last executing test programs:

21.730761844s ago: executing program 1 (id=183):
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
unshare(0x62040400) (async, rerun: 32)
unshare(0x44000000) (async, rerun: 64)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, 0x0, 0x0)
listen(r1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) (async, rerun: 64)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async)
close(0xffffffffffffffff) (async)
socket$rds(0x15, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async, rerun: 64)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x40, 0x0, 0x0)

21.73034898s ago: executing program 1 (id=184):
syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@ssrr={0x89, 0x27, 0x90, [@private=0x7, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x22}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x0, [@empty]}, @end, @ssrr={0x89, 0x23, 0x58, [@remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x800, 0x70fd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xd88) (async)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x34)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2) (async)
connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) (async)
shutdown(r6, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, '\x00', {0x3ed}, 0x7ff})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r7, 0x29, 0x8, 0x2, 0x1, 0x1, @mcast1, @private0, 0x80, 0x7800, 0x9, 0xf}})

21.630281584s ago: executing program 1 (id=185):
writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)="ad8dee8cd0226049a00ea29e2d2af4f37a35709507e7b9791e97436c3ea2ae05e39ce1f30eac4ac19106d85180b80085d00779ebedeb27e62da22733d7934a3588354557c72c415b9be8b31a1a462771251baccbd4e4b1219ca64b30f299808b5004d06452983a72c7b1b1762bcca9dab369077290746345018df438ab837773cce82377b403", 0x86}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="3d98b3c3640b83e9c18f4a7cb5104b58c3a3fce983030d71a4d6555ab09eca12274da3425db84f1cb9b51c4863278d813382dc935a5becb0985a82c6be7f90dd", 0x40}, {&(0x7f0000001140)}, {&(0x7f0000001240)="e8969d02c00a3106187ef3f64a0bc5c3c198f79fc18632746a0acb55659f6efb59432964060e846da5462771f7811eb806e10357b4b907e26062cd0b1dd8901ddb5a23be29957054acbcd5d85cbee82666b03c449475294c5cfc3e4c59f6a34d68f23a747312c31c55ab80a320aa2b2b58b33a615f7f7db50491172645f466e54bc7965ee38d02b303915e51a57306d72b39e4d666", 0x95}, {&(0x7f0000001300)="25c6e6e74083544262ae704fd4ce", 0xe}], 0x6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000013c0)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001400)={[{0x2b, 'devices'}, {0x2b, 'net'}, {0x2d, 'net_cls'}]}, 0x17)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x7c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xe, 0x8, "20d72a3a7603eb11313b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001580), r2)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x3fa, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000081}, 0x20000040)
r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001800)={0x28, 0x0, 0x2710, @local}, 0x10, 0x400)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000001840)=[@in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x101}, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x3, @private1, 0xd}, @in6={0xa, 0x4e20, 0xffff, @empty, 0x3}, @in6={0xa, 0x4e22, 0x3, @remote, 0x8}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x8}, @in6={0xa, 0x4e20, 0x80, @local, 0x8}, @in6={0xa, 0x4e20, 0xe0, @private2, 0x7f}], 0xf0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xfffffffffffffebb, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001a80)=0xf44, 0x4)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200140, 0x0)
connect$vsock_stream(r5, &(0x7f0000001cc0)={0x28, 0x0, 0xd262af6aaa762554, @my=0x1}, 0x10)
splice(r2, &(0x7f0000001d00)=0x6, 0xffffffffffffffff, &(0x7f0000001d40)=0x1000, 0xf, 0xc)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
preadv(r5, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/102, 0x66}, {&(0x7f0000001e40)=""/30, 0x1e}], 0x2, 0x1, 0x800)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001ec0)={'batadv0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001fc0)={'syztnl1\x00', &(0x7f0000001f00)={'syztnl2\x00', r9, 0x7, 0x80, 0x44a8, 0x633f, {{0x24, 0x4, 0x0, 0x8, 0x90, 0x67, 0x0, 0xe, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0xb, 0x17, [@multicast2, @broadcast]}, @ssrr={0x89, 0x17, 0x68, [@private=0xa010100, @multicast1, @broadcast, @multicast1, @local]}, @timestamp_addr={0x44, 0x14, 0xd0, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@private=0xa010101, 0x1}]}, @cipso={0x86, 0x1d, 0x2, [{0x2, 0x9, "2b8915db05f695"}, {0x0, 0xc, "8d21b2e5ac8d98e8c674"}, {0x7, 0x2}]}, @end, @lsrr={0x83, 0x27, 0xd6, [@multicast1, @broadcast, @broadcast, @multicast2, @local, @broadcast, @private=0xa010102, @multicast2, @loopback]}]}}}}})
openat$tun(0xffffffffffffff9c, &(0x7f0000002000), 0x24000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)

20.960516321s ago: executing program 0 (id=192):
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
pipe(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
r1 = socket(0x1, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x70b401, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="80000500010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="510cff0cf72ab861996fd2689438102225ce6eef1a42ec99c270220500000800000000977af0a9d8178edd765317978839aa07520234811cb626a3cfffdb1f197349f9d0"], 0x58}}, 0x8000)

20.879673779s ago: executing program 0 (id=195):
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x25c, 0x801, 0x0, 0x8, 'syz1\x00'})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000580)="c02cbc10cf8591fbd3a49ffec679249ba739acd033ccd4b06228e1b005510de4e33cfd28380e0860435aac2fb5445b5e05be7a368584a6666dd9b9ec99d29fec9e2d659eaf37e88c608386b0192dc6935b2cc98c9a4f4e0e82c6efdb1264f989d0304e01d1a68bbf7a50f46c73d8b59f25aefe64df7ba8f714f61a04e67f78f5a9859d278b317e8d63bc3c4cfa4001d38f27b66656db8d6b660f02562c446cc0588ee7c0bbf2806dd52646f384b080043ad0d0399ecc5f9a7025863ec9bab0129415a5d37db647114a78c15cc31e604e482659478c7926af042c031ce3c7438682323724873a", &(0x7f0000000780)=@buf="3db386608e85834dbd7f98e6a4ec8720b33280c66006499c82b370ce12fa7ae491b3f5e0c4aa7d8694c21dc0d2899bbbafd252049f5d6ab8176405d595867880a8aedfc3128eb43655198eed8fda045d629a9c161abe5936af15cdfa6bef00bc1ced1ab5345325e026caa4c2b84035e11afa485ecb0949771f3ac906ff4e98c985a7cade5d138d756be369d95782fcb57b18a29007be823319ae86f1afc1172087f5fb1c38f8810beeb36601b01ef01f8f910075282eb10fe8e008abc8f15ff56b", 0x1}, 0x20)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYRES16=r6, @ANYBLOB="170900100000fedbdf25010000000500070000000000080009000000000008000a0000000000060002000100000014001f00ff0100000000000000000000000000011400200000000000ffff0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
r8 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x54, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, r7, 0x0)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4)
close(0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
pipe(&(0x7f0000000040))
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100))

20.748284838s ago: executing program 1 (id=197):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000ffffffd412bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.677210629s ago: executing program 1 (id=198):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000280000006000000000022b00fe88a43de1a400000000001200027d01ff020000000000000000000000000001"], 0xfdef)

20.676824155s ago: executing program 0 (id=199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@private0, <r3=>0x0}, &(0x7f0000000400)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x8, 0x3, 0x100, 0x40, @remote, @local, 0x7, 0x80, 0x81, 0x3}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000801)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ifreq(r7, 0x89b1, &(0x7f0000000240)={'macvtap0\x00', @ifru_data=0x0})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r8=>0x0})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0)
ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x58844}, 0x80)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r11, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="53b75f71c83b42e3c2f7c11e5911d9d7e33202d3b2e2362c8b0c0e72bf1364eaaa2c0b451113bf035876f59942ec6244bf26ad63e9f431ac0c80b8be0ae56d88a1bd900ba8c9c09dfb577e3cfc9c0fdab3c636633fddb8db94578d563bcc84b735e47c30701faa4f79a59a8eb33bc863b725b508e773fa0eaa00ab216db707e2b352bb26f328815b72ff4fea3b0b59e16663fdb97605903c07af33adfa6b000f28a87c35bb5fd11e44f0d26ec60aa53d755618fcf02284bbd5c86bcf53", 0xbd}, {&(0x7f00000000c0)="6144a2c4144514b0901c40276ac52ca3fde5975aaebe68635ff9dad2ec1c6993afa5abdcb36f040423e202951b010468c496dfae2b6578f7c1e28b49678da7120007fe207b64b28bde3457e5dbd963", 0x4f}, {&(0x7f0000000140)="a58b983beb0b58848e5bc72f599d47cd050406913ee0f2eab8c18dda12f8f78b6f419e42d6f807517a6b244fbab90bb3a6fb70096ee15e200f726df60d29dad64f3e2bd84af5881ea5390e2ef26171468a4c7b2dddae1352451059f22b82a5f83d8d975ad3a84f3bc4f6804c2e29ae135f65d978f503a5fa7eb72b2d2a9ce477e4d6df1fdb27619db61b62ae3de776cc0d19d2644a3a32d8a5771276e94ca68a902cc4", 0xa3}], 0x3}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)="a9", 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYRESOCT], 0x10}}], 0x2, 0x40930)

