last executing test programs:

36.663956706s ago: executing program 1 (id=1983):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x74}}, 0x0)

36.573552693s ago: executing program 1 (id=1986):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x4, 0xa8, 0xe, @empty, @local, 0xb030, 0x8, 0x80000001, 0x2}})
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x10, 0x117, 0x4, 0x200}], 0x10, 0x20000000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES8=r4], 0x1c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xcf, &(0x7f0000000340), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x4, 0x94, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r7)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r8, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xd0, 0x4)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040), 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PTP_PIN_GETFUNC(r10, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x5, 0x2, 0x4})

36.506025142s ago: executing program 0 (id=1987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80803, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r3, 0x2, 0x5, 0x6, 0x10, 0x9}, &(0x7f0000000280)=0x14)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}}, 0x0)

36.43879188s ago: executing program 1 (id=1989):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r2, &(0x7f0000000740)={@val={0x0, 0x18}, @val={0x3, 0x4, 0x3, 0x4, 0xc5, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xde, 0x65, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x5d, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adae295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b453147fe8f8e819f6d5ea"}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b11b45b57a3131"}}}}, 0xec)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000000000000170100000200"], 0x18, 0x4012}], 0x1, 0x4010)
r4 = socket(0x10, 0x80003, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000f81"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@gettaction={0x1c4, 0x32, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60080000}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x293}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x1c4}}, 0x8000)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
r10 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={<r11=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r11, 0x6}, 0x8)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f00000010c0)="9699dd11cbeaab22d2dcff0d52af9c50", 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000080)="8baeea5581fe40c9432d8de48773cc90", 0x10)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

36.366185509s ago: executing program 0 (id=1991):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x4000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x49b, 0x0, 0x1eee7cb5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4010804)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

36.363589474s ago: executing program 1 (id=1993):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x4, &(0x7f0000000100)="8d839cb3", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x10, 0x3, 0x10000a, 0x3, 0x3ff, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}]}}}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x31)
syz_emit_ethernet(0x11dc0, &(0x7f0000000300)=ANY=[], 0x0)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)

36.25262996s ago: executing program 0 (id=1995):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x300, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x6, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88000000020201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280040001"], 0x88}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x2c, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000006a80)={@local})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16)
unshare(0x22020400)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x8, 0x6ce1000, {{0x5, 0x4, 0x3, 0x26, 0x14, 0x8, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000b0000000000000200000000fd0200000000010082a5169c5a1cc813f081afb600646a56ff020000000000000000000000000001"], 0x44}}, 0xd0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)

36.146131789s ago: executing program 0 (id=1996):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x1}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x7}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x1, 0x1, {0xa, 0x4e23, 0x2, @private0, 0x9}}}, 0x32)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="ad36beef", @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00a50a000008000b00000000000600010005000000"], 0x34}}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x9) (async)
listen(r8, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x1, 0x0, 0x192, 0x4}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r11, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x9a9, 0x9, 0xff, 0x4, 0x1fffffd}, 0x14) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x9a9, 0x9, 0xff, 0x4, 0x1fffffd}, 0x14)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)

35.135158498s ago: executing program 0 (id=1998):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030726bd7000000000001f0000000a0001007770616e33000000220408a7de4be4e168f3082d8c2e7744da87f9c71617e2704adae4c3c9"], 0x20}, 0x1, 0x0, 0x0, 0x48480}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003340)=@newtfilter={0x30, 0x2c, 0xe23, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff0}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
ioctl$FICLONE(r4, 0x40049409, r2)
sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0xff, 0x0, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x24008804}, 0x30048009)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0)

35.075352451s ago: executing program 0 (id=2000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x11c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x4, 0x2}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
write$nci(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="6105063e277be6ce56055f0802040109080801e40240fd0650f7eb736075243dde82a68ee874aeb56ee7526d1c9bf576834e0c0d0b1d71440823b6e57d4a5ab73efcc1fb9f4c5080c7eff2ccb9551176560561c8422d651eb3e0a465a9543b2dfee3"], 0x61)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

35.026172486s ago: executing program 1 (id=2001):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000d80900"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xfffffffffffffd61)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f0000000040))
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r3, 0x4008af75, &(0x7f00000000c0)={0x3, 0x7})
r5 = socket(0x840000000002, 0x3, 0x100)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0))
connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004000}, 0x4048891)

34.825856725s ago: executing program 1 (id=2002):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209}, 0x80)
socket$nl_rdma(0x10, 0x3, 0x14)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket$inet6(0xa, 0x805, 0x0) (async)
r4 = socket$inet6(0xa, 0x805, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
read$alg(r9, &(0x7f0000000100)=""/12, 0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', <r10=>0x0, 0x10, 0x7, 0x9b, 0x1, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x64, 0x0, 0x58, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0xc5, 0x0}, {[@lsrr={0x83, 0x7, 0x89, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x4c, 0xb7, 0x3, 0x0, [{@private=0xa010102, 0x30}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@local, 0xfffffffa}, {@local, 0x9}, {@rand_addr=0x7fff, 0x1372ab58}, {@local, 0x2}, {@rand_addr=0x64010101, 0x6}, {@empty, 0x4}]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0xa, '\x00', r10, 0x25, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0xa, '\x00', r10, 0x25, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000001080)={0xfffffffe, 0x3, 0x2, 0x0, 0x1}, 0x8)

20.00063337s ago: executing program 32 (id=2000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x11c, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x4, 0x2}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
close(r5)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
write$nci(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="6105063e277be6ce56055f0802040109080801e40240fd0650f7eb736075243dde82a68ee874aeb56ee7526d1c9bf576834e0c0d0b1d71440823b6e57d4a5ab73efcc1fb9f4c5080c7eff2ccb9551176560561c8422d651eb3e0a465a9543b2dfee3"], 0x61)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

19.795487034s ago: executing program 33 (id=2002):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209}, 0x80)
socket$nl_rdma(0x10, 0x3, 0x14)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) (async)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket$inet6(0xa, 0x805, 0x0) (async)
r4 = socket$inet6(0xa, 0x805, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
read$alg(r9, &(0x7f0000000100)=""/12, 0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', <r10=>0x0, 0x10, 0x7, 0x9b, 0x1, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x64, 0x0, 0x58, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0xc5, 0x0}, {[@lsrr={0x83, 0x7, 0x89, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x4c, 0xb7, 0x3, 0x0, [{@private=0xa010102, 0x30}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@local, 0xfffffffa}, {@local, 0x9}, {@rand_addr=0x7fff, 0x1372ab58}, {@local, 0x2}, {@rand_addr=0x64010101, 0x6}, {@empty, 0x4}]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0xa, '\x00', r10, 0x25, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0xa, '\x00', r10, 0x25, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000001080)={0xfffffffe, 0x3, 0x2, 0x0, 0x1}, 0x8)

19.061881406s ago: executing program 2 (id=2154):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000580)=@udp}, 0x20)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x9, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), <r5=>0x0}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', <r6=>0x0, 0x29, 0x7, 0x6, 0x0, 0x0, @loopback, @mcast1, 0x20, 0x0, 0x1, 0xda02}})
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='*\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3a949112e692823be823fe3eb9e2b2a4083ca9514ef325fa757241c467d8c2684e887442d4706386c0955769395a39ed0eae2fde0a14db45ccb11e1430efc464fb158730cf5acfe5729862b16af1a3d263f5c574bd6b904ee24d4166f3b086fc5483e975b961", @ANYRES64=r5], 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x28}, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000400), 0x3)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r10=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@empty}, 0x14)
socketpair$unix(0x1, 0xa99745c3384d6919, 0x0, &(0x7f0000000540))
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0xc}, {0x3}}}, 0x24}}, 0x0)
sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)='R', 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x4}}], 0x1, 0x4004804)

18.855218503s ago: executing program 2 (id=2155):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)

18.795988173s ago: executing program 2 (id=2156):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x80}}, 0x200449c1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000091000000000000b7020000020000008500000084000000b7000000000000009500000000000008"], &(0x7f0000000180)='GPL\x00', 0x80000001, 0x63, &(0x7f0000000240)=""/99, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x7, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000340)=[{0x4, 0x3, 0x4, 0x8}, {0x5, 0x2, 0xe, 0x3}, {0x2, 0x5, 0xd, 0xb}], 0x10, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000080), &(0x7f0000000440)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x16, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="0c00ea800880020003000000"], 0x24}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}}, 0x0)
writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r0, 0x0, r6, 0x0, 0xf3a, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000500)='nilfs2_mdt_submit_block\x00', r3, 0x0, 0x3}, 0x18)
tee(0xffffffffffffffff, r0, 0x1, 0xe)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_DEVICE_ID(r7, 0x8001af85, &(0x7f0000000040))

15.756062811s ago: executing program 2 (id=2157):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000080)=0xffffffff, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x238, 0x20a, 0x278, 0x238, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x12, 0x0, 0x30}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x4, 0x3, 0x0, 0xc}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'pim6reg0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r4, 0x107, 0x6, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14, 0x6, {0x7ff, 0x6, 0x0, 0x2}}]}}}]}, 0x6c}}, 0x0)

15.755257905s ago: executing program 2 (id=2158):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x3e, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"c6b76c37f0a04f6f15161a406afc8236661e08399d39b09a6d579dabc4ab62035088ff30abae1c10a8c3"}}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x1a, 0x45, "ba947f716b450764cae955285a87a5755ab906629f38"}, @NL80211_ATTR_TESTDATA={0x14, 0x45, "1f333656a360c3077c73c4dbba108db3"}, @NL80211_ATTR_TESTDATA={0xcf, 0x45, "5cc2f11c232ff247b25a2b7120937d199ac4ba101832ae114a0a0e3f7f9174d91c1c64f06e017db90eb9d8190e7fb355b3ef560342525a59077247996a61b85474d19ca490472ac1c404a3d48d9e58794f80605f948e970440ade8e38a620de6949d4cf3f46d2f6de5e844de97acdae80c454ff9c9c51542f49537286b4acf56eff40c15d9833a473756ed089fe4ca90bd1d65815cad0b5caa4ebbc1e6ab9eb65dc692b7b82a4f4810f467937810c5ef09fea2fe1f11f8bda1286d3f92c8c749f708c95efd0bf254babb17"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x11}, 0x14044000)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0100000000000000000000000000010800"], 0x38}}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f0000006a80)={@local})

15.693532183s ago: executing program 2 (id=2159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x5, 0xfd, 0x1, 0xff, 0x6, 0x1900}}, 0x1c}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="18000000140081044e81f782db44b9040a1d080211000000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket$inet6(0xa, 0x805, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0xffffffff, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000001080)={0xfffffffe, 0x3, 0x2, 0x0, 0x1}, 0x8)

