last executing test programs:

17.264034838s ago: executing program 0 (id=2030):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x1) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0xa180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

17.075407992s ago: executing program 0 (id=2036):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.075202732s ago: executing program 0 (id=2037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)

17.015361495s ago: executing program 0 (id=2038):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x7448d6d, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)

17.014837807s ago: executing program 0 (id=2039):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000006558000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x0)

16.965727504s ago: executing program 0 (id=2040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0x9}, 0x20)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13b88a8", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="2000000004000000041000ee0900000000000000cc438b49262acf4de60d204d5f25c3c3e92dad456804a56517de6b25678f34fbe8c84bd3741692e577d479fddafb1490cdc4ad9bb2be63adaa25af64ac46922b49b9b1f52b26ebdf20350f0a1cddddfc110c25486d4649bc9bf977399d77e8b8debeb986fc8fa097c070f1efe6d78361b208fa88afac5c06701d97f2d1c38f9a30afda0bf90dd5c33d38bf1167b0798495f5ad2fe8011d1cc5bebdd821a8c13a3efc48a23187cbac2c81862e2af4b1f51f605aadf3f62de81abb307d72af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x370, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x340, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0xb, 0x0, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_STAB={0x104, 0x2, "a7487241196ee8037a503169b80e84ecd0f80d3fcd1b8160ba840072dab7552ff8adcfe74792a15b4a7e95038885c31b45eea82cd0e07711972c23c1525ce9a3db6fb4d31cb43c51559c6cca4adabc76161105525064c05fe7d1f07b4a479bcbece7513a099115b8ccd6935833e79ff6e083b2840ac23ef7e6314e1c209904d56f2786252cb765b849b21a8ceccdc3c0e217816bc3868802b59320fcc4cc2a6bd6eb499b4fa71f5a2efb94e8264b027708015e8b40404ae8c0ec4df9a04bc1eb019686860092ce8575aa69b760a96e939e3b3db9ab0e28b2a77ba39b9bbe0723daeaab2ed34c31aaa9a4bb81a5de29deb37edf62b85b5bb12ab93a6e25acc5f7"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "9a493467bcc004b3a62f1e357852daf4a0c32a12657e1da47db416a163ad10fd446ab2e03741af59bc09a5b5533a187787ea150ef0322aeaba59e26b5199c8a6529bdfa57a1713a5b4cc5aca3842850e28f33e338120c7466b17bd38d52cfc4b33bb88ae0d7df6b7e61fc48ace6e276a0a26efb7cc77b421b86953fe1c518a50eb585de298cd25f2a321407db6b4b65a65124c575baeee4f6375282398a240e42b833803605cf44631918b20fee4a863e0b08f8e9c16e5c3082911cb887718ff323ea09e11cd1501f442fa855e16a433e00f2aab1495de281d650bf0ec8876a5e45b36cba61aa0e0352717b0cdb9c89ff1a8ddfaf8c5426a8c8106fc67e5d273"}]}}]}, 0x370}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x54881}, 0x8000)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
close(r11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r13=>0xffffffffffffffff})
recvmmsg(r13, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/130, 0x82}], 0x4, &(0x7f0000000280)=""/158, 0x9e}, 0xd}], 0x1, 0x40010123, &(0x7f0000000700)={0x0, 0x989680})
ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

16.964212848s ago: executing program 2 (id=2041):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110013004abee33908f8eef16f162471f400000005000200020000000800030005ac0f0005000900010000001c"], 0x58}}, 0x0)

16.914630533s ago: executing program 2 (id=2042):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r0, 0x0, 0x0)

16.913490327s ago: executing program 2 (id=2043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100010000"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

16.912807107s ago: executing program 2 (id=2044):
unshare(0x28040680)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000340)=0x5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080), 0x8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc)
sendmmsg$sock(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x10, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, 0x20)

16.825578955s ago: executing program 2 (id=2045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)

16.825254357s ago: executing program 2 (id=2046):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004100)={0x18, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x4000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)={0x7c, 0x0, '\x00', [@pad1]}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001000000000000be3020fd906300003a00ff010000000000000000000000000001000000000000003deaf52f40113bb3c5e3bb846e997c0000"], 0x0)
r2 = socket(0x2, 0x80805, 0x0)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009640)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000009680)=0x3, 0x12)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(r7, r2, 0x0, 0x9708)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x6, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x79, 0x10, 0x8, 0x8}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ldst={0x2, 0x1, 0x1, 0x5, 0x7, 0x4, 0xfffffffffffffffc}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x31, '\x00', 0x0, @sk_reuseport}, 0x94)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x1}, 0x8)

15.385407229s ago: executing program 1 (id=2055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c7ffffffe0a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000110a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800d8400000000d080001400000000008000340000000020900010073797a30000000001400000011004498fdf4c8d4290ae0f032864fcc010000000000000000000000000ae71124c2a014621e2509193152996f85efd8b3dd544cf6d57a91621bddfda740dfd6943139d9202f2d034f113536ea6c00dc9c3d4733e23d7070aac8e05793a17a30bec47c8c1e6916627a900cc057da63267a420e90793d616b0f9f8ba90be3c60a6da998c8cfeb7ab990623fc1a075a26babd8ada57b48996c0502c84ac0c638ab4caeec7357509e6d07fc"], 0xc8}}, 0x0)

15.385140971s ago: executing program 1 (id=2056):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_PRIORITY={0x6, 0x6, 0xffff5c04}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x4c040)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r3, 0x2000)

15.185870233s ago: executing program 1 (id=2057):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000005865000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x0)

15.185648501s ago: executing program 1 (id=2058):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
socket$caif_stream(0x25, 0x1, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x2, 0x4b, 0x0, 0x40f00, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0, 0xf7fffffe, 0x0, 0x0, 0x0, 0xe}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000540)={'\x00', 0x2})
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000)
socket$nl_generic(0x10, 0x3, 0x10)

15.055035655s ago: executing program 1 (id=2059):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000d17750375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf82f26b2e00080027"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)

15.054646382s ago: executing program 1 (id=2060):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x5, 0x0, 0x0, {r1, r2/1000+60000}, {}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x3a, 0x2, 0x0, 0x0, "22e2daf4d6c8cea2043a6baf11c25c0462eb345cecc952e84961173372d672d2916bbac3dc836f51fe2626af7eaac71db6dfb3e712a2243180f20083f5a59dc2"}}, 0x80}, 0x1, 0x0, 0x0, 0x31ffb64d540d80b8}, 0xc890)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r0, &(0x7f0000000080), 0x10) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f00000002c0)) (async)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x5, 0x0, 0x0, {r1, r2/1000+60000}, {}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x3a, 0x2, 0x0, 0x0, "22e2daf4d6c8cea2043a6baf11c25c0462eb345cecc952e84961173372d672d2916bbac3dc836f51fe2626af7eaac71db6dfb3e712a2243180f20083f5a59dc2"}}, 0x80}, 0x1, 0x0, 0x0, 0x31ffb64d540d80b8}, 0xc890) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)

1.024008374s ago: executing program 32 (id=2040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x0, 0x9}, 0x20)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13b88a8", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="2000000004000000041000ee0900000000000000cc438b49262acf4de60d204d5f25c3c3e92dad456804a56517de6b25678f34fbe8c84bd3741692e577d479fddafb1490cdc4ad9bb2be63adaa25af64ac46922b49b9b1f52b26ebdf20350f0a1cddddfc110c25486d4649bc9bf977399d77e8b8debeb986fc8fa097c070f1efe6d78361b208fa88afac5c06701d97f2d1c38f9a30afda0bf90dd5c33d38bf1167b0798495f5ad2fe8011d1cc5bebdd821a8c13a3efc48a23187cbac2c81862e2af4b1f51f605aadf3f62de81abb307d72af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r6}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000900)}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x370, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x340, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0xb, 0x0, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "9a493467bcc004b3a62f1e357852daf4a0c32a12657e1da47db416a163ad10fd446ab2e03741af59bc09a5b5533a187787ea150ef0322aeaba59e26b5199c8a6529bdfa57a1713a5b4cc5aca3842850e28f33e338120c7466b17bd38d52cfc4b33bb88ae0d7df6b7e61fc48ace6e276a0a26efb7cc77b421b86953fe1c518a50eb585de298cd25f2a321407db6b4b65a65124c575baeee4f6375282398a240e42b833803605cf44631918b20fee4a863e0b08f8e9c16e5c3082911cb887718ff323ea09e11cd1501f442fa855e16a433e00f2aab1495de281d650bf0ec8876a5e45b36cba61aa0e0352717b0cdb9c89ff1a8ddfaf8c5426a8c8106fc67e5d273"}]}}]}, 0x370}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x54881}, 0x8000)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
close(r11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r13=>0xffffffffffffffff})
recvmmsg(r13, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/130, 0x82}], 0x4, &(0x7f0000000280)=""/158, 0x9e}, 0xd}], 0x1, 0x40010123, &(0x7f0000000700)={0x0, 0x989680})
ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

975.641041ms ago: executing program 33 (id=2046):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004100)={0x18, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x4000)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)={0x7c, 0x0, '\x00', [@pad1]}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001000000000000be3020fd906300003a00ff010000000000000000000000000001000000000000003deaf52f40113bb3c5e3bb846e997c0000"], 0x0)
r2 = socket(0x2, 0x80805, 0x0)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009640)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000009680)=0x3, 0x12)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(r7, r2, 0x0, 0x9708)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x6, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffd, 0x79, 0x10, 0x8, 0x8}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @ldst={0x2, 0x1, 0x1, 0x5, 0x7, 0x4, 0xfffffffffffffffc}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x31, '\x00', 0x0, @sk_reuseport}, 0x94)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x80, 0x0, 0x3, 0x1}, 0x8)

