last executing test programs:

19.501644469s ago: executing program 2 (id=913):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x74e, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)

18.679606127s ago: executing program 2 (id=916):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
read$alg(r2, &(0x7f0000000580)=""/110, 0x6e)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmmsg(r3, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/17, 0x11}], 0x1}, 0x8}], 0x1, 0x2000, 0x0)
r4 = getpid()
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r6, 0x0, 0x0, 0x0}, 0x30)
r7 = getuid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000940)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={<r9=>0x0}, &(0x7f00000009c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000a00)=0xe8)
sendmsg$unix(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="a18cfaf9e93fab7d00763cd161914c7b15f41b42fc0066fa32bccb2ef65f09210349382af03a38db382a424dedb470fe9036bb6433555cd7326a3c51fe4a61804f9eda9f6c77dac5551cc88def63e4e3f7a1d4d763dd962d36749db04ceca35341c5ae51c97321587f63e4dde1ee8e0817daa2d8854819098eaff29fab67cdd9dbfe8c9176b623", 0x87}, {&(0x7f0000000200)="8f7100b71b82c3", 0x7}, {&(0x7f0000000240)="a6d71f", 0x3}, {&(0x7f0000000380)="8da874f76cf69073bde6743c2f45366717ee320b912a05ffa9b857298096653c6d2981ca0485e0da0f3c8ee7227749d86f9321c80ac7eb0a1f0ca0b5f4270c128a4f71950b06577a1b560068b43200a7ad34556d9ed7a6b114092497d1b6fd530a2af8ef9b8c018fdce91fcfc83a76baa8f1b9fa5bc5b872ab24642b412e7d6fa3ea1848821eeb4142fe4551c7ea1b646a3cec3e74648398cb", 0x99}, {&(0x7f0000000440)="2053423ac4832bfb238846acb06e213bfa1095e5c668407f9e5aa1f2e3d5e370b302678de14b533538fea39decc0f1eabbecc11882d725bd97ba265ea5b2c0c213b2fbe39494df64d77cb7a0f94e93d89e0aea912263e23b6544658c79c85ea05fe2c390bc2e454243f332881a8a5167e6", 0x71}, {&(0x7f0000000600)="d6f149c5fa7ffdf69e60d7eda5185d63b71428052d4be675849102b9ca726f007883882001fdcc48c03e667247ef5936fead8b1232306f089b3499695e3bb7ec143fe3a2af72b57711cf54e0540eb958d204ffcf5211d6884e4c38d5978139eee0376c23fbaf033fe26ce9b8feab771a6b678739eb0c14f3d1501ba570c1503b1f99ffdd046b2bd75459920cf0750cca9cbf9261444d2277403d569a7ab6cf6e85bc3af7b6b7241906bb2bfa5a05026e6a234879063fe69bebcc148eeeb478a45e43dc9fb14df3bfdfe9c058e5eda88d4778372fdf9a035e8895edf89d", 0xdd}, {&(0x7f0000000540)="308149506367b273052da4efb0d07526e320ae44bcb4e33f2be5403865b5ff8b1dac912a263a9507607d68e8951c8efd8e22deed193c45ac4768d3f945", 0x3d}], 0x7, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0xb0, 0x8004}, 0x804)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r15, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r11, &(0x7f0000000040)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x9, {0x4, [{0x3, 0x8}, {0x2, 0x5}, {0x1, 0xc6}, {0x1, 0xee}]}}, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

17.790795561s ago: executing program 0 (id=917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x68, r1, 0x20, 0x70bd2f, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe082, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x200088c4}, 0x20000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x200000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0xff80000}}}}}, 0x0)
syz_emit_ethernet(0x80, &(0x7f00000002c0)={@remote, @local, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x3, 0x1}}, {@generic={0x8906, "d7edd769550683e800dc3d9ddf65f85c4b18d0fd6da19e6292e7b2f78c5a0e45ae5c90845e1b8794bc60161903b1a7909770565043d079d440050b1ff040766490d46f8373166a7530c125d47e4202f3b3e284d9cad25cf328d500318512628e154bc4def22e3a64dd11"}}}, 0x0)