0s ago: executing program 34 (id=2159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x5, 0xfd, 0x1, 0xff, 0x6, 0x1900}}, 0x1c}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="18000000140081044e81f782db44b9040a1d080211000000", 0x18}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket$inet6(0xa, 0x805, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0xffffffff, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000001080)={0xfffffffe, 0x3, 0x2, 0x0, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10664' (ED25519) to the list of known hosts.
syzkaller login: [   58.054157][ T5811] cgroup: Unknown subsys name 'net'
[   58.218001][ T5811] cgroup: Unknown subsys name 'cpuset'
[   58.225316][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.773924][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.867896][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.871815][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.874897][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.878502][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.881062][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.897189][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.900262][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.902909][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.910399][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.914163][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.942837][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.947542][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.951349][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.955456][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.962555][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.136095][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   65.242270][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   65.275803][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   65.312072][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.314842][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.317648][ T5831] bridge_slave_0: entered allmulticast mode
[   65.321160][ T5831] bridge_slave_0: entered promiscuous mode
[   65.349391][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.352281][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.355071][ T5831] bridge_slave_1: entered allmulticast mode
[   65.358125][ T5831] bridge_slave_1: entered promiscuous mode
[   65.448833][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.458178][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.460905][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.463314][ T5835] bridge_slave_0: entered allmulticast mode
[   65.466247][ T5835] bridge_slave_0: entered promiscuous mode
[   65.470333][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.480419][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.482708][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.485669][ T5835] bridge_slave_1: entered allmulticast mode
[   65.488867][ T5835] bridge_slave_1: entered promiscuous mode
[   65.499868][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.502121][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.504568][ T5839] bridge_slave_0: entered allmulticast mode
[   65.507252][ T5839] bridge_slave_0: entered promiscuous mode
[   65.525550][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.527788][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.530079][ T5839] bridge_slave_1: entered allmulticast mode
[   65.532650][ T5839] bridge_slave_1: entered promiscuous mode
[   65.543341][ T5831] team0: Port device team_slave_0 added
[   65.553821][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.563422][ T5831] team0: Port device team_slave_1 added
[   65.566841][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.577809][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.598767][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.608915][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.611800][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.622747][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.639938][ T5835] team0: Port device team_slave_0 added
[   65.644018][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.646854][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.657162][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.673377][ T5835] team0: Port device team_slave_1 added
[   65.683605][ T5839] team0: Port device team_slave_0 added
[   65.694765][ T5839] team0: Port device team_slave_1 added
[   65.704287][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.706475][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.714576][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.740223][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.742586][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.751847][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.783134][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.785449][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.797406][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.806250][ T5831] hsr_slave_0: entered promiscuous mode
[   65.808632][ T5831] hsr_slave_1: entered promiscuous mode
[   65.812917][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.815458][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.825292][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.891563][ T5835] hsr_slave_0: entered promiscuous mode
[   65.894949][ T5835] hsr_slave_1: entered promiscuous mode
[   65.897926][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   65.900411][ T5835] Cannot create hsr debugfs directory
[   65.917820][ T5839] hsr_slave_0: entered promiscuous mode
[   65.920688][ T5839] hsr_slave_1: entered promiscuous mode
[   65.924081][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   65.926557][ T5839] Cannot create hsr debugfs directory
[   66.173396][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.183129][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.190140][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.207719][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.266838][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.276717][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.283457][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.292565][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.371127][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.383356][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.390368][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.407512][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.456154][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.484964][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   66.498097][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.500431][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.510008][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.518975][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.521252][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.547557][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.566697][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.569239][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.586089][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.588998][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.622357][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.670023][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   66.701475][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.704480][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.720234][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.722657][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.769789][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.863273][ T5831] veth0_vlan: entered promiscuous mode
[   66.877979][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.882127][ T5831] veth1_vlan: entered promiscuous mode
[   66.935553][ T5831] veth0_macvtap: entered promiscuous mode
[   66.944274][ T5219] Bluetooth: hci0: command tx timeout
[   66.947147][ T5831] veth1_macvtap: entered promiscuous mode
[   66.960192][ T5219] Bluetooth: hci1: command tx timeout
[   66.977286][ T5835] veth0_vlan: entered promiscuous mode
[   66.980643][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.991125][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.998260][ T5835] veth1_vlan: entered promiscuous mode
[   67.009362][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.027563][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.033906][ T5219] Bluetooth: hci2: command tx timeout
[   67.037521][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.041183][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.047258][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.093492][ T5835] veth0_macvtap: entered promiscuous mode
[   67.120016][ T5835] veth1_macvtap: entered promiscuous mode
[   67.123533][ T5839] veth0_vlan: entered promiscuous mode
[   67.152531][ T5839] veth1_vlan: entered promiscuous mode
[   67.165818][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.166108][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.169130][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.199686][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.217536][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.229214][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.233106][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.240572][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.245864][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.255644][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.266114][ T5839] veth0_macvtap: entered promiscuous mode
[   67.270690][ T5839] veth1_macvtap: entered promiscuous mode
[   67.324680][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.338671][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.366315][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.373907][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.376489][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.380197][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.414451][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.435800][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.446109][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.446304][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.448644][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.524658][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.527533][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.547363][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.550006][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.616200][ T5911] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   67.628067][ T5911] veth0_vlan: left promiscuous mode
[   67.631459][ T5911] veth0_vlan: entered promiscuous mode
[   67.638726][ T5911] team0: Device veth0_vlan failed to register rx_handler
[   67.693189][ T5911] syz.0.1 (5911) used greatest stack depth: 19552 bytes left
[   67.947303][ T5931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.968428][ T5934] netlink: 'syz.1.12': attribute type 5 has an invalid length.
[   68.196164][ T5943] syzkaller0: entered promiscuous mode
[   68.198009][ T5943] syzkaller0: entered allmulticast mode
[   69.024124][ T5837] Bluetooth: hci0: command tx timeout
[   69.026211][ T5219] Bluetooth: hci1: command tx timeout
[   69.104305][ T5219] Bluetooth: hci2: command tx timeout
[   69.422269][ T5991] syzkaller0: entered promiscuous mode
[   69.426922][ T5991] syzkaller0: entered allmulticast mode
[   69.689248][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.861227][ T6007] infiniband syz2: set down
[   70.863513][ T6007] infiniband syz2: added ipvlan0
[   70.872576][ T6017] sctp: [Deprecated]: syz.0.45 (pid 6017) Use of int in max_burst socket option.
[   70.872576][ T6017] Use struct sctp_assoc_value instead
[   70.941026][ T6007] RDS/IB: syz2: added
[   70.953603][ T6007] smc: adding ib device syz2 with port count 1
[   70.962412][ T6007] smc:    ib device syz2 port 1 has no pnetid
[   71.044251][ T6028] syzkaller1: entered promiscuous mode
[   71.058566][ T6028] syzkaller1: entered allmulticast mode
[   71.104626][ T5837] Bluetooth: hci0: command tx timeout
[   71.106947][ T5219] Bluetooth: hci1: command tx timeout
[   71.187878][ T5219] Bluetooth: hci2: command tx timeout
[   71.940677][ T6047] bridge0: entered promiscuous mode
[   71.954217][ T6047] bridge0: port 3(macsec1) entered blocking state
[   71.956337][ T6047] bridge0: port 3(macsec1) entered disabled state
[   71.959306][ T6047] macsec1: entered allmulticast mode
[   71.961231][ T6047] bridge0: entered allmulticast mode
[   71.966513][ T6047] macsec1: left allmulticast mode
[   71.968285][ T6047] bridge0: left allmulticast mode
[   71.974906][ T6047] bridge0: left promiscuous mode
[   72.350638][ T6071] IPVS: Scheduler module ip_vs_sip not found
[   72.433399][ T6083] netlink: 87 bytes leftover after parsing attributes in process `syz.0.70'.
[   73.119767][ T6142] netlink: 'syz.2.99': attribute type 2 has an invalid length.
[   73.139630][ T6142] : entered promiscuous mode
[   73.185698][ T5219] Bluetooth: hci1: command tx timeout
[   73.186743][ T5837] Bluetooth: hci0: command tx timeout
[   73.266411][ T5219] Bluetooth: hci2: command tx timeout
[   73.539317][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   73.639123][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.693924][ T6179] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   73.809005][ T6189] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   73.817674][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.820654][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.049944][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'.
[   74.394423][ T6225] Zero length message leads to an empty skb
[   74.401510][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.138'.
[   74.418490][ T6225] syz.0.138 (6225) used greatest stack depth: 19072 bytes left
[   74.531360][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'.
[   74.831678][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:3121287048/3121287050
[   74.876697][ T6243] tipc: Failed to remove unknown binding: 66,1,1/0:3121287048/3121287050
[   74.880465][ T6243] tipc: Failed to remove unknown binding: 66,1,1/0:3121287048/3121287050
[   74.932018][ T6253] netlink: 'syz.2.152': attribute type 6 has an invalid length.
[   74.935509][ T6253] netlink: 176 bytes leftover after parsing attributes in process `syz.2.152'.
[   74.975393][ T6253] wireguard0: entered promiscuous mode
[   74.984125][ T6253] wireguard0: entered allmulticast mode
[   74.992013][ T6253] team0: Device wireguard0 is of different type
[   75.879400][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'.
[   75.988246][ T6285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.242734][ T6298] Bluetooth: MGMT ver 1.23
[   76.396327][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.399118][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.433218][ T6317] veth0: entered promiscuous mode
[   76.445323][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   76.648733][ T6334] IPVS: persistence engine module ip_vs_pe_ not found
[   76.724867][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   76.727597][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   77.846361][ T6362] netlink: 'syz.1.196': attribute type 2 has an invalid length.
[   78.073797][ T6370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.200'.