0s ago: executing program 34 (id=2060):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x5, 0x0, 0x0, {r1, r2/1000+60000}, {}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x3a, 0x2, 0x0, 0x0, "22e2daf4d6c8cea2043a6baf11c25c0462eb345cecc952e84961173372d672d2916bbac3dc836f51fe2626af7eaac71db6dfb3e712a2243180f20083f5a59dc2"}}, 0x80}, 0x1, 0x0, 0x0, 0x31ffb64d540d80b8}, 0xc890)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r0, &(0x7f0000000080), 0x10) (async)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f00000002c0)) (async)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x5, 0x0, 0x0, {r1, r2/1000+60000}, {}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x3a, 0x2, 0x0, 0x0, "22e2daf4d6c8cea2043a6baf11c25c0462eb345cecc952e84961173372d672d2916bbac3dc836f51fe2626af7eaac71db6dfb3e712a2243180f20083f5a59dc2"}}, 0x80}, 0x1, 0x0, 0x0, 0x31ffb64d540d80b8}, 0xc890) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async)
ioctl$RFKILL_IOCTL_NOINPUT(r10, 0x5201) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28629' (ED25519) to the list of known hosts.
syzkaller login: [   41.819947][ T5769] cgroup: Unknown subsys name 'net'
[   41.920706][ T5769] cgroup: Unknown subsys name 'cpuset'
[   41.926858][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.233467][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.081580][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.088623][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.092657][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.095704][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.109065][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.112197][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.113612][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.117765][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.121220][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.125946][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.126972][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.132273][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.136084][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.144037][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.147857][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.398110][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   47.445582][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   47.483373][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   47.516795][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.519959][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.522757][ T5843] bridge_slave_0: entered allmulticast mode
[   47.525501][ T5843] bridge_slave_0: entered promiscuous mode
[   47.549832][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.552369][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.554640][ T5843] bridge_slave_1: entered allmulticast mode
[   47.557262][ T5843] bridge_slave_1: entered promiscuous mode
[   47.623660][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.626102][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.629196][ T5841] bridge_slave_0: entered allmulticast mode
[   47.632244][ T5841] bridge_slave_0: entered promiscuous mode
[   47.643018][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.646233][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.648819][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.651602][ T5841] bridge_slave_1: entered allmulticast mode
[   47.654404][ T5841] bridge_slave_1: entered promiscuous mode
[   47.680606][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.699032][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.701334][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.703643][ T5849] bridge_slave_0: entered allmulticast mode
[   47.706268][ T5849] bridge_slave_0: entered promiscuous mode
[   47.714327][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.726000][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.729314][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.732251][ T5849] bridge_slave_1: entered allmulticast mode
[   47.735385][ T5849] bridge_slave_1: entered promiscuous mode
[   47.740496][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.756186][ T5843] team0: Port device team_slave_0 added
[   47.762030][ T5843] team0: Port device team_slave_1 added
[   47.817052][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.822085][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.838405][ T5841] team0: Port device team_slave_0 added
[   47.841660][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.844398][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.854873][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.873975][ T5841] team0: Port device team_slave_1 added
[   47.877917][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.881112][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.890811][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.896379][ T5849] team0: Port device team_slave_0 added
[   47.899915][ T5849] team0: Port device team_slave_1 added
[   47.933322][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.935724][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.944252][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.957812][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.960649][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.969909][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.974551][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.976973][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.985743][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.990144][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.992506][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.001734][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.044258][ T5843] hsr_slave_0: entered promiscuous mode
[   48.046580][ T5843] hsr_slave_1: entered promiscuous mode
[   48.073789][ T5849] hsr_slave_0: entered promiscuous mode
[   48.076037][ T5849] hsr_slave_1: entered promiscuous mode
[   48.078416][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   48.080338][ T5849] Cannot create hsr debugfs directory
[   48.103657][ T5841] hsr_slave_0: entered promiscuous mode
[   48.106037][ T5841] hsr_slave_1: entered promiscuous mode
[   48.108277][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   48.110261][ T5841] Cannot create hsr debugfs directory
[   48.309308][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.315197][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.324085][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.342946][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.384961][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.391748][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.396395][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.403007][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.471652][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.479816][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.500947][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.505196][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.554018][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.560598][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.574975][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   48.590580][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.593544][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.603080][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   48.607308][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.610217][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.623997][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.626515][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.647797][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.650473][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.664800][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.684926][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.713409][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   48.727157][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.729564][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.739070][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.741674][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.795385][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.851836][ T5843] veth0_vlan: entered promiscuous mode
[   48.864945][ T5843] veth1_vlan: entered promiscuous mode
[   48.907528][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.921065][ T5843] veth0_macvtap: entered promiscuous mode
[   48.926832][ T5843] veth1_macvtap: entered promiscuous mode
[   48.936596][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.964065][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.982492][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.993801][ T5895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.997381][ T5895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.006644][ T5895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.010272][ T5849] veth0_vlan: entered promiscuous mode
[   49.020446][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.036864][ T5841] veth0_vlan: entered promiscuous mode
[   49.041680][ T5849] veth1_vlan: entered promiscuous mode
[   49.059214][ T5841] veth1_vlan: entered promiscuous mode
[   49.082238][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.085047][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.087673][ T5849] veth0_macvtap: entered promiscuous mode
[   49.106579][ T5849] veth1_macvtap: entered promiscuous mode
[   49.117347][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.122158][ T5841] veth0_macvtap: entered promiscuous mode
[   49.126245][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.127449][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.132464][ T5846] Bluetooth: hci1: command tx timeout
[   49.136242][ T5841] veth1_macvtap: entered promiscuous mode
[   49.144334][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.163067][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.174410][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.182266][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.186523][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.195461][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.202130][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.208941][ T5846] Bluetooth: hci2: command tx timeout
[   49.208984][ T5233] Bluetooth: hci0: command tx timeout
[   49.215877][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.232407][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.236202][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.252069][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.257535][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.324339][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.327759][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.348281][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.351215][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.372788][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.381749][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.394360][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.399896][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.484652][ T5917] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   49.489888][ T5918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   49.809689][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.813004][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.816520][ T5928] netlink: 'syz.2.7': attribute type 13 has an invalid length.
[   49.820764][ T5928] netlink: 'syz.2.7': attribute type 11 has an invalid length.
[   49.832978][ T5927] delete_channel: no stack
[   49.910519][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.915528][ T5920] bond0: (slave rose0): Enslaving as an active interface with an up link
[   50.300571][   T33] audit: type=1800 audit(1755359939.895:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10" name="memory.events" dev="tmpfs" ino=23 res=0 errno=0
[   50.384011][ T5958] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   50.481085][ T5965] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.487147][ T5963] Zero length message leads to an empty skb
[   50.489859][ T5965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   50.553837][ T5969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15'.
[   50.560013][ T5970] sctp: [Deprecated]: syz.0.17 (pid 5970) Use of struct sctp_assoc_value in delayed_ack socket option.
[   50.560013][ T5970] Use struct sctp_sack_info instead
[   50.921531][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'.
[   51.113343][ T6004] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   51.117282][ T6004] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   51.208325][ T5233] Bluetooth: hci1: command tx timeout
[   51.288357][ T5233] Bluetooth: hci0: command tx timeout
[   51.288848][ T5846] Bluetooth: hci2: command tx timeout
[   51.468395][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   51.469864][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   51.502742][ T6029] tipc: Trying to set illegal importance in message
[   51.803301][ T6038] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   51.807388][ T6038] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   51.855180][ T6041] Bluetooth: MGMT ver 1.23
[   52.051445][ T6048] bridge_slave_0: left allmulticast mode
[   52.053753][ T6048] bridge_slave_0: left promiscuous mode
[   52.056810][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.066040][ T6048] bridge_slave_1: left allmulticast mode
[   52.070547][ T6048] bridge_slave_1: left promiscuous mode
[   52.072953][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.079633][ T6048] bond0: (slave bond_slave_0): Releasing backup interface
[   52.084547][ T6048] bond0: (slave bond_slave_1): Releasing backup interface
[   52.093938][ T6048] team0: Port device team_slave_0 removed
[   52.100595][ T6048] team0: Port device team_slave_1 removed
[   52.102989][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.105444][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.110718][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.113209][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.164056][ T6052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.181412][ T6052] netlink: 19 bytes leftover after parsing attributes in process `syz.2.44'.
[   52.227227][ T6052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   52.253066][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   52.355338][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030827c00: rx timeout, send abort
[   52.359104][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030827800: rx timeout, send abort
[   52.362123][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030827c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   52.367914][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030827800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   52.481789][ T6080] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   52.485168][ T6080] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   52.641930][ T6100] tipc: Started in network mode
[   52.643705][ T6100] tipc: Node identity 8a7579352742, cluster identity 4711
[   52.646577][ T6100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.653996][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[   52.678665][ T6099] tipc: Disabling bearer <eth:syzkaller0>
[   52.827718][ T6117] Illegal XDP return value 4294967282 on prog  (id 17) dev N/A, expect packet loss!
[   52.844391][ T6119] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   52.848054][ T6119] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   52.892634][ T6125] lo: entered allmulticast mode
[   52.913342][ T6125] lo: left allmulticast mode
[   52.921339][ T6128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.931850][ T6128] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.077086][ T6136] netlink: 'syz.1.71': attribute type 25 has an invalid length.