17.789141415s ago: executing program 2 (id=918):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7)

17.787638965s ago: executing program 0 (id=920):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2) (async)
r3 = socket(0x23, 0x80805, 0x0)
listen(r3, 0x2) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x10000000}) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async)
write$nci(r5, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r5, 0x0, 0x7)

17.671577892s ago: executing program 2 (id=921):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'bridge0\x00', {0x2, 0x0, @broadcast}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@bcast, @null, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100"/18, @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r3, 0x0, 0x7)

17.361160042s ago: executing program 1 (id=923):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pK    \x00'}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x8001, 0x80, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x7, 0xc}, 0xc)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x10}, 0xc)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1a, 0x3, 0x0, 0x1, 0x44, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000600)=[r1, r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000640)=[{0x0, 0x3, 0x0, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x5, 0x2, 0x8, 0x3}, {0x4, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xe, 0x7}, {0x5, 0x4, 0xb, 0x5}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x1, 0x10, 0xb}]}, 0x94)
r10 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$EXT4_IOC_GETSTATE(r10, 0x40046629, &(0x7f0000000780))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000007c0))
r11 = socket$inet6(0xa, 0x2, 0x4)
shutdown(r11, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$team(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'syztnl2\x00', <r14=>0x0, 0x7, 0x7800, 0x3, 0x10001, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x9, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @local, {[@lsrr={0x83, 0x13, 0x5f, [@broadcast, @rand_addr=0x64010100, @multicast1, @rand_addr=0x64010101]}, @generic={0x82, 0x8, "02d9b5030649"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1e, 0x0, [{0x1, 0x7, "236d81ba85"}, {0x6, 0x8, "3e2b90bdd75e"}, {0x1, 0x9, "3d30db64ba4f68"}]}, @ssrr={0x89, 0x7, 0xed, [@multicast1]}, @cipso={0x86, 0x12, 0x3, [{0x6, 0xc, "d357890d9332f3d60122"}]}, @generic={0x89, 0x7, "e09b6080ed"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', <r15=>0x0, 0x4, 0x6, 0x1f, 0x5, 0x1b0d9fb39fe05440, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x87a6, 0x8, 0x72, 0xffff5e52}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a80)={'team0\x00', <r17=>0x0})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'veth1_to_hsr\x00', <r18=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r9, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r19=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000e00)={@remote, @private, <r20=>0x0}, &(0x7f0000000e40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000e80)={'team0\x00', <r21=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000f00)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, <r23=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f80)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r24=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000001000)={'wg1\x00', <r25=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000001800)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f00000011c0)={0x600, r13, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r14}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x400, 0xca, 0x0, 0xfffffffd}, {0x9, 0x5, 0x5, 0x2}, {0x2, 0x2, 0x4, 0x5}, {0xc, 0x5, 0xfb, 0x6}, {0x5, 0x6, 0xff, 0x1}, {0x8, 0x8, 0x5, 0x2}, {0xd8, 0x7, 0x0, 0xd}, {0x5, 0x7f, 0x9, 0x5}, {0xf89, 0x9, 0x9, 0x9}]}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r17}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa93}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x600}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

16.89010826s ago: executing program 0 (id=924):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20)
write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)