[   78.451919][ T6388] atomic_op ffff8881b2b55998 conn xmit_atomic 0000000000000000
[   78.562786][ T6400] __nla_validate_parse: 3 callbacks suppressed
[   78.562800][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[   78.621604][ T6406] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1
[   78.789690][ T6420] geneve2: entered promiscuous mode
[   78.793497][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36247 - 0
[   78.804908][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36247 - 0
[   78.805541][ T6422] syz.1.221 uses obsolete (PF_INET,SOCK_PACKET)
[   78.808102][ T6420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.220'.
[   78.811889][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36247 - 0
[   78.817490][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36247 - 0
[   79.075939][ T6435] team_slave_0: entered promiscuous mode
[   79.077830][ T6435] team_slave_1: entered promiscuous mode
[   79.087414][ T6435] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.694771][ T6475] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.242'.
[   79.740529][ T6479] syzkaller1: entered promiscuous mode
[   79.742302][ T6479] syzkaller1: entered allmulticast mode
[   79.790809][ T6485] netlink: 'syz.0.247': attribute type 1 has an invalid length.
[   79.837681][ T6485] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.842759][ T6485] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   79.924467][ T6485] bond1: (slave gretap1): making interface the new active one
[   79.928836][ T6485] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   79.937918][ T6485] macvlan2: entered promiscuous mode
[   79.940961][ T6485] macvlan2: entered allmulticast mode
[   79.944393][ T6485] bond1: entered promiscuous mode
[   79.946186][ T6485] gretap1: entered promiscuous mode
[   79.949114][ T6485] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.954482][ T6485] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   79.958978][ T6485] bond1: left promiscuous mode
[   79.960602][ T6485] gretap1: left promiscuous mode
[   80.125872][ T6510] tipc: Started in network mode
[   80.127636][ T6510] tipc: Node identity eeab7a1a022b, cluster identity 4711
[   80.130604][ T6510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.133190][ T6510] syzkaller0: entered promiscuous mode
[   80.135447][ T6510] syzkaller0: entered allmulticast mode
[   80.157831][ T6510] tipc: Resetting bearer <eth:syzkaller0>
[   80.162452][ T6509] tipc: Resetting bearer <eth:syzkaller0>
[   80.170302][ T6509] tipc: Disabling bearer <eth:syzkaller0>
[   80.342291][ T6523] openvswitch: netlink: Missing valid actions attribute.
[   80.351217][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.469328][ T6531] batadv_slave_1: entered promiscuous mode
[   80.472853][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   80.484256][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.515659][ T6531] batadv_slave_1 (unregistering): left promiscuous mode
[   80.518502][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.851706][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.0.273'.
[   81.035478][ T6562] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   81.382190][ T6577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.385633][ T6577] syzkaller0: entered promiscuous mode
[   81.387452][ T6577] syzkaller0: entered allmulticast mode
[   81.445947][ T6577] tipc: Resetting bearer <eth:syzkaller0>
[   81.528462][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[   81.542283][ T6576] tipc: Disabling bearer <eth:syzkaller0>
[   81.800470][ T6600] tipc: Started in network mode
[   81.802212][ T6600] tipc: Node identity f2cfb4801769, cluster identity 4711
[   81.806469][ T6600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.813585][ T6600] syzkaller0: entered promiscuous mode
[   81.816694][ T6600] syzkaller0: entered allmulticast mode
[   81.846156][ T6600] tipc: Resetting bearer <eth:syzkaller0>
[   81.848942][ T6599] tipc: Resetting bearer <eth:syzkaller0>
[   81.864881][ T6599] tipc: Disabling bearer <eth:syzkaller0>
[   82.021924][ T6609] netlink: 'syz.2.297': attribute type 1 has an invalid length.
[   82.337013][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816a13d000: rx timeout, send abort
[   82.837558][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811e04e800: rx timeout, send abort
[   82.841215][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816a13d000: abort rx timeout. Force session deactivation
[   83.333279][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816a13cc00: rx timeout, send abort
[   83.341170][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811e04e800: abort rx timeout. Force session deactivation
[   83.760197][ T6651] raw_sendmsg: syz.0.316 forgot to set AF_INET. Fix it!
[   83.837115][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816a13cc00: abort rx timeout. Force session deactivation
[   84.022435][ T6670] netlink: 'syz.2.326': attribute type 15 has an invalid length.
[   84.208814][ T6686] netlink: 'syz.0.333': attribute type 3 has an invalid length.
[   84.211254][ T6686] netlink: 'syz.0.333': attribute type 1 has an invalid length.
[   84.215676][ T6686] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.284499][ T6690] netlink: 'syz.0.335': attribute type 21 has an invalid length.
[   84.287872][ T6690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.335'.
[   84.291670][ T6690] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[   84.471762][ T6704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.341'.
[   84.668031][ T6716] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   85.034915][ T6749] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.661777][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   85.804696][ T6822] warning: `syz.2.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.157380][ T6857] gretap1: entered allmulticast mode
[   86.230116][ T6861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.375'.
[   86.437963][ T6881] netlink: 104 bytes leftover after parsing attributes in process `syz.2.383'.
[   86.633379][ T6893] netlink: 'syz.1.389': attribute type 13 has an invalid length.
[   86.637315][ T6897] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   86.774752][ T6904] sctp: [Deprecated]: syz.2.394 (pid 6904) Use of int in max_burst socket option deprecated.
[   86.774752][ T6904] Use struct sctp_assoc_value instead
[   86.828459][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.830999][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.843756][ T6893] team_slave_0: left promiscuous mode
[   86.850563][ T6893] team_slave_1: left promiscuous mode
[   86.905850][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.912392][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.087256][ T5864] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.090776][ T5864] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.093424][ T5864] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.122814][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.125168][ T6918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.127930][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.130317][ T6918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.161421][ T6918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.176718][ T5864] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.281551][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'.
[   87.362844][ T6948] netlink: 11 bytes leftover after parsing attributes in process `syz.2.408'.
[   87.425145][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.411'.
[   87.862979][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.416'.
[   88.866158][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.872755][    C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[   89.300189][ T7047] Driver unsupported XDP return value 0 on prog  (id 77) dev N/A, expect packet loss!
[   89.371155][ T7054] syzkaller0: entered promiscuous mode
[   89.373508][ T7054] syzkaller0: entered allmulticast mode
[   89.678119][ T7081] __nla_validate_parse: 2 callbacks suppressed
[   89.678129][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'.
[   89.751296][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'.
[   89.798077][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'.
[   89.835322][ T7104] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.878595][ T7115] netlink: 'syz.1.483': attribute type 39 has an invalid length.
[   89.902622][ T7115] hsr_slave_1 (unregistering): left promiscuous mode
[   89.946029][ T7119] netlink: 676 bytes leftover after parsing attributes in process `syz.2.484'.
[   89.949960][ T7119] netlink: 676 bytes leftover after parsing attributes in process `syz.2.484'.
[   90.066786][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.487'.
[   90.478473][ T7138] x9: renamed from bridge_slave_0
[   91.055566][  T795] IPVS: starting estimator thread 0...
[   91.143897][ T7162] IPVS: using max 56 ests per chain, 134400 per kthread
[   91.168344][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.504'.
[   91.831640][ T7188] team0: No ports can be present during mode change
[   92.083489][   T10] cfg80211: failed to load regulatory.db
[   92.399264][ T7231] Bluetooth: MGMT ver 1.23
[   92.402446][ T7232] netlink: 'syz.0.532': attribute type 3 has an invalid length.
[   92.512149][ T7244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.539'.
[   92.717969][ T7265] syz.2.546 (7265) used obsolete PPPIOCDETACH ioctl
[   92.947413][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'.
[   92.952622][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[   94.101684][ T7364] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[   94.134557][ T7364] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.154269][ T7364] bond1: (slave gretap1): making interface the new active one
[   94.159136][ T7364] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   94.173092][ T7364] syz.2.590 (7364) used greatest stack depth: 18848 bytes left
[   94.227278][ T7371] netlink: 'syz.2.593': attribute type 4 has an invalid length.
[   94.464986][ T5837] Bluetooth: hci2: command 0x0401 tx timeout
[   94.468191][ T5219] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   94.814558][ T7426] __nla_validate_parse: 1 callbacks suppressed
[   94.814571][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[   94.821921][ T7426] openvswitch: netlink: Invalid VLAN frame
[   94.927959][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'.
[   95.371388][ T7459] wg1: entered promiscuous mode
[   95.373574][ T7459] wg1: entered allmulticast mode
[   96.140602][ T7494] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[   96.208279][ T7498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.648'.
[   96.211766][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'.
[   96.233135][ T7498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'.
[   96.759465][ T7542] netlink: 136 bytes leftover after parsing attributes in process `syz.2.666'.
[   96.966553][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'.
[   96.986025][ T7555] team_slave_0: entered promiscuous mode
[   96.988560][ T7555] team_slave_1: entered promiscuous mode
[   96.991101][ T7555] macvtap1: entered promiscuous mode
[   96.993263][ T7555] team0: entered promiscuous mode
[   97.000134][ T7555] macvtap1: entered allmulticast mode
[   97.004148][ T7555] team0: entered allmulticast mode
[   97.009999][ T7555] team_slave_0: entered allmulticast mode
[   97.012297][ T7555] team_slave_1: entered allmulticast mode
[   97.027694][ T7555] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   97.035471][ T7563] macvtap1: left promiscuous mode
[   97.036975][ T7563] team0: left promiscuous mode
[   97.045282][ T7563] macvtap1: left allmulticast mode
[   97.048896][ T7563] team0: left allmulticast mode
[   97.050945][ T7563] team_slave_0: left allmulticast mode
[   97.053188][ T7563] team_slave_1: left allmulticast mode
[   97.133450][ T7573] netlink: 'syz.2.679': attribute type 3 has an invalid length.
[   97.134479][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'.
[   97.185748][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.301368][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[   97.307429][ T7581] netlink: 'syz.1.683': attribute type 8 has an invalid length.
[   97.369186][ T7583] netlink: zone id is out of range
[   97.372905][ T7583] netlink: zone id is out of range
[   97.376554][ T7583] netlink: zone id is out of range
[   97.383898][ T7583] netlink: zone id is out of range
[   97.385917][ T7583] netlink: zone id is out of range
[   97.389096][ T7583] netlink: zone id is out of range
[   97.391656][ T7583] netlink: zone id is out of range
[   97.403407][ T7583] netlink: zone id is out of range
[   97.556516][ T7596] syzkaller0: create flow: hash 4272256046 index 1
[   97.594405][ T7596] syzkaller0: delete flow: hash 4272256046 index 1
[   98.837215][ T7634] netlink: 43 bytes leftover after parsing attributes in process `syz.0.702'.
[   98.969451][ T7650] vxcan1: tx address claim with different name
[   99.461567][ T7681] bridge_slave_0: left allmulticast mode
[   99.465219][ T7681] bridge_slave_0: left promiscuous mode
[   99.467258][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.478898][ T7681] bridge_slave_1: left allmulticast mode
[   99.481237][ T7681] bridge_slave_1: left promiscuous mode
[   99.483404][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.495758][ T7681] bond0: (slave bond_slave_0): Releasing backup interface
[   99.501298][ T7681] bond0: (slave bond_slave_1): Releasing backup interface
[   99.508651][ T7681] team_slave_0: left promiscuous mode
[   99.514714][ T7681] team0: Port device team_slave_0 removed
[   99.542539][ T7681] team_slave_1: left promiscuous mode
[   99.550379][ T7681] team0: Port device team_slave_1 removed
[   99.555512][ T7681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.562553][ T7681] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.579745][ T7686] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   99.665195][ T7689] team0 (unregistering): Port device team_slave_0 removed
[   99.675624][ T7689] team0 (unregistering): Port device team_slave_1 removed
[   99.696636][ T7692] syzkaller0: entered promiscuous mode
[   99.698743][ T7692] syzkaller0: entered allmulticast mode
[  100.115265][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[  100.128142][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  100.238347][ T7730] netlink: 'syz.1.743': attribute type 33 has an invalid length.
[  100.241142][ T7730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.743'.
[  100.244701][ T7730] `: renamed from team0
[  100.272911][ T7732] netlink: 136 bytes leftover after parsing attributes in process `syz.2.744'.
[  100.293237][ T7732] net_ratelimit: 47 callbacks suppressed
[  100.293249][ T7732] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  100.644237][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'.
[  100.648729][ T7746] netlink: 280 bytes leftover after parsing attributes in process `syz.1.751'.
[  100.741252][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  100.758847][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  100.774438][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  100.907142][ T7770] netlink: 204 bytes leftover after parsing attributes in process `syz.0.762'.
[  100.986860][ T7773] netlink: 'syz.2.764': attribute type 46 has an invalid length.
[  101.027615][ T7785] ieee802154 phy0 wpan0: encryption failed: -22
[  101.029785][ T7785] ieee802154 phy0 wpan0: encryption failed: -22