[   53.254292][ T6146] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   53.257378][ T6146] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   53.288259][ T5233] Bluetooth: hci1: command tx timeout
[   53.370348][ T5233] Bluetooth: hci2: command tx timeout
[   53.378352][ T5233] Bluetooth: hci0: command tx timeout
[   53.596192][ T6169] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   53.602563][ T6169] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   53.631234][ T6171] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   54.017549][ T6204] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   54.028830][ T6204] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   54.133799][ T6217] netlink: 'syz.1.102': attribute type 10 has an invalid length.
[   54.139873][ T6217] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   54.452077][ T6255] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   54.455121][ T6255] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   54.547477][ T6261] netlink: 'syz.0.120': attribute type 10 has an invalid length.
[   54.559926][ T6261] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   54.735254][ T6274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   54.737744][ T6274] IPv6: NLM_F_CREATE should be set when creating new route
[   54.789842][ T6284] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   54.792928][ T6284] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   54.871635][ T6290] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   54.875457][ T6290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   55.143764][ T6313] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   55.147573][ T6313] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   55.364233][ T6322] __nla_validate_parse: 11 callbacks suppressed
[   55.364243][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'.
[   55.369791][ T5233] Bluetooth: hci1: command tx timeout
[   55.371716][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'.
[   55.405373][ T6328] netlink: 45 bytes leftover after parsing attributes in process `syz.2.144'.
[   55.426211][ T6328] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   55.450413][ T6328] netlink: 'syz.2.144': attribute type 12 has an invalid length.
[   55.452934][ T6328] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.144'.
[   55.456642][ T6328] netlink: 'syz.2.144': attribute type 2 has an invalid length.
[   55.460263][ T5233] Bluetooth: hci0: command tx timeout
[   55.460354][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[   55.467551][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   55.866769][ T6342] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.147'.
[   56.133611][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'.
[   56.318823][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'.
[   56.321994][ T6376] x_tables: ip_tables: udp match: only valid for protocol 17
[   56.430162][ T6388] nbd: must specify a size in bytes for the device
[   56.513507][ T6398] ip6tnl1: entered allmulticast mode
[   56.560835][ T6405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.171'.
[   56.611686][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'.
[   56.693041][ T6420] netlink: 'syz.1.176': attribute type 2 has an invalid length.
[   56.812779][ T6431] netlink: 'syz.1.181': attribute type 11 has an invalid length.
[   56.960979][ T5856] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   57.459072][ T1091] wlan1: Trigger new scan to find an IBSS to join
[   57.529419][ T5846] Bluetooth: hci2: command 0x0419 tx timeout
[   57.810115][ T6464] syzkaller0: entered promiscuous mode
[   57.812221][ T6464] syzkaller0: entered allmulticast mode
[   57.841657][ T6469] openvswitch: netlink: Flow key attr not present in new flow.
[   57.848066][ T6471] openvswitch: netlink: Flow key attr not present in new flow.
[   58.099382][ T6486] netlink: 'syz.1.204': attribute type 33 has an invalid length.
[   58.141891][ T6506] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   58.145316][ T6506] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   58.211133][ T5311] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   58.228960][ T5311] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID ve2.67 Device [syz0] on aa:aa:aa:aa:aa:aa
[   58.252209][ T6516] raw_sendmsg: syz.2.213 forgot to set AF_INET. Fix it!
[   58.775430][ T6575] netlink: 'syz.0.239': attribute type 12 has an invalid length.
[   58.893895][ T6582] bond0: Unable to set up delay as MII monitoring is disabled
[   59.357426][ T5856] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   59.552883][ T6639] netlink: 'syz.1.264': attribute type 12 has an invalid length.
[   59.556070][ T6639] netlink: 'syz.1.264': attribute type 11 has an invalid length.
[   60.369572][ T6667] tipc: Enabling of bearer <et:g> rejected, media not registered
[   60.378106][ T6667] bridge1: entered promiscuous mode
[   60.381468][ T6667] bridge1: entered allmulticast mode
[   60.384468][ T6667] team0: Port device bridge1 added
[   60.412210][   T36] wlan1: Trigger new scan to find an IBSS to join
[   60.471952][ T6680] __nla_validate_parse: 49 callbacks suppressed
[   60.471966][ T6680] netlink: 71 bytes leftover after parsing attributes in process `syz.0.280'.
[   60.560857][ T6691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.281'.
[   60.563698][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'.
[   60.740674][ T6704] netlink: 52 bytes leftover after parsing attributes in process `syz.0.291'.
[   60.915032][ T6718] syz.0.297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.921576][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.0.297 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   60.921588][ T6718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.921592][ T6718] Call Trace:
[   60.921596][ T6718]  <TASK>
[   60.921599][ T6718]  dump_stack_lvl+0x189/0x250
[   60.921613][ T6718]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.921623][ T6718]  ? __pfx__printk+0x10/0x10
[   60.921633][ T6718]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.921642][ T6718]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.921650][ T6718]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.921659][ T6718]  warn_alloc+0x214/0x310
[   60.921672][ T6718]  ? stack_depot_save_flags+0x41b/0x860
[   60.921681][ T6718]  ? __pfx_warn_alloc+0x10/0x10
[   60.921691][ T6718]  ? kasan_save_track+0x4f/0x80
[   60.921699][ T6718]  ? xskq_create+0x56/0x170
[   60.921707][ T6718]  ? xsk_init_queue+0xb0/0x110
[   60.921715][ T6718]  ? xsk_setsockopt+0x4dc/0x8d0
[   60.921723][ T6718]  ? do_sock_setsockopt+0x17c/0x1b0
[   60.921729][ T6718]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   60.921738][ T6718]  ? do_syscall_64+0xfa/0x3b0
[   60.921751][ T6718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.921766][ T6718]  __vmalloc_node_range_noprof+0x125/0x12f0
[   60.921800][ T6718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.921821][ T6718]  ? __kasan_kmalloc+0x93/0xb0
[   60.921838][ T6718]  vmalloc_user_noprof+0xad/0xf0
[   60.921855][ T6718]  ? xskq_create+0xbf/0x170
[   60.921868][ T6718]  xskq_create+0xbf/0x170
[   60.921885][ T6718]  xsk_init_queue+0xb0/0x110
[   60.921900][ T6718]  xsk_setsockopt+0x4dc/0x8d0
[   60.921915][ T6718]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.921929][ T6718]  ? __pfx_aa_sk_perm+0x10/0x10
[   60.921948][ T6718]  ? aa_sock_opt_perm+0xff/0x1b0
[   60.921968][ T6718]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.921983][ T6718]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.921996][ T6718]  do_sock_setsockopt+0x17c/0x1b0
[   60.922007][ T6718]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.922017][ T6718]  do_syscall_64+0xfa/0x3b0
[   60.922026][ T6718]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.922034][ T6718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.922040][ T6718]  ? exc_page_fault+0x9f/0xf0
[   60.922049][ T6718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.922055][ T6718] RIP: 0033:0x7f929858ebe9
[   60.922062][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.922068][ T6718] RSP: 002b:00007f9299374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.922075][ T6718] RAX: ffffffffffffffda RBX: 00007f92987b5fa0 RCX: 00007f929858ebe9
[   60.922080][ T6718] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   60.922084][ T6718] RBP: 00007f9298611e19 R08: 0000000000000004 R09: 0000000000000000
[   60.922088][ T6718] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.922092][ T6718] R13: 00007f92987b6038 R14: 00007f92987b5fa0 R15: 00007ffe54c39898
[   60.922102][ T6718]  </TASK>
[   60.922105][ T6718] Mem-Info:
[   61.028975][ T6718] active_anon:5759 inactive_anon:0 isolated_anon:0
[   61.028975][ T6718]  active_file:1380 inactive_file:38209 isolated_file:0
[   61.028975][ T6718]  unevictable:1768 dirty:1503 writeback:0
[   61.028975][ T6718]  slab_reclaimable:9377 slab_unreclaimable:52008
[   61.028975][ T6718]  mapped:18230 shmem:2484 pagetables:1017
[   61.028975][ T6718]  sec_pagetables:0 bounce:0
[   61.028975][ T6718]  kernel_misc_reclaimable:0
[   61.028975][ T6718]  free:297499 free_pcp:20418 free_cma:0
[   61.043744][ T6718] Node 0 active_anon:12708kB inactive_anon:0kB active_file:3972kB inactive_file:22308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48104kB dirty:3160kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4588kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.056644][ T6718] Node 1 active_anon:10396kB inactive_anon:0kB active_file:1548kB inactive_file:130528kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24816kB dirty:2852kB writeback:0kB shmem:5152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6976kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.069043][ T6718] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   61.081689][ T6718] lowmem_reserve[]: 0 811 811 811 811
[   61.084009][ T6718] Node 0 DMA32 free:406488kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12640kB inactive_anon:0kB active_file:3972kB inactive_file:22308kB unevictable:3536kB writepending:3160kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:44216kB local_pcp:19992kB free_cma:0kB
[   61.095746][ T6718] lowmem_reserve[]: 0 0 0 0 0
[   61.097538][ T6718] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   61.107348][ T6718] lowmem_reserve[]: 0 0 854 854 854
[   61.110821][ T6718] Node 1 Normal free:309192kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10396kB inactive_anon:0kB active_file:1548kB inactive_file:130528kB unevictable:3536kB writepending:2852kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37512kB local_pcp:21732kB free_cma:0kB
[   61.124605][ T6718] lowmem_reserve[]: 0 0 0 0 0
[   61.126694][ T6718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   61.131024][ T6718] Node 0 DMA32: 468*4kB (UM) 105*8kB (UME) 162*16kB (UM) 8*32kB (ME) 93*64kB (UM) 30*128kB (UM) 10*256kB (M) 6*512kB (UM) 6*1024kB (UME) 5*2048kB (UME) 90*4096kB (M) = 406008kB
[   61.137392][ T6718] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   61.144398][ T6718] Node 1 Normal: 653*4kB (UM) 1083*8kB (UM) 730*16kB (UME) 228*32kB (UM) 99*64kB (UME) 32*128kB (UME) 19*256kB (UM) 11*512kB (ME) 6*1024kB (UM) 3*2048kB (UME) 60*4096kB (M) = 309228kB
[   61.150588][ T6718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.153594][ T6718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.156651][ T6718] 42073 total pagecache pages
[   61.158376][ T6718] 0 pages in swap cache
[   61.159794][ T6718] Free swap  = 124996kB
[   61.161181][ T6718] Total swap = 124996kB
[   61.162627][ T6718] 786301 pages RAM
[   61.163854][ T6718] 0 pages HighMem/MovableOnly
[   61.165393][ T6718] 241331 pages reserved
[   61.166825][ T6718] 0 pages cma reserved
[   61.250065][ T6739] tipc: Started in network mode
[   61.251884][ T6739] tipc: Node identity 46d50329a3ee, cluster identity 4711
[   61.254499][ T6739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.257640][ T6739] syzkaller0: entered promiscuous mode
[   61.260630][ T6739] syzkaller0: entered allmulticast mode
[   61.274241][ T6739] tipc: Resetting bearer <eth:syzkaller0>
[   61.290318][ T6739] tipc: Resetting bearer <eth:syzkaller0>
[   61.298367][ T6739] tipc: Disabling bearer <eth:syzkaller0>
[   61.470759][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.311'.
[   62.066344][ T6812] netlink: 'syz.0.330': attribute type 3 has an invalid length.
[   62.167883][ T6831] ipvlan2: entered promiscuous mode
[   62.347158][ T6841] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[   62.374015][ T6852] tipc: Enabling of bearer <eth:rose0> rejected, failed to enable media
[   62.390137][ T6850] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.484569][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'.
[   62.823455][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'.
[   62.826561][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   62.837507][ T6894] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[   63.296082][ T6931] netlink: 96 bytes leftover after parsing attributes in process `syz.2.366'.
[   63.303927][ T6931] netlink: 'syz.2.366': attribute type 10 has an invalid length.
[   63.307461][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'.
[   63.311962][ T6931] dummy0: entered promiscuous mode
[   63.315024][ T6931] bridge0: port 1(dummy0) entered blocking state
[   63.317367][ T6931] bridge0: port 1(dummy0) entered disabled state
[   63.320037][ T6931] dummy0: entered allmulticast mode
[   63.323105][ T6931] bridge0: port 1(dummy0) entered blocking state
[   63.325284][ T6931] bridge0: port 1(dummy0) entered forwarding state
[   63.358589][ T6933] Bluetooth: MGMT ver 1.23
[   63.448659][  T151] wlan1: Trigger new scan to find an IBSS to join
[   64.392857][   T84] wlan1: Creating new IBSS network, BSSID 82:50:7f:f1:ea:5f
[   64.512435][ T7016] netlink: 'syz.0.399': attribute type 9 has an invalid length.
[   64.582396][ T7022] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   64.703132][ T7031] netlink: 'syz.1.404': attribute type 21 has an invalid length.
[   64.748792][ T7035] bridge0: port 3(gretap0) entered blocking state
[   64.751311][ T7035] bridge0: port 3(gretap0) entered disabled state
[   64.753800][ T7035] gretap0: entered allmulticast mode
[   64.756435][ T7035] gretap0: entered promiscuous mode
[   64.773018][ T7035] bridge0: port 3(gretap0) entered blocking state
[   64.775551][ T7035] bridge0: port 3(gretap0) entered forwarding state
[   64.820275][ T7045] netlink: 'syz.0.412': attribute type 25 has an invalid length.
[   64.909872][ T7053] netlink: 'syz.0.416': attribute type 4 has an invalid length.
[   65.484817][ T7095] __nla_validate_parse: 12 callbacks suppressed
[   65.484827][ T7095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.432'.
[   65.510752][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.432'.
[   65.573050][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'.
[   65.580008][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'.
[   65.819037][ T7103] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   66.005751][ T7081] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   66.096361][ T7116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.439'.
[   66.113444][ T7116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.439'.
[   66.241539][ T7121] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   66.244240][ T7121] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.510371][ T7137] netlink: 'syz.0.451': attribute type 5 has an invalid length.
[   66.516198][ T7137] vlan0: entered promiscuous mode
[   66.523375][ T7137] team0: Port device vlan0 added
[   66.725388][ T7141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.447'.
[   66.758036][ T7143] openvswitch: netlink: Message has 4 unknown bytes.
[   66.800787][ T7152] netlink: 'syz.2.450': attribute type 10 has an invalid length.
[   66.912396][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.457'.
[   66.974926][ T7173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.461'.
[   66.991332][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.460'.