20.539827818s ago: executing program 0 (id=200):
writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000040)="ad8dee8cd0226049a00ea29e2d2af4f37a35709507e7b9791e97436c3ea2ae05e39ce1f30eac4ac19106d85180b80085d00779ebedeb27e62da22733d7934a3588354557c72c415b9be8b31a1a462771251baccbd4e4b1219ca64b30f299808b5004d06452983a72c7b1b1762bcca9dab369077290746345018df438ab837773cce82377b403", 0x86}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="3d98b3c3640b83e9c18f4a7cb5104b58c3a3fce983030d71a4d6555ab09eca12274da3425db84f1cb9b51c4863278d813382dc935a5becb0985a82c6be7f90dd", 0x40}, {&(0x7f0000001140)}, {&(0x7f0000001240)="e8969d02c00a3106187ef3f64a0bc5c3c198f79fc18632746a0acb55659f6efb59432964060e846da5462771f7811eb806e10357b4b907e26062cd0b1dd8901ddb5a23be29957054acbcd5d85cbee82666b03c449475294c5cfc3e4c59f6a34d68f23a747312c31c55ab80a320aa2b2b58b33a615f7f7db50491172645f466e54bc7965ee38d02b303915e51a57306d72b39e4d666", 0x95}, {&(0x7f0000001300)="25c6e6e74083544262ae704fd4ce", 0xe}], 0x6)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000013c0)={<r0=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x17)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x7c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xe, 0x8, "20d72a3a7603eb11313b"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001580), r2)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x3fa, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async)
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x20, 0x3fa, 0x8, 0x70bd26, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r4, 0x524, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000081}, 0x20000040) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r4, 0x524, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000081}, 0x20000040)
r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001800)={0x28, 0x0, 0x2710, @local}, 0x10, 0x400)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000001840)=[@in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x101}, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x3, @private1, 0xd}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x3, @remote, 0x8}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x8}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0xe0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}], 0xd8) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000001840)=[@in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x101}, @in6={0xa, 0x4e22, 0x7f, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0x3, @private1, 0xd}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x3, @remote, 0x8}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x8}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0xe0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}], 0xd8)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="020025bd7000fedbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="020025bd7000fedbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001a80)=0xf44, 0x4)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200140, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000001c80), 0x200140, 0x0)
connect$vsock_stream(r5, &(0x7f0000001cc0)={0x28, 0x0, 0xd262af6aaa762554, @my=0x1}, 0x10)
splice(r2, &(0x7f0000001d00)=0x6, 0xffffffffffffffff, &(0x7f0000001d40)=0x1000, 0xf, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
preadv(r5, &(0x7f0000001e80), 0x0, 0x1, 0x800)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001ec0))
socket$alg(0x26, 0x5, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004)

20.538846399s ago: executing program 1 (id=201):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdfd09"}})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x300, 0x250, 0x250, 0x300, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @private0, @private2, @empty, @local, @private1, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x62)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x20, 0x40, 0x119, 0xfffffffe, 0x0, {0x8, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0x289a348f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0xc000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0x52, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e2a1b45f8)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880)

20.470674109s ago: executing program 0 (id=202):
r0 = socket$netlink(0x10, 0x3, 0x9)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe000200d})
epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}], 0x2, 0x1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c842)

20.410562602s ago: executing program 0 (id=203):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x20008090)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x10000042, 0x2}, 0x10)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff004)
close(0x3)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

16.297727041s ago: executing program 2 (id=229):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3ec0)
close(0xffffffffffffffff) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x100, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10008000}, 0x850) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x12) (async)
r4 = socket(0x2, 0x80805, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async)
unshare(0x2c020400) (async)
writev(r5, 0x0, 0x0) (async)
write$tun(r5, 0x0, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r7, 0x5}, 0x8) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000000c141000d41308814ed0c8eb08003d0001000000380003000300000008003d000300000008003d000100000008003d000200000017b622893972e0985350f694d25210f556836b"], 0x38}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xb8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_DELCHAIN={0x1a4, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x93c0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfa78}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff52bf9}]}, @NFTA_CHAIN_USERDATA={0xf5, 0xc, "77b282d0bdbb1f9e3efc5949d49048ef26a4ede4ff04ae276728fad57fa051f986845c318b11e2578b27b0f6189725ff7514fa1b5dc1f2e194e84818f699259c268cc3fd3d80505d1028a3a4c48fd684a8bfe5bc7bd316fe6ed844ef2691dc30dafa1f6c1722be170d40ff7d07974a973161a15a628c288b261d6d0b55c92e56b38b1d4730a626c8cc92fc7afd94e9c4f78c197112cad7c02e53e7d6b8fc5cf60a7f4a0888f04e61dd53a44ec19a1622a6ffccab9fc74771e7e9247c17ae5e1c068cf886428ac927b84ecd40c2488b1fce33ef018d05364f80c51c52b6482bdd44a2bb6fdfbbc4eed1a4ecf0726bad789c"}]}, @NFT_MSG_DELRULE={0x218, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x138, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xd83}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xa}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe9}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x34, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x46, 0x6, "cd140c271032c4cff19a2cdfc273aa5cef41dffa23d25a1a65846b791d788590e0d29644959c343900d7b42c5060b14b7cdd7546be2083fa45591c07b98e877d6c63"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x47, 0x6, "f36839169ac75c35abc2d200fbfedb06f46b83952d3cce15b0a3d26b5a085dc6b985413d92bdcc5e9a742ea4e9703775b5b901aa4bdfd9eed4e17de0335c158b5fb104"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x1c, 0x6, "f61255562fc75aa5e8b29decfbf892659df1967f07c3a20e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x5e, 0x6, "325ddc95970379bf1068ec6681cb26d89d992add9fdf5da891cafe5a6a2ef2fd3826c894fc04de70fd7c1370ac4fd1886e61472be561d6a506701919d534eb8b73d4335c11b986ee8a234eaa294a06e9a251ab67eb98ffad2fdc"}, @NFTA_TABLE_USERDATA={0x8f, 0x6, "94ff47ad0ab17b6c5099a85070cd882456091e314cac098c92226b4a0a2c93aacbfcccf419e24a28d51e74b7cb73d1a5d948036dd0e00b23adbe73b994423aded209b1285c6e57f4f5da809aa5de8a68f9da365415c8cec342207bae9e4efa964df496fcd6eb860b4e9c8888b6942a4efccd21de6e80af17a7f335a43f58bf596d66c53a243f2977ef94dd"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x2c, 0x6, "f4d55790931ec7e2338a5fb8fae8f9c225b2553c1637ad188787573823cb0fa68ebd07137cdf4250"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0xe8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xd1, 0xd, 0x1, 0x0, "99e07d32a4660fb42e7cbf8e9b85d68aac3ea0c54f0de128027f15e935b56d8e45a0c9116b09f4cd060b618a3e9979fe5dd64f99339f1102f9097ff413a31f7a68c05d52f9e4ef32541f7a9e73cca3b54ff7d8537538607bd4235c66ad95e730d06aae9dabeab1c1391b0ed48273d93050eb0e167319a31b0f508f1c2f2df3627ff6addae8ae43db88296ee1217cad63ce0d396440a629fc49656c99fda70c0a53c132b7a4c6698514e5f69ebb4db55d3de8793f83a9edb4664c058d0af6be50639820aa50f0fc73f13332f75e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x29c, 0x12, 0x200, 0x70bd2d, 0x25dfdbfc, {0x29, 0x4, 0x8, 0xf4, {0x4e21, 0x4e20, [0x5, 0x9, 0xb5d, 0x8], [0x6000000, 0x405b74, 0x6, 0xb], r2, [0x5, 0xfffffff7]}, 0x4, 0xfff}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "78b68a744e09dea6593a3a390f773d85cbf00926904ceeee769852513adf1531cb072f5003912b9805106b6dddd509deb12144a140eadc42583b8014526973c1eaadaf707d09a985b12bf11380b13e6fd9f411e31ad1796d37163dce5eb1bb75b239b69719d449dcc53da6f163c768820832ab6539769d224fc8aa978322244d6213bbe91cb8c282515e50572a25772c359ac41d1bd5f33684396342c992bb7dfe5fea00ca16"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "9746710e009df9df37badf585a6c91e9a97beeb87d92b48ca3b81bd8eb3fa40528e9aff4ebc828007f6bb152754027e7a0a906577fa0c1c8e48b370bf124a2685e7d6e06b876c6e09cb2b603f40da332dd01c36648ea647100f5c139c4d0dce059acff614731c2aa86eba4757b672f3debf563f950bd0174e5f8e60210f1f8e1a4eda4c481cd720af996feeed1bcef648d6534347b33b1ac2b7556393d7e06eccf6c9c8edae5c0db76db9b53900429a01de0760dcd757df99e040c6c0db47d4c68dd326c"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "491e0c4b15b79fa3b9388989a40ec8ebe4a29d7a70b4ef37736eafd23b0bc391e435ba7056d94cf0f93a52dd484616460056798f61cb4d425787e8bdfbdcc6cbdc26bc05a84fce309e11939132c83bdc21784b7013eb3a9f499218436a74a5d9fd1619b35ae1696fbfb9e0807285a653"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "a10f2ed18bb3862a234a537dbdaa16dc833ea92e763325830bb190da6e32f581d7a6dff1dac99f3635cd321209104c437904593862bbf87eae85fdbd"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "0a3da58c3d3bd9dfe1d194e75d60919fbb66884763b39644da8db66eeabba3b2dc042d88"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8810}, 0x24004804) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000540)={r1, 0x8, 0x0, "fdbacb6d354ed4206f07a85ccb1352c7e3bc751edc17109c0c32173c41389700fb3ee2269b028386f4be893b70017bd6c2607320fca8ccc4f155dac307e6292719aad786859f6cb8ad4a516e2c8f273e30c211be7c9cc51499e5735075eef88cff8808917247ece325915c0f8b5817780ecc8095d8131460061c353f952d887f10ee99b7d6d9f3576dbe16acc0768515cf9f18b646869e71cdf7de64499e0e5a9c738b1df26d1e1fbe53e9557c33cb1a98f9"}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getqdisc={0x44, 0x26, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff6, 0x5}, {0xb, 0xc}, {0xb, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x24040005)

