RCX: 00007f7e15d8ebe9
[  265.970618][   T34] RDX: 0000000000000064 RSI: 0000200000000200 RDI: 0000000000000005
[  265.973426][   T34] RBP: 00007f7e15e11e19 R08: 0000000000000000 R09: 0000000000000000
[  265.976722][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.979464][   T34] R13: 00007f7e15fb6218 R14: 00007f7e15fb6180 R15: 00007ffc2e2edff8
[  265.982056][   T34]  </TASK>
[  265.983094][   T34] INFO: task syz.1.1742:10621 blocked for more than 143 seconds.
[  265.985713][   T34]       Not tainted syzkaller #0
[  265.987569][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  265.990625][   T34] task:syz.1.1742      state:D stack:26024 pid:10621 tgid:10618 ppid:5842   task_flags:0x400140 flags:0x00004004
[  265.995058][   T34] Call Trace:
[  265.996328][   T34]  <TASK>
[  265.997326][   T34]  __schedule+0x1798/0x4cc0
[  265.998732][   T34]  ? stack_trace_save+0x9c/0xe0
[  266.000337][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  266.002375][   T34]  ? __pfx___schedule+0x10/0x10
[  266.004179][   T34]  ? schedule+0x91/0x360
[  266.005652][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.007491][   T34]  ? lock_release+0x4b/0x3e0
[  266.009252][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.011496][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.013897][   T34]  schedule+0x165/0x360
[  266.015811][   T34]  schedule_preempt_disabled+0x13/0x30
[  266.017687][   T34]  __mutex_lock+0x7e6/0x1350
[  266.019353][   T34]  ? __mutex_lock+0x5bb/0x1350
[  266.021046][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  266.022720][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  266.024354][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.026504][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.028570][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  266.030410][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  266.032105][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  266.033982][   T34]  rfkill_set_block+0x1d2/0x440
[  266.035639][   T34]  rfkill_fop_write+0x44b/0x570
[  266.037274][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  266.039229][   T34]  ? security_file_permission+0x40/0x290
[  266.041031][   T34]  ? rw_verify_area+0x255/0x4d0
[  266.042558][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  266.044224][   T34]  vfs_write+0x27e/0xb30
[  266.045666][   T34]  ? __pfx_vfs_write+0x10/0x10
[  266.047210][   T34]  ? lock_release+0x4b/0x3e0
[  266.048686][   T34]  ? __fget_files+0x2a/0x420
[  266.050145][   T34]  ? __fget_files+0x3a0/0x420
[  266.051610][   T34]  ? __fget_files+0x2a/0x420
[  266.053096][   T34]  ksys_write+0x145/0x250
[  266.054457][   T34]  ? __pfx_ksys_write+0x10/0x10
[  266.056126][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.057701][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.059354][   T34]  do_syscall_64+0xfa/0x3b0
[  266.060758][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.062686][   T34]  ? exc_page_fault+0x9f/0xf0
[  266.064167][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.066170][   T34] RIP: 0033:0x7fbd2478ebe9
[  266.067582][   T34] RSP: 002b:00007fbd2563a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  266.070238][   T34] RAX: ffffffffffffffda RBX: 00007fbd249b6180 RCX: 00007fbd2478ebe9
[  266.072716][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 000000000000000a
[  266.075266][   T34] RBP: 00007fbd24811e19 R08: 0000000000000000 R09: 0000000000000000
[  266.077930][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.080871][   T34] R13: 00007fbd249b6218 R14: 00007fbd249b6180 R15: 00007ffcfdace8a8
[  266.083875][   T34]  </TASK>
[  266.085094][   T34] INFO: task syz-executor:10633 blocked for more than 143 seconds.