[   67.505428][ T7221] netlink: 'syz.2.480': attribute type 1 has an invalid length.
[   67.563418][ T7144] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   67.640117][ T7227] macvlan3: entered promiscuous mode
[   67.642471][ T7227] bond0: entered promiscuous mode
[   67.644984][ T7227] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   67.776819][ T7247] netlink: 'syz.0.488': attribute type 30 has an invalid length.
[   67.785484][ T5856] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.788862][ T7247] netlink: 'syz.0.488': attribute type 30 has an invalid length.
[   67.790316][ T5856] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.795258][ T5856] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.804401][ T5856] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.309468][ T7250] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   68.567554][ T7241] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   68.711703][ T7265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.775803][ T7274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.782524][ T7284] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[   69.104052][ T7309] 8021q: VLANs not supported on sit0
[   69.665581][ T7291] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   69.820228][ T7324] ip6erspan0: entered allmulticast mode
[   69.832954][ T7324] netlink: 'syz.1.509': attribute type 83 has an invalid length.
[   69.956034][ T7335] syzkaller1: entered promiscuous mode
[   69.957812][ T7335] syzkaller1: entered allmulticast mode
[   69.992913][ T7339] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   69.995630][ T7339] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   70.294910][ T7351] infiniband syz1: set active
[   70.298004][ T7351] infiniband syz1: added bond0
[   70.328106][ T7364] netlink: 'syz.2.526': attribute type 10 has an invalid length.
[   70.339135][ T7351] RDS/IB: syz1: added
[   70.341178][ T7351] smc: adding ib device syz1 with port count 1
[   70.344235][ T7351] smc:    ib device syz1 port 1 has pnetid 
[   70.345732][ T7364] bridge0: port 1(dummy0) entered disabled state
[   70.351436][ T7364] dummy0: left allmulticast mode
[   70.353945][ T7364] dummy0: left promiscuous mode
[   70.356270][ T7364] bridge0: port 1(dummy0) entered disabled state
[   70.365028][ T7364] team0: Port device dummy0 added
[   70.743066][ T7374] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   70.750626][ T7333] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   70.791224][ T7374] __nla_validate_parse: 13 callbacks suppressed
[   70.791237][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'.
[   70.981748][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.984032][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.145104][ T7402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.294990][ T7414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.369764][ T7428] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   71.370304][ T7414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.450440][ T7414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.507011][ T7414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.573283][ T5856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.581945][ T5856] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.590152][ T5856] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.600237][ T5895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.821887][ T7444] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   73.369794][ T7470] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   73.618404][ T7478] openvswitch: netlink: Message has 4 unknown bytes.
[   73.711141][ T7489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.566'.
[   73.791335][ T5311] IPVS: starting estimator thread 0...
[   73.803048][ T7495] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[   73.853309][ T7495] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.910662][ T7496] IPVS: using max 82 ests per chain, 196800 per kthread
[   74.010707][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[   74.084932][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'.
[   74.119227][ T7525] netlink: 'syz.1.581': attribute type 6 has an invalid length.
[   74.249540][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'.
[   74.260640][ T7540] sctp: [Deprecated]: syz.1.586 (pid 7540) Use of int in max_burst socket option.
[   74.260640][ T7540] Use struct sctp_assoc_value instead
[   74.265794][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'.
[   74.363913][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'.
[   74.366880][ T7550] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   74.494351][ T7560] netlink: 172 bytes leftover after parsing attributes in process `syz.1.597'.
[   74.617803][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[   74.624650][ T7573] sctp: [Deprecated]: syz.1.602 (pid 7573) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.624650][ T7573] Use struct sctp_sack_info instead
[   74.632092][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'.
[   74.663254][ T7579] syzkaller0: entered promiscuous mode
[   74.665280][ T7579] syzkaller0: entered allmulticast mode
[   74.792408][ T7594] openvswitch: netlink: Message has 4 unknown bytes.
[   74.994667][ T7611] netlink: 'syz.0.616': attribute type 7 has an invalid length.
[   75.027335][ T7613] veth1_to_batadv: entered promiscuous mode
[   75.097756][ T7619] ieee802154 phy0 wpan0: encryption failed: -22
[   75.157438][ T7548] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   75.250292][ T7627] openvswitch: netlink: Message has 4 unknown bytes.
[   76.235875][ T7704] netlink: 'syz.1.647': attribute type 10 has an invalid length.
[   76.239036][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.647'.
[   76.255223][ T7704] team0: Port device geneve0 added
[   76.304626][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'.
[   76.307680][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'.
[   76.312694][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'.
[   76.315710][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'.
[   76.322527][ T7709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'.
[   76.324950][ T7711] netlink: 'syz.0.652': attribute type 30 has an invalid length.
[   76.388030][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[   76.416451][ T7721] dvmrp0: entered allmulticast mode
[   76.515267][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'.
[   76.596059][ T7737] dvmrp0: entered allmulticast mode
[   76.605806][ T7745] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   76.852263][ T7761] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   76.859513][ T7761] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   77.171928][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.181758][ T7802] netlink: 212 bytes leftover after parsing attributes in process `syz.1.687'.
[   77.187126][ T7803] netlink: 212 bytes leftover after parsing attributes in process `syz.1.687'.
[   77.270695][ T7813] tipc: Cannot configure node identity twice
[   77.850896][ T7867] veth3: entered allmulticast mode
[   77.855019][ T7867] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[   78.228360][ T7897] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   78.259697][ T5894] IPVS: starting estimator thread 0...
[   78.350192][ T7900] IPVS: using max 82 ests per chain, 196800 per kthread
[   78.403828][ T7912] IPv6: sit1: Disabled Multicast RS
[   78.572672][ T7929] netlink: 'syz.0.733': attribute type 1 has an invalid length.
[   78.575901][ T7929] netlink: 'syz.0.733': attribute type 2 has an invalid length.
[   79.642081][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.663961][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.666288][ T7976] netlink: 'syz.1.749': attribute type 5 has an invalid length.
[   79.666556][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.673577][ T7976] geneve2: entered promiscuous mode
[   79.675302][ T7976] geneve2: entered allmulticast mode
[   79.677899][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   79.682395][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   79.689482][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   79.692476][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   79.704189][ T7977] tipc: Can't bind to reserved service type 2
[   79.856484][ T7993] syzkaller0: entered promiscuous mode
[   79.859460][ T7993] syzkaller0: entered allmulticast mode
[   79.878106][ T7996] netlink: 'syz.1.757': attribute type 1 has an invalid length.
[   79.881168][ T7996] netlink: 'syz.1.757': attribute type 4 has an invalid length.
[   79.883962][ T7996] netlink: 'syz.1.757': attribute type 1 has an invalid length.
[   79.887021][ T7996] netlink: 'syz.1.757': attribute type 4 has an invalid length.
[   80.786033][ T8030] sock: sock_timestamping_bind_phc: sock not bind to device
[   80.796745][ T8028] netlink: 'syz.1.770': attribute type 13 has an invalid length.
[   80.801603][ T8028] netlink: 'syz.1.770': attribute type 17 has an invalid length.
[   80.870266][ T8028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.087159][ T8038] ip6tnl1: left allmulticast mode
[   81.093978][ T8038] bond0: left promiscuous mode
[   81.095810][ T8038] macvlan3: left promiscuous mode
[   81.105169][ T8038] veth3: left allmulticast mode
[   81.107663][ T5874] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.110835][ T5874] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.117951][ T5874] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.122935][ T5874] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.225034][  T972] cfg80211: failed to load regulatory.db
[   81.292376][ T8062] __nla_validate_parse: 19 callbacks suppressed
[   81.292386][ T8062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.782'.
[   81.392083][ T8073] netlink: 'syz.1.786': attribute type 1 has an invalid length.
[   81.782771][ T8046] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   81.804843][ T8116] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.802'.
[   81.842790][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'.
[   81.845899][ T8120] netlink: 'syz.0.804': attribute type 7 has an invalid length.
[   81.851386][ T8120] netlink: 'syz.0.804': attribute type 8 has an invalid length.
[   81.854123][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'.
[   81.943678][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'.
[   82.852819][ T8176] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[   82.855532][ T8176] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.983739][ T8192] netlink: 52 bytes leftover after parsing attributes in process `syz.0.833'.
[   83.003748][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'.
[   83.045010][ T8201] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.047570][ T8201] bridge0: port 4(bond2) entered blocking state
[   83.050984][ T8201] bridge0: port 4(bond2) entered disabled state
[   83.053150][ T8201] bond2: entered allmulticast mode
[   83.056038][ T8201] bond2: entered promiscuous mode
[   83.058055][ T8201] bridge0: port 4(bond2) entered blocking state
[   83.060813][ T8201] bridge0: port 4(bond2) entered forwarding state
[   83.487612][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'.
[   83.619378][ T8255] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.862'.
[   83.663149][ T1089] bridge0: port 4(bond2) entered disabled state
[   83.680078][ T8263] gretap1: entered promiscuous mode
[   83.681914][ T8263] gretap1: entered allmulticast mode
[   83.791461][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'.
[   83.857223][ T8284] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[   84.732100][ T8380] validate_nla: 1 callbacks suppressed
[   84.732110][ T8380] netlink: 'syz.0.906': attribute type 21 has an invalid length.
[   84.739380][ T8290] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   84.981378][ T8396] netlink: 'syz.0.912': attribute type 4 has an invalid length.
[   85.086848][ T8414] netlink: 'syz.1.918': attribute type 5 has an invalid length.
[   85.095651][ T8414] tipc: New replicast peer: 255.255.255.255
[   85.099106][ T8414] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.305472][ T8434] block nbd1: not configured, cannot reconfigure
[   85.531949][ T8458] dvmrp1: tun_chr_ioctl cmd 1074025677
[   85.533943][ T8458] dvmrp1: linktype set to 773
[   85.747532][ T8475] sctp: [Deprecated]: syz.0.940 (pid 8475) Use of int in maxseg socket option.
[   85.747532][ T8475] Use struct sctp_assoc_value instead
[   85.844512][ T8485] macsec2: entered promiscuous mode
[   85.846397][ T8485] macsec2: entered allmulticast mode
[   86.025799][ T8506] netlink: 'syz.0.945': attribute type 6 has an invalid length.
[   86.032941][ T8505] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[   86.174673][ T8519] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.218800][ T8447] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   86.219143][ T5881] tipc: Node number set to 3845849897
[   86.359133][ T8545] __nla_validate_parse: 16 callbacks suppressed
[   86.359142][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.958'.
[   86.364449][ T8545] netlink: 'syz.0.958': attribute type 7 has an invalid length.
[   86.367001][ T8545] netlink: 'syz.0.958': attribute type 8 has an invalid length.
[   86.371076][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'.
[   86.377707][ T8545] erspan0: entered promiscuous mode
[   86.382840][ T8545] batadv_slave_1: entered promiscuous mode
[   86.399535][ T8545] netlink: 27 bytes leftover after parsing attributes in process `syz.0.958'.
[   89.448376][ T1089] wlan0: Trigger new scan to find an IBSS to join
[   92.408287][ T1089] wlan0: Trigger new scan to find an IBSS to join
[   93.288408][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.155928][ T8561] openvswitch: netlink: IP tunnel dst address not specified
[  103.785679][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'.
[  103.935943][ T8630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.985'.
[  103.969789][ T8633] netlink: 'syz.0.983': attribute type 5 has an invalid length.
[  104.008956][ T5874] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.012009][ T5874] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.039408][ T5881] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.135229][ T8645] netlink: 'syz.1.992': attribute type 4 has an invalid length.
[  104.217476][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.992'.
[  104.567169][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[  104.588423][ T5881] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  104.905695][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.909729][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.913667][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.917577][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.923546][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.927446][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'.
[  104.968487][ T5881] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  105.044933][ T8686] IPVS: length: 150 != 84136430776
[  105.360725][ T8703] netlink: set zone limit has 8 unknown bytes
[  106.218238][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.221680][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.327774][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.339767][ T8710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.463735][ T8710] bridge1: left promiscuous mode
[  106.465477][ T8710] bridge1: left allmulticast mode
[  106.492868][ T8710] ip6erspan0: left allmulticast mode
[  106.501764][ T8710] syzkaller0: left promiscuous mode
[  106.503915][ T8710] syzkaller0: left allmulticast mode
[  106.511384][ T8710] geneve2: left promiscuous mode
[  106.513174][ T8710] geneve2: left allmulticast mode
[  106.538254][ T8712] netlink: 'syz.1.1014': attribute type 12 has an invalid length.