15.717999445s ago: executing program 2 (id=230):
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/65, 0x41, 0x0, &(0x7f0000001300)=""/195, 0xc3}, &(0x7f00000000c0)=0x40)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0043002b9d2a25a1350af27fe27b7049ecc775c61010d222c36a389381b2abab4cabcdcbcb476cc1f6753c53a6004bcbee4d5a4cf816c9742c76cf0511bc51efada858ee9a6d1583ad8b9f8bc90d29c7cd1e328cc17a7afa965f69e2dd9b8a8162a431b59f4beaec9df4b321de4f67e5afb6252d3a151f26e8ed", @ANYRES16=r4, @ANYBLOB="010026bd5000ffdbdf2555000000080001004f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="08000000efccecef50f70836d0c23ffefcc2a9b1b4b0aad2aa33e88d8a754338788123627139092be75af1878cd2d8d03a103cf5da0a8d276adb3d9e80b8667764d5d4", @ANYRES16=r5, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000000009900000000004c000000"], 0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYRESDEC, @ANYRES16, @ANYBLOB="010000000020fddbdf255500000008000300002c75601edb08612bf520ee7467d28c117106b1d809d3831150a90a96f43fca3522e4332730f6a6c5a9a07fc40180ffff2297170d45d0728ae51af9efa8a8a5430454da6d7e5d8069c525f4fd", @ANYRES32=r7, @ANYBLOB="0c0099000800008004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4f20, 0x5, @loopback}, 0x1c)
shutdown(0xffffffffffffffff, 0x0)
listen(r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYRES64=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x50)
recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

15.71768265s ago: executing program 2 (id=231):
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00'], 0x20}}, 0x0)
unshare(0x2c060000)
unshare(0x2c020400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x38}, 0x1, 0x4000000}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r4, 0x952de000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

15.630846272s ago: executing program 2 (id=232):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000181272000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.629591154s ago: executing program 2 (id=233):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1b0, 0x280, 0xd0, 0x1b0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xff, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}, {}, 0x0, 0x9}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'xfrm0\x00', 'team_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x3, 0x4}, {0x2, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x20000000}, {0x28}}}}, 0x570)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x4e21, @private=0xa010101}})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x3ff, 0x81, 0xfffffffa, 0x20000000, 0xc}, &(0x7f0000000180)=0x14)

15.624143883s ago: executing program 2 (id=234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000002e000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r9, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1a, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff78}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xfd, 0x8, 0x1, 0x4, 0xf6}, @map_val={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb273000, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x6, 0x6, 0x6, 0x4, 0x10}, @printk={@llx}]}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0xde, &(0x7f00000007c0)=""/222, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r9, r10], &(0x7f0000000a40)=[{0x4, 0x1, 0xf, 0x2}, {0x2, 0x4, 0xd, 0x1}, {0x1, 0x2, 0x5, 0x3}, {0x1, 0x2, 0x6, 0x8}, {0x1, 0x3, 0xf, 0x7}, {0x1, 0x1, 0x1, 0x1}], 0x10, 0x10}, 0x94)
getpeername$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000540)={0x10000042, 0x2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r12, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)

4.990061124s ago: executing program 32 (id=203):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x20008090)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000540)={0x10000042, 0x2}, 0x10)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, 0x0)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff004)
close(0x3)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

4.949928754s ago: executing program 33 (id=201):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x6, 0x9, 0x3, "746478bdfd09"}})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x300, 0x250, 0x250, 0x300, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @private0, @private2, @empty, @local, @private1, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x62)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x20, 0x40, 0x119, 0xfffffffe, 0x0, {0x8, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0x289a348f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0xc000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0x52, &(0x7f0000000680)={&(0x7f0000000780)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e2a1b45f8)
r9 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
recvmsg(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880)