[  101.067809][ T7770] bridge0: port 1(gretap0) entered blocking state
[  101.072531][ T7770] bridge0: port 1(gretap0) entered disabled state
[  101.077879][ T7770] gretap0: entered allmulticast mode
[  101.081627][ T7770] gretap0: entered promiscuous mode
[  101.086110][ T7770] bridge0: port 1(gretap0) entered blocking state
[  101.088875][ T7770] bridge0: port 1(gretap0) entered forwarding state
[  101.563169][ T7799] sock: sock_timestamping_bind_phc: sock not bind to device
[  103.069267][ T5848] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.077681][ T5848] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.085406][ T5848] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.092505][ T5848] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.354124][ T7929] bond0: entered promiscuous mode
[  103.357049][ T7929] batadv0: entered promiscuous mode
[  103.359494][ T7929] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  103.363219][ T7929] 8021q: adding VLAN 0 to HW filter on device hsr1
[  103.367672][ T7929] bond0: left promiscuous mode
[  103.372774][ T7929] batadv0: left promiscuous mode
[  103.633979][ T7950] xt_CT: No such helper "snmp"
[  103.949336][ T7986] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16)
[  103.952812][ T7986] openvswitch: netlink: Message has 75 unknown bytes.
[  105.147887][ T8056] geneve2: left promiscuous mode
[  105.160339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  105.304115][ T8068] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.334551][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  105.436399][ T8082] __nla_validate_parse: 11 callbacks suppressed
[  105.436410][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  105.506167][ T8084] syzkaller0: entered promiscuous mode
[  105.507993][ T8084] syzkaller0: entered allmulticast mode
[  106.780571][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'.
[  106.784492][ T8113] netlink: 84 bytes leftover after parsing attributes in process `syz.1.913'.
[  106.906272][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  107.050707][ T8137] syzkaller1: entered promiscuous mode
[  107.052557][ T8137] syzkaller1: entered allmulticast mode
[  107.228325][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'.
[  107.372830][ T8160] sctp: [Deprecated]: syz.2.933 (pid 8160) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.372830][ T8160] Use struct sctp_sack_info instead
[  107.540122][ T8170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.936'.
[  107.803490][ T8193] syzkaller0: entered promiscuous mode
[  107.807130][ T8193] syzkaller0: entered allmulticast mode
[  107.824971][ T8194] netlink: 48 bytes leftover after parsing attributes in process `syz.0.947'.
[  107.843784][ T8194] bridge_slave_0: entered allmulticast mode
[  107.964858][ T8200] syzkaller1: entered promiscuous mode
[  107.967147][ T8200] syzkaller1: entered allmulticast mode
[  108.085749][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  109.003632][ T8218] netlink: 168 bytes leftover after parsing attributes in process `syz.1.956'.
[  110.304000][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'.
[  110.460041][ T8318] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.996'.
[  110.518866][ T8321] tipc: Started in network mode
[  110.521318][ T8321] tipc: Node identity ac14142f, cluster identity 4711
[  110.530476][ T8321] tipc: New replicast peer: 0.0.0.0
[  110.533044][ T8321] tipc: Enabled bearer <udp:syz2>, priority 10
[  110.538151][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'.
[  110.542277][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'.
[  110.560977][ T8321] ip6gretap0: entered promiscuous mode
[  110.565239][ T8321] erspan0: entered promiscuous mode
[  110.568013][ T8321] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  110.571410][ T8321] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  110.807007][ T8331] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1001'.
[  110.846420][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  111.100029][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'.
[  111.159145][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'.
[  111.162860][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'.
[  111.227392][ T8354] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1013'.
[  111.645161][    T9] tipc: Node number set to 2886997039
[  112.911350][   T34] audit: type=1800 audit(1766388795.213:2): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1026" name=CB dev="tmpfs" ino=1900 res=0 errno=0
[  114.595457][ T5899] IPVS: starting estimator thread 0...
[  114.683856][ T8486] IPVS: using max 45 ests per chain, 108000 per kthread
[  115.373141][ T8518] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  115.673016][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'.
[  116.204147][ T8594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.217263][ T8590] tipc: Resetting bearer <eth:syzkaller0>
[  116.233584][ T8590] tipc: Disabling bearer <eth:syzkaller0>
[  116.347397][ T8606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.508232][ T8626] syzkaller0: entered promiscuous mode
[  116.514105][ T8626] syzkaller0: entered allmulticast mode
[  116.522174][ T8629] sctp: [Deprecated]: syz.1.1126 (pid 8629) Use of int in max_burst socket option.
[  116.522174][ T8629] Use struct sctp_assoc_value instead
[  116.532405][ T8626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.543476][ T8625] tipc: Resetting bearer <eth:syzkaller0>
[  116.564222][ T8625] tipc: Disabling bearer <eth:syzkaller0>
[  116.732378][ T8647] erspan0: entered promiscuous mode
[  116.745650][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'.
[  116.826539][ T8653] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1137'.
[  117.339797][ T8673] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.344715][ T8673] team0: Port device bond3 added
[  118.151952][ T8689] netlink: 'syz.0.1153': attribute type 6 has an invalid length.
[  118.640950][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  118.948018][ T8760] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1184'.
[  119.004708][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1186'.
[  119.569186][ T8808] syz_tun: entered allmulticast mode
[  120.087783][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1205'.
[  120.167856][ T8846] ieee802154 phy0 wpan0: encryption failed: -22
[  120.269693][ T8855] netlink: 'syz.2.1211': attribute type 8 has an invalid length.
[  120.272648][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  120.869996][ T8894] netlink: 'syz.0.1221': attribute type 3 has an invalid length.
[  121.996123][ T8974] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  121.998662][ T8974] netlink: 'syz.2.1257': attribute type 1 has an invalid length.
[  122.038424][ T8980] netlink: 'syz.0.1260': attribute type 10 has an invalid length.
[  122.041448][ T8980] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  122.198250][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'.
[  122.269612][ T9009] IPVS: sh: FWM 3 0x00000003 - no destination available
[  122.342904][ T9018] tipc: Enabled bearer <udp:s>, priority 10
[  122.420919][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'.
[  122.433876][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1282'.
[  122.461922][ T9030] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1283'.
[  122.616062][ T9041] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[  123.291170][ T9071] ip6gretap2: entered promiscuous mode
[  123.334195][    T9] tipc: Node number set to 3852907648
[  124.263168][ T9109] IPVS: Error connecting to the multicast addr
[  124.348895][ T9113] openvswitch: netlink: IP tunnel dst address not specified
[  124.395500][ T9115] batadv1: entered promiscuous mode
[  124.399130][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.046928][ T9164] Cannot find add_set index 0 as target
[  125.679933][ T9203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.683614][ T9203] syzkaller0: entered promiscuous mode
[  125.690858][ T9203] syzkaller0: entered allmulticast mode
[  125.710748][ T9203] tipc: Resetting bearer <eth:syzkaller0>
[  125.714903][ T9202] tipc: Resetting bearer <eth:syzkaller0>
[  125.724656][ T9202] tipc: Disabling bearer <eth:syzkaller0>
[  125.806408][ T9205] netlink: 'syz.0.1360': attribute type 1 has an invalid length.
[  125.846117][ T9205] bond4: entered promiscuous mode
[  125.847777][ T9205] bond4: entered allmulticast mode
[  125.849652][ T9205] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.877203][ T9205] bridge3: entered promiscuous mode
[  125.879173][ T9205] bridge3: entered allmulticast mode
[  125.881299][ T9205] bond4: (slave bridge3): Enslaving as a backup interface with an up link
[  125.895745][ T9208] openvswitch: netlink: Missing valid actions attribute.
[  125.898047][ T9208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.954950][ T5848] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.975311][ T9214] netpci0: tun_chr_ioctl cmd 1074025677
[  125.977344][ T9214] netpci0: linktype set to 773
[  126.038739][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'.
[  126.075980][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  127.453046][ T9271] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1388'.
[  127.458715][ T9271] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1388'.
[  127.715553][ T9293] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  127.720364][ T9293] bond0: (slave wlan1): Opening slave failed
[  127.769065][ T9298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1399'.
[  127.894439][ T5864] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.904612][ T5864] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.912956][ T5864] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.913369][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.918028][ T5864] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  128.916825][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'.
[  129.140009][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'.
[  129.638390][ T5219] Bluetooth: hci2: link tx timeout
[  129.640452][ T5219] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  129.643566][ T5219] Bluetooth: hci2: link tx timeout
[  129.646327][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.824514][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  129.859212][ T9426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.862770][ T9426] syzkaller0: entered promiscuous mode
[  129.867265][ T9426] syzkaller0: entered allmulticast mode
[  129.879835][ T9426] tipc: Resetting bearer <eth:syzkaller0>
[  129.884840][ T9425] tipc: Resetting bearer <eth:syzkaller0>
[  129.895307][ T9425] tipc: Disabling bearer <eth:syzkaller0>
[  130.436268][ T9461] netlink: 640 bytes leftover after parsing attributes in process `syz.2.1471'.
[  130.439587][ T9461] netlink: 640 bytes leftover after parsing attributes in process `syz.2.1471'.
[  130.459686][ T9463] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1473'.
[  130.789336][ T9497] netlink: 'syz.2.1489': attribute type 1 has an invalid length.
[  130.791892][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'.
[  130.801195][ T9496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.806205][ T9496] syzkaller0: entered promiscuous mode
[  130.808564][ T9496] syzkaller0: entered allmulticast mode
[  130.820589][ T9496] tipc: Resetting bearer <eth:syzkaller0>
[  130.824226][ T9494] tipc: Resetting bearer <eth:syzkaller0>
[  130.831335][ T9494] tipc: Disabling bearer <eth:syzkaller0>
[  130.996575][ T9519] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  131.007168][ T9522] netlink: 'syz.2.1500': attribute type 3 has an invalid length.
[  131.017998][ T9519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  131.071105][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'.
[  131.664050][ T5219] Bluetooth: hci2: command 0x0401 tx timeout
[  131.703198][ T9559] netlink: 'syz.1.1516': attribute type 1 has an invalid length.
[  132.414689][ T9588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.560997][ T9586] netlink: 'syz.2.1529': attribute type 4 has an invalid length.
[  132.944563][ T9590] __nla_validate_parse: 1 callbacks suppressed
[  132.944575][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1531'.
[  132.954666][ T9605] netlink: 'syz.0.1537': attribute type 1 has an invalid length.
[  132.957157][ T9605] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.1537'.
[  133.103035][ T9621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1545'.
[  133.169641][ T9627] bridge1: entered allmulticast mode
[  133.745934][ T5219] Bluetooth: hci2: command 0x0401 tx timeout
[  134.139179][ T9673] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  134.334314][ T9686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1575'.
[  135.039296][ T9725] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1591'.
[  135.047574][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.238540][ T9735] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.1596'.
[  135.242613][ T9734] syzkaller1: entered promiscuous mode
[  135.247897][ T9734] syzkaller1: entered allmulticast mode
[  135.816502][ T9764] netlink: 'syz.0.1610': attribute type 30 has an invalid length.
[  136.070975][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  136.740305][ T9793] syzkaller0: entered promiscuous mode
[  136.742500][ T9793] syzkaller0: entered allmulticast mode
[  136.884910][ T9698] Set syz1 is full, maxelem 65536 reached
[  137.853285][ T9817] xt_hashlimit: max too large, truncated to 1048576
[  138.148107][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  138.150887][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  138.570727][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'.
[  138.708013][ T9868] Bluetooth: MGMT ver 1.23
[  139.012968][ T9879] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  139.067019][ T9889] netlink: 'syz.2.1661': attribute type 39 has an invalid length.
[  139.264926][ T9906] netem: change failed
[  139.358969][ T9917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.361554][ T9917] syzkaller0: entered promiscuous mode
[  139.366013][ T9917] syzkaller0: entered allmulticast mode
[  139.381800][ T9917] tipc: Resetting bearer <eth:syzkaller0>
[  139.388533][ T9916] tipc: Resetting bearer <eth:syzkaller0>
[  139.399003][ T9916] tipc: Disabling bearer <eth:syzkaller0>
[  140.889078][ T9983] netlink: 'syz.2.1696': attribute type 29 has an invalid length.
[  140.900819][ T9983] netlink: 'syz.2.1696': attribute type 29 has an invalid length.
[  141.169674][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'.
[  141.968808][T10064] netlink: 'syz.1.1733': attribute type 11 has an invalid length.
[  141.972329][T10064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1733'.
[  143.256500][T10074] trusted_key: syz.0.1738 sent an empty control message without MSG_MORE.
[  143.262297][T10074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.276275][T10074] syzkaller0: entered promiscuous mode
[  143.278563][T10074] syzkaller0: entered allmulticast mode
[  143.389658][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  143.399235][T10072] tipc: Resetting bearer <eth:syzkaller0>
[  143.425138][T10072] tipc: Disabling bearer <eth:syzkaller0>
[  143.474068][T10086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.477419][T10086] syzkaller0: entered promiscuous mode
[  143.479991][T10086] syzkaller0: entered allmulticast mode
[  143.527181][T10086] tipc: Resetting bearer <eth:syzkaller0>
[  143.529687][T10091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.532458][T10088] syzkaller0: entered promiscuous mode