16.887455087s ago: executing program 1 (id=925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
socket$inet6(0xa, 0x80002, 0x0) (async)
r4 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) (async)
setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r5)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x40001) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x40001)
unshare(0x20000400) (async)
unshare(0x20000400)
r7 = socket$netlink(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0) (async)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x30) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x30)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES16=r9, @ANYBLOB="010026bd70000000000025340b0000000000006b58a3a777fdfe46f45c570000000000000000f645b214fe973119bc9db4ac02662871c139d9d908e300000000000079d64a187baad828a7800700b520355b046121687b2b27e2ee790692c7aa34745eb67bd63a7995ff5b7068fecfebdeaf208f3480201a9be46ad9abd63143e4ff010000041a33b1958bc7e4cb6f4d65a1a7aa7226d7e9e0fa5862554d38d0817c3d4549f49d8bef67d8220c8d7bd7261792231dd8a06c6ee6e694ea6fed746617830d78f41359edf9ce3106651519bb13e08eaa0965ce03b5ec6b939687ab6010000000000000", @ANYRES32=r10, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000004)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x1000, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0xfffffffe, @private0}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0xfffffffe, @private0}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000240)='\x00'/16, 0x72)

16.810331966s ago: executing program 1 (id=926):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x24040cc3)
write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="710601050236f0daf557b8496ed4e157cad3de68a2f4c8b401192ad32746395c91aa41742c38c10443c8a2636963f1bdeea90937e1a85fe9354f9e286399960f311e033e463405b814b2db0b23eb1b0328b0ebc063a13c44"], 0x5)

16.809178261s ago: executing program 0 (id=927):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000005600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000001c0)=""/170, 0xaa, <r1=>0x0, &(0x7f0000000280)=""/251, 0xfb}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r1, 0x4)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$inet(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r3, 0x0, 0x7)

16.748873431s ago: executing program 0 (id=928):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000003e00fb00fcfffffffcdbdf25047c000008003680040002000c000180060006008e"], 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040))
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r3, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r3, 0x0, 0x7)

16.680239451s ago: executing program 1 (id=929):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0xffffffffffffff79, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="4001030104000000b5dc4d75e02f9b069d911918f6c68f4dca31bec22a67bf8f97350afec1616b88d1fea2cf0cef01e4fdc664d5a3478e1533dd0ff5685feac7afeb0c02b886574b95ffffffffd7ece6143ad23580e0e8bc798a8f5098b31cc506083e2f345f941d969f97edc1f631b182696139c80739c38f0de348b5f3e5886c0b5b1c51d0b06965209d99dab8b7fa088a9717c63027ee91242703ba604db4400579614ac8cb485c304a8059ff701772050a13a0092f296bc1d3412e68851e12bb4609f9f94d00008c0010"], 0xc9)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r4, &(0x7f00000004c0)={@val={0x0, 0x6004}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x54, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x40, 0xff8b, 0x0, 0x2, {[@nop, @fastopen={0x22, 0x3, "ce"}, @fastopen={0x22, 0xd, "5e3f86f04c053c8d6ef98c"}, @sack={0x5, 0xe, [0x4f, 0x4, 0x3]}, @exp_fastopen={0xfe, 0xa, 0xf989, "a5714473fbe7"}]}}}}}}}}, 0x66)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa440000b980c6824cae110000000081001400000d040000a007010000f3a4ad9a92f71bc48c1a7c9d5b339afe8d94b18bbdf4927ffa39d0bc63b7f15881bf7cb10996afbb4c6eca7e6c807d0a65a523dbb3d7a6342b"], 0x5a)

16.479489152s ago: executing program 1 (id=930):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000e7ff00000000ffff00"/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000240))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000010000000f000000080034000000000008000300", @ANYRES32=r6, @ANYBLOB="0500332e8a99e83b"], 0x2c}}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000003c0)={<r7=>r5, 0x8, 0x80000001, 0x8})
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x5, 0x1, 0x6, 0x20000, r3, 0x2, '\x00', r6, r8, 0x2, 0x4}, 0x50)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1, @ANYBLOB="4d58d61be2fd66d2cb9d1463cc1c61151607146144a6d0856868c2b2fe07d23c87ad60415607df5bfc54f84ee43526b1e08db61dccef090b808a9b0f76054b47b12799c3e1ce303f37482e5fbf7057b72c62e02aa118b1c9b11484bd710331173252a89201e3ef3a43e2fdaceec48b1ee0db1f17f476760fbe09cbc06155298db26b9e8c6d4886a53994566b2ecc0242d0ff5faa87319a91903f1f3a09316b5a87585a82394f373ba103f77f4922682608cc6c4973b6debc123841a4bd1e05238eb1cb89bf7dad25d77ad09b39c8fad602c2ed238c67e3968f9c8d3b08"], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)