[  266.088157][   T34]       Not tainted syzkaller #0
[  266.089816][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.092570][   T34] task:syz-executor    state:D stack:28168 pid:10633 tgid:10633 ppid:1      task_flags:0x400040 flags:0x00004000
[  266.096718][   T34] Call Trace:
[  266.097828][   T34]  <TASK>
[  266.098770][   T34]  __schedule+0x1798/0x4cc0
[  266.100247][   T34]  ? stack_trace_save+0x9c/0xe0
[  266.101833][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  266.103514][   T34]  ? __pfx___schedule+0x10/0x10
[  266.105211][   T34]  ? schedule+0x91/0x360
[  266.106548][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.108069][   T34]  ? lock_release+0x4b/0x3e0
[  266.109561][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.111513][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.113562][   T34]  schedule+0x165/0x360
[  266.115206][   T34]  schedule_preempt_disabled+0x13/0x30
[  266.117459][   T34]  __mutex_lock+0x7e6/0x1350
[  266.119431][   T34]  ? __mutex_lock+0x5bb/0x1350
[  266.121514][   T34]  ? rfkill_register+0x37/0x8e0
[  266.123530][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  266.125692][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  266.127516][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  266.129769][   T34]  ? device_initialize+0x24b/0x440
[  266.131899][   T34]  rfkill_register+0x37/0x8e0
[  266.133850][   T34]  hci_register_dev+0x3f5/0x890
[  266.136020][   T34]  vhci_create_device+0x39c/0x6e0
[  266.138119][   T34]  vhci_write+0x3ce/0x4a0
[  266.139829][   T34]  vfs_write+0x5c9/0xb30
[  266.141518][   T34]  ? __pfx_vhci_write+0x10/0x10
[  266.143570][   T34]  ? __pfx_vfs_write+0x10/0x10
[  266.145666][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.147687][   T34]  ksys_write+0x145/0x250
[  266.149520][   T34]  ? __pfx_ksys_write+0x10/0x10
[  266.151207][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.152774][   T34]  do_syscall_64+0xfa/0x3b0
[  266.154451][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.156871][   T34]  ? exc_page_fault+0x9f/0xf0
[  266.158891][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.161392][   T34] RIP: 0033:0x7f90a098d660
[  266.163155][   T34] RSP: 002b:00007ffe5fc39db8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  266.166651][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f90a098d660
[  266.169966][   T34] RDX: 0000000000000002 RSI: 00007ffe5fc39dca RDI: 00000000000000ca
[  266.172730][   T34] RBP: 00007f90a0bb67b8 R08: 0000000000000000 R09: 00007f90a16ed6c0
[  266.175674][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  266.178903][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  266.182217][   T34]  </TASK>
[  266.183515][   T34] INFO: task syz-executor:10636 blocked for more than 143 seconds.
[  266.186902][   T34]       Not tainted syzkaller #0
[  266.189003][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.192653][   T34] task:syz-executor    state:D stack:28168 pid:10636 tgid:10636 ppid:1      task_flags:0x400040 flags:0x00004000
[  266.197769][   T34] Call Trace:
[  266.199197][   T34]  <TASK>
[  266.200176][   T34]  __schedule+0x1798/0x4cc0
[  266.201709][   T34]  ? stack_trace_save+0x9c/0xe0
[  266.203334][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  266.205166][   T34]  ? __pfx___schedule+0x10/0x10
[  266.206763][   T34]  ? schedule+0x91/0x360
[  266.208181][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.209721][   T34]  ? lock_release+0x4b/0x3e0
[  266.211221][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.213117][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.215265][   T34]  schedule+0x165/0x360
[  266.216660][   T34]  schedule_preempt_disabled+0x13/0x30
[  266.218428][   T34]  __mutex_lock+0x7e6/0x1350
[  266.219960][   T34]  ? __mutex_lock+0x5bb/0x1350
[  266.221568][   T34]  ? rfkill_register+0x37/0x8e0
[  266.223182][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  266.224906][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  266.226642][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  266.228416][   T34]  ? device_initialize+0x24b/0x440
[  266.230109][   T34]  rfkill_register+0x37/0x8e0
[  266.231668][   T34]  hci_register_dev+0x3f5/0x890
[  266.233288][   T34]  vhci_create_device+0x39c/0x6e0
[  266.235040][   T34]  vhci_write+0x3ce/0x4a0
[  266.236469][   T34]  vfs_write+0x5c9/0xb30
[  266.237870][   T34]  ? __pfx_vhci_write+0x10/0x10
[  266.239483][   T34]  ? __pfx_vfs_write+0x10/0x10
[  266.241077][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.242661][   T34]  ksys_write+0x145/0x250
[  266.244105][   T34]  ? __pfx_ksys_write+0x10/0x10
[  266.245731][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.247327][   T34]  do_syscall_64+0xfa/0x3b0
[  266.248838][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.250845][   T34]  ? exc_page_fault+0x9f/0xf0
[  266.252406][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.254361][   T34] RIP: 0033:0x7f68ad78d660
[  266.255899][   T34] RSP: 002b:00007fff9550c2e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  266.258582][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f68ad78d660
[  266.261149][   T34] RDX: 0000000000000002 RSI: 00007fff9550c2fa RDI: 00000000000000ca
[  266.263683][   T34] RBP: 00007f68ad9b67b8 R08: 0000000000000000 R09: 00007f68ae4ed6c0
[  266.266352][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  266.268869][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  266.271454][   T34]  </TASK>
[  266.272500][   T34] INFO: task syz-executor:10637 blocked for more than 143 seconds.