[  143.536216][T10088] syzkaller0: entered allmulticast mode
[  143.540357][T10092] syzkaller0: entered promiscuous mode
[  143.542392][T10092] syzkaller0: entered allmulticast mode
[  143.546020][T10085] tipc: Resetting bearer <eth:syzkaller0>
[  143.553892][T10085] tipc: Disabling bearer <eth:syzkaller0>
[  143.572216][T10092] tipc: Resetting bearer <eth:syzkaller0>
[  143.576238][T10089] tipc: Resetting bearer <eth:syzkaller0>
[  143.578206][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'.
[  143.589162][T10089] tipc: Disabling bearer <eth:syzkaller0>
[  143.658145][T10094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1744'.
[  143.661585][T10094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1744'.
[  143.770825][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'.
[  143.796870][T10103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.802323][T10103] syzkaller0: entered promiscuous mode
[  143.804779][T10103] syzkaller0: entered allmulticast mode
[  143.813940][T10105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.829527][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'.
[  143.829542][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'.
[  143.852653][T10106] syzkaller0: entered promiscuous mode
[  143.854697][T10106] syzkaller0: entered allmulticast mode
[  143.859272][T10103] tipc: Resetting bearer <eth:syzkaller0>
[  143.864836][T10104] tipc: Resetting bearer <eth:syzkaller0>
[  144.912074][T10104] tipc: Disabling bearer <eth:syzkaller0>
[  144.918220][T10102] tipc: Resetting bearer <eth:syzkaller0>
[  144.925937][T10102] tipc: Disabling bearer <eth:syzkaller0>
[  144.931949][   T10] tipc: Node number set to 3967842842
[  145.057149][T10111] syzkaller0: entered promiscuous mode
[  145.059396][T10111] syzkaller0: entered allmulticast mode
[  145.124025][T10114] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1749'.
[  145.126951][T10114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1749'.
[  145.130274][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1749'.
[  145.238912][T10119] syzkaller0: entered promiscuous mode
[  145.241155][T10119] syzkaller0: entered allmulticast mode
[  145.258699][T10119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.262899][T10117] tipc: Resetting bearer <eth:syzkaller0>
[  145.281614][T10117] tipc: Disabling bearer <eth:syzkaller0>
[  145.290209][T10121] syzkaller0: entered promiscuous mode
[  145.292006][T10121] syzkaller0: entered allmulticast mode
[  145.409233][T10126] syzkaller0: entered promiscuous mode
[  145.412550][T10126] syzkaller0: entered allmulticast mode
[  145.450003][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'.
[  146.013325][T10143] syzkaller0: entered promiscuous mode
[  146.015764][T10143] syzkaller0: entered allmulticast mode
[  146.216554][T10149] netlink: 'syz.0.1763': attribute type 14 has an invalid length.
[  146.302857][T10158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.321394][T10158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.339216][T10158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.361707][T10158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.374377][T10158] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.512981][T10174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.620898][T10183] syzkaller0: entered promiscuous mode
[  146.623513][T10183] syzkaller0: entered allmulticast mode
[  146.743968][T10187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.747740][T10187] syzkaller0: entered promiscuous mode
[  146.751009][T10187] syzkaller0: entered allmulticast mode
[  146.886879][T10186] tipc: Resetting bearer <eth:syzkaller0>
[  146.906719][T10186] tipc: Disabling bearer <eth:syzkaller0>
[  147.037143][T10193] netlink: 'syz.2.1770': attribute type 39 has an invalid length.
[  147.228823][T10198] netlink: 'syz.2.1772': attribute type 29 has an invalid length.
[  147.232438][T10197] netlink: 'syz.2.1772': attribute type 29 has an invalid length.
[  147.342866][T10204] netem: incorrect ge model size
[  147.347154][T10204] netem: change failed
[  147.425256][T10212] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  147.449183][T10212] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.452514][T10208] syzkaller0: entered promiscuous mode
[  147.459238][T10208] syzkaller0: entered allmulticast mode
[  147.555706][T10221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.560011][T10223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.569162][T10223] syzkaller0: entered promiscuous mode
[  147.571438][T10223] syzkaller0: entered allmulticast mode
[  147.578141][T10221] tipc: Resetting bearer <eth:syzkaller0>
[  147.583983][T10220] tipc: Resetting bearer <eth:syzkaller0>
[  147.597263][T10220] tipc: Disabling bearer <eth:syzkaller0>
[  147.756649][T10234] netem: change failed
[  147.839249][T10241] netem: incorrect gi model size
[  147.925592][T10248] syzkaller0: entered promiscuous mode
[  147.927759][T10248] syzkaller0: entered allmulticast mode
[  148.010744][T10250] syzkaller0: entered promiscuous mode
[  148.012938][T10250] syzkaller0: entered allmulticast mode
[  148.046346][T10250] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.057477][T10250] bond0: (slave rose0): Enslaving as an active interface with an up link
[  148.099960][T10262] netlink: 'syz.2.1789': attribute type 2 has an invalid length.
[  148.109237][T10262] syzkaller0: entered promiscuous mode
[  148.111953][T10262] syzkaller0: entered allmulticast mode
[  148.131864][T10265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.146663][T10265] syzkaller0: entered promiscuous mode
[  148.148596][T10265] syzkaller0: entered allmulticast mode
[  148.491278][T10297] syzkaller0: entered promiscuous mode
[  148.499468][T10297] syzkaller0: entered allmulticast mode
[  148.645836][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.654260][T10308] __nla_validate_parse: 15 callbacks suppressed
[  148.654277][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1796'.
[  148.759953][T10297] infiniband !yz!: set down
[  148.761581][T10297] infiniband !yz!: added team_slave_0
[  148.796964][T10297] RDS/IB: !yz!: added
[  148.798928][T10297] smc: adding ib device !yz! with port count 1
[  148.801501][T10297] smc:    ib device !yz! port 1 has no pnetid
[  148.896838][T10257] tipc: Resetting bearer <eth:syzkaller0>
[  148.907808][T10257] tipc: Disabling bearer <eth:syzkaller0>
[  148.986006][T10313] syzkaller0: entered promiscuous mode
[  148.989622][T10313] syzkaller0: entered allmulticast mode
[  149.091547][T10317] syzkaller0: entered promiscuous mode
[  149.093305][T10317] syzkaller0: entered allmulticast mode
[  149.364922][T10322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.368255][T10322] syzkaller0: entered promiscuous mode
[  149.371940][T10322] syzkaller0: entered allmulticast mode
[  149.380533][T10321] tipc: Resetting bearer <eth:syzkaller0>
[  149.391929][T10321] tipc: Disabling bearer <eth:syzkaller0>
[  149.489370][T10332] syzkaller0: entered promiscuous mode
[  149.491443][T10332] syzkaller0: entered allmulticast mode
[  149.508190][T10331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.527913][T10336] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1803'.
[  149.541170][T10336] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1803'.
[  149.549349][T10331] tipc: Resetting bearer <eth:syzkaller0>
[  149.566374][T10331] tipc: Disabling bearer <eth:syzkaller0>
[  149.576151][T10336] netem: change failed
[  149.579645][T10338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.585381][T10338] syzkaller0: entered promiscuous mode
[  149.587563][T10338] syzkaller0: entered allmulticast mode
[  149.624232][T10337] tipc: Resetting bearer <eth:syzkaller0>
[  149.739985][T10337] tipc: Disabling bearer <eth:syzkaller0>
[  149.761424][T10349] syzkaller0: entered promiscuous mode
[  149.763534][T10349] syzkaller0: entered allmulticast mode
[  149.793350][T10341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.798762][T10349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.803084][T10348] tipc: Resetting bearer <eth:syzkaller0>
[  149.814139][T10348] tipc: Disabling bearer <eth:syzkaller0>
[  149.927840][T10354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.931793][T10354] syzkaller0: entered promiscuous mode
[  149.937621][T10354] syzkaller0: entered allmulticast mode
[  149.947137][T10353] tipc: Resetting bearer <eth:syzkaller0>
[  149.959817][T10353] tipc: Disabling bearer <eth:syzkaller0>
[  150.107866][T10363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.111249][T10363] syzkaller0: entered promiscuous mode
[  150.113080][T10363] syzkaller0: entered allmulticast mode
[  150.137568][T10363] tipc: Resetting bearer <eth:syzkaller0>
[  150.143372][T10362] tipc: Resetting bearer <eth:syzkaller0>
[  150.150940][T10362] tipc: Disabling bearer <eth:syzkaller0>
[  150.366441][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'.
[  150.471839][T10375] syzkaller0: entered promiscuous mode
[  150.475292][T10375] syzkaller0: entered allmulticast mode
[  150.596815][T10380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.601410][T10380] syzkaller0: entered promiscuous mode
[  150.604426][T10380] syzkaller0: entered allmulticast mode
[  150.607916][T10383] netlink: 'syz.2.1817': attribute type 13 has an invalid length.
[  150.654727][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.716711][T10380] tipc: Resetting bearer <eth:syzkaller0>
[  150.728641][T10379] tipc: Resetting bearer <eth:syzkaller0>
[  150.738777][T10379] tipc: Disabling bearer <eth:syzkaller0>
[  150.823983][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1820'.
[  150.919894][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  150.923033][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  150.927172][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  150.930956][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  150.934708][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  150.982369][T10400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.986121][T10400] syzkaller0: entered promiscuous mode
[  150.986960][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  150.988447][T10400] syzkaller0: entered allmulticast mode
[  151.008128][T10400] netlink: 'syz.1.1823': attribute type 14 has an invalid length.
[  151.020877][T10400] netlink: 'syz.1.1823': attribute type 14 has an invalid length.
[  151.022304][T10402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.026419][ T5862] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.038212][ T5862] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.052292][ T5862] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.057336][ T5862] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.063221][T10401] tipc: Disabling bearer <eth:syzkaller0>
[  151.070881][T10400] tipc: Resetting bearer <eth:syzkaller0>
[  151.077112][T10399] tipc: Resetting bearer <eth:syzkaller0>
[  151.090976][T10399] tipc: Disabling bearer <eth:syzkaller0>
[  151.201017][T10414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.240008][T10410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.244165][T10410] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  151.362316][T10412] tipc: Disabling bearer <eth:syzkaller0>
[  151.389456][T10427] netem: change failed
[  151.425659][T10429] syzkaller0: entered promiscuous mode
[  151.428169][T10429] syzkaller0: entered allmulticast mode
[  151.444692][T10429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.457730][T10428] tipc: Resetting bearer <eth:syzkaller0>
[  151.469488][T10428] tipc: Disabling bearer <eth:syzkaller0>
[  151.573490][T10435] syzkaller0: entered promiscuous mode
[  151.576539][T10435] syzkaller0: entered allmulticast mode
[  151.738251][T10446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.740865][T10446] syzkaller0: entered promiscuous mode
[  151.742675][T10446] syzkaller0: entered allmulticast mode
[  151.759995][T10446] tipc: Resetting bearer <eth:syzkaller0>
[  151.792902][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  151.810542][T10447] tipc: Disabling bearer <eth:syzkaller0>
[  152.040230][T10464] netem: incorrect ge model size
[  152.042352][T10464] netem: change failed
[  152.108390][T10475] bridge0: port 1(gretap0) entered disabled state
[  152.110773][T10473] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  152.111020][T10475] erspan0: left promiscuous mode
[  152.151369][T10475] wg1: left promiscuous mode
[  152.153129][T10475] wg1: left allmulticast mode
[  152.161309][T10475] bridge_slave_0: left allmulticast mode
[  152.209620][T10475] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  152.236676][T10475] ip6gretap2: left promiscuous mode
[  152.239239][T10475] batadv1: left promiscuous mode
[  152.243307][T10475] bond4: left promiscuous mode
[  152.245717][T10475] bridge3: left promiscuous mode
[  152.247575][T10475] bond4: left allmulticast mode
[  152.249135][T10475] bridge3: left allmulticast mode
[  152.281203][T10483] gretap1: left allmulticast mode
[  152.283373][ T5883] syz1: Port: 1 Link DOWN
[  152.289815][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.293247][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.298174][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.301797][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.313580][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.318247][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.321757][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.340478][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.366738][T10488] syzkaller0: entered promiscuous mode
[  152.368468][T10488] syzkaller0: entered allmulticast mode
[  152.435933][T10490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.477722][T10493] syzkaller0: entered promiscuous mode
[  152.479513][T10493] syzkaller0: entered allmulticast mode
[  152.491615][T10493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.496343][T10493] tipc: Resetting bearer <eth:syzkaller0>
[  152.500262][T10492] tipc: Resetting bearer <eth:syzkaller0>
[  152.546513][T10492] tipc: Disabling bearer <eth:syzkaller0>
[  152.600962][T10497] netlink: 'syz.2.1853': attribute type 1 has an invalid length.
[  152.702269][T10503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.706237][T10503] syzkaller0: entered promiscuous mode
[  152.708344][T10503] syzkaller0: entered allmulticast mode
[  152.731790][T10503] tipc: Resetting bearer <eth:syzkaller0>
[  152.736905][T10502] tipc: Resetting bearer <eth:syzkaller0>
[  152.745637][T10502] tipc: Disabling bearer <eth:syzkaller0>
[  153.567943][T10519] xfrm0: Caught tx_queue_len zero misconfig
[  153.659615][T10524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.732318][T10527] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  153.752784][T10527] bridge_slave_0: entered allmulticast mode
[  153.764558][T10530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.792680][T10530] tipc: Disabling bearer <eth:syzkaller0>
[  153.897770][T10538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.901756][T10538] syzkaller0: entered promiscuous mode
[  153.905277][T10538] syzkaller0: entered allmulticast mode
[  153.937266][T10537] tipc: Resetting bearer <eth:syzkaller0>
[  153.948234][T10537] tipc: Disabling bearer <eth:syzkaller0>
[  153.963372][T10541] syzkaller0: entered promiscuous mode
[  153.965971][T10541] syzkaller0: entered allmulticast mode
[  154.020934][T10543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.026497][T10542] tipc: Disabling bearer <eth:syzkaller0>