16.401450071s ago: executing program 2 (id=931):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x0, 0x73b)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x9, {0x4, [{0x3, 0x8}, {0x2, 0x5}, {0x1, 0xc6}, {0x1, 0xee}]}}, 0xc)

15.850230427s ago: executing program 2 (id=932):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6gre0\x00'}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040)=<r5=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000780)={<r6=>0x0, 0x8, 0x1, [0x1, 0x9, 0x1, 0x2, 0xa], [0x1200000000, 0x8, 0x100, 0x8000000000000001, 0x1, 0x9, 0xfffffffffffffff9, 0x1ff, 0x0, 0x4, 0x7cf8, 0xfff, 0x0, 0x200, 0x3, 0x9, 0x0, 0x7, 0x8001, 0x2, 0xd79, 0x0, 0x7, 0x5, 0x2, 0x9, 0xffffffffffffff13, 0x9, 0xc, 0xd6, 0x1, 0x8000, 0x2, 0xb, 0x80000000000000, 0x8, 0xfffffffffffffff8, 0xe3, 0x665, 0x426, 0x3ff, 0x5, 0x3, 0x55ed, 0xd2, 0x9, 0x8000000000000001, 0x5, 0x6, 0xffffffffffffffff, 0xbf, 0x3, 0x9, 0xffffffffffffff08, 0x8cd, 0x2, 0x8001, 0x9, 0x3ff, 0x4, 0xf1, 0x38, 0x9, 0x400, 0x1, 0x7, 0x4, 0x3, 0x769f, 0x65, 0x10, 0x5, 0x5, 0xe7d1, 0xfffffffffffffff0, 0x7, 0xe95, 0xffff, 0x2, 0x4, 0x8, 0x9, 0xffff, 0x3ff, 0x80000001, 0x40, 0x6fc6, 0x7f, 0x1, 0x88, 0x2, 0x8, 0x8, 0x4, 0x6, 0x401, 0x8, 0x8, 0xffff, 0x7, 0xd, 0x0, 0xfff, 0xe13f, 0x3, 0x40, 0x4, 0xfe51, 0x7, 0x67e913fe, 0x3, 0xd, 0x8, 0x5, 0x0, 0xffffffff80000000, 0x1, 0x8, 0xffff, 0x0, 0xfff]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000010c0)={{r2}, r5, 0x8, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x6, {0x20, 0x1, 0x5, 0x8, 0x101}, [0x7]}}, @devid=r6})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2a, 0x2, 0x0)
accept4(r9, 0x0, 0x0, 0x800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100050000080500010004"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r15=>0x0)
r16 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r17=>0x0})
sendmsg$can_raw(r16, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r17}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "1e6b7481341c8bf86a8b04405e66ad88c31bd224c4b5c92572d272ccb19ec13c3b38cdec2de9600751a795da9ff305b760d860420a3d535c94ce0436fbfff791"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0)
write$nci(r7, &(0x7f00000001c0)=ANY=[@ANYRES32=r15, @ANYRES64=r8, @ANYRES8=r4], 0x23)
write$nci(r7, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x81, @a_listen={0x2, 0x626aa5e4436c9b96, 0x4, 0x80, 0xfe, 0x7, 0x80, "", 0x49, 0x3, 0x6, 0xd, 0x6c, "f63e6c64137965017acbeb1573c17f1a1ec6c978baffa0096482c273500fb8fdcb6651b1db92caf32d49f52a974c399a5c99b402d2017c8c2d3dfc9229d10be4d750e7f2342bc483603338007dde03173f145f7ebdf2c7a7d4ceeb04d4c0a29e644fb2ba2347f5ca579209c9"}}, 0x7b)