0s ago: executing program 34 (id=234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000000280)=""/240, 0xf0}], 0x4}, 0x101}], 0x3, 0x20, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000002e000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r9, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1a, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff78}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xfd, 0x8, 0x1, 0x4, 0xf6}, @map_val={0x18, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb273000, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0x6, 0x6, 0x6, 0x4, 0x10}, @printk={@llx}]}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0xde, &(0x7f00000007c0)=""/222, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r9, r10], &(0x7f0000000a40)=[{0x4, 0x1, 0xf, 0x2}, {0x2, 0x4, 0xd, 0x1}, {0x1, 0x2, 0x5, 0x3}, {0x1, 0x2, 0x6, 0x8}, {0x1, 0x3, 0xf, 0x7}, {0x1, 0x1, 0x1, 0x1}], 0x10, 0x10}, 0x94)
getpeername$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x3f7, 0x2, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x4)
r11 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000540)={0x10000042, 0x2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r12, &(0x7f0000000480)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30402' (ED25519) to the list of known hosts.
syzkaller login: [   47.749933][ T5738] cgroup: Unknown subsys name 'net'
[   47.817733][ T5738] cgroup: Unknown subsys name 'cpuset'
[   47.821707][ T5738] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.305095][ T5738] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.015596][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.035288][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.038656][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.042083][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.045491][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.052865][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.059142][ T5199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.062104][ T5199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.066024][ T5199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.075629][ T5199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.146779][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.149411][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.152005][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.154814][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.158022][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.311246][ T5806] chnl_net:caif_netlink_parms(): no params data found
[   53.379867][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   53.471466][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.473721][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.476689][ T5806] bridge_slave_0: entered allmulticast mode
[   53.479320][ T5806] bridge_slave_0: entered promiscuous mode
[   53.516580][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.518858][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.521066][ T5806] bridge_slave_1: entered allmulticast mode
[   53.523923][ T5806] bridge_slave_1: entered promiscuous mode
[   53.557776][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.560657][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.563705][ T5810] bridge_slave_0: entered allmulticast mode
[   53.567914][ T5810] bridge_slave_0: entered promiscuous mode
[   53.601327][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.604288][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.607547][ T5810] bridge_slave_1: entered allmulticast mode
[   53.611242][ T5810] bridge_slave_1: entered promiscuous mode
[   53.626550][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.630872][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.656715][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.664457][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.677554][ T5806] team0: Port device team_slave_0 added
[   53.679400][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   53.694143][ T5806] team0: Port device team_slave_1 added
[   53.730698][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.733452][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.744119][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.751527][ T5810] team0: Port device team_slave_0 added
[   53.767709][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.770489][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.780821][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.787609][ T5810] team0: Port device team_slave_1 added
[   53.842804][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.845912][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.856276][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.860448][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.862708][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.865036][ T5813] bridge_slave_0: entered allmulticast mode
[   53.869141][ T5813] bridge_slave_0: entered promiscuous mode
[   53.872173][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.874439][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.877135][ T5813] bridge_slave_1: entered allmulticast mode
[   53.879814][ T5813] bridge_slave_1: entered promiscuous mode
[   53.889234][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.891936][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.902089][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.937035][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.944276][ T5806] hsr_slave_0: entered promiscuous mode
[   53.947253][ T5806] hsr_slave_1: entered promiscuous mode
[   53.951679][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.985938][ T5810] hsr_slave_0: entered promiscuous mode
[   53.988684][ T5810] hsr_slave_1: entered promiscuous mode
[   53.990801][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   53.992903][ T5810] Cannot create hsr debugfs directory
[   54.009026][ T5813] team0: Port device team_slave_0 added
[   54.032022][ T5813] team0: Port device team_slave_1 added
[   54.119271][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.121990][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.132207][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.147765][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.150482][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   54.160400][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.253306][ T5813] hsr_slave_0: entered promiscuous mode
[   54.255740][ T5813] hsr_slave_1: entered promiscuous mode
[   54.258064][ T5813] debugfs: 'hsr0' already exists in 'hsr'
[   54.259819][ T5813] Cannot create hsr debugfs directory
[   54.377715][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.397860][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.411907][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.423167][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.447794][ T5806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.454910][ T5806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.463653][ T5806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.473884][ T5806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.517666][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.524399][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.531376][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.536133][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.572699][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.598850][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   54.605043][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.616409][  T274] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.619119][  T274] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.643923][  T274] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.646805][  T274] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.654327][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   54.669383][  T274] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.671892][  T274] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.680337][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.683124][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.720571][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.740641][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   54.757960][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.760180][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.770437][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.772529][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.844461][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.888458][ T5810] veth0_vlan: entered promiscuous mode
[   54.895687][ T5810] veth1_vlan: entered promiscuous mode
[   54.903174][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.934565][ T5810] veth0_macvtap: entered promiscuous mode
[   54.939261][ T5810] veth1_macvtap: entered promiscuous mode
[   54.942067][ T5806] veth0_vlan: entered promiscuous mode
[   54.959896][ T5806] veth1_vlan: entered promiscuous mode
[   54.964827][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.975050][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.982964][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.993536][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.998167][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.008717][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.021463][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.043176][ T5806] veth0_macvtap: entered promiscuous mode
[   55.062856][ T5806] veth1_macvtap: entered promiscuous mode
[   55.066627][ T5809] Bluetooth: hci0: command tx timeout
[   55.081429][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.087180][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.104471][ T5813] veth0_vlan: entered promiscuous mode
[   55.111214][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.115014][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.126278][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.126420][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.128716][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.132167][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.149523][ T5809] Bluetooth: hci1: command tx timeout
[   55.166595][ T5813] veth1_vlan: entered promiscuous mode
[   55.196292][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.199118][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.226668][ T5809] Bluetooth: hci2: command tx timeout
[   55.236305][ T5813] veth0_macvtap: entered promiscuous mode
[   55.242421][ T5813] veth1_macvtap: entered promiscuous mode
[   55.250124][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.252521][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.269138][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.293451][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.302236][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.307730][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.316614][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.330501][ T5640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.350691][ T5640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.359464][ T5640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.362323][ T5640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.413277][ T5869] Bluetooth: MGMT ver 1.23