[  154.065563][ T5837] Bluetooth: hci0: command 0x0401 tx timeout
[  154.099557][T10548] lo: Caught tx_queue_len zero misconfig
[  154.102010][T10548] netem: change failed
[  154.106591][T10549] netlink: 'syz.0.1865': attribute type 14 has an invalid length.
[  154.155764][T10551] __nla_validate_parse: 10 callbacks suppressed
[  154.155775][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'.
[  154.167329][T10551] macvtap2: entered promiscuous mode
[  154.169021][T10551] batadv0: entered promiscuous mode
[  154.170657][T10551] macvtap2: entered allmulticast mode
[  154.172427][T10551] batadv0: entered allmulticast mode
[  154.175843][T10551] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  154.180125][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'.
[  154.184392][T10551] batadv0: left allmulticast mode
[  154.186401][T10551] batadv0: left promiscuous mode
[  154.189156][T10553] syzkaller0: entered promiscuous mode
[  154.191449][T10553] syzkaller0: entered allmulticast mode
[  154.573613][T10566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.579295][T10566] syzkaller0: entered promiscuous mode
[  154.581614][T10566] syzkaller0: entered allmulticast mode
[  154.606303][T10566] tipc: Resetting bearer <eth:syzkaller0>
[  154.611557][T10565] tipc: Resetting bearer <eth:syzkaller0>
[  154.628568][T10565] tipc: Disabling bearer <eth:syzkaller0>
[  154.763990][T10568] syzkaller0: entered promiscuous mode
[  154.766390][T10568] syzkaller0: entered allmulticast mode
[  154.898901][T10573] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1874'.
[  154.929162][T10573] syzkaller0: entered promiscuous mode
[  154.931492][T10573] syzkaller0: entered allmulticast mode
[  155.160810][T10577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.193445][T10561] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  155.245218][T10583] syzkaller0: entered promiscuous mode
[  155.247462][T10583] syzkaller0: entered allmulticast mode
[  155.271583][T10589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.283622][T10589] tipc: Disabling bearer <eth:syzkaller0>
[  155.321373][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'.
[  155.410437][T10597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.418987][T10597] syzkaller0: entered promiscuous mode
[  155.421265][T10597] syzkaller0: entered allmulticast mode
[  155.442019][T10599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.450554][T10599] syzkaller0: entered promiscuous mode
[  155.452336][T10599] syzkaller0: entered allmulticast mode
[  155.467331][T10599] tipc: Resetting bearer <eth:syzkaller0>
[  155.476044][T10597] tipc: Resetting bearer <eth:syzkaller0>
[  155.479605][T10596] tipc: Resetting bearer <eth:syzkaller0>
[  155.504419][T10596] tipc: Disabling bearer <eth:syzkaller0>
[  155.508503][T10599] tipc: Resetting bearer <eth:syzkaller0>
[  155.517703][T10599] tipc: Disabling bearer <eth:syzkaller0>
[  155.576222][T10603] netlink: 'syz.1.1885': attribute type 14 has an invalid length.
[  155.717585][T10611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'.
[  155.733035][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1890'.
[  155.794060][T10619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.797352][T10619] syzkaller0: entered promiscuous mode
[  155.799417][T10619] syzkaller0: entered allmulticast mode
[  155.818319][T10624] syzkaller0: entered promiscuous mode
[  155.821061][T10624] syzkaller0: entered allmulticast mode
[  155.859933][T10629] xt_cgroup: xt_cgroup: no path or classid specified
[  155.869347][T10630] tipc: Resetting bearer <eth:syzkaller0>
[  156.038739][T10615] tipc: Resetting bearer <eth:syzkaller0>
[  156.054449][T10615] tipc: Disabling bearer <eth:syzkaller0>
[  156.256172][T10657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.260940][T10657] syzkaller0: entered promiscuous mode
[  156.263591][T10657] syzkaller0: entered allmulticast mode
[  156.267953][T10658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.293856][T10658] syzkaller0: entered promiscuous mode
[  156.296084][T10658] syzkaller0: entered allmulticast mode
[  156.308180][T10657] tipc: Resetting bearer <eth:syzkaller0>
[  156.316823][T10656] tipc: Resetting bearer <eth:syzkaller0>
[  156.340723][T10656] tipc: Disabling bearer <eth:syzkaller0>
[  156.376720][T10651] tipc: Resetting bearer <eth:syzkaller0>
[  156.381085][T10650] tipc: Resetting bearer <eth:syzkaller0>
[  156.399516][T10650] tipc: Disabling bearer <eth:syzkaller0>
[  156.485482][T10662] syzkaller0: entered promiscuous mode
[  156.487572][T10662] syzkaller0: entered allmulticast mode
[  156.489827][ T5837] Bluetooth: hci0: command 0x0401 tx timeout
[  156.608825][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  156.614048][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  156.617959][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  156.624381][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  156.732911][T10674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.738249][T10674] syzkaller0: entered promiscuous mode
[  156.740829][T10674] syzkaller0: entered allmulticast mode
[  156.774269][T10677] syzkaller0: entered promiscuous mode
[  156.779556][T10677] syzkaller0: entered allmulticast mode
[  156.790184][T10674] tipc: Resetting bearer <eth:syzkaller0>
[  156.810883][T10672] tipc: Resetting bearer <eth:syzkaller0>
[  156.820266][T10672] tipc: Disabling bearer <eth:syzkaller0>
[  157.055569][T10683] netem: change failed
[  157.106491][T10685] bond0: entered promiscuous mode
[  157.115608][T10685] batadv0: entered promiscuous mode
[  157.120715][T10685] batadv0: left promiscuous mode
[  157.123152][T10685] bond0: left promiscuous mode
[  157.282310][T10692] tap0: tun_chr_ioctl cmd 1074025676
[  157.287059][T10692] tap0: owner set to 0
[  157.289928][T10694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.294692][T10694] syzkaller0: entered promiscuous mode
[  157.297034][T10694] syzkaller0: entered allmulticast mode
[  157.305205][T10694] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  157.309585][T10696] syzkaller0: entered promiscuous mode
[  157.311672][T10696] syzkaller0: entered allmulticast mode
[  157.361523][T10694] tipc: Resetting bearer <eth:syzkaller0>
[  157.366549][T10693] tipc: Resetting bearer <eth:syzkaller0>
[  157.375148][T10693] tipc: Disabling bearer <eth:syzkaller0>
[  157.497326][T10701] syzkaller0: entered promiscuous mode
[  157.499134][T10701] syzkaller0: entered allmulticast mode
[  157.630768][T10713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.644620][T10712] tipc: Disabling bearer <eth:syzkaller0>
[  157.797427][T10726] syzkaller0: entered promiscuous mode
[  157.799169][T10726] syzkaller0: entered allmulticast mode
[  157.810039][T10726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.456684][T10733] syzkaller0: entered promiscuous mode
[  158.459384][T10733] syzkaller0: entered allmulticast mode
[  158.566071][T10721] tipc: Resetting bearer <eth:syzkaller0>
[  158.576637][T10721] tipc: Disabling bearer <eth:syzkaller0>
[  158.715993][T10736] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  158.718575][T10736] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  158.745268][T10740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.761583][T10741] syzkaller0: entered promiscuous mode
[  158.775621][T10741] syzkaller0: entered allmulticast mode
[  158.797376][T10741] tipc: Resetting bearer <eth:syzkaller0>
[  158.806908][T10738] tipc: Resetting bearer <eth:syzkaller0>
[  158.825577][T10738] tipc: Disabling bearer <eth:syzkaller0>
[  158.994646][T10765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.998852][T10765] syzkaller0: entered promiscuous mode
[  159.001045][T10765] syzkaller0: entered allmulticast mode
[  159.017197][T10765] tipc: Resetting bearer <eth:syzkaller0>
[  159.021908][T10764] tipc: Resetting bearer <eth:syzkaller0>
[  159.035943][T10764] tipc: Disabling bearer <eth:syzkaller0>
[  159.218364][T10775] syzkaller0: entered promiscuous mode
[  159.220574][T10775] syzkaller0: entered allmulticast mode
[  159.455191][T10783] __nla_validate_parse: 5 callbacks suppressed
[  159.455208][T10783] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1940'.
[  159.515598][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1940'.
[  159.949614][T10793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.050498][T10803] syzkaller0: entered promiscuous mode
[  160.052691][T10803] syzkaller0: entered allmulticast mode
[  160.089481][T10806] syzkaller0: entered promiscuous mode
[  160.091227][T10806] syzkaller0: entered allmulticast mode
[  160.234888][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.244778][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.248859][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.252319][T10815] syzkaller0: entered promiscuous mode
[  160.256327][T10815] syzkaller0: entered allmulticast mode
[  160.262480][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.267976][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.376704][T10822] syzkaller0: entered promiscuous mode
[  160.379228][T10822] syzkaller0: entered allmulticast mode
[  160.419406][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1956'.
[  160.449271][T10824] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.551754][T10824] bond6 (unregistering): Released all slaves
[  160.571925][T10829] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.668765][T10835] bond0: entered promiscuous mode
[  160.670932][T10835] batadv0: entered promiscuous mode
[  160.673393][T10835] batadv0: left promiscuous mode
[  160.906337][T10835] bond0: left promiscuous mode
[  161.476358][T10841] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  161.709754][T10861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.713438][T10861] syzkaller0: entered promiscuous mode
[  161.718862][T10861] syzkaller0: entered allmulticast mode
[  161.754312][T10861] tipc: Resetting bearer <eth:syzkaller0>
[  161.767244][T10864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.771031][T10864] syzkaller0: entered promiscuous mode
[  161.773344][T10864] syzkaller0: entered allmulticast mode
[  161.799717][T10865] tipc: Resetting bearer <eth:syzkaller0>
[  161.815707][T10863] tipc: Resetting bearer <eth:syzkaller0>
[  161.830575][T10863] tipc: Disabling bearer <eth:syzkaller0>
[  161.838621][T10861] tipc: Resetting bearer <eth:syzkaller0>
[  161.867487][T10861] tipc: Disabling bearer <eth:syzkaller0>
[  162.017682][T10884] syzkaller0: entered promiscuous mode
[  162.020067][T10884] syzkaller0: entered allmulticast mode
[  162.087789][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'.
[  162.149030][T10892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.157252][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'.
[  162.173551][T10892] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  162.178311][T10892] syzkaller0: entered promiscuous mode
[  162.182176][T10898] tipc: Resetting bearer <eth:syzkaller0>
[  162.198737][T10891] tipc: Resetting bearer <eth:syzkaller0>
[  162.206812][T10891] tipc: Disabling bearer <eth:syzkaller0>
[  162.226862][T10903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.229225][T10902] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.233295][T10902] syzkaller0: entered promiscuous mode
[  162.236283][T10902] syzkaller0: entered allmulticast mode
[  162.284750][T10902] tipc: Resetting bearer <eth:syzkaller0>
[  162.314710][T10901] tipc: Resetting bearer <eth:syzkaller0>
[  162.328572][T10901] tipc: Disabling bearer <eth:syzkaller0>
[  162.438685][T10918] netem: invalid attributes len -15
[  162.493245][T10924] netem: unknown loss type 6144
[  162.495684][T10924] netem: change failed
[  162.526741][T10917] block nbd0: shutting down sockets
[  162.636940][T10927] netlink: 'syz.0.1987': attribute type 14 has an invalid length.
[  162.719966][T10938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.723182][T10938] syzkaller0: entered promiscuous mode
[  162.725580][T10938] syzkaller0: entered allmulticast mode
[  162.745612][T10938] tipc: Resetting bearer <eth:syzkaller0>
[  162.750828][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  162.763095][T10937] tipc: Disabling bearer <eth:syzkaller0>
[  162.824894][T10947] netlink: 'syz.0.1995': attribute type 1 has an invalid length.
[  162.832995][T10947] x_tables: ip6_tables: mh match: only valid for protocol 135
[  162.837149][T10947] netlink: 'syz.0.1995': attribute type 3 has an invalid length.
[  162.936162][T10956] syzkaller0: entered promiscuous mode
[  162.937970][T10956] syzkaller0: entered allmulticast mode
[  163.996444][T10970] syzkaller0: entered promiscuous mode
[  163.998685][T10970] syzkaller0: entered allmulticast mode
[  164.027336][T10971] netem: change failed
[  164.030466][T10970] netlink: 'syz.0.2000': attribute type 1 has an invalid length.
[  164.068151][T10971] xt_CT: No such helper "netbios-ns"
[  164.141186][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6
[  165.037249][T10983] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  165.039812][T10983] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  165.054792][T10983] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  165.057943][T10983] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  165.069750][T10983] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  165.073571][T10983] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  165.130803][T11015] netem: incorrect ge model size
[  165.133260][T11015] netem: change failed
[  165.174904][T11017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.178628][T11017] syzkaller0: entered promiscuous mode
[  165.181033][T11017] syzkaller0: entered allmulticast mode
[  165.199217][T11017] tipc: Resetting bearer <eth:syzkaller0>
[  165.202807][T11016] tipc: Resetting bearer <eth:syzkaller0>
[  165.212602][T11016] tipc: Disabling bearer <eth:syzkaller0>
[  165.304710][T11021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.312227][T11021] tipc: Resetting bearer <eth:syzkaller0>
[  165.321911][T11020] tipc: Disabling bearer <eth:syzkaller0>
[  165.385432][T11024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.388242][T11025] syzkaller0: entered promiscuous mode
[  165.390610][T11025] syzkaller0: entered allmulticast mode
[  165.402902][T11025] tipc: Resetting bearer <eth:syzkaller0>
[  165.412337][T11023] tipc: Resetting bearer <eth:syzkaller0>
[  165.427588][T11023] tipc: Disabling bearer <eth:syzkaller0>
[  165.845151][T11036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.852564][T11036] syzkaller0: entered promiscuous mode
[  165.856783][T11036] syzkaller0: entered allmulticast mode
[  165.868538][T11036] syz_tun: mtu greater than device maximum
[  165.871544][T11036] netlink: 'syz.2.2018': attribute type 10 has an invalid length.
[  165.875140][T11036] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  165.881938][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  165.901860][T11035] tipc: Disabling bearer <eth:syzkaller0>
[  166.210602][T11042] xt_hashlimit: max too large, truncated to 1048576
[  166.696443][T11061] __nla_validate_parse: 13 callbacks suppressed
[  166.696457][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2029'.
[  166.751090][T11061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2029'.
[  167.089175][T11082] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001
[  167.180394][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'.
[  168.319850][T11097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.326052][T11097] syzkaller0: entered promiscuous mode
[  168.328377][T11097] syzkaller0: entered allmulticast mode
[  168.347390][T11097] tipc: Resetting bearer <eth:syzkaller0>