15.849574207s ago: executing program 0 (id=933):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd700007000000029b99031779ae00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="414601b01c7c10a8d09cc2d545"], 0x4)

15.848562401s ago: executing program 1 (id=934):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x501}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6a5119894b1593ba}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x80, r4, 0x2, 0x3, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x80}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300016e994fde440113e90005"], 0x14}], 0x1}, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_emit_ethernet(0x49f, &(0x7f0000000940)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @void, {@mpls_mc={0x8848, {[{0xb5}, {0x2}, {0xffff0, 0x0, 0x1}, {0x3e7, 0x0, 0x1}, {0xf}, {0x2, 0x0, 0x1}], @ipv6=@gre_packet={0x6, 0x6, "5ddf28", 0x451, 0x2f, 0x1, @loopback, @mcast1, {[@routing={0x3a, 0x2, 0x2, 0xf9, 0x0, [@rand_addr=' \x01\x00']}, @dstopts={0x33, 0x17, '\x00', [@pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0xd, 0x6, [0x6, 0x7, 0xff, 0x3, 0x7, 0x5, 0x2, 0x8001, 0x5, 0x8000]}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0xa}, @generic={0xd0, 0x26, "e53fced2d5a5201a4b7c4f619443d058f00802286dd150cffe8935cbd82d410a0f144b890e8b"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @pad1, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x1ff, [0x2]}}]}, @srh={0x16, 0x6, 0x4, 0x3, 0x0, 0x40, 0x9, [@empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x33, 0x2d, '\x00', [@generic={0x3, 0x41, "86fe373106d7c49ee0d276de6d9d4dfba69a74f98fd849fa2dfb016ca44c273d1a4f9a2e25d6170234c4f1c42ab4d80745b21a0e76a645ee36ef7dfb2e42800ad0"}, @ra={0x5, 0x2, 0x7fff}, @pad1, @generic={0x1, 0xf8, "d6dae5beada511f37d4848396e02a903d4563d8869299c385eb91bc14d8f7f396d560b26b190fd336c1cdaacbe140449ab614f23d2331b470fb811b6a187fded09f180962b1f24899ec823016ddaed9e582b90ca458371a77a0629a0ca2b04d2b058efed94d7c03169adae90f256f8fb8b9a8cc6895f119191534d7ef341dc55b094670ff4d533a16a15e1154a5504a548f449d7999d79f240fa87e73664b5644b3463fda125a7b2127914a558ef62867d4605ff4278e92375569c0f6457c7a531a1da850d9334ed63f27451f3f866a29c9e63ceed4fcfdba106d3f62ee15f965384db96ae8c21518e5d3012f1d5f51870448b4512d92d13"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x19, "84d80473696e80f28bec8ab2225c2a0b32816c6d28a2420a68"}, @ra={0x5, 0x2, 0xff}]}, @dstopts={0x29, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x1000, [0xd, 0x4, 0x9, 0x3, 0xffffffffffff0a12]}}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x88, 0x8, 0x4, 0x4, 0xd7, 0x58, 0x2, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x4e, 0x9]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "313eec185981e00e1be9169fbd076ed1e98836b350a1c18dde013e5d002c456d8a41083b235fd7c53b621255c4d2c2124964172ddde5825d028707b57f29164e720102f89d3686313d3ab4fe253e9c128e7d1276467a363b53"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "9656bae37b7b9a692a0ee75790317b174aa632271eb548daf0566e0a64d96994d82413dc78cb7b8a5f3474b35b858d48d75ae59e5e02b1ae5c5cac6f6127a5dc2f5f81eba98259f87508247f40"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0xa, 0x2, 0x1, 0x0, 0x4, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x8, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x2, "058a5f9f15144937c24dbb6ab2204fbd01857b179ef526e9b8bb81bafe68b7863504d4ae85abd2fee0857dfcb04d857d644838549ee0883e8bcdeb"}}}}}}}}, &(0x7f0000000340)={0x1, 0x3, [0xddd, 0xa81, 0xb95, 0xb62]})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xffffffffffffff9c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)