[   55.417946][ T5872] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   55.436083][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.438854][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.489317][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.491830][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.573322][ T5882] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   55.753851][ T5896] bond_slave_0: entered promiscuous mode
[   55.756286][ T5896] bond_slave_1: entered promiscuous mode
[   55.760569][ T5896] vlan2: entered promiscuous mode
[   55.762547][ T5896] bond0: entered promiscuous mode
[   55.975068][ T5903] netlink: 'syz.2.11': attribute type 8 has an invalid length.
[   55.980008][ T5906] netlink: 'syz.2.11': attribute type 8 has an invalid length.
[   55.983355][   T33] audit: type=1800 audit(1763130250.307:2): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12" name="blkio.bfq.time_recursive" dev="tmpfs" ino=34 res=0 errno=0
[   56.143400][ T5918] bond_slave_0: entered promiscuous mode
[   56.145427][ T5918] bond_slave_1: entered promiscuous mode
[   56.148385][ T5918] vlan2: entered promiscuous mode
[   56.149947][ T5918] bond0: entered promiscuous mode
[   56.261347][ T5922] netlink: 280 bytes leftover after parsing attributes in process `syz.2.19'.
[   56.339791][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   56.508903][ T5937] Cannot find map_set index 0 as target
[   56.542222][   T33] audit: type=1800 audit(1763130250.867:3): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="blkio.bfq.time_recursive" dev="tmpfs" ino=50 res=0 errno=0
[   56.559196][ T5939] vlan2: entered promiscuous mode
[   56.568038][   T33] audit: type=1800 audit(1763130250.897:4): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="blkio.bfq.time_recursive" dev="tmpfs" ino=56 res=0 errno=0
[   56.738649][ T5949] bridge_slave_0: left allmulticast mode
[   56.740426][ T5949] bridge_slave_0: left promiscuous mode
[   56.741190][ T5950] Zero length message leads to an empty skb
[   56.742879][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.757966][ T5949] bridge_slave_1: left allmulticast mode
[   56.759738][ T5949] bridge_slave_1: left promiscuous mode
[   56.761663][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.768536][ T5949] bond0: (slave bond_slave_0): Releasing backup interface
[   56.772003][ T5949] bond_slave_0: left promiscuous mode
[   56.776728][ T5949] bond0: (slave bond_slave_1): Releasing backup interface
[   56.780880][ T5949] bond_slave_1: left promiscuous mode
[   56.790007][ T5949] team0: Port device team_slave_0 removed
[   56.798912][ T5949] team0: Port device team_slave_1 removed
[   56.802742][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.812159][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.826562][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.831663][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.841095][ T5949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   56.869357][   T33] audit: type=1800 audit(1763130251.197:5): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.30" name="memory.events" dev="tmpfs" ino=44 res=0 errno=0
[   56.884668][   T33] audit: type=1804 audit(1763130251.207:6): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.30" name="/newroot/5/memory.events" dev="tmpfs" ino=44 res=1 errno=0
[   56.975772][ T5959] netlink: 'syz.1.32': attribute type 8 has an invalid length.
[   56.997508][   T33] audit: type=1107 audit(1763130251.327:7): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   57.024391][   T33] audit: type=1800 audit(1763130251.347:8): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="memory.events" dev="tmpfs" ino=73 res=0 errno=0
[   57.040270][ T5968] netlink: 27 bytes leftover after parsing attributes in process `syz.2.34'.
[   57.061753][   T33] audit: type=1804 audit(1763130251.387:9): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.34" name="/newroot/10/memory.events" dev="tmpfs" ino=73 res=1 errno=0
[   57.088575][   T33] audit: type=1800 audit(1763130251.417:10): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="memory.events" dev="tmpfs" ino=97 res=0 errno=0
[   57.145980][ T5809] Bluetooth: hci0: command tx timeout
[   57.228809][ T5809] Bluetooth: hci1: command tx timeout
[   57.271640][   T33] audit: type=1804 audit(1763130251.597:11): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.40" name="/newroot/14/cgroup.controllers" dev="tmpfs" ino=95 res=1 errno=0
[   57.305995][ T5809] Bluetooth: hci2: command tx timeout
[   57.665765][ T6010] netlink: 'syz.0.47': attribute type 4 has an invalid length.
[   57.668530][ T6011] netlink: 'syz.0.47': attribute type 4 has an invalid length.
[   57.675958][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   57.678693][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   57.930210][ T6032] netlink: 'syz.0.51': attribute type 16 has an invalid length.
[   57.934998][ T6032] netlink: 'syz.0.51': attribute type 17 has an invalid length.
[   57.960165][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.015826][ T6041] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.047890][ T6044] Cannot find map_set index 0 as target
[   58.078970][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.59'.
[   58.082033][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.59'.
[   58.184917][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'.
[   58.251553][ T6072] SET target dimension over the limit!
[   58.260245][ T6070] trusted_key: syz.2.63 sent an empty control message without MSG_MORE.
[   58.413229][ T6076] netlink: 44 bytes leftover after parsing attributes in process `syz.0.66'.
[   58.417672][ T6076] netlink: 19 bytes leftover after parsing attributes in process `syz.0.66'.
[   58.421373][ T6076] netlink: 'syz.0.66': attribute type 6 has an invalid length.
[   58.424520][ T6076] netlink: 'syz.0.66': attribute type 4 has an invalid length.
[   58.488657][ T6088] team_slave_0: entered promiscuous mode
[   58.490497][ T6088] team_slave_1: entered promiscuous mode
[   58.492441][ T6088] vlan2: entered promiscuous mode
[   58.494021][ T6088] team0: entered promiscuous mode
[   58.750716][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.786793][ T6100] Cannot find map_set index 0 as target
[   59.034787][ T6112] syzkaller1: entered allmulticast mode
[   59.226402][ T5809] Bluetooth: hci0: command tx timeout
[   59.305767][ T5809] Bluetooth: hci1: command tx timeout
[   59.386679][ T5809] Bluetooth: hci2: command tx timeout
[   59.751455][ T6159] Cannot find map_set index 0 as target
[   60.154534][ T6186] SET target dimension over the limit!
[   60.223028][ T6182] syzkaller0: entered promiscuous mode
[   60.228470][ T6182] syzkaller0: entered allmulticast mode
[   61.084852][ T6202] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   61.087388][ T6202] netlink: 'syz.1.100': attribute type 4 has an invalid length.
[   61.234985][   T33] kauditd_printk_skb: 11 callbacks suppressed
[   61.235002][   T33] audit: type=1800 audit(1763130255.557:23): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.100" name="memory.events" dev="tmpfs" ino=144 res=0 errno=0
[   61.315841][ T5809] Bluetooth: hci0: command tx timeout
[   61.372443][   T33] audit: type=1800 audit(1763130255.697:24): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name=20 dev="tmpfs" ino=201 res=0 errno=0
[   61.385505][ T5809] Bluetooth: hci1: command tx timeout
[   61.388641][   T33] audit: type=1804 audit(1763130255.707:25): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.104" name=2F6E6577726F6F742F33342F20 dev="tmpfs" ino=201 res=1 errno=0
[   61.440878][ T6223] vlan2: entered promiscuous mode
[   61.451901][ T6222] __nla_validate_parse: 5 callbacks suppressed
[   61.451918][ T6222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.106'.
[   61.467145][ T5809] Bluetooth: hci2: command tx timeout
[   61.503810][ T6226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.420746][ T6239] sctp: [Deprecated]: syz.2.110 (pid 6239) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.420746][ T6239] Use struct sctp_sack_info instead
[   63.385447][ T5809] Bluetooth: hci0: command tx timeout
[   67.257888][   T33] audit: type=1800 audit(1763130261.587:26): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.114" name=20 dev="tmpfs" ino=263 res=0 errno=0
[   67.284458][   T33] audit: type=1804 audit(1763130261.597:27): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.114" name=20 dev="tmpfs" ino=263 res=1 errno=0
[   67.299973][   T33] audit: type=1804 audit(1763130261.597:28): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.115" name="/newroot/29/cgroup.controllers" dev="tmpfs" ino=171 res=1 errno=0
[   67.343679][   T33] audit: type=1800 audit(1763130261.597:29): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.115" name="cgroup.controllers" dev="tmpfs" ino=171 res=0 errno=0
[   67.494375][   T33] audit: type=1800 audit(1763130261.817:30): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="memory.events" dev="tmpfs" ino=183 res=0 errno=0
[   67.516185][   T33] audit: type=1804 audit(1763130261.847:31): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.119" name="/newroot/31/memory.events" dev="tmpfs" ino=183 res=1 errno=0
[   67.606551][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   67.693443][ T6296] Cannot find map_set index 0 as target
[   67.702217][ T6297] netlink: 'syz.0.123': attribute type 13 has an invalid length.
[   67.729245][ T6297] netlink: 'syz.0.123': attribute type 17 has an invalid length.
[   67.768337][ T6297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.804090][ T6299] bond1: entered promiscuous mode
[   67.808800][ T6299] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.822294][ T6302] syzkaller1: entered promiscuous mode
[   67.824550][ T6302] syzkaller1: entered allmulticast mode
[   67.969964][ T6314] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   67.972637][ T6314] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   68.026547][ T6319] SET target dimension over the limit!
[   68.109726][ T6325] netlink: 9 bytes leftover after parsing attributes in process `syz.2.132'.
[   68.145528][ T6325] netlink: 9 bytes leftover after parsing attributes in process `syz.2.132'.
[   68.191785][   T33] audit: type=1800 audit(1763130262.517:32): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=215 res=0 errno=0
[   68.209754][   T33] audit: type=1800 audit(1763130262.537:33): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=215 res=0 errno=0
[   68.535502][ T6352] netlink: 9 bytes leftover after parsing attributes in process `syz.1.139'.
[   68.548663][ T6352] netlink: 9 bytes leftover after parsing attributes in process `syz.1.139'.
[   68.638119][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'.
[   68.777734][   T33] audit: type=1800 audit(1763130263.107:34): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="blkio.bfq.time_recursive" dev="tmpfs" ino=249 res=0 errno=0