[  106.544507][ T5895] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.547423][ T5895] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  106.554032][ T5895] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.557384][ T5895] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  106.560344][ T5895] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.563264][ T5895] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  106.566191][ T5895] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.569986][ T5895] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  106.743904][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.771325][ T8739] bridge: RTM_NEWNEIGH with invalid ether address
[  106.810800][ T8741] TCP: TCP_TX_DELAY enabled
[  108.408462][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  108.804895][ T8806] __nla_validate_parse: 64 callbacks suppressed
[  108.804904][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  108.857804][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'.
[  108.875779][ T8816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1052'.
[  109.077292][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'.
[  109.104620][ T8844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.204776][ T8848] netlink: 'syz.0.1061': attribute type 10 has an invalid length.
[  109.213707][ T8848] team0: Cannot enslave team device to itself
[  109.287060][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  109.357886][ T8875] sctp: [Deprecated]: syz.1.1071 (pid 8875) Use of int in max_burst socket option deprecated.
[  109.357886][ T8875] Use struct sctp_assoc_value instead
[  109.482373][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'.
[  109.507872][ T8889] macsec1: entered promiscuous mode
[  109.512779][ T8889] macsec1: entered allmulticast mode
[  109.585423][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'.
[  109.589402][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'.
[  109.641804][ T8899] netlink: 'syz.1.1081': attribute type 4 has an invalid length.
[  109.645970][ T8899] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1081'.
[  109.837139][ T8921] netlink: 'syz.0.1088': attribute type 11 has an invalid length.
[  110.195318][ T8952] netlink: 'syz.1.1100': attribute type 13 has an invalid length.
[  110.199065][ T8952] netlink: 'syz.1.1100': attribute type 17 has an invalid length.
[  110.239883][ T8952] 8021q: adding VLAN 0 to HW filter on device team0
[  110.251965][ T8952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.342569][ T8959] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  110.345082][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'.
[  110.572101][ T8972] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  112.195241][ T9086] syzkaller0: Caught tx_queue_len zero misconfig
[  112.340669][ T9098] sock: sock_set_timeout: `syz.0.1152' (pid 9098) tries to set negative timeout
[  112.344051][ T9097] 8021q: VLANs not supported on vcan0
[  112.964094][ T9123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.029169][ T9171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.031667][ T9171] IPv6: NLM_F_CREATE should be set when creating new route
[  114.034674][ T9171] IPv6: NLM_F_CREATE should be set when creating new route
[  114.039600][ T9171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.077958][ T9176] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  114.360436][ T9199] __nla_validate_parse: 26 callbacks suppressed
[  114.360446][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1190'.
[  114.411781][ T9201] blkio.reset_stats is deprecated
[  114.452317][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'.
[  114.537813][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'.
[  114.542896][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'.
[  114.560268][ T9213] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1195'.
[  114.588610][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  114.590752][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  114.654580][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'.
[  114.676930][ T9228] netlink: 212288 bytes leftover after parsing attributes in process `syz.2.1200'.
[  114.715185][ T9223] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.738027][ T9223] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  114.772077][ T9235] macvlan2: entered promiscuous mode
[  114.774170][ T9235] macvlan2: entered allmulticast mode
[  114.776400][ T9235] bond5: (slave macvlan2): Error -98 calling set_mac_address
[  114.973760][ T9252] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  115.002361][ T9252] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.023041][ T9252] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.026126][ T9252] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  115.031023][ T9252] bond3: (slave vcan1): Error -95 calling set_mac_address
[  115.080060][ T9260] gretap1: entered promiscuous mode
[  115.084335][ T9252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.264745][ T9281] netlink: 'syz.0.1214': attribute type 15 has an invalid length.
[  115.351328][ T9289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1218'.
[  116.738031][ T9375] netlink: 'syz.1.1243': attribute type 7 has an invalid length.
[  117.605827][ T9404] bond0: option all_slaves_active: invalid value (54)
[  117.617486][ T9399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.719795][ T9417] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  117.879622][ T9435] bond0: option all_slaves_active: invalid value (57)
[  118.029010][ T9454] dvmrp0: entered allmulticast mode
[  118.035504][ T9457] netlink: 'syz.0.1269': attribute type 3 has an invalid length.
[  118.352792][ T9485] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.355926][ T9485] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.541105][ T9547] __nla_validate_parse: 11 callbacks suppressed
[  119.541124][ T9547] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1296'.
[  119.638543][ T9555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'.
[  119.698470][ T9559] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1302'.
[  119.714754][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'.
[  119.822847][ T9580] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1309'.
[  119.886301][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'.
[  119.938039][ T9596] netlink: 'syz.0.1311': attribute type 13 has an invalid length.
[  119.965580][ T9596] bridge0: port 3(gretap0) entered disabled state
[  120.039871][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.043557][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.184261][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.191078][ T9596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.296381][ T5895] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.303607][ T5895] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.317786][ T5895] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.323593][ T5895] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.327943][ T5895] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.358315][ T5895] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.361526][ T5895] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  120.364420][ T5895] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.578356][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[  120.884164][ T9639] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1322'.
[  120.947681][ T9641] netlink: 'syz.1.1324': attribute type 2 has an invalid length.
[  120.958472][ T9641] netlink: 'syz.1.1324': attribute type 2 has an invalid length.
[  120.961588][ T9641] netlink: 'syz.1.1324': attribute type 2 has an invalid length.
[  121.056409][ T9646] gretap1: left promiscuous mode
[  121.061523][ T9646] gretap1: left allmulticast mode
[  121.722848][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  121.726270][ T9700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'.
[  121.729279][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  121.732338][ T9700] netlink: 'syz.0.1339': attribute type 6 has an invalid length.
[  121.834311][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.837941][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.841779][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.846061][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.850938][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.855628][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.860585][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.864564][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.868533][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.873486][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.877230][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.881357][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.885078][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.897742][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.902346][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.906937][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.912602][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.919114][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.935005][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.939761][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.944493][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.949394][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.954853][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.965526][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.970840][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.974624][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.978491][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.982287][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.986069][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.990891][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.994723][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.998810][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.002540][ T9712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.366399][ T9736] netlink: 'syz.0.1353': attribute type 3 has an invalid length.
[  122.634631][ T9746] netlink: 'syz.2.1356': attribute type 83 has an invalid length.
[  123.805759][ T9811] openvswitch: netlink: IP tunnel dst address not specified
[  124.548500][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.576063][ T9844] __nla_validate_parse: 8 callbacks suppressed
[  124.576078][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1390'.
[  125.013269][ T9876] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1399'.
[  125.277766][ T9888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1404'.
[  125.394778][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'.
[  125.399479][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'.
[  125.409612][ T9893] ip6gre1: entered allmulticast mode
[  125.476286][ T9898] trusted_key: syz.2.1408 sent an empty control message without MSG_MORE.
[  125.708266][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  125.734048][ T9935] netlink: 'syz.1.1421': attribute type 74 has an invalid length.
[  126.007732][ T9972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.404267][T10015] pim6reg1: entered promiscuous mode
[  126.406190][T10015] pim6reg1: entered allmulticast mode
[  126.659238][T10039] wg1 speed is unknown, defaulting to 1000
[  126.661252][T10039] wg1 speed is unknown, defaulting to 1000
[  126.664190][T10039] wg1 speed is unknown, defaulting to 1000
[  126.675855][T10039] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  126.685738][T10039] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  126.711576][T10039] wg1 speed is unknown, defaulting to 1000
[  126.719877][T10039] wg1 speed is unknown, defaulting to 1000
[  126.725294][T10039] wg1 speed is unknown, defaulting to 1000
[  126.732632][T10039] wg1 speed is unknown, defaulting to 1000
[  126.812353][T10050] vlan0: entered promiscuous mode
[  127.233532][T10091] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1472'.
[  127.236708][T10091] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1472'.
[  127.360497][T10098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1478'.
[  128.124544][T10085] syz.2.1472: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  128.131220][T10085] CPU: 1 UID: 0 PID: 10085 Comm: syz.2.1472 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  128.131232][T10085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.131237][T10085] Call Trace:
[  128.131241][T10085]  <TASK>
[  128.131245][T10085]  dump_stack_lvl+0x189/0x250
[  128.131258][T10085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.131266][T10085]  ? __pfx__printk+0x10/0x10
[  128.131276][T10085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.131284][T10085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  128.131292][T10085]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  128.131300][T10085]  warn_alloc+0x214/0x310
[  128.131312][T10085]  ? __pfx_warn_alloc+0x10/0x10
[  128.131325][T10085]  ? __get_vm_area_node+0x28f/0x300
[  128.131334][T10085]  ? hash_ip4_resize+0x1e0/0x1990
[  128.131347][T10085]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  128.131366][T10085]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  128.131377][T10085]  ? rcu_is_watching+0x15/0xb0
[  128.131385][T10085]  ? hash_ip4_resize+0x1e0/0x1990
[  128.131393][T10085]  ? hash_ip4_resize+0x1e0/0x1990
[  128.131401][T10085]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  128.131410][T10085]  ? hash_ip4_resize+0x1e0/0x1990
[  128.131422][T10085]  hash_ip4_resize+0x1e0/0x1990
[  128.131432][T10085]  ? hash_ip4_uadt+0x6cb/0x850
[  128.131442][T10085]  ? __pfx_hash_ip4_add+0x10/0x10
[  128.131451][T10085]  ? __pfx_hash_ip4_uadt+0x10/0x10
[  128.131459][T10085]  ? __local_bh_enable_ip+0x12d/0x1c0
[  128.131474][T10085]  call_ad+0x44e/0xb00
[  128.131485][T10085]  ? __pfx_call_ad+0x10/0x10
[  128.131498][T10085]  ? __nla_parse+0x40/0x60
[  128.131509][T10085]  ip_set_ad+0x791/0x930
[  128.131520][T10085]  ? __pfx_ip_set_ad+0x10/0x10
[  128.131542][T10085]  nfnetlink_rcv_msg+0xb4d/0x1130
[  128.131552][T10085]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  128.131566][T10085]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  128.131586][T10085]  ? __lock_acquire+0xab9/0xd20
[  128.131601][T10085]  netlink_rcv_skb+0x208/0x470
[  128.131610][T10085]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  128.131619][T10085]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.131632][T10085]  ? bpf_lsm_capable+0x9/0x20
[  128.131645][T10085]  ? security_capable+0x7e/0x2e0
[  128.131658][T10085]  nfnetlink_rcv+0x26a/0x2520
[  128.131665][T10085]  ? is_bpf_text_address+0x26/0x2b0
[  128.131676][T10085]  ? kernel_text_address+0xa5/0xe0
[  128.131685][T10085]  ? __kernel_text_address+0xd/0x40
[  128.131693][T10085]  ? unwind_get_return_address+0x4d/0x90
[  128.131700][T10085]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  128.131708][T10085]  ? arch_stack_walk+0xfc/0x150
[  128.131721][T10085]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  128.131730][T10085]  ? stack_depot_save_flags+0x40/0x860
[  128.131740][T10085]  ? __lock_acquire+0xab9/0xd20
[  128.131758][T10085]  ? __lock_acquire+0xab9/0xd20
[  128.131771][T10085]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.131782][T10085]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.131793][T10085]  netlink_unicast+0x82f/0x9e0
[  128.131805][T10085]  ? __pfx_netlink_unicast+0x10/0x10
[  128.131813][T10085]  ? netlink_sendmsg+0x642/0xb30
[  128.131821][T10085]  ? skb_put+0x11b/0x210
[  128.131829][T10085]  netlink_sendmsg+0x805/0xb30
[  128.131841][T10085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.131851][T10085]  ? aa_sock_msg_perm+0xf1/0x1d0
[  128.131863][T10085]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.131870][T10085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.131879][T10085]  __sock_sendmsg+0x21c/0x270
[  128.131890][T10085]  ____sys_sendmsg+0x505/0x830
[  128.131899][T10085]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.131909][T10085]  ? import_iovec+0x74/0xa0
[  128.131918][T10085]  ___sys_sendmsg+0x21f/0x2a0