47.33085ms ago: executing program 32 (id=933):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd700007000000029b99031779ae00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="414601b01c7c10a8d09cc2d545"], 0x4)

177.132µs ago: executing program 33 (id=934):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xb, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x501}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6a5119894b1593ba}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x80, r4, 0x2, 0x3, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x80}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300016e994fde440113e90005"], 0x14}], 0x1}, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_emit_ethernet(0x49f, &(0x7f0000000940)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @local, @void, {@mpls_mc={0x8848, {[{0xb5}, {0x2}, {0xffff0, 0x0, 0x1}, {0x3e7, 0x0, 0x1}, {0xf}, {0x2, 0x0, 0x1}], @ipv6=@gre_packet={0x6, 0x6, "5ddf28", 0x451, 0x2f, 0x1, @loopback, @mcast1, {[@routing={0x3a, 0x2, 0x2, 0xf9, 0x0, [@rand_addr=' \x01\x00']}, @dstopts={0x33, 0x17, '\x00', [@pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0xd, 0x6, [0x6, 0x7, 0xff, 0x3, 0x7, 0x5, 0x2, 0x8001, 0x5, 0x8000]}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0xa}, @generic={0xd0, 0x26, "e53fced2d5a5201a4b7c4f619443d058f00802286dd150cffe8935cbd82d410a0f144b890e8b"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @pad1, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x1ff, [0x2]}}]}, @srh={0x16, 0x6, 0x4, 0x3, 0x0, 0x40, 0x9, [@empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x33, 0x2d, '\x00', [@generic={0x3, 0x41, "86fe373106d7c49ee0d276de6d9d4dfba69a74f98fd849fa2dfb016ca44c273d1a4f9a2e25d6170234c4f1c42ab4d80745b21a0e76a645ee36ef7dfb2e42800ad0"}, @ra={0x5, 0x2, 0x7fff}, @pad1, @generic={0x1, 0xf8, "d6dae5beada511f37d4848396e02a903d4563d8869299c385eb91bc14d8f7f396d560b26b190fd336c1cdaacbe140449ab614f23d2331b470fb811b6a187fded09f180962b1f24899ec823016ddaed9e582b90ca458371a77a0629a0ca2b04d2b058efed94d7c03169adae90f256f8fb8b9a8cc6895f119191534d7ef341dc55b094670ff4d533a16a15e1154a5504a548f449d7999d79f240fa87e73664b5644b3463fda125a7b2127914a558ef62867d4605ff4278e92375569c0f6457c7a531a1da850d9334ed63f27451f3f866a29c9e63ceed4fcfdba106d3f62ee15f965384db96ae8c21518e5d3012f1d5f51870448b4512d92d13"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x19, "84d80473696e80f28bec8ab2225c2a0b32816c6d28a2420a68"}, @ra={0x5, 0x2, 0xff}]}, @dstopts={0x29, 0x8, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x1000, [0xd, 0x4, 0x9, 0x3, 0xffffffffffff0a12]}}, @jumbo={0xc2, 0x4, 0x3}]}, @srh={0x88, 0x8, 0x4, 0x4, 0xd7, 0x58, 0x2, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x4e, 0x9]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "313eec185981e00e1be9169fbd076ed1e98836b350a1c18dde013e5d002c456d8a41083b235fd7c53b621255c4d2c2124964172ddde5825d028707b57f29164e720102f89d3686313d3ab4fe253e9c128e7d1276467a363b53"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "9656bae37b7b9a692a0ee75790317b174aa632271eb548daf0566e0a64d96994d82413dc78cb7b8a5f3474b35b858d48d75ae59e5e02b1ae5c5cac6f6127a5dc2f5f81eba98259f87508247f40"}, {0x8, 0x88be, 0x2, {{0x5, 0x1, 0xa, 0x2, 0x1, 0x0, 0x4, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x8, 0x3, 0x2, 0x8, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x2, "058a5f9f15144937c24dbb6ab2204fbd01857b179ef526e9b8bb81bafe68b7863504d4ae85abd2fee0857dfcb04d857d644838549ee0883e8bcdeb"}}}}}}}}, &(0x7f0000000340)={0x1, 0x3, [0xddd, 0xa81, 0xb95, 0xb62]})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xffffffffffffff9c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)