[   68.788040][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'.
[   68.822815][ T6363] vlan2: entered promiscuous mode
[   68.836764][   T33] audit: type=1804 audit(1763130263.167:35): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.144" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=317 res=1 errno=0
[   68.893048][ T6369] Unknown options in mask b7f2
[   68.909273][ T6371] Unknown options in mask b7f2
[   69.207213][ T6392] netlink: 9 bytes leftover after parsing attributes in process `syz.1.152'.
[   69.216900][ T6392] netlink: 9 bytes leftover after parsing attributes in process `syz.1.152'.
[   69.409309][ T6409] vlan2: entered promiscuous mode
[   69.432812][ T6402] netlink: 6 bytes leftover after parsing attributes in process `syz.2.153'.
[   69.447697][ T6402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.714146][ T6423] syzkaller1: entered promiscuous mode
[   69.716432][ T6423] syzkaller1: entered allmulticast mode
[   69.939498][ T6436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.990661][ T6438] nbd0: detected capacity change from 0 to 127
[   70.012000][ T6436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.025493][ T5199] Bluetooth: hci0: command 0x0c1a tx timeout
[   70.025620][ T5809] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   70.072450][ T6436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.117777][ T6436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.186177][   T56] block nbd0: Receive control failed (result -104)
[   70.247488][ T5833] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.259236][ T5833] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.276937][ T5833] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.284485][ T5833] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.389175][ T6462] netlink: 'syz.0.171': attribute type 2 has an invalid length.
[   70.436475][ T5867] IPVS: starting estimator thread 0...
[   70.439508][ T6464] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   70.446239][ T6464] netlink: 'syz.2.170': attribute type 13 has an invalid length.
[   70.448902][ T6464] netlink: 'syz.2.170': attribute type 17 has an invalid length.
[   70.501492][ T6464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.545462][ T6467] IPVS: using max 79 ests per chain, 189600 per kthread
[   70.676972][ T6482] vlan2: entered promiscuous mode
[   71.014974][ T6503] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[   71.548344][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.551110][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.848639][ T6537] bond0: (slave vlan2): Error -34 calling dev_set_mtu
[   72.624369][ T6593] batadv1: entered allmulticast mode
[   72.633087][ T6593] 8021q: adding VLAN 0 to HW filter on device batadv1
[   73.248284][ T6584] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   73.250876][ T6584] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   73.262566][ T6584] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   73.266957][ T6584] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   73.274523][ T6584] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   73.278900][ T6584] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   74.394561][ T6628] __nla_validate_parse: 6 callbacks suppressed
[   74.394572][ T6628] netlink: 220 bytes leftover after parsing attributes in process `syz.2.209'.
[   74.441730][ T6630] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.210'.
[   74.951790][ T6643] veth3: entered promiscuous mode
[   74.956560][   T33] kauditd_printk_skb: 18 callbacks suppressed
[   74.956573][   T33] audit: type=1800 audit(1763130269.287:54): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.213" name="cpuacct.stat" dev="tmpfs" ino=378 res=0 errno=0
[   74.969130][   T33] audit: type=1800 audit(1763130269.297:55): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.213" name="cpuacct.stat" dev="tmpfs" ino=378 res=0 errno=0
[   75.219641][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'.
[   75.224937][   T33] audit: type=1804 audit(1763130269.547:56): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.217" name="/newroot/71/cgroup.controllers" dev="tmpfs" ino=399 res=1 errno=0
[   75.233852][   T33] audit: type=1800 audit(1763130269.547:57): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.217" name="cgroup.controllers" dev="tmpfs" ino=399 res=0 errno=0
[   75.307229][   T33] audit: type=1800 audit(1763130269.637:58): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="blkio.bfq.time_recursive" dev="tmpfs" ino=410 res=0 errno=0
[   75.341749][ T6665] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   75.378979][   T33] audit: type=1800 audit(1763130269.707:59): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.221" name="blkio.bfq.time_recursive" dev="tmpfs" ino=421 res=0 errno=0
[   75.419411][ T6670] Cannot find map_set index 0 as target
[   75.444880][   T33] audit: type=1804 audit(1763130269.767:60): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.223" name="/newroot/77/cgroup.controllers" dev="tmpfs" ino=432 res=1 errno=0
[   75.453877][   T33] audit: type=1800 audit(1763130269.767:61): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.223" name="cgroup.controllers" dev="tmpfs" ino=432 res=0 errno=0
[   76.706659][ T6689] infiniband syz0: set active
[   76.708631][ T6689] infiniband syz0: added veth1_to_hsr
[   76.712251][ T6689] syz0: rxe_create_cq: returned err = -12
[   76.714703][ T6689] infiniband syz0: Couldn't create ib_mad CQ
[   76.718075][ T6689] infiniband syz0: Couldn't open port 1
[   76.736153][ T6689] RDS/IB: syz0: added
[   76.739572][ T6689] smc: adding ib device syz0 with port count 1
[   76.741684][ T6689] smc:    ib device syz0 port 1 has no pnetid
[   77.143051][   T33] audit: type=1800 audit(1763130271.467:62): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.231" name=20 dev="tmpfs" ino=476 res=0 errno=0
[   77.151663][   T33] audit: type=1804 audit(1763130271.477:63): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.231" name=20 dev="tmpfs" ino=476 res=1 errno=0
[   77.204171][ T6700] Cannot find map_set index 0 as target
[   86.917731][  T974] cfg80211: failed to load regulatory.db
[  100.356111][ T5276] block nbd0: Possible stuck request ffff88810a450000: control (read@0,1024B). Runtime 30 seconds
[  100.360769][ T5276] block nbd0: Possible stuck request ffff88810a450200: control (read@1024,1024B). Runtime 30 seconds
[  100.364943][ T5276] block nbd0: Possible stuck request ffff88810a450400: control (read@2048,1024B). Runtime 30 seconds
[  100.369299][ T5276] block nbd0: Possible stuck request ffff88810a450600: control (read@3072,1024B). Runtime 30 seconds
[  130.426977][  T228] block nbd0: Possible stuck request ffff88810a450000: control (read@0,1024B). Runtime 60 seconds
[  130.431181][  T228] block nbd0: Possible stuck request ffff88810a450200: control (read@1024,1024B). Runtime 60 seconds
[  130.436393][  T228] block nbd0: Possible stuck request ffff88810a450400: control (read@2048,1024B). Runtime 60 seconds
[  130.440635][  T228] block nbd0: Possible stuck request ffff88810a450600: control (read@3072,1024B). Runtime 60 seconds
[  130.925102][ T5258] udevd[5258]: worker [5812] /devices/virtual/block/nbd0 is taking a long time
[  132.987190][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.989578][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  160.506476][  T228] block nbd0: Possible stuck request ffff88810a450000: control (read@0,1024B). Runtime 90 seconds
[  160.510450][  T228] block nbd0: Possible stuck request ffff88810a450200: control (read@1024,1024B). Runtime 90 seconds
[  160.514439][  T228] block nbd0: Possible stuck request ffff88810a450400: control (read@2048,1024B). Runtime 90 seconds
[  160.518635][  T228] block nbd0: Possible stuck request ffff88810a450600: control (read@3072,1024B). Runtime 90 seconds
[  190.586665][ T5276] block nbd0: Possible stuck request ffff88810a450000: control (read@0,1024B). Runtime 120 seconds
[  190.590869][ T5276] block nbd0: Possible stuck request ffff88810a450200: control (read@1024,1024B). Runtime 120 seconds
[  190.595334][ T5276] block nbd0: Possible stuck request ffff88810a450400: control (read@2048,1024B). Runtime 120 seconds
[  190.599739][ T5276] block nbd0: Possible stuck request ffff88810a450600: control (read@3072,1024B). Runtime 120 seconds
[  194.433952][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.437472][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  220.672569][ T5276] block nbd0: Possible stuck request ffff88810a450000: control (read@0,1024B). Runtime 150 seconds
[  220.677108][ T5276] block nbd0: Possible stuck request ffff88810a450200: control (read@1024,1024B). Runtime 150 seconds
[  220.681490][ T5276] block nbd0: Possible stuck request ffff88810a450400: control (read@2048,1024B). Runtime 150 seconds
[  220.686015][ T5276] block nbd0: Possible stuck request ffff88810a450600: control (read@3072,1024B). Runtime 150 seconds
[  232.185543][   T34] INFO: task kworker/1:3:5277 blocked for more than 143 seconds.
[  232.188689][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  232.191319][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.196234][   T34] task:kworker/1:3     state:D stack:24856 pid:5277  tgid:5277  ppid:2      task_flags:0x4208060 flags:0x00080000
[  232.200933][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  232.203680][   T34] Call Trace:
[  232.205056][   T34]  <TASK>
[  232.206811][   T34]  __schedule+0x1798/0x4cc0
[  232.208702][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  232.210961][   T34]  ? __pfx___schedule+0x10/0x10
[  232.213009][   T34]  ? schedule+0x91/0x360
[  232.214751][   T34]  schedule+0x165/0x360
[  232.225254][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.227513][   T34]  __mutex_lock+0x7e6/0x1350
[  232.229358][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.231223][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  232.233848][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.242512][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  232.244801][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  232.247407][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  232.249718][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  232.251925][   T34]  process_scheduled_works+0xae1/0x17b0
[  232.254176][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  232.256722][   T34]  worker_thread+0x8a0/0xda0
[  232.258508][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.260984][   T34]  ? __kthread_parkme+0x7b/0x200
[  232.263057][   T34]  kthread+0x711/0x8a0
[  232.264695][   T34]  ? __pfx_worker_thread+0x10/0x10
[  232.267055][   T34]  ? __pfx_kthread+0x10/0x10
[  232.268863][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.270880][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.272950][   T34]  ? __pfx_kthread+0x10/0x10
[  232.274779][   T34]  ret_from_fork+0x4bc/0x870
[  232.276745][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.278768][   T34]  ? __switch_to_asm+0x39/0x70
[  232.280607][   T34]  ? __switch_to_asm+0x33/0x70
[  232.282516][   T34]  ? __pfx_kthread+0x10/0x10
[  232.284331][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.287168][   T34]  </TASK>