[  168.351449][T11096] tipc: Resetting bearer <eth:syzkaller0>
[  168.362849][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  168.473774][T11105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.543318][T11104] tipc: Disabling bearer <eth:syzkaller0>
[  168.621836][T11108] syzkaller0: entered promiscuous mode
[  168.623827][T11108] syzkaller0: entered allmulticast mode
[  168.710511][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.714994][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.718824][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.721776][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.725292][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.736805][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'.
[  168.844739][T11114] syzkaller0: entered promiscuous mode
[  168.847040][T11114] syzkaller0: entered allmulticast mode
[  168.961620][T11116] syzkaller0: entered promiscuous mode
[  168.964349][T11116] syzkaller0: entered allmulticast mode
[  169.078036][T11120] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  169.092358][T11120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.096634][T11120] syzkaller0: entered promiscuous mode
[  169.098976][T11120] syzkaller0: entered allmulticast mode
[  169.118534][T11120] tipc: Resetting bearer <eth:syzkaller0>
[  169.129270][T11119] tipc: Resetting bearer <eth:syzkaller0>
[  169.138226][T11119] tipc: Disabling bearer <eth:syzkaller0>
[  169.369607][T11134] tunl0: Caught tx_queue_len zero misconfig
[  169.452156][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  169.495600][T11144] bond0: entered promiscuous mode
[  169.497610][T11144] bond_slave_0: entered promiscuous mode
[  169.499966][T11144] bond_slave_1: entered promiscuous mode
[  169.503641][T11144] batadv0: entered promiscuous mode
[  169.507652][T11144] debugfs: 'hsr1' already exists in 'hsr'
[  169.509879][T11144] Cannot create hsr debugfs directory
[  169.512743][T11144] 8021q: adding VLAN 0 to HW filter on device hsr1
[  169.699046][T11154] syzkaller0: entered promiscuous mode
[  169.701267][T11154] syzkaller0: entered allmulticast mode
[  169.794902][T11156] netem: invalid attributes len -15
[  170.018352][T11162] macsec1: entered promiscuous mode
[  170.020363][T11162] macsec1: entered allmulticast mode
[  171.046642][T11173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.049514][T11173] syzkaller0: entered promiscuous mode
[  171.051557][T11173] syzkaller0: entered allmulticast mode
[  171.059005][T11172] tipc: Resetting bearer <eth:syzkaller0>
[  171.073956][T11172] tipc: Disabling bearer <eth:syzkaller0>
[  171.942799][T11210] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.211744][T11231] __nla_validate_parse: 1 callbacks suppressed
[  172.211754][T11231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2081'.
[  172.219587][T11231] netem: invalid attributes len -15
[  172.221554][T11231] netem: change failed
[  172.517002][T11248] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  172.611255][T11251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.619264][T11251] tipc: Resetting bearer <eth:syzkaller0>
[  172.628627][T11250] tipc: Disabling bearer <eth:syzkaller0>
[  172.759457][T11255] netem: change failed
[  172.845834][T11259] syzkaller0: entered promiscuous mode
[  172.848681][T11259] syzkaller0: entered allmulticast mode
[  172.867872][T11259] sch_fq: defrate 2147483647 ignored.
[  172.956525][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'.
[  172.963242][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'.
[  172.968785][T11261] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  172.971422][T11261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  172.978647][T11261] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2093'.
[  172.982265][T11261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  173.347421][T11280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.351765][T11280] syzkaller0: entered promiscuous mode
[  173.354980][T11280] syzkaller0: entered allmulticast mode
[  173.376390][T11280] tipc: Resetting bearer <eth:syzkaller0>
[  173.381184][T11279] tipc: Resetting bearer <eth:syzkaller0>
[  173.390809][T11279] tipc: Disabling bearer <eth:syzkaller0>
[  173.557376][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'.
[  173.561944][T11283] hsr_slave_0: left promiscuous mode
[  173.565912][T11283] hsr_slave_1: left promiscuous mode
[  173.716740][T11289] x_tables: ip_tables: osf match: only valid for protocol 6
[  173.719818][T11289] syzkaller0: entered promiscuous mode
[  173.721643][T11289] syzkaller0: entered allmulticast mode
[  174.211057][T11292] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2102'.
[  174.214785][T11292] netem: invalid attributes len -15
[  174.216416][T11292] netem: change failed
[  174.406961][T11307] ip6tnl0: Caught tx_queue_len zero misconfig
[  174.674005][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'.
[  175.718153][T11333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.721104][T11333] syzkaller0: entered promiscuous mode
[  175.722913][T11333] syzkaller0: entered allmulticast mode
[  175.739067][T11333] tipc: Resetting bearer <eth:syzkaller0>
[  175.742676][T11332] tipc: Resetting bearer <eth:syzkaller0>
[  175.754383][T11332] tipc: Disabling bearer <eth:syzkaller0>
[  175.844973][T11337] syzkaller0: entered promiscuous mode
[  175.846863][T11337] syzkaller0: entered allmulticast mode
[  176.101495][T11343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.107756][T11343] syzkaller0: entered promiscuous mode
[  176.109942][T11343] syzkaller0: entered allmulticast mode
[  176.131293][T11343] tipc: Resetting bearer <eth:syzkaller0>
[  176.136457][T11342] tipc: Resetting bearer <eth:syzkaller0>
[  176.146827][T11342] tipc: Disabling bearer <eth:syzkaller0>
[  176.621674][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'.
[  176.816859][T11360] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2125'.
[  177.018515][T11371] syzkaller0: entered promiscuous mode
[  177.020687][T11371] syzkaller0: entered allmulticast mode
[  177.150971][T11379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.153526][T11379] syzkaller0: entered promiscuous mode
[  177.156685][T11379] syzkaller0: entered allmulticast mode
[  177.161392][T11379] tipc: Resetting bearer <eth:syzkaller0>
[  177.173880][T11379] tipc: Disabling bearer <eth:syzkaller0>
[  177.418904][T11390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.421520][T11390] syzkaller0: entered promiscuous mode
[  177.423244][T11390] syzkaller0: entered allmulticast mode
[  177.472716][T11390] tipc: Resetting bearer <eth:syzkaller0>
[  177.476655][T11389] tipc: Resetting bearer <eth:syzkaller0>
[  177.488438][T11389] tipc: Disabling bearer <eth:syzkaller0>
[  177.573549][   T34] audit: type=1800 audit(1766388859.873:3): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2134" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=4072 res=0 errno=0
[  178.909352][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'.
[  179.172487][T11429] syzkaller0: entered promiscuous mode
[  179.175476][T11429] syzkaller0: entered allmulticast mode
[  179.190354][T11429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.194913][T11428] tipc: Resetting bearer <eth:syzkaller0>
[  179.205769][T11428] tipc: Disabling bearer <eth:syzkaller0>
[  179.328047][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  179.331763][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  179.385154][T11437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.401729][T11437] tipc: Disabling bearer <eth:syzkaller0>
[  179.509692][T11443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.529173][T11442] tipc: Disabling bearer <eth:syzkaller0>
[  179.760615][T11455] geneve1: Caught tx_queue_len zero misconfig
[  179.788729][T11455] syzkaller0: entered promiscuous mode
[  179.791150][T11455] syzkaller0: entered allmulticast mode
[  179.978164][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'.
[  180.319969][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2156'.
[  183.272401][T11475] xt_l2tp: missing protocol rule (udp|l2tpip)
[  183.312014][T11477] netlink: 'syz.2.2158': attribute type 1 has an invalid length.
[  199.585432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.588616][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  261.038143][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  322.481148][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  324.383952][   T35] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  324.387123][   T35]       Not tainted syzkaller #0
[  324.389384][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.392869][   T35] task:kworker/0:0     state:D stack:21728 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00080000
[  324.398674][   T35] Workqueue: events rfkill_global_led_trigger_worker
[  324.401670][   T35] Call Trace:
[  324.403342][   T35]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  324.406129][   T35]  __schedule+0x14bc/0x5000
[  324.408322][   T35]  ? __pfx___schedule+0x10/0x10
[  324.410267][   T35]  ? schedule+0x91/0x360
[  324.412012][   T35]  schedule+0x165/0x360
[  324.414581][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.416729][   T35]  __mutex_lock+0x7e6/0x1350
[  324.418572][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.420624][   T35]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  324.423129][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.453779][   T35]  ? process_scheduled_works+0x9ef/0x1770
[  324.456404][   T35]  ? process_scheduled_works+0x9ef/0x1770
[  324.458710][   T35]  rfkill_global_led_trigger_worker+0x27/0xd0
[  324.461190][   T35]  ? process_scheduled_works+0x9ef/0x1770
[  324.463431][   T35]  process_scheduled_works+0xad1/0x1770
[  324.476361][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  324.479288][   T35]  worker_thread+0x8a0/0xda0
[  324.481477][   T35]  kthread+0x711/0x8a0
[  324.483152][   T35]  ? __pfx_worker_thread+0x10/0x10
[  324.485878][   T35]  ? __pfx_kthread+0x10/0x10
[  324.487835][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  324.490120][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  324.492375][   T35]  ? __pfx_kthread+0x10/0x10
[  324.495014][   T35]  ret_from_fork+0x599/0xb30
[  324.497157][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  324.500036][   T35]  ? __switch_to_asm+0x39/0x70
[  324.502061][   T35]  ? __switch_to_asm+0x33/0x70
[  324.504506][   T35]  ? __pfx_kthread+0x10/0x10
[  324.506502][   T35]  ret_from_fork_asm+0x1a/0x30
[  324.508419][   T35]  </TASK>
[  324.509767][   T35] INFO: task syz.0.2000:10969 blocked for more than 143 seconds.
[  324.512788][   T35]       Not tainted syzkaller #0
[  324.515521][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.518855][   T35] task:syz.0.2000      state:D stack:24920 pid:10969 tgid:10969 ppid:5839   task_flags:0x400040 flags:0x00080002
[  324.523461][   T35] Call Trace:
[  324.525436][   T35]  <TASK>
[  324.526638][   T35]  __schedule+0x14bc/0x5000
[  324.528475][   T35]  ? __pfx___schedule+0x10/0x10
[  324.530458][   T35]  ? schedule+0x91/0x360
[  324.532202][   T35]  schedule+0x165/0x360
[  324.535746][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.537871][   T35]  __mutex_lock+0x7e6/0x1350
[  324.539772][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.541743][   T35]  ? rfkill_unregister+0xc8/0x220
[  324.544590][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.546704][   T35]  ? __pfx_device_del+0x10/0x10
[  324.548653][   T35]  ? __cancel_work_sync+0x5c/0x110
[  324.550693][   T35]  rfkill_unregister+0xc8/0x220
[  324.552613][   T35]  nfc_unregister_device+0x96/0x300
[  324.555385][   T35]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  324.557616][   T35]  virtual_ncidev_close+0x56/0x90
[  324.559645][   T35]  __fput+0x44c/0xa70
[  324.561264][   T35]  task_work_run+0x1d4/0x260
[  324.563119][   T35]  ? __pfx_task_work_run+0x10/0x10
[  324.566023][   T35]  ? __se_sys_close_range+0x4ed/0x650
[  324.568192][   T35]  ? exit_to_user_mode_loop+0x55/0x4f0
[  324.570423][   T35]  exit_to_user_mode_loop+0xff/0x4f0
[  324.572499][   T35]  ? rcu_is_watching+0x15/0xb0
[  324.575014][   T35]  do_syscall_64+0x2d0/0xf80
[  324.576892][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.579386][   T35]  ? exc_page_fault+0xab/0x100
[  324.581289][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.583637][   T35] RIP: 0033:0x7f9e0438f7c9
[  324.587837][   T35] RSP: 002b:00007ffcf6347638 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  324.591255][   T35] RAX: 0000000000000000 RBX: 00007f9e045e7da0 RCX: 00007f9e0438f7c9
[  324.594843][   T35] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  324.598013][   T35] RBP: 00007f9e045e7da0 R08: 00000000000001bc R09: 00000019f634792f
[  324.601112][   T35] R10: 00007f9e045e7cb0 R11: 0000000000000246 R12: 0000000000028356
[  324.604755][   T35] R13: 00007f9e045e6090 R14: ffffffffffffffff R15: 00007ffcf6347750
[  324.607883][   T35]  </TASK>
[  324.609152][   T35] INFO: task syz.1.2002:10982 blocked for more than 143 seconds.
[  324.612135][   T35]       Not tainted syzkaller #0
[  324.614731][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.618035][   T35] task:syz.1.2002      state:D stack:24392 pid:10982 tgid:10981 ppid:5835   task_flags:0x400140 flags:0x00080002
[  324.622688][   T35] Call Trace:
[  324.626026][   T35]  <TASK>
[  324.627342][   T35]  __schedule+0x14bc/0x5000
[  324.629280][   T35]  ? __pfx___schedule+0x10/0x10
[  324.631333][   T35]  ? schedule+0x91/0x360
[  324.633003][   T35]  schedule+0x165/0x360
[  324.635631][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.637888][   T35]  __mutex_lock+0x7e6/0x1350
[  324.639760][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.641727][   T35]  ? rfkill_fop_write+0x191/0x570
[  324.643822][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.645816][   T35]  rfkill_fop_write+0x191/0x570
[  324.647772][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  324.649856][   T35]  ? security_kernfs_init_security+0x220/0x290
[  324.652330][   T35]  ? rw_verify_area+0x255/0x4d0
[  324.654448][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  324.656587][   T35]  vfs_write+0x27e/0xb30
[  324.658340][   T35]  ? __pfx_vfs_write+0x10/0x10
[  324.660166][   T35]  ? __fget_files+0x2a/0x420
[  324.662013][   T35]  ? __fget_files+0x2a/0x420
[  324.663939][   T35]  ? __fget_files+0x3a0/0x420
[  324.665799][   T35]  ? __fget_files+0x2a/0x420
[  324.667602][   T35]  ksys_write+0x145/0x250
[  324.669334][   T35]  ? __pfx_ksys_write+0x10/0x10
[  324.671264][   T35]  ? do_syscall_64+0xbe/0xf80
[  324.673086][   T35]  do_syscall_64+0xfa/0xf80
[  324.674986][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.677387][   T35]  ? exc_page_fault+0xab/0x100
[  324.679213][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.681567][   T35] RIP: 0033:0x7fd97a18f7c9
[  324.683396][   T35] RSP: 002b:00007fd97af40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.687041][   T35] RAX: ffffffffffffffda RBX: 00007fd97a3e5fa0 RCX: 00007fd97a18f7c9
[  324.690208][   T35] RDX: 0000000000000008 RSI: 0000200000001080 RDI: 0000000000000007
[  324.693393][   T35] RBP: 00007fd97a1f297f R08: 0000000000000000 R09: 0000000000000000
[  324.697831][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.700839][   T35] R13: 00007fd97a3e6038 R14: 00007fd97a3e5fa0 R15: 00007ffebe39a618
[  324.704748][   T35]  </TASK>
[  324.706042][   T35] INFO: task syz.1.2002:10983 blocked for more than 143 seconds.
[  324.708964][   T35]       Not tainted syzkaller #0