[  266.275016][   T34]       Not tainted syzkaller #0
[  266.276608][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.279582][   T34] task:syz-executor    state:D stack:28168 pid:10637 tgid:10637 ppid:1      task_flags:0x400040 flags:0x00004000
[  266.283812][   T34] Call Trace:
[  266.285156][   T34]  <TASK>
[  266.286281][   T34]  __schedule+0x1798/0x4cc0
[  266.287984][   T34]  ? stack_trace_save+0x9c/0xe0
[  266.289768][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  266.291805][   T34]  ? __pfx___schedule+0x10/0x10
[  266.293660][   T34]  ? schedule+0x91/0x360
[  266.295302][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.297138][   T34]  ? lock_release+0x4b/0x3e0
[  266.298688][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.300575][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.302524][   T34]  schedule+0x165/0x360
[  266.303899][   T34]  schedule_preempt_disabled+0x13/0x30
[  266.305784][   T34]  __mutex_lock+0x7e6/0x1350
[  266.307286][   T34]  ? __mutex_lock+0x5bb/0x1350
[  266.308884][   T34]  ? rfkill_register+0x37/0x8e0
[  266.310451][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  266.312105][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  266.313801][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  266.315567][   T34]  ? device_initialize+0x24b/0x440
[  266.317229][   T34]  rfkill_register+0x37/0x8e0
[  266.318797][   T34]  hci_register_dev+0x3f5/0x890
[  266.320345][   T34]  vhci_create_device+0x39c/0x6e0
[  266.321975][   T34]  vhci_write+0x3ce/0x4a0
[  266.323356][   T34]  vfs_write+0x5c9/0xb30
[  266.324786][   T34]  ? __pfx_vhci_write+0x10/0x10
[  266.326406][   T34]  ? __pfx_vfs_write+0x10/0x10
[  266.328080][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.329649][   T34]  ksys_write+0x145/0x250
[  266.331039][   T34]  ? __pfx_ksys_write+0x10/0x10
[  266.332611][   T34]  ? rcu_is_watching+0x15/0xb0
[  266.334160][   T34]  do_syscall_64+0xfa/0x3b0
[  266.335704][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.337813][   T34]  ? exc_page_fault+0x9f/0xf0
[  266.339376][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.341326][   T34] RIP: 0033:0x7f778b58d660
[  266.342816][   T34] RSP: 002b:00007fff5f9fc9c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  266.345614][   T34] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f778b58d660
[  266.348314][   T34] RDX: 0000000000000002 RSI: 00007fff5f9fc9da RDI: 00000000000000ca
[  266.350880][   T34] RBP: 00007f778b7b67b8 R08: 0000000000000000 R09: 00007f778c2ed6c0
[  266.353475][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  266.356110][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  266.358767][   T34]  </TASK>
[  266.359820][   T34] INFO: lockdep is turned off.