[  128.131926][T10085]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.131946][T10085]  ? __fget_files+0x2a/0x420
[  128.131952][T10085]  ? __fget_files+0x3a0/0x420
[  128.131962][T10085]  __x64_sys_sendmsg+0x19b/0x260
[  128.131970][T10085]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.131980][T10085]  ? rcu_is_watching+0x15/0xb0
[  128.131989][T10085]  ? do_syscall_64+0xbe/0x3b0
[  128.132000][T10085]  do_syscall_64+0xfa/0x3b0
[  128.132008][T10085]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.132016][T10085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.132022][T10085]  ? exc_page_fault+0x9f/0xf0
[  128.132031][T10085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.132038][T10085] RIP: 0033:0x7fbf2ab8ebe9
[  128.132045][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.132050][T10085] RSP: 002b:00007fbf2bae2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.132058][T10085] RAX: ffffffffffffffda RBX: 00007fbf2adb5fa0 RCX: 00007fbf2ab8ebe9
[  128.132063][T10085] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000009
[  128.132067][T10085] RBP: 00007fbf2ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  128.132071][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.132075][T10085] R13: 00007fbf2adb6038 R14: 00007fbf2adb5fa0 R15: 00007ffc26a6f4e8
[  128.132085][T10085]  </TASK>
[  128.132088][T10085] Mem-Info:
[  128.303778][T10085] active_anon:13890 inactive_anon:0 isolated_anon:0
[  128.303778][T10085]  active_file:1546 inactive_file:38236 isolated_file:0
[  128.303778][T10085]  unevictable:1768 dirty:165 writeback:0
[  128.303778][T10085]  slab_reclaimable:9790 slab_unreclaimable:145713
[  128.303778][T10085]  mapped:18451 shmem:2448 pagetables:1011
[  128.303778][T10085]  sec_pagetables:0 bounce:0
[  128.303778][T10085]  kernel_misc_reclaimable:0
[  128.303778][T10085]  free:191562 free_pcp:16468 free_cma:0
[  128.318689][T10085] Node 0 active_anon:20844kB inactive_anon:0kB active_file:4348kB inactive_file:22348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48616kB dirty:416kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4836kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.329086][T10085] Node 1 active_anon:34716kB inactive_anon:0kB active_file:1836kB inactive_file:130596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25188kB dirty:244kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7204kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  128.339569][T10085] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  128.349146][T10085] lowmem_reserve[]: 0 811 811 811 811
[  128.351398][T10085] Node 0 DMA32 free:125412kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20844kB inactive_anon:0kB active_file:4348kB inactive_file:22348kB unevictable:3536kB writepending:416kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:23108kB local_pcp:16868kB free_cma:0kB
[  128.363204][T10085] lowmem_reserve[]: 0 0 0 0 0
[  128.364814][T10085] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  128.375374][T10085] lowmem_reserve[]: 0 0 854 854 854
[  128.377179][T10085] Node 1 Normal free:166984kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34716kB inactive_anon:0kB active_file:1836kB inactive_file:130596kB unevictable:3536kB writepending:244kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42648kB local_pcp:19844kB free_cma:0kB
[  128.387859][T10085] lowmem_reserve[]: 0 0 0 0 0
[  128.389587][T10085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  128.393696][T10085] Node 0 DMA32: 781*4kB (UM) 752*8kB (UME) 319*16kB (UME) 60*32kB (M) 92*64kB (UME) 53*128kB (UME) 23*256kB (UM) 17*512kB (UM) 4*1024kB (UM) 10*2048kB (UME) 14*4096kB (UM) = 125348kB
[  128.399972][T10085] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  128.406033][T10085] Node 1 Normal: 184*4kB (ME) 119*8kB (UME) 419*16kB (UM) 266*32kB (UME) 227*64kB (UME) 69*128kB (UM) 11*256kB (UM) 4*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 28*4096kB (M) = 166984kB
[  128.412798][T10085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.416303][T10085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  128.419530][T10085] 42230 total pagecache pages
[  128.421096][T10085] 0 pages in swap cache
[  128.422495][T10085] Free swap  = 124996kB
[  128.423880][T10085] Total swap = 124996kB
[  128.425446][T10085] 786301 pages RAM
[  128.426891][T10085] 0 pages HighMem/MovableOnly
[  128.428862][T10085] 241331 pages reserved
[  128.430598][T10085] 0 pages cma reserved
[  128.632510][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'.
[  128.635953][T10147] x_tables: ip_tables: udp match: only valid for protocol 17
[  128.734110][T10154] syzkaller1: entered promiscuous mode
[  128.735990][T10154] syzkaller1: entered allmulticast mode
[  128.986198][T10175] netlink: 'syz.0.1506': attribute type 1 has an invalid length.
[  128.989086][T10175] NCSI netlink: No device for ifindex 0
[  129.439598][T10201] netlink: 'syz.2.1513': attribute type 2 has an invalid length.
[  129.807275][T10232] pimreg: entered allmulticast mode
[  129.814626][T10232] dvmrp0: left allmulticast mode
[  129.816330][T10232] pimreg: left allmulticast mode
[  130.410881][T10263] gretap0: left allmulticast mode
[  130.412582][T10263] gretap0: left promiscuous mode
[  130.414326][T10263] bridge0: port 3(gretap0) entered disabled state
[  130.419659][T10263] bridge_slave_0: left allmulticast mode
[  130.427414][T10263] bridge_slave_0: left promiscuous mode
[  130.436287][T10263] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.445092][T10263] bridge_slave_1: left allmulticast mode
[  130.447127][T10263] bridge_slave_1: left promiscuous mode
[  130.451500][T10263] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.464744][T10263] bond0: (slave bond_slave_0): Releasing backup interface
[  130.473219][T10263] bond0: (slave bond_slave_1): Releasing backup interface
[  130.477564][T10267] __nla_validate_parse: 4 callbacks suppressed
[  130.477571][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'.
[  130.477689][T10263] team0: Port device team_slave_0 removed
[  130.487912][T10263] team0: Port device team_slave_1 removed
[  130.495329][T10263] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.504583][T10263] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.514103][T10263] team0: Port device vlan0 removed
[  130.522950][T10263] bond0: (slave wlan1): Releasing backup interface
[  130.530897][T10263] bond2: left allmulticast mode
[  130.536283][T10263] bond2: left promiscuous mode
[  130.541560][T10263] bridge0: port 4(bond2) entered disabled state
[  130.854092][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1545'.
[  131.209938][ T5874] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  131.214485][T10345] netlink: 832 bytes leftover after parsing attributes in process `syz.2.1562'.
[  131.419074][T10385] ksmbd: Unknown IPC event: 3, ignore.
[  131.491830][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'.
[  131.607634][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'.
[  131.613743][T10412] IPv6: addrconf: prefix option has invalid lifetime
[  131.690605][T10421] netlink: 'syz.0.1589': attribute type 1 has an invalid length.
[  131.799942][T10428] netlink: 'syz.1.1593': attribute type 11 has an invalid length.
[  131.939252][T10440] bond0: option arp_validate: invalid value (18446744073491447809)
[  131.939408][ T5874] bond0: (slave bond_slave_0): interface is now down
[  131.944331][ T5874] bond0: (slave bond_slave_1): interface is now down
[  131.945751][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'.
[  131.947175][ T5874] bond0: (slave wlan1): interface is now down
[  131.953744][ T5874] bond0: now running without any active interface!
[  132.182106][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  132.182106][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  132.327301][T10476] wg1 speed is unknown, defaulting to 1000
[  132.420098][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.640312][T10505] netlink: 'syz.0.1621': attribute type 29 has an invalid length.
[  132.670770][T10509] netlink: 'syz.0.1623': attribute type 13 has an invalid length.
[  132.673567][T10509] netlink: 'syz.0.1623': attribute type 17 has an invalid length.
[  132.711442][T10509] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.781575][T10509] 8021q: adding VLAN 0 to HW filter on device team0
[  132.786391][T10509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.817015][T10518] netpci0: tun_chr_ioctl cmd 2147767507
[  132.913576][ T1271] IPVS: starting estimator thread 0...
[  133.018984][T10527] IPVS: using max 81 ests per chain, 194400 per kthread
[  133.312464][T10553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1639'.
[  133.380207][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'.
[  133.470359][   T56] block nbd0: Receive control failed (result -32)
[  133.524391][T10562] wg1 speed is unknown, defaulting to 1000
[  133.744496][T10586] sctp: [Deprecated]: syz.1.1650 (pid 10586) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.744496][T10586] Use struct sctp_sack_info instead
[  133.843807][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.289786][T10631] tun0: tun_chr_ioctl cmd 1074025681
[  134.327269][T10640] sctp: [Deprecated]: syz.2.1668 (pid 10640) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.327269][T10640] Use struct sctp_sack_info instead
[  134.336551][T10640] netlink: 'syz.2.1668': attribute type 1 has an invalid length.
[  134.586586][T10649] netlink: 'syz.1.1674': attribute type 1 has an invalid length.
[  134.615594][T10649] 8021q: adding VLAN 0 to HW filter on device bond5
[  134.619602][T10649] bond4: (slave bond5): making interface the new active one
[  134.622535][T10649] bond4: (slave bond5): Enslaving as an active interface with an up link
[  134.631332][T10649] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  134.636801][T10649] 8021q: adding VLAN 0 to HW filter on device bond4
[  134.654165][T10667] netlink: 'syz.0.1677': attribute type 2 has an invalid length.
[  134.777810][T10677] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.194408][T10701] netlink: 'syz.1.1686': attribute type 5 has an invalid length.
[  135.734357][T10729] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  135.741309][T10728] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  135.743321][T10729] Bluetooth: MGMT ver 1.23
[  136.579976][T10799] __nla_validate_parse: 5 callbacks suppressed
[  136.579990][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'.
[  136.632815][T10800] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  136.695240][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'.
[  136.705273][T10806] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  136.894400][T10830] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1731'.
[  136.898062][T10830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'.
[  136.948029][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1733'.
[  137.006560][T10845] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1737'.
[  137.011249][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'.
[  137.109785][T10850] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1739'.
[  137.117524][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.124433][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.128679][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.131933][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.156728][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'.
[  137.201812][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'.
[  137.235066][T10850] wg1 speed is unknown, defaulting to 1000
[  137.308972][T10863] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  137.778439][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[  137.778474][ T5846] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  137.806490][ T5846] Bluetooth: hci2: link tx timeout
[  137.809884][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.995222][T10913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.997784][T10913] syzkaller0: entered promiscuous mode
[  138.000716][T10913] syzkaller0: entered allmulticast mode
[  138.057442][T10914] tipc: Resetting bearer <eth:syzkaller0>
[  138.819310][T10912] tipc: Resetting bearer <eth:syzkaller0>
[  138.828925][T10912] tipc: Disabling bearer <eth:syzkaller0>
[  138.989084][T10940] syzkaller0: entered promiscuous mode
[  138.990996][T10940] syzkaller0: entered allmulticast mode
[  139.057876][ T5895] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.066860][ T5895] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.071231][ T5895] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.077704][ T5895] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.129353][T10960] bond7: entered promiscuous mode
[  139.131310][T10960] bond7: entered allmulticast mode
[  139.133312][T10960] 8021q: adding VLAN 0 to HW filter on device bond7
[  139.171116][T10960] IPv6: sit3: Disabled Multicast RS
[  139.431067][T10997] netlink: 'syz.1.1791': attribute type 2 has an invalid length.
[  139.684126][T11014] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  139.687123][T11014] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  139.851303][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[  140.125538][T11054] IPVS: set_ctl: invalid protocol: 0 0.9.172.20:5307
[  140.317972][T11101] openvswitch: netlink: Message has 8 unknown bytes.
[  140.406930][T11110] netlink: 'syz.1.1826': attribute type 4 has an invalid length.
[  140.666484][T11130] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.827807][T11140] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  140.891114][T11144] 8021q: adding VLAN 0 to HW filter on device bond8
[  141.507799][T11151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.622566][T11177] wg1 speed is unknown, defaulting to 1000
[  141.635373][T11183] netlink: 'syz.1.1850': attribute type 1 has an invalid length.
[  141.638015][T11183] __nla_validate_parse: 27 callbacks suppressed
[  141.638022][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1850'.
[  142.388034][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'.
[  142.396018][T11221] netlink: 'syz.1.1862': attribute type 2 has an invalid length.
[  142.407386][T11221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1862'.
[  142.478767][T11229] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1866'.
[  142.519359][T11236] netlink: 'syz.2.1868': attribute type 1 has an invalid length.
[  142.772516][T11257] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1878'.
[  142.823168][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  143.010206][T11278] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  143.014503][T11278] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  143.437822][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[  143.441859][T11291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.446351][T11291] syzkaller1: entered promiscuous mode
[  143.448927][T11291] syzkaller1: entered allmulticast mode
[  143.455669][T11291] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  143.529281][ T5846] Bluetooth: hci2: command 0x0419 tx timeout
[  143.557702][T11306] netlink: 'syz.0.1897': attribute type 5 has an invalid length.
[  143.610433][T11314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.618895][T11314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.836495][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'.
[  143.840494][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'.
[  143.844211][T11346] netlink: 'syz.0.1908': attribute type 13 has an invalid length.
[  143.846766][T11346] netlink: 'syz.0.1908': attribute type 11 has an invalid length.
[  143.942944][T11358] tipc: New replicast peer: 255.255.255.255
[  143.945217][T11358] tipc: Enabled bearer <udp:s>, priority 10
[  143.948901][T11358] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1910'.
[  144.254344][T11382] openvswitch: netlink: Flow actions attr not present in new flow.
[  144.735748][T11442] macvtap1: entered promiscuous mode
[  144.737655][T11442] team0: entered promiscuous mode
[  144.739603][T11442] team_slave_0: entered promiscuous mode
[  144.741667][T11442] team_slave_1: entered promiscuous mode