[  232.288446][   T34] INFO: task syz.1.201:6570 blocked for more than 143 seconds.
[  232.291413][   T34]       Not tainted syzkaller #0
[  232.293295][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.296932][   T34] task:syz.1.201       state:D stack:25128 pid:6570  tgid:6570  ppid:5806   task_flags:0x400040 flags:0x00080003
[  232.301509][   T34] Call Trace:
[  232.302871][   T34]  <TASK>
[  232.304054][   T34]  __schedule+0x1798/0x4cc0
[  232.306025][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.307720][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.309473][   T34]  ? __pfx___schedule+0x10/0x10
[  232.311134][   T34]  ? schedule+0x91/0x360
[  232.312842][   T34]  schedule+0x165/0x360
[  232.314526][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.317034][   T34]  __mutex_lock+0x7e6/0x1350
[  232.318892][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.320868][   T34]  ? rfkill_unregister+0xc8/0x220
[  232.322925][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.324958][   T34]  ? __pfx_device_del+0x10/0x10
[  232.327111][   T34]  rfkill_unregister+0xc8/0x220
[  232.329179][   T34]  nfc_unregister_device+0x96/0x2a0
[  232.331262][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  232.333512][   T34]  virtual_ncidev_close+0x56/0x90
[  232.335686][   T34]  __fput+0x44c/0xa70
[  232.337255][   T34]  task_work_run+0x1d4/0x260
[  232.339144][   T34]  ? __pfx_task_work_run+0x10/0x10
[  232.341103][   T34]  ? exit_to_user_mode_loop+0x40/0x130
[  232.343297][   T34]  exit_to_user_mode_loop+0xe9/0x130
[  232.346472][   T34]  do_syscall_64+0x2bd/0xfa0
[  232.348385][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.350817][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  232.353297][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.355826][   T34] RIP: 0033:0x7ff89378f6c9
[  232.357630][   T34] RSP: 002b:00007fff95ff62a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  232.361008][   T34] RAX: 0000000000000000 RBX: 00007ff8939e7da0 RCX: 00007ff89378f6c9
[  232.364050][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  232.367379][   T34] RBP: 00007ff8939e7da0 R08: 000000000000024c R09: 0000001e95ff659f
[  232.370550][   T34] R10: 00007ff8939e7cb0 R11: 0000000000000246 R12: 0000000000011d41
[  232.373736][   T34] R13: 00007ff8939e6090 R14: ffffffffffffffff R15: 00007fff95ff63c0
[  232.377213][   T34]  </TASK>
[  232.378560][   T34] INFO: task syz.0.203:6584 blocked for more than 143 seconds.
[  232.381589][   T34]       Not tainted syzkaller #0
[  232.383512][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.387588][   T34] task:syz.0.203       state:D stack:23016 pid:6584  tgid:6578  ppid:5813   task_flags:0x400040 flags:0x00080003
[  232.392297][   T34] Call Trace:
[  232.393693][   T34]  <TASK>
[  232.394864][   T34]  __schedule+0x1798/0x4cc0
[  232.397741][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.399704][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.401634][   T34]  ? __pfx___schedule+0x10/0x10
[  232.403599][   T34]  ? schedule+0x91/0x360
[  232.410469][   T34]  schedule+0x165/0x360
[  232.412202][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.414395][   T34]  __mutex_lock+0x7e6/0x1350
[  232.416465][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.418458][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  232.420686][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.422740][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.424339][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.426410][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.428448][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  232.430600][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  232.432789][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  232.434944][   T34]  rfkill_set_block+0x1d2/0x440
[  232.437023][   T34]  rfkill_fop_write+0x44b/0x570
[  232.438993][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  232.441114][   T34]  ? security_kernfs_init_security+0x270/0x290
[  232.443505][   T34]  ? rw_verify_area+0x255/0x4d0
[  232.445501][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.447375][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  232.449474][   T34]  vfs_write+0x27e/0xb30
[  232.451125][   T34]  ? __pfx_vfs_write+0x10/0x10
[  232.452953][   T34]  ? __fget_files+0x2a/0x420
[  232.454827][   T34]  ? __fget_files+0x2a/0x420
[  232.457605][   T34]  ? __fget_files+0x3a0/0x420
[  232.459556][   T34]  ? __fget_files+0x2a/0x420
[  232.461456][   T34]  ksys_write+0x145/0x250
[  232.463155][   T34]  ? __pfx_ksys_write+0x10/0x10
[  232.465263][   T34]  ? do_syscall_64+0xbe/0xfa0
[  232.467185][   T34]  do_syscall_64+0xfa/0xfa0
[  232.469003][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.471110][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.473576][   T34]  ? exc_page_fault+0xab/0x100
[  232.475629][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.477939][   T34] RIP: 0033:0x7f77ebf8f6c9
[  232.479790][   T34] RSP: 002b:00007f77ea1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  232.483204][   T34] RAX: ffffffffffffffda RBX: 00007f77ec1e6180 RCX: 00007f77ebf8f6c9
[  232.486488][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[  232.489431][   T34] RBP: 00007f77ec011f91 R08: 0000000000000000 R09: 0000000000000000
[  232.492460][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.494777][   T34] R13: 00007f77ec1e6218 R14: 00007f77ec1e6180 R15: 00007ffcd1d9fcf8
[  232.497335][   T34]  </TASK>
[  232.498485][   T34] INFO: task syz.2.234:6702 blocked for more than 143 seconds.
[  232.501394][   T34]       Not tainted syzkaller #0
[  232.503281][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.507500][   T34] task:syz.2.234       state:D stack:26056 pid:6702  tgid:6701  ppid:5810   task_flags:0x400040 flags:0x00080002
[  232.512152][   T34] Call Trace:
[  232.513550][   T34]  <TASK>
[  232.514785][   T34]  __schedule+0x1798/0x4cc0
[  232.516684][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.518197][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.519773][   T34]  ? __pfx___schedule+0x10/0x10
[  232.521346][   T34]  ? schedule+0x91/0x360
[  232.522747][   T34]  schedule+0x165/0x360
[  232.524060][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.526118][   T34]  __mutex_lock+0x7e6/0x1350
[  232.527615][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.529171][   T34]  ? rfkill_fop_open+0x12d/0x820
[  232.530754][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.532349][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  232.534079][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  232.536108][   T34]  rfkill_fop_open+0x12d/0x820
[  232.537695][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  232.539371][   T34]  misc_open+0x2d5/0x350
[  232.540768][   T34]  chrdev_open+0x4cc/0x5e0
[  232.542185][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.543781][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  232.546073][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.547767][   T34]  do_dentry_open+0x953/0x13f0
[  232.549330][   T34]  vfs_open+0x3b/0x340
[  232.550700][   T34]  ? path_openat+0x2ecd/0x3830
[  232.552251][   T34]  path_openat+0x2ee5/0x3830
[  232.553763][   T34]  ? __pfx_path_openat+0x10/0x10
[  232.555514][   T34]  do_filp_open+0x1fa/0x410
[  232.557030][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.558596][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  232.560274][   T34]  ? _raw_spin_unlock+0x28/0x50
[  232.561876][   T34]  ? alloc_fd+0x64c/0x6c0
[  232.563246][   T34]  do_sys_openat2+0x121/0x1c0
[  232.564805][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  232.567100][   T34]  ? rcu_is_watching+0x15/0xb0
[  232.568695][   T34]  __x64_sys_openat+0x138/0x170
[  232.570250][   T34]  do_syscall_64+0xfa/0xfa0
[  232.571751][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.573381][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.575422][   T34]  ? exc_page_fault+0xab/0x100
[  232.576968][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.578863][   T34] RIP: 0033:0x7f83c938f6c9
[  232.580270][   T34] RSP: 002b:00007f83ca25b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  232.582902][   T34] RAX: ffffffffffffffda RBX: 00007f83c95e5fa0 RCX: 00007f83c938f6c9
[  232.585587][   T34] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  232.588121][   T34] RBP: 00007f83c9411f91 R08: 0000000000000000 R09: 0000000000000000
[  232.590614][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.593119][   T34] R13: 00007f83c95e6038 R14: 00007f83c95e5fa0 R15: 00007ffd9a0f54d8
[  232.596533][   T34]  </TASK>
[  232.597612][   T34] INFO: task syz-executor:6706 blocked for more than 143 seconds.
[  232.600238][   T34]       Not tainted syzkaller #0
[  232.601872][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.604784][   T34] task:syz-executor    state:D stack:28008 pid:6706  tgid:6706  ppid:1      task_flags:0x400040 flags:0x00080000
[  232.608875][   T34] Call Trace:
[  232.609937][   T34]  <TASK>
[  232.610837][   T34]  __schedule+0x1798/0x4cc0
[  232.612262][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.613796][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.615852][   T34]  ? __pfx___schedule+0x10/0x10
[  232.617368][   T34]  ? schedule+0x91/0x360
[  232.618721][   T34]  schedule+0x165/0x360
[  232.620037][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.621741][   T34]  __mutex_lock+0x7e6/0x1350
[  232.623202][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.624708][   T34]  ? misc_open+0x51/0x350
[  232.626174][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.627770][   T34]  misc_open+0x51/0x350
[  232.629051][   T34]  chrdev_open+0x4cc/0x5e0
[  232.630403][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.631937][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  232.633907][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.635561][   T34]  do_dentry_open+0x953/0x13f0
[  232.637086][   T34]  vfs_open+0x3b/0x340
[  232.638362][   T34]  ? path_openat+0x2ecd/0x3830
[  232.639886][   T34]  path_openat+0x2ee5/0x3830
[  232.641335][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  232.643053][   T34]  ? count_memcg_event_mm+0x21/0x260
[  232.644721][   T34]  ? __pfx_path_openat+0x10/0x10
[  232.646457][   T34]  ? __pfx___up_read+0x10/0x10
[  232.647975][   T34]  ? do_user_addr_fault+0xbbc/0x1380
[  232.649617][   T34]  do_filp_open+0x1fa/0x410
[  232.651021][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.652531][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  232.654128][   T34]  ? _raw_spin_unlock+0x28/0x50
[  232.655862][   T34]  ? alloc_fd+0x64c/0x6c0
[  232.657219][   T34]  do_sys_openat2+0x121/0x1c0
[  232.658692][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  232.660325][   T34]  ? fd_install+0x97/0x540
[  232.661760][   T34]  ? fd_install+0x30d/0x540
[  232.663157][   T34]  __x64_sys_openat+0x138/0x170
[  232.664685][   T34]  do_syscall_64+0xfa/0xfa0
[  232.666690][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.668332][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.670254][   T34]  ? exc_page_fault+0xab/0x100