[  266.361408][   T34] NMI backtrace for cpu 1
[  266.361416][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  266.361424][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.361428][   T34] Call Trace:
[  266.361432][   T34]  <TASK>
[  266.361435][   T34]  dump_stack_lvl+0x189/0x250
[  266.361446][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.361454][   T34]  ? __pfx__printk+0x10/0x10
[  266.361465][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  266.361474][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  266.361482][   T34]  ? __pfx__printk+0x10/0x10
[  266.361492][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  266.361503][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  266.361515][   T34]  watchdog+0xf93/0xfe0
[  266.361525][   T34]  ? watchdog+0x1de/0xfe0
[  266.361535][   T34]  kthread+0x711/0x8a0
[  266.361544][   T34]  ? __pfx_watchdog+0x10/0x10
[  266.361553][   T34]  ? __pfx_kthread+0x10/0x10
[  266.361561][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.361569][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.361578][   T34]  ? __pfx_kthread+0x10/0x10
[  266.361586][   T34]  ret_from_fork+0x3fc/0x770
[  266.361594][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  266.361602][   T34]  ? __switch_to_asm+0x39/0x70
[  266.361611][   T34]  ? __switch_to_asm+0x33/0x70
[  266.361619][   T34]  ? __pfx_kthread+0x10/0x10
[  266.361627][   T34]  ret_from_fork_asm+0x1a/0x30
[  266.361638][   T34]  </TASK>
[  266.361640][   T34] Sending NMI from CPU 1 to CPUs 0:
[  266.409775][    C0] NMI backtrace for cpu 0
[  266.409786][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  266.409795][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.409799][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  266.409813][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  266.409819][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  266.409826][    C0] RAX: 987b0a431abf6200 RBX: ffffffff819683b8 RCX: 987b0a431abf6200
[  266.409831][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  266.409835][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  266.409840][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  266.409845][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  266.409849][    C0] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  266.409854][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  266.409859][    C0] CR2: 00007fff15b97088 CR3: 000000000df36000 CR4: 00000000000006f0
[  266.409884][    C0] Call Trace:
[  266.409889][    C0]  <TASK>
[  266.409892][    C0]  default_idle+0x13/0x20
[  266.409898][    C0]  default_idle_call+0x74/0xb0
[  266.409905][    C0]  do_idle+0x1e8/0x510
[  266.409919][    C0]  ? __pfx_do_idle+0x10/0x10
[  266.409926][    C0]  cpu_startup_entry+0x44/0x60
[  266.409932][    C0]  rest_init+0x2de/0x300
[  266.409968][    C0]  start_kernel+0x3a9/0x410
[  266.409977][    C0]  x86_64_start_reservations+0x24/0x30
[  266.409986][    C0]  x86_64_start_kernel+0x143/0x1c0
[  266.409995][    C0]  common_startup_64+0x13e/0x147
[  266.410005][    C0]  </TASK>
[  266.410749][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  266.472138][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  266.475699][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.479635][   T34] Call Trace:
[  266.481032][   T34]  <TASK>
[  266.482230][   T34]  dump_stack_lvl+0x99/0x250
[  266.484109][   T34]  ? __asan_memcpy+0x40/0x70
[  266.485997][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.488116][   T34]  ? __pfx__printk+0x10/0x10
[  266.490007][   T34]  vpanic+0x281/0x750
[  266.491644][   T34]  ? __pfx_vpanic+0x10/0x10
[  266.493512][   T34]  ? tick_nohz_tick_stopped+0x86/0xb0
[  266.495670][   T34]  ? __irq_work_queue_local+0x1de/0x550
[  266.497883][   T34]  panic+0xb9/0xc0
[  266.499415][   T34]  ? __pfx_panic+0x10/0x10
[  266.501235][   T34]  ? irq_work_queue+0xbc/0x140
[  266.502853][   T34]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  266.504896][   T34]  watchdog+0xfd2/0xfe0
[  266.506293][   T34]  ? watchdog+0x1de/0xfe0
[  266.507831][   T34]  kthread+0x711/0x8a0
[  266.509216][   T34]  ? __pfx_watchdog+0x10/0x10
[  266.510952][   T34]  ? __pfx_kthread+0x10/0x10
[  266.512603][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.514530][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.516383][   T34]  ? __pfx_kthread+0x10/0x10
[  266.518029][   T34]  ret_from_fork+0x3fc/0x770
[  266.519485][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  266.521093][   T34]  ? __switch_to_asm+0x39/0x70
[  266.522626][   T34]  ? __switch_to_asm+0x33/0x70
[  266.524160][   T34]  ? __pfx_kthread+0x10/0x10
[  266.525639][   T34]  ret_from_fork_asm+0x1a/0x30
[  266.527443][   T34]  </TASK>
[  266.529232][   T34] Kernel Offset: disabled
[  266.530600][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:57:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021998237 R9 =1ffff11004333046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8f5 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff15b97088 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000251 0000000038332818
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000251 0000000038336c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44ceb RBX=1ffff11009608341 RCX=ffff8880219ab980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002f3f700 RSP=ffffc90002f3f580
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44cd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33878e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f3386d876c3 00007f3386d876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff89d3f041 ffffffff00000007 XMM07=ffffffff00000000 ffffffff89d3d73f
XMM08=ffffffff8a54fb5a ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