[  324.710860][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.714288][   T35] task:syz.1.2002      state:D stack:25592 pid:10983 tgid:10981 ppid:5835   task_flags:0x400140 flags:0x00080002
[  324.718923][   T35] Call Trace:
[  324.720313][   T35]  <TASK>
[  324.721548][   T35]  __schedule+0x14bc/0x5000
[  324.723403][   T35]  ? __pfx___schedule+0x10/0x10
[  324.725521][   T35]  ? schedule+0x91/0x360
[  324.727283][   T35]  schedule+0x165/0x360
[  324.728908][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.730987][   T35]  __mutex_lock+0x7e6/0x1350
[  324.732823][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.734851][   T35]  ? nfc_dev_down+0x3b/0x290
[  324.736691][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.738758][   T35]  ? do_raw_spin_lock+0x121/0x290
[  324.740817][   T35]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  324.743173][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  324.745453][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  324.747708][   T35]  nfc_dev_down+0x3b/0x290
[  324.749442][   T35]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  324.751642][   T35]  nfc_rfkill_set_block+0x2d/0x100
[  324.753816][   T35]  rfkill_set_block+0x1d2/0x440
[  324.755750][   T35]  rfkill_fop_write+0x44b/0x570
[  324.757703][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  324.759759][   T35]  ? security_kernfs_init_security+0x220/0x290
[  324.762135][   T35]  ? rw_verify_area+0x255/0x4d0
[  324.764425][   T35]  ? __pfx_rfkill_fop_write+0x10/0x10
[  324.766912][   T35]  vfs_write+0x27e/0xb30
[  324.768643][   T35]  ? __pfx_vfs_write+0x10/0x10
[  324.770577][   T35]  ? __fget_files+0x2a/0x420
[  324.773148][   T35]  ? __fget_files+0x2a/0x420
[  324.775158][   T35]  ? __fget_files+0x3a0/0x420
[  324.777062][   T35]  ? __fget_files+0x2a/0x420
[  324.779098][   T35]  ksys_write+0x145/0x250
[  324.781007][   T35]  ? __pfx_ksys_write+0x10/0x10
[  324.783140][   T35]  ? do_syscall_64+0xbe/0xf80
[  324.785297][   T35]  do_syscall_64+0xfa/0xf80
[  324.787123][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.790010][   T35]  ? exc_page_fault+0xab/0x100
[  324.792103][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.794651][   T35] RIP: 0033:0x7fd97a18f7c9
[  324.796522][   T35] RSP: 002b:00007fd9783f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  324.800006][   T35] RAX: ffffffffffffffda RBX: 00007fd97a3e6090 RCX: 00007fd97a18f7c9
[  324.803448][   T35] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007
[  324.807904][   T35] RBP: 00007fd97a1f297f R08: 0000000000000000 R09: 0000000000000000
[  324.811059][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.814365][   T35] R13: 00007fd97a3e6128 R14: 00007fd97a3e6090 R15: 00007ffebe39a618
[  324.817722][   T35]  </TASK>
[  324.819156][   T35] INFO: task syz-executor:11430 blocked for more than 143 seconds.
[  324.822489][   T35]       Not tainted syzkaller #0
[  324.828392][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.831847][   T35] task:syz-executor    state:D stack:26968 pid:11430 tgid:11430 ppid:1      task_flags:0x400040 flags:0x00080000
[  324.836627][   T35] Call Trace:
[  324.837928][   T35]  <TASK>
[  324.839131][   T35]  __schedule+0x14bc/0x5000
[  324.841084][   T35]  ? __pfx___schedule+0x10/0x10
[  324.843341][   T35]  ? schedule+0x91/0x360
[  324.845289][   T35]  schedule+0x165/0x360
[  324.847212][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.849772][   T35]  __mutex_lock+0x7e6/0x1350
[  324.852137][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.854594][   T35]  ? rfkill_register+0x37/0x8e0
[  324.856669][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.858702][   T35]  ? __raw_spin_lock_init+0x45/0x100
[  324.860823][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  324.862931][   T35]  ? device_initialize+0x24b/0x440
[  324.865697][   T35]  rfkill_register+0x37/0x8e0
[  324.867765][   T35]  hci_register_dev+0x3f2/0x8b0
[  324.869850][   T35]  vhci_create_device+0x39c/0x650
[  324.871984][   T35]  vhci_write+0x3ce/0x4a0
[  324.873942][   T35]  vfs_write+0x5c9/0xb30
[  324.875645][   T35]  ? __pfx_vhci_write+0x10/0x10
[  324.877601][   T35]  ? __pfx_vfs_write+0x10/0x10
[  324.879496][   T35]  ksys_write+0x145/0x250
[  324.881284][   T35]  ? __pfx_ksys_write+0x10/0x10
[  324.883928][   T35]  ? do_syscall_64+0xbe/0xf80
[  324.886016][   T35]  do_syscall_64+0xfa/0xf80
[  324.887992][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.890538][   T35]  ? exc_page_fault+0xab/0x100
[  324.892459][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.895152][   T35] RIP: 0033:0x7f67e358e240
[  324.897066][   T35] RSP: 002b:00007ffe5c13fb28 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  324.900524][   T35] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f67e358e240
[  324.904336][   T35] RDX: 0000000000000002 RSI: 00007ffe5c13fb3a RDI: 00000000000000ca
[  324.908075][   T35] RBP: 00007f67e37e67b8 R08: 0000000000000000 R09: 00007f67e431d6c0
[  324.911422][   T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  324.915738][   T35] R13: 0000000000000003 R14: 00007ffe5c13fe88 R15: 0000000000000000
[  324.918881][   T35]  </TASK>
[  324.920178][   T35] INFO: task syz-executor:11434 blocked for more than 143 seconds.
[  324.923366][   T35]       Not tainted syzkaller #0
[  324.925415][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  324.928819][   T35] task:syz-executor    state:D stack:27832 pid:11434 tgid:11434 ppid:1      task_flags:0x400040 flags:0x00080000
[  324.933371][   T35] Call Trace:
[  324.934845][   T35]  <TASK>
[  324.936032][   T35]  __schedule+0x14bc/0x5000
[  324.937814][   T35]  ? __pfx___schedule+0x10/0x10
[  324.939736][   T35]  ? schedule+0x91/0x360
[  324.941422][   T35]  schedule+0x165/0x360
[  324.943053][   T35]  schedule_preempt_disabled+0x13/0x30
[  324.945459][   T35]  __mutex_lock+0x7e6/0x1350
[  324.947349][   T35]  ? __mutex_lock+0x5bb/0x1350
[  324.949275][   T35]  ? rfkill_register+0x37/0x8e0
[  324.951277][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  324.953259][   T35]  ? __raw_spin_lock_init+0x45/0x100
[  324.955507][   T35]  ? __init_waitqueue_head+0xa9/0x150
[  324.957634][   T35]  ? device_initialize+0x24b/0x440
[  324.959687][   T35]  rfkill_register+0x37/0x8e0
[  324.961604][   T35]  hci_register_dev+0x3f2/0x8b0
[  324.963514][   T35]  vhci_create_device+0x39c/0x650
[  324.965594][   T35]  vhci_write+0x3ce/0x4a0
[  324.967283][   T35]  vfs_write+0x5c9/0xb30
[  324.968917][   T35]  ? __pfx_vhci_write+0x10/0x10
[  324.970758][   T35]  ? __pfx_vfs_write+0x10/0x10
[  324.972675][   T35]  ksys_write+0x145/0x250
[  324.974550][   T35]  ? __pfx_ksys_write+0x10/0x10
[  324.976523][   T35]  ? do_syscall_64+0xbe/0xf80
[  324.978451][   T35]  do_syscall_64+0xfa/0xf80
[  324.980251][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.982621][   T35]  ? exc_page_fault+0xab/0x100
[  324.984644][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.986910][   T35] RIP: 0033:0x7fdf8ed8e240
[  324.988638][   T35] RSP: 002b:00007ffe65a99d18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  324.991876][   T35] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdf8ed8e240
[  324.995077][   T35] RDX: 0000000000000002 RSI: 00007ffe65a99d2a RDI: 00000000000000ca
[  324.998106][   T35] RBP: 00007fdf8efe67b8 R08: 0000000000000000 R09: 00007fdf8fb1d6c0
[  325.001161][   T35] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  325.004325][   T35] R13: 0000000000000003 R14: 00007ffe65a9a078 R15: 0000000000000000
[  325.007482][   T35]  </TASK>
[  325.008752][   T35] 
[  325.008752][   T35] Showing all locks held in the system:
[  325.011733][   T35] 3 locks held by kworker/0:0/9:
[  325.013982][   T35]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  325.018332][   T35]  #1: ffffc900000e7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  325.023554][   T35]  #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  325.030084][   T35] 1 lock held by khungtaskd/35:
[  325.032096][   T35]  #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  325.035699][   T35] 1 lock held by klogd/5267:
[  325.037307][   T35]  #0: ffff88812103a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  325.040376][   T35] 2 locks held by getty/5655:
[  325.041800][   T35]  #0: ffff88816ed770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  325.044768][   T35]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  325.047736][   T35] 2 locks held by syz.0.2000/10969:
[  325.049283][   T35]  #0: ffff88816e7bb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300
[  325.052062][   T35]  #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  325.055086][   T35] 1 lock held by syz.1.2002/10982:
[  325.056679][   T35]  #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  325.059649][   T35] 2 locks held by syz.1.2002/10983:
[  325.061170][   T35]  #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  325.064264][   T35]  #1: ffff88816e7bb100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290
[  325.067039][   T35] 2 locks held by syz-executor/11430:
[  325.068864][   T35]  #0: ffff8881135f3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  325.072351][   T35]  #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  325.075504][   T35] 2 locks held by syz-executor/11434:
[  325.077070][   T35]  #0: ffff88816a586118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  325.080061][   T35]  #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  325.083047][   T35] 2 locks held by syz.2.2159/11479:
[  325.085024][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.088047][   T35]  #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  325.091740][   T35] 1 lock held by syz-executor/11482:
[  325.094042][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.096875][   T35] 1 lock held by syz-executor/11492:
[  325.098846][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.101477][   T35] 1 lock held by syz-executor/11494:
[  325.103251][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.106563][   T35] 1 lock held by syz-executor/11496:
[  325.108343][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.111126][   T35] 1 lock held by syz-executor/11498:
[  325.112919][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.115903][   T35] 1 lock held by syz-executor/11500:
[  325.117732][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.120971][   T35] 1 lock held by syz-executor/11502:
[  325.122831][   T35]  #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  325.125680][   T35] 
[  325.126504][   T35] =============================================
[  325.126504][   T35] 
[  325.129152][   T35] NMI backtrace for cpu 1
[  325.129161][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  325.129169][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.129174][   T35] Call Trace:
[  325.129179][   T35]  <TASK>
[  325.129183][   T35]  dump_stack_lvl+0x189/0x250
[  325.129198][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.129206][   T35]  ? __pfx__printk+0x10/0x10
[  325.129247][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  325.129260][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  325.129270][   T35]  ? __pfx__printk+0x10/0x10
[  325.129281][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  325.129292][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  325.129309][   T35]  sys_info+0x135/0x170
[  325.129317][   T35]  watchdog+0xf95/0xfe0
[  325.129328][   T35]  ? watchdog+0x20a/0xfe0
[  325.129344][   T35]  kthread+0x711/0x8a0
[  325.129359][   T35]  ? __pfx_watchdog+0x10/0x10
[  325.129372][   T35]  ? __pfx_kthread+0x10/0x10
[  325.129386][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.129402][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  325.129412][   T35]  ? __pfx_kthread+0x10/0x10
[  325.129425][   T35]  ret_from_fork+0x599/0xb30
[  325.129439][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  325.129457][   T35]  ? __switch_to_asm+0x39/0x70
[  325.129470][   T35]  ? __switch_to_asm+0x33/0x70
[  325.129480][   T35]  ? __pfx_kthread+0x10/0x10
[  325.129488][   T35]  ret_from_fork_asm+0x1a/0x30
[  325.129502][   T35]  </TASK>
[  325.129505][   T35] Sending NMI from CPU 1 to CPUs 0:
[  325.180317][    C0] NMI backtrace for cpu 0
[  325.180332][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  325.180342][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.180348][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  325.180363][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 <e9> c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  325.180371][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286
[  325.180380][    C0] RAX: d12b48e9da199000 RBX: ffffffff81978fda RCX: d12b48e9da199000
[  325.180386][    C0] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360
[  325.180392][    C0] RBP: ffffffff8dc07ea8 R08: ffff8881210336db R09: 1ffff110242066db
[  325.180398][    C0] R10: dffffc0000000000 R11: ffffed10242066dc R12: ffffffff8f822070
[  325.180404][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  325.180410][    C0] FS:  0000000000000000(0000) GS:ffff88818e835000(0000) knlGS:0000000000000000
[  325.180418][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.180424][    C0] CR2: 00007fc90da87e20 CR3: 00000001122f0000 CR4: 00000000000006f0
[  325.180462][    C0] Call Trace:
[  325.180468][    C0]  <TASK>
[  325.180472][    C0]  default_idle+0x13/0x20
[  325.180483][    C0]  default_idle_call+0x73/0xb0
[  325.180494][    C0]  do_idle+0x1ea/0x520
[  325.180505][    C0]  ? irqentry_exit+0x5ba/0x660
[  325.180514][    C0]  ? __pfx_do_idle+0x10/0x10
[  325.180528][    C0]  cpu_startup_entry+0x44/0x60
[  325.180537][    C0]  rest_init+0x2de/0x300
[  325.180548][    C0]  start_kernel+0x3a7/0x400
[  325.180559][    C0]  x86_64_start_reservations+0x24/0x30
[  325.180570][    C0]  x86_64_start_kernel+0x143/0x1c0
[  325.180579][    C0]  common_startup_64+0x13e/0x147
[  325.180596][    C0]  </TASK>
[  325.243895][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  325.246897][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  325.250562][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.254538][   T35] Call Trace:
[  325.255886][   T35]  <TASK>
[  325.257105][   T35]  dump_stack_lvl+0x99/0x250
[  325.259016][   T35]  ? __asan_memcpy+0x40/0x70
[  325.260896][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.262994][   T35]  ? __pfx__printk+0x10/0x10
[  325.264898][   T35]  vpanic+0x237/0x6d0
[  325.266628][   T35]  ? __pfx_vpanic+0x10/0x10
[  325.268512][   T35]  ? preempt_schedule_common+0x83/0xd0
[  325.270713][   T35]  panic+0xb9/0xc0
[  325.272307][   T35]  ? __pfx_panic+0x10/0x10
[  325.274312][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  325.276841][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  325.279473][   T35]  watchdog+0xfdf/0xfe0
[  325.281305][   T35]  ? watchdog+0x20a/0xfe0
[  325.283064][   T35]  kthread+0x711/0x8a0
[  325.284675][   T35]  ? __pfx_watchdog+0x10/0x10
[  325.286591][   T35]  ? __pfx_kthread+0x10/0x10
[  325.288437][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.290483][   T35]  ? lockdep_hardirqs_on+0x98/0x140
[  325.292590][   T35]  ? __pfx_kthread+0x10/0x10
[  325.294457][   T35]  ret_from_fork+0x599/0xb30
[  325.295898][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  325.297453][   T35]  ? __switch_to_asm+0x39/0x70
[  325.298940][   T35]  ? __switch_to_asm+0x33/0x70
[  325.300545][   T35]  ? __pfx_kthread+0x10/0x10
[  325.302049][   T35]  ret_from_fork_asm+0x1a/0x30
[  325.303573][   T35]  </TASK>
[  325.305322][   T35] Kernel Offset: disabled
[  325.306704][   T35] Rebooting in 86400 seconds..