[  144.743736][T11442] bridge1: entered promiscuous mode
[  144.745636][T11442] geneve0: entered promiscuous mode
[  144.747562][T11442] macvtap1: entered allmulticast mode
[  144.751727][T11442] team0: entered allmulticast mode
[  144.753476][T11442] team_slave_0: entered allmulticast mode
[  144.757671][T11442] team_slave_1: entered allmulticast mode
[  144.759805][T11442] bridge1: entered allmulticast mode
[  144.761663][T11442] geneve0: entered allmulticast mode
[  144.763803][T11442] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  144.929966][T11467] validate_nla: 3 callbacks suppressed
[  144.929975][T11467] netlink: 'syz.1.1950': attribute type 4 has an invalid length.
[  144.948244][ T5913] tipc: Node number set to 2906093877
[  144.966836][T11473] netlink: 'syz.1.1952': attribute type 17 has an invalid length.
[  145.452084][T11506] IPv4: Oversized IP packet from 127.202.26.0
[  145.519467][T11514] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  145.553776][T11514] 8021q: adding VLAN 0 to HW filter on device bond6
[  145.595462][T11512] wg1 speed is unknown, defaulting to 1000
[  145.779534][T11541] sctp: [Deprecated]: syz.1.1976 (pid 11541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.779534][T11541] Use struct sctp_sack_info instead
[  145.901011][T11562] bridge0: port 1(batadv1) entered blocking state
[  145.903252][T11562] bridge0: port 1(batadv1) entered disabled state
[  145.905509][T11562] batadv1: entered allmulticast mode
[  145.908866][T11562] batadv1: entered promiscuous mode
[  145.915832][T11563] bridge0: port 2(batadv2) entered blocking state
[  145.918119][T11563] bridge0: port 2(batadv2) entered disabled state
[  145.921476][T11563] batadv2: entered allmulticast mode
[  145.924096][T11563] batadv2: entered promiscuous mode
[  145.991397][T11547] wg1 speed is unknown, defaulting to 1000
[  146.013076][T11569] netlink: 'syz.2.1984': attribute type 3 has an invalid length.
[  146.015879][T11569] netlink: 'syz.2.1984': attribute type 3 has an invalid length.
[  146.327246][T11591] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  146.346831][T11591] bond3: entered promiscuous mode
[  146.350813][T11591] bond3: entered allmulticast mode
[  146.352835][T11591] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.398475][ T5856] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  146.401853][ T5856] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  146.419313][ T5856] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  146.422932][ T5856] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  146.545732][T11620] bridge0: port 3(gretap0) entered blocking state
[  146.548419][T11620] bridge0: port 3(gretap0) entered disabled state
[  146.550846][T11620] gretap0: entered allmulticast mode
[  146.555031][T11620] gretap0: entered promiscuous mode
[  146.616316][T11627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.789542][T11645] __nla_validate_parse: 135 callbacks suppressed
[  146.789552][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2016'.
[  146.844818][T11652] sctp: [Deprecated]: syz.1.2020 (pid 11652) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.844818][T11652] Use struct sctp_sack_info instead
[  146.882196][T11656] bridge_slave_0: left allmulticast mode
[  146.886264][T11656] bridge_slave_0: left promiscuous mode
[  146.889999][T11656] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.894810][T11656] bridge_slave_1: left allmulticast mode
[  146.896685][T11656] bridge_slave_1: left promiscuous mode
[  146.898798][T11656] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.902685][T11656] bond0: (slave bond_slave_0): Releasing backup interface
[  146.906026][T11656] bond0: (slave bond_slave_1): Releasing backup interface
[  146.910251][T11656] team_slave_0: left promiscuous mode
[  146.912144][T11656] team_slave_0: left allmulticast mode
[  146.914659][T11656] team0: Port device team_slave_0 removed
[  146.917251][T11656] team_slave_1: left promiscuous mode
[  146.919747][T11656] team_slave_1: left allmulticast mode
[  146.922182][T11656] team0: Port device team_slave_1 removed
[  146.924260][T11656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.927001][T11656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.929933][T11656] geneve0: left promiscuous mode
[  146.931666][T11656] geneve0: left allmulticast mode
[  146.934487][T11656] team0: Port device geneve0 removed
[  146.937652][T11656] bond0: (slave wlan1): Releasing backup interface
[  146.941214][T11656] bridge1: left promiscuous mode
[  146.943143][T11656] bridge1: left allmulticast mode
[  146.946091][T11656] team0: Port device bridge1 removed
[  146.950405][T11656] bond4: (slave bond5): Releasing backup interface
[  146.952921][T11656] bond4: (slave bond5): the permanent HWaddr of slave - 8e:db:3f:18:40:7b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  146.959349][T11656] bond4: (slave gretap2): making interface the new active one
[  146.965612][T11656] bond4: (slave gretap2): Releasing backup interface
[  146.983679][T11656] syz.1.2022 (11656) used greatest stack depth: 17448 bytes left
[  147.097767][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2026'.
[  147.216209][T11687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2032'.
[  147.235275][T11687] bond4: entered promiscuous mode
[  147.237105][T11687] bond4: entered allmulticast mode
[  147.239373][T11687] 8021q: adding VLAN 0 to HW filter on device bond4
[  147.283832][T11692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'.
[  147.326449][T11695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'.
[  147.934411][T11736] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  147.938631][ T5848] Bluetooth: hci2: command 0x0419 tx timeout
[  147.952272][T11736] 8021q: adding VLAN 0 to HW filter on device bond9
[  147.965014][T11736] bond9: entered promiscuous mode
[  147.969638][T11736] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  148.417362][T11719] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.420477][T11719] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  148.430221][T11719] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.433176][T11719] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  149.352765][T11790] xt_limit: Overflow, try lower: 604147548/4200216962
[  149.355806][T11790] hsr0: entered promiscuous mode
[  149.409327][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'.
[  149.412838][T11791] hsr_slave_0: left promiscuous mode
[  149.415906][T11791] hsr_slave_1: left promiscuous mode
[  149.424201][T11791] hsr0 (unregistering): left promiscuous mode
[  193.852841][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.291253][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  307.768341][   T34] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  307.771788][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
SYZFAIL: failed to recv rpc
[  307.778306][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.781863][   T34] task:kworker/0:0     state:D stack:23144 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  307.786660][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  307.789897][   T34] Call Trace:
[  307.791359][   T34]  <TASK>
[  307.792671][   T34]  __schedule+0x1798/0x4cc0
[  307.794652][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  307.796966][   T34]  ? __pfx___schedule+0x10/0x10
[  307.799328][   T34]  ? schedule+0x91/0x360
[  307.801171][   T34]  schedule+0x165/0x360
[  307.802957][   T34]  schedule_preempt_disabled+0x13/0x30
[  307.805309][   T34]  __mutex_lock+0x7e6/0x1360
[  307.807346][   T34]  ? __mutex_lock+0x5b6/0x1360
[  307.809587][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  307.812173][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  307.814247][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  307.816648][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  307.819066][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  307.821637][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  307.824075][   T34]  process_scheduled_works+0xae1/0x17b0
[  307.826480][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  307.829877][   T34]  worker_thread+0x8a0/0xda0
[  307.831917][   T34]  kthread+0x711/0x8a0
[  307.833698][   T34]  ? __pfx_worker_thread+0x10/0x10
[  307.835933][   T34]  ? __pfx_kthread+0x10/0x10
[  307.837808][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.842527][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.844739][   T34]  ? __pfx_kthread+0x10/0x10
[  307.846731][   T34]  ret_from_fork+0x3fc/0x770
[  307.848921][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  307.850675][   T34]  ? __switch_to_asm+0x39/0x70
[  307.852286][   T34]  ? __switch_to_asm+0x33/0x70
[  307.853878][   T34]  ? __pfx_kthread+0x10/0x10
[  307.855429][   T34]  ret_from_fork_asm+0x1a/0x30
[  307.857054][   T34]  </TASK>
[  307.858238][   T34] INFO: task syz.0.2040:11703 blocked for more than 143 seconds.
[  307.860778][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  307.863378][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.866708][   T34] task:syz.0.2040      state:D stack:26920 pid:11703 tgid:11703 ppid:5843   task_flags:0x400040 flags:0x00004004
[  307.874516][   T34] Call Trace:
[  307.875968][   T34]  <TASK>
[  307.877261][   T34]  __schedule+0x1798/0x4cc0
[  307.879329][   T34]  ? __lock_acquire+0xab9/0xd20
[  307.881488][   T34]  ? __lock_acquire+0xab9/0xd20
[  307.883612][   T34]  ? __pfx___schedule+0x10/0x10
[  307.885665][   T34]  ? schedule+0x91/0x360
[  307.887484][   T34]  schedule+0x165/0x360
[  307.891852][   T34]  schedule_preempt_disabled+0x13/0x30
[  307.894229][   T34]  __mutex_lock+0x7e6/0x1360
[  307.896259][   T34]  ? __mutex_lock+0x5b6/0x1360
[  307.898441][   T34]  ? rfkill_unregister+0xc8/0x220
[  307.900623][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  307.902790][   T34]  ? __pfx_device_del+0x10/0x10
[  307.904891][   T34]  rfkill_unregister+0xc8/0x220
[  307.907017][   T34]  nfc_unregister_device+0x96/0x2a0
[  307.912003][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  307.914491][   T34]  virtual_ncidev_close+0x56/0x90
[  307.916229][   T34]  __fput+0x44c/0xa70
[  307.918059][   T34]  task_work_run+0x1d4/0x260
[  307.919934][   T34]  ? __pfx_task_work_run+0x10/0x10
[  307.921646][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  307.923444][   T34]  exit_to_user_mode_loop+0xec/0x110
[  307.925224][   T34]  do_syscall_64+0x2bd/0x3b0
[  307.926803][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.930127][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.932280][   T34]  ? exc_page_fault+0x9f/0xf0
[  307.933873][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.935785][   T34] RIP: 0033:0x7f929858ebe9
[  307.937468][   T34] RSP: 002b:00007ffe54c399f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  307.962728][   T34] RAX: 0000000000000000 RBX: 00007f92987b7da0 RCX: 00007f929858ebe9
[  307.966065][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  307.969570][   T34] RBP: 00007f92987b7da0 R08: 0000000000000210 R09: 0000001e54c39cef
[  307.972987][   T34] R10: 00000000003ffbcc R11: 0000000000000246 R12: 00000000000242ac
[  307.976350][   T34] R13: 00007ffe54c39af0 R14: ffffffffffffffff R15: 00007ffe54c39b10
[  307.979785][   T34]  </TASK>
[  307.981190][   T34] INFO: task syz.2.2046:11719 blocked for more than 143 seconds.
[  307.984508][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  307.987988][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  307.992127][   T34] task:syz.2.2046      state:D stack:25208 pid:11719 tgid:11718 ppid:5849   task_flags:0x400140 flags:0x00004006
[  307.997251][   T34] Call Trace:
[  307.998879][   T34]  <TASK>
[  308.000177][   T34]  __schedule+0x1798/0x4cc0
[  308.002169][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.004304][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.006402][   T34]  ? __pfx___schedule+0x10/0x10
[  308.010063][   T34]  ? schedule+0x91/0x360
[  308.011569][   T34]  schedule+0x165/0x360
[  308.013324][   T34]  schedule_preempt_disabled+0x13/0x30
[  308.015341][   T34]  __mutex_lock+0x7e6/0x1360
[  308.016930][   T34]  ? __mutex_lock+0x5b6/0x1360
[  308.018710][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  308.020959][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  308.022949][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.024706][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.026672][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  308.030513][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  308.032474][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  308.034186][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  308.036052][   T34]  rfkill_set_block+0x1d2/0x440
[  308.037703][   T34]  rfkill_fop_write+0x44b/0x570
[  308.039479][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  308.041334][   T34]  ? security_kernfs_init_security+0x240/0x290
[  308.043482][   T34]  ? rw_verify_area+0x255/0x4d0
[  308.045123][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.046804][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  308.050268][   T34]  vfs_write+0x27e/0xb30
[  308.051736][   T34]  ? __pfx_vfs_write+0x10/0x10
[  308.053798][   T34]  ? __fget_files+0x2a/0x420
[  308.055502][   T34]  ? __fget_files+0x2a/0x420
[  308.057071][   T34]  ? __fget_files+0x3a0/0x420
[  308.059027][   T34]  ? __fget_files+0x2a/0x420
[  308.060596][   T34]  ksys_write+0x145/0x250
[  308.062066][   T34]  ? __pfx_ksys_write+0x10/0x10
[  308.063667][   T34]  ? rcu_is_watching+0x15/0xb0
[  308.065272][   T34]  ? do_syscall_64+0xbe/0x3b0
[  308.066898][   T34]  do_syscall_64+0xfa/0x3b0
[  308.070153][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.071955][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.074489][   T34]  ? exc_page_fault+0x9f/0xf0
[  308.076065][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.078064][   T34] RIP: 0033:0x7fbf2ab8ebe9
[  308.079664][   T34] RSP: 002b:00007fbf2bae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  308.082510][   T34] RAX: ffffffffffffffda RBX: 00007fbf2adb5fa0 RCX: 00007fbf2ab8ebe9
[  308.085184][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  308.087831][   T34] RBP: 00007fbf2ac11e19 R08: 0000000000000000 R09: 0000000000000000
[  308.092209][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.094870][   T34] R13: 00007fbf2adb6038 R14: 00007fbf2adb5fa0 R15: 00007ffc26a6f4e8
[  308.097542][   T34]  </TASK>
[  308.098736][   T34] INFO: task syz.1.2060:11790 blocked for more than 143 seconds.
[  308.101362][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  308.104209][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  308.107131][   T34] task:syz.1.2060      state:D stack:25192 pid:11790 tgid:11789 ppid:5841   task_flags:0x400140 flags:0x00004004
[  308.114087][   T34] Call Trace:
[  308.115230][   T34]  <TASK>
[  308.116214][   T34]  __schedule+0x1798/0x4cc0
[  308.117839][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.119695][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.121366][   T34]  ? __pfx___schedule+0x10/0x10
[  308.122984][   T34]  ? schedule+0x91/0x360
[  308.124416][   T34]  schedule+0x165/0x360
[  308.125765][   T34]  schedule_preempt_disabled+0x13/0x30
[  308.127585][   T34]  __mutex_lock+0x7e6/0x1360
[  308.130518][   T34]  ? __mutex_lock+0x5b6/0x1360
[  308.132264][   T34]  ? rfkill_fop_open+0x12d/0x820
[  308.134157][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  308.136003][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  308.137852][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  308.139804][   T34]  rfkill_fop_open+0x12d/0x820
[  308.141568][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  308.143484][   T34]  misc_open+0x2bc/0x330
[  308.145253][   T34]  chrdev_open+0x4cc/0x5e0
[  308.146994][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.150221][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  308.152339][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.153938][   T34]  do_dentry_open+0x953/0x13f0
[  308.155537][   T34]  vfs_open+0x3b/0x340
[  308.156971][   T34]  ? path_openat+0x2ecd/0x3830