[  232.671765][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.673607][   T34] RIP: 0033:0x7fc013b8de91
[  232.675083][   T34] RSP: 002b:00007fff76bee7e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  232.678300][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc013b8de91
[  232.680819][   T34] RDX: 0000000000000002 RSI: 00007fc013c129b7 RDI: 00000000ffffff9c
[  232.683449][   T34] RBP: 00007fc013c129b7 R08: 0000000000000000 R09: 00007fc01491d6c0
[  232.686089][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  232.688526][   T34] R13: 0000000000000003 R14: 00007fff76beebb8 R15: 0000000000000000
[  232.690983][   T34]  </TASK>
[  232.692021][   T34] INFO: task syz-executor:6707 blocked for more than 143 seconds.
[  232.694422][   T34]       Not tainted syzkaller #0
[  232.696153][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  232.698964][   T34] task:syz-executor    state:D stack:27112 pid:6707  tgid:6707  ppid:1      task_flags:0x400040 flags:0x00080000
[  232.702794][   T34] Call Trace:
[  232.703890][   T34]  <TASK>
[  232.704842][   T34]  __schedule+0x1798/0x4cc0
[  232.706425][   T34]  ? security_file_open+0xb1/0x270
[  232.708084][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.709602][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.711148][   T34]  ? __pfx___schedule+0x10/0x10
[  232.712829][   T34]  ? schedule+0x91/0x360
[  232.714186][   T34]  schedule+0x165/0x360
[  232.715700][   T34]  schedule_preempt_disabled+0x13/0x30
[  232.717408][   T34]  __mutex_lock+0x7e6/0x1350
[  232.718877][   T34]  ? __mutex_lock+0x5bb/0x1350
[  232.720367][   T34]  ? misc_open+0x51/0x350
[  232.721719][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  232.723294][   T34]  misc_open+0x51/0x350
[  232.724619][   T34]  chrdev_open+0x4cc/0x5e0
[  232.726586][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.728126][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  232.730071][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  232.731586][   T34]  do_dentry_open+0x953/0x13f0
[  232.733105][   T34]  vfs_open+0x3b/0x340
[  232.734376][   T34]  ? path_openat+0x2ecd/0x3830
[  232.735990][   T34]  path_openat+0x2ee5/0x3830
[  232.737418][   T34]  ? __pfx_css_rstat_updated+0x10/0x10
[  232.739065][   T34]  ? count_memcg_event_mm+0x21/0x260
[  232.740701][   T34]  ? __pfx_path_openat+0x10/0x10
[  232.742244][   T34]  ? __pfx___up_read+0x10/0x10
[  232.743746][   T34]  ? do_user_addr_fault+0xbbc/0x1380
[  232.745970][   T34]  do_filp_open+0x1fa/0x410
[  232.747382][   T34]  ? __lock_acquire+0xab9/0xd20
[  232.748959][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  232.750591][   T34]  ? _raw_spin_unlock+0x28/0x50
[  232.752138][   T34]  ? alloc_fd+0x64c/0x6c0
[  232.753571][   T34]  do_sys_openat2+0x121/0x1c0
[  232.755380][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  232.757076][   T34]  ? fd_install+0x97/0x540
[  232.758902][   T34]  ? fd_install+0x30d/0x540
[  232.760710][   T34]  __x64_sys_openat+0x138/0x170
[  232.762456][   T34]  do_syscall_64+0xfa/0xfa0
[  232.764042][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.765898][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.767972][   T34]  ? exc_page_fault+0xab/0x100
[  232.769620][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.771527][   T34] RIP: 0033:0x7fcb0218de91
[  232.773088][   T34] RSP: 002b:00007fff16c945d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  232.775983][   T34] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcb0218de91
[  232.779096][   T34] RDX: 0000000000000002 RSI: 00007fcb022129b7 RDI: 00000000ffffff9c
[  232.782220][   T34] RBP: 00007fcb022129b7 R08: 0000000000000000 R09: 00007fcb02f1d6c0
[  232.786171][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  232.789344][   T34] R13: 0000000000000003 R14: 00007fff16c949a8 R15: 0000000000000000
[  232.792508][   T34]  </TASK>
[  232.793872][   T34] 
[  232.793872][   T34] Showing all locks held in the system:
[  232.797121][   T34] 1 lock held by khungtaskd/34:
[  232.799042][   T34]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  232.802978][   T34] 3 locks held by kworker/1:3/5277:
[  232.805271][   T34]  #0: ffff888100075948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  232.809498][   T34]  #1: ffffc900034e7ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  232.813852][   T34]  #2: ffffffff8f5aa1e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  232.818369][   T34] 2 locks held by getty/5636:
[  232.819906][   T34]  #0: ffff888112c020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  232.823217][   T34]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  232.827595][   T34] 1 lock held by udevd/5812:
[  232.829168][   T34]  #0: ffff88816a63e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  232.832103][   T34] 2 locks held by syz.1.201/6570:
[  232.833753][   T34]  #0: ffff88816a394100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  232.837376][   T34]  #1: ffffffff8f5aa1e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  232.840595][   T34] 2 locks held by syz.0.203/6584:
[  232.842181][   T34]  #0: ffffffff8f5aa1e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  232.845602][   T34]  #1: ffff88816a394100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  232.848839][   T34] 2 locks held by syz.2.234/6702:
[  232.850399][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.853063][   T34]  #1: ffffffff8f5aa1e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  232.856360][   T34] 1 lock held by syz-executor/6706:
[  232.858052][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.860738][   T34] 1 lock held by syz-executor/6707:
[  232.862763][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.866297][   T34] 1 lock held by syz-executor/6709:
[  232.868323][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.871060][   T34] 1 lock held by syz-executor/6715:
[  232.872637][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.875560][   T34] 1 lock held by syz-executor/6717:
[  232.877254][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.880087][   T34] 1 lock held by syz-executor/6719:
[  232.881726][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.884409][   T34] 1 lock held by syz-executor/6721:
[  232.886201][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.888913][   T34] 1 lock held by syz-executor/6723:
[  232.890547][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.893195][   T34] 1 lock held by syz-executor/6725:
[  232.894867][   T34]  #0: ffffffff8e7752a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350
[  232.898068][   T34] 
[  232.898899][   T34] =============================================
[  232.898899][   T34] 
[  232.901420][   T34] NMI backtrace for cpu 0
[  232.901429][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  232.901438][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.901442][   T34] Call Trace:
[  232.901448][   T34]  <TASK>
[  232.901452][   T34]  dump_stack_lvl+0x189/0x250
[  232.901468][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.901478][   T34]  ? __pfx__printk+0x10/0x10
[  232.901490][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  232.901500][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  232.901512][   T34]  ? __pfx__printk+0x10/0x10
[  232.901520][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  232.901534][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  232.901546][   T34]  watchdog+0xf60/0xfa0
[  232.901556][   T34]  ? watchdog+0x1e2/0xfa0
[  232.901565][   T34]  kthread+0x711/0x8a0
[  232.901576][   T34]  ? __pfx_watchdog+0x10/0x10
[  232.901582][   T34]  ? __pfx_kthread+0x10/0x10
[  232.901592][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.901601][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.901610][   T34]  ? __pfx_kthread+0x10/0x10
[  232.901619][   T34]  ret_from_fork+0x4bc/0x870
[  232.901628][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  232.901637][   T34]  ? __switch_to_asm+0x39/0x70
[  232.901645][   T34]  ? __switch_to_asm+0x33/0x70
[  232.901672][   T34]  ? __pfx_kthread+0x10/0x10
[  232.901686][   T34]  ret_from_fork_asm+0x1a/0x30
[  232.901697][   T34]  </TASK>
[  232.901700][   T34] Sending NMI from CPU 0 to CPUs 1:
[  232.954580][    C1] NMI backtrace for cpu 1
[  232.954597][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  232.954608][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.954615][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  232.954638][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 11 22 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  232.954647][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286
[  232.954680][    C1] RAX: 46c1069ed6877200 RBX: ffffffff81967b87 RCX: 46c1069ed6877200
[  232.954687][    C1] RDX: 0000000000000001 RSI: ffffffff8d70c1de RDI: ffffffff8bbf05e0
[  232.954693][    C1] RBP: ffffc90000197f10 R08: ffff88823c632fdb R09: 1ffff110478c65fb
[  232.954699][    C1] R10: dffffc0000000000 R11: ffffed10478c65fc R12: ffffffff8f7cce70
[  232.954705][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102c1d3000
[  232.954710][    C1] FS:  0000000000000000(0000) GS:ffff8882a9f3e000(0000) knlGS:0000000000000000
[  232.954718][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  232.954724][    C1] CR2: 000055cf7d17a680 CR3: 00000001725a0000 CR4: 00000000000006f0
[  232.954756][    C1] Call Trace:
[  232.954764][    C1]  <TASK>
[  232.954768][    C1]  default_idle+0x13/0x20
[  232.954781][    C1]  default_idle_call+0x73/0xb0
[  232.954794][    C1]  do_idle+0x1e7/0x510
[  232.954804][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  232.954815][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.954825][    C1]  ? __pfx_do_idle+0x10/0x10
[  232.954836][    C1]  ? do_idle+0x4ed/0x510
[  232.954845][    C1]  cpu_startup_entry+0x44/0x60
[  232.954854][    C1]  start_secondary+0x101/0x110
[  232.954867][    C1]  common_startup_64+0x13e/0x147
[  232.954884][    C1]  </TASK>

VM DIAGNOSIS:
14:27:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90021fdf390 RCX=ffff888113195700 RDX=0000000000000000
RSI=0000000000000040 RDI=0000000000000000 RBP=0000000000000040 RSP=ffffc90021fdf288
R8 =ffffc90021fdf34f R9 =0000000000000000 R10=ffffc90021fdf340 R11=fffff520043fbe6a
R12=ffffc90021fdf3c0 R13=ffffc90021fdf3c0 R14=0000000000000000 R15=1ffff920043fbe72
RIP=ffffffff81c02620 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cf7d179600 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f4c9afb7d20
XMM02=0000000500000007 06013cf600000001 XMM03=0005880300080005 800307800404a4ac
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=0208000288080001 08000a0100000007 XMM07=0006800300000000 a003048080808008
XMM08=000598031fffffff f408000500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000aa7690
R8 =ffff888109680237 R9 =1ffff110212d0046 R10=dffffc0000000000 R11=ffffffff8514d7e0
R12=dffffc0000000000 R13=ffffffff997d68eb R14=ffffffff99ae9f00 R15=0000000000000000
RIP=ffffffff8514d85c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cf7d17a680 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000329b2cd2 000000000000003b XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