[  308.158807][   T34]  path_openat+0x2ee5/0x3830
[  308.160351][   T34]  ? arch_stack_walk+0xfc/0x150
[  308.161970][   T34]  ? stack_depot_save_flags+0x40/0x860
[  308.163945][   T34]  ? __pfx_path_openat+0x10/0x10
[  308.165638][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.167692][   T34]  do_filp_open+0x1fa/0x410
[  308.170515][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.172604][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  308.174278][   T34]  ? _raw_spin_unlock+0x28/0x50
[  308.176062][   T34]  ? alloc_fd+0x64c/0x6c0
[  308.177910][   T34]  do_sys_openat2+0x121/0x1c0
[  308.179646][   T34]  ? __se_sys_futex+0x36f/0x400
[  308.181227][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  308.182964][   T34]  ? rcu_is_watching+0x15/0xb0
[  308.184592][   T34]  __x64_sys_openat+0x138/0x170
[  308.186246][   T34]  do_syscall_64+0xfa/0x3b0
[  308.187764][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.190095][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.192268][   T34]  ? exc_page_fault+0x9f/0xf0
[  308.193843][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.195819][   T34] RIP: 0033:0x7f2d1518ebe9
[  308.197347][   T34] RSP: 002b:00007f2d133f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  308.200291][   T34] RAX: ffffffffffffffda RBX: 00007f2d153b5fa0 RCX: 00007f2d1518ebe9
[  308.203048][   T34] RDX: 0000000000040900 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  308.205736][   T34] RBP: 00007f2d15211e19 R08: 0000000000000000 R09: 0000000000000000
[  308.208562][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.211587][   T34] R13: 00007f2d153b6038 R14: 00007f2d153b5fa0 R15: 00007ffe721baaf8
[  308.214175][   T34]  </TASK>
[  308.215256][   T34] INFO: task syz-executor:11796 blocked for more than 143 seconds.
[  308.217886][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  308.220754][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  308.223611][   T34] task:syz-executor    state:D stack:28040 pid:11796 tgid:11796 ppid:1      task_flags:0x400040 flags:0x00004000
[  308.227691][   T34] Call Trace:
[  308.229244][   T34]  <TASK>
[  308.230594][   T34]  __schedule+0x1798/0x4cc0
[  308.232226][   T34]  ? kasan_save_free_info+0x46/0x50
[  308.234058][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.235769][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.237456][   T34]  ? __pfx___schedule+0x10/0x10
[  308.239318][   T34]  ? schedule+0x91/0x360
[  308.241013][   T34]  schedule+0x165/0x360
[  308.242592][   T34]  schedule_preempt_disabled+0x13/0x30
[  308.244359][   T34]  __mutex_lock+0x7e6/0x1360
[  308.245911][   T34]  ? __mutex_lock+0x5b6/0x1360
[  308.247595][   T34]  ? misc_open+0x51/0x330
[  308.249238][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  308.251020][   T34]  misc_open+0x51/0x330
[  308.252508][   T34]  chrdev_open+0x4cc/0x5e0
[  308.254127][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.255825][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  308.257996][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.259841][   T34]  do_dentry_open+0x953/0x13f0
[  308.261480][   T34]  vfs_open+0x3b/0x340
[  308.262978][   T34]  ? path_openat+0x2ecd/0x3830
[  308.264663][   T34]  path_openat+0x2ee5/0x3830
[  308.266253][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  308.268190][   T34]  ? count_memcg_event_mm+0x21/0x260
[  308.270445][   T34]  ? __pfx_path_openat+0x10/0x10
[  308.272172][   T34]  ? __pfx___up_read+0x10/0x10
[  308.273785][   T34]  ? do_user_addr_fault+0xbc1/0x1390
[  308.275565][   T34]  do_filp_open+0x1fa/0x410
[  308.277092][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.279196][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  308.280933][   T34]  ? _raw_spin_unlock+0x28/0x50
[  308.282607][   T34]  ? alloc_fd+0x64c/0x6c0
[  308.284081][   T34]  do_sys_openat2+0x121/0x1c0
[  308.285674][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  308.287433][   T34]  ? fd_install+0x97/0x540
[  308.289181][   T34]  ? fd_install+0x30d/0x540
[  308.290909][   T34]  __x64_sys_openat+0x138/0x170
[  308.292572][   T34]  do_syscall_64+0xfa/0x3b0
[  308.294125][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.296284][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.298499][   T34]  ? exc_page_fault+0x9f/0xf0
[  308.300135][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.302177][   T34] RIP: 0033:0x7f480078d4d1
[  308.303725][   T34] RSP: 002b:00007fff31366e10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  308.306560][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f480078d4d1
[  308.309632][   T34] RDX: 0000000000000002 RSI: 00007f4800812822 RDI: 00000000ffffff9c
[  308.312386][   T34] RBP: 00007f4800812822 R08: 0000000000000000 R09: 00007f48014ed6c0
[  308.315062][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  308.317678][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  308.320415][   T34]  </TASK>
[  308.321524][   T34] INFO: task syz-executor:11797 blocked for more than 143 seconds.
[  308.324221][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  308.326960][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  308.330030][   T34] task:syz-executor    state:D stack:28040 pid:11797 tgid:11797 ppid:1      task_flags:0x400040 flags:0x00004000
[  308.334091][   T34] Call Trace:
[  308.335277][   T34]  <TASK>
[  308.336319][   T34]  __schedule+0x1798/0x4cc0
[  308.337905][   T34]  ? kasan_save_free_info+0x46/0x50
[  308.339732][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.341440][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.343123][   T34]  ? __pfx___schedule+0x10/0x10
[  308.344819][   T34]  ? schedule+0x91/0x360
[  308.346305][   T34]  schedule+0x165/0x360
[  308.347724][   T34]  schedule_preempt_disabled+0x13/0x30
[  308.349712][   T34]  __mutex_lock+0x7e6/0x1360
[  308.351327][   T34]  ? __mutex_lock+0x5b6/0x1360
[  308.353258][   T34]  ? misc_open+0x51/0x330
[  308.354988][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  308.356764][   T34]  misc_open+0x51/0x330
[  308.358267][   T34]  chrdev_open+0x4cc/0x5e0
[  308.359804][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.361527][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  308.363699][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  308.365412][   T34]  do_dentry_open+0x953/0x13f0
[  308.367084][   T34]  vfs_open+0x3b/0x340
[  308.368727][   T34]  ? path_openat+0x2ecd/0x3830
[  308.370754][   T34]  path_openat+0x2ee5/0x3830
[  308.372250][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  308.374062][   T34]  ? count_memcg_event_mm+0x21/0x260
[  308.375828][   T34]  ? __pfx_path_openat+0x10/0x10
[  308.377473][   T34]  ? __pfx___up_read+0x10/0x10
[  308.379178][   T34]  ? do_user_addr_fault+0xbc1/0x1390
[  308.380939][   T34]  do_filp_open+0x1fa/0x410
[  308.382477][   T34]  ? __lock_acquire+0xab9/0xd20
[  308.384095][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  308.385789][   T34]  ? _raw_spin_unlock+0x28/0x50
[  308.387423][   T34]  ? alloc_fd+0x64c/0x6c0
[  308.389571][   T34]  do_sys_openat2+0x121/0x1c0
[  308.391669][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  308.393666][   T34]  ? fd_install+0x97/0x540
[  308.395419][   T34]  ? fd_install+0x30d/0x540
[  308.396968][   T34]  __x64_sys_openat+0x138/0x170
[  308.398808][   T34]  do_syscall_64+0xfa/0x3b0
[  308.400401][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.402206][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.404248][   T34]  ? exc_page_fault+0x9f/0xf0
[  308.405877][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.407932][   T34] RIP: 0033:0x7f1ff7f8d4d1
[  308.409866][   T34] RSP: 002b:00007ffdfd04ebe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  308.412761][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1ff7f8d4d1
[  308.415392][   T34] RDX: 0000000000000002 RSI: 00007f1ff8012822 RDI: 00000000ffffff9c
[  308.418004][   T34] RBP: 00007f1ff8012822 R08: 0000000000000000 R09: 00007f1ff8ced6c0
[  308.420782][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  308.423346][   T34] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  308.425969][   T34]  </TASK>
[  308.427040][   T34] 
[  308.427040][   T34] Showing all locks held in the system:
[  308.430252][   T34] 3 locks held by kworker/0:0/9:
[  308.431966][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  308.435600][   T34]  #1: ffffc900000c7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  308.440123][   T34]  #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  308.443723][   T34] 1 lock held by khungtaskd/34:
[  308.445348][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  308.448843][   T34] 2 locks held by getty/5669:
[  308.450875][   T34]  #0: ffff8881090930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  308.454129][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  308.457430][   T34] 2 locks held by syz.0.2040/11703:
[  308.459282][   T34]  #0: ffff8880315ef100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  308.462497][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  308.465863][   T34] 2 locks held by syz.2.2046/11719:
[  308.467621][   T34]  #0: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  308.470994][   T34]  #1: ffff8880315ef100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  308.474314][   T34] 2 locks held by syz.1.2060/11790:
[  308.476126][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.479691][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  308.483005][   T34] 1 lock held by syz-executor/11796:
[  308.484801][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.487707][   T34] 1 lock held by syz-executor/11797:
[  308.489631][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.492541][   T34] 1 lock held by syz-executor/11799:
[  308.494372][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.497305][   T34] 1 lock held by syz-executor/11805:
[  308.499380][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.502562][   T34] 1 lock held by syz-executor/11806:
[  308.504472][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.507336][   T34] 1 lock held by syz-executor/11808:
[  308.509238][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.512080][   T34] 1 lock held by syz-executor/11811:
[  308.513861][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.516693][   T34] 1 lock held by syz-executor/11812:
[  308.518552][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.521358][   T34] 1 lock held by syz-executor/11814:
[  308.523342][   T34]  #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  308.526419][   T34] 
[  308.527262][   T34] =============================================
[  308.527262][   T34] 
[  308.530167][   T34] NMI backtrace for cpu 0
[  308.530174][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  308.530183][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.530187][   T34] Call Trace:
[  308.530190][   T34]  <TASK>
[  308.530193][   T34]  dump_stack_lvl+0x189/0x250
[  308.530205][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.530213][   T34]  ? __pfx__printk+0x10/0x10
[  308.530225][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  308.530235][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  308.530243][   T34]  ? __pfx__printk+0x10/0x10
[  308.530253][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  308.530263][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  308.530271][   T34]  watchdog+0xf93/0xfe0
[  308.530282][   T34]  ? watchdog+0x1de/0xfe0
[  308.530292][   T34]  kthread+0x711/0x8a0
[  308.530301][   T34]  ? __pfx_watchdog+0x10/0x10
[  308.530309][   T34]  ? __pfx_kthread+0x10/0x10
[  308.530317][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.530326][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.530334][   T34]  ? __pfx_kthread+0x10/0x10
[  308.530342][   T34]  ret_from_fork+0x3fc/0x770
[  308.530349][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  308.530358][   T34]  ? __switch_to_asm+0x39/0x70
[  308.530365][   T34]  ? __switch_to_asm+0x33/0x70
[  308.530372][   T34]  ? __pfx_kthread+0x10/0x10
[  308.530380][   T34]  ret_from_fork_asm+0x1a/0x30
[  308.530393][   T34]  </TASK>
[  308.530396][   T34] Sending NMI from CPU 0 to CPUs 1:
[  308.583627][    C1] NMI backtrace for cpu 1
[  308.583640][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  308.583651][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.583658][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  308.583674][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  308.583682][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  308.583691][    C1] RAX: f1dbe98c30d00400 RBX: ffffffff81968308 RCX: f1dbe98c30d00400
[  308.583698][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6e8f RDI: ffffffff8be33400
[  308.583705][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  308.583711][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  308.583717][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  308.583723][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  308.583730][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.583737][    C1] CR2: 00007f0797a87e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  308.583767][    C1] Call Trace:
[  308.583773][    C1]  <TASK>
[  308.583777][    C1]  default_idle+0x13/0x20
[  308.583785][    C1]  default_idle_call+0x74/0xb0
[  308.583795][    C1]  do_idle+0x1e8/0x510
[  308.583805][    C1]  ? __pfx_do_idle+0x10/0x10
[  308.583818][    C1]  cpu_startup_entry+0x44/0x60
[  308.583826][    C1]  start_secondary+0x101/0x110
[  308.583839][    C1]  common_startup_64+0x13e/0x147
[  308.583854][    C1]  </TASK>
[  308.584601][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  308.643134][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  308.647238][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.650545][   T34] Call Trace:
[  308.651675][   T34]  <TASK>
[  308.652665][   T34]  dump_stack_lvl+0x99/0x250
[  308.654211][   T34]  ? __asan_memcpy+0x40/0x70
[  308.655700][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.657329][   T34]  ? __pfx__printk+0x10/0x10
[  308.658961][   T34]  vpanic+0x281/0x750
[  308.660519][   T34]  ? __pfx_vpanic+0x10/0x10
[  308.662215][   T34]  ? tick_nohz_tick_stopped+0x86/0xb0
[  308.664088][   T34]  ? __irq_work_queue_local+0x1de/0x550
[  308.666191][   T34]  panic+0xb9/0xc0
[  308.667583][   T34]  ? __pfx_panic+0x10/0x10
[  308.669196][   T34]  ? irq_work_queue+0xbc/0x140
[  308.670798][   T34]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  308.673205][   T34]  watchdog+0xfd2/0xfe0
[  308.674918][   T34]  ? watchdog+0x1de/0xfe0
[  308.676708][   T34]  kthread+0x711/0x8a0
[  308.678358][   T34]  ? __pfx_watchdog+0x10/0x10
[  308.680051][   T34]  ? __pfx_kthread+0x10/0x10
[  308.681707][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.683415][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.685130][   T34]  ? __pfx_kthread+0x10/0x10
[  308.686695][   T34]  ret_from_fork+0x3fc/0x770
[  308.688292][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  308.690323][   T34]  ? __switch_to_asm+0x39/0x70
[  308.692127][   T34]  ? __switch_to_asm+0x33/0x70
[  308.693913][   T34]  ? __pfx_kthread+0x10/0x10
[  308.695652][   T34]  ret_from_fork_asm+0x1a/0x30
[  308.697454][   T34]  </TASK>
[  308.699314][   T34] Kernel Offset: disabled
[  308.700757][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:03:17  Registers:
info registers vcpu 0

CPU#0
RAX=3de949d638703400 RBX=ffffffff81968308 RCX=3de949d638703400 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdd5ab8348 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888021128237 R9 =1ffff11004225046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9903 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f480903802c CR3=000000010b870000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f480b387d20
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff8a16d66d ffffffff89f5b8b4
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=ffffffff89f32276 ffffffff00000007 XMM07=ffffffff00000000 ffffffff89f4eaa4
XMM08=ffffffff89f52555 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