0s ago: executing program 34 (id=932):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6gre0\x00'}]}, 0x30}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000040)=<r5=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000780)={<r6=>0x0, 0x8, 0x1, [0x1, 0x9, 0x1, 0x2, 0xa], [0x1200000000, 0x8, 0x100, 0x8000000000000001, 0x1, 0x9, 0xfffffffffffffff9, 0x1ff, 0x0, 0x4, 0x7cf8, 0xfff, 0x0, 0x200, 0x3, 0x9, 0x0, 0x7, 0x8001, 0x2, 0xd79, 0x0, 0x7, 0x5, 0x2, 0x9, 0xffffffffffffff13, 0x9, 0xc, 0xd6, 0x1, 0x8000, 0x2, 0xb, 0x80000000000000, 0x8, 0xfffffffffffffff8, 0xe3, 0x665, 0x426, 0x3ff, 0x5, 0x3, 0x55ed, 0xd2, 0x9, 0x8000000000000001, 0x5, 0x6, 0xffffffffffffffff, 0xbf, 0x3, 0x9, 0xffffffffffffff08, 0x8cd, 0x2, 0x8001, 0x9, 0x3ff, 0x4, 0xf1, 0x38, 0x9, 0x400, 0x1, 0x7, 0x4, 0x3, 0x769f, 0x65, 0x10, 0x5, 0x5, 0xe7d1, 0xfffffffffffffff0, 0x7, 0xe95, 0xffff, 0x2, 0x4, 0x8, 0x9, 0xffff, 0x3ff, 0x80000001, 0x40, 0x6fc6, 0x7f, 0x1, 0x88, 0x2, 0x8, 0x8, 0x4, 0x6, 0x401, 0x8, 0x8, 0xffff, 0x7, 0xd, 0x0, 0xfff, 0xe13f, 0x3, 0x40, 0x4, 0xfe51, 0x7, 0x67e913fe, 0x3, 0xd, 0x8, 0x5, 0x0, 0xffffffff80000000, 0x1, 0x8, 0xffff, 0x0, 0xfff]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000010c0)={{r2}, r5, 0x8, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x6, {0x20, 0x1, 0x5, 0x8, 0x101}, [0x7]}}, @devid=r6})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2a, 0x2, 0x0)
accept4(r9, 0x0, 0x0, 0x800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100050000080500010004"], 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r15=>0x0)
r16 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r17=>0x0})
sendmsg$can_raw(r16, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r17}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "1e6b7481341c8bf86a8b04405e66ad88c31bd224c4b5c92572d272ccb19ec13c3b38cdec2de9600751a795da9ff305b760d860420a3d535c94ce0436fbfff791"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0)
write$nci(r7, &(0x7f00000001c0)=ANY=[@ANYRES32=r15, @ANYRES64=r8, @ANYRES8=r4], 0x23)
write$nci(r7, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x81, @a_listen={0x2, 0x626aa5e4436c9b96, 0x4, 0x80, 0xfe, 0x7, 0x80, "", 0x49, 0x3, 0x6, 0xd, 0x6c, "f63e6c64137965017acbeb1573c17f1a1ec6c978baffa0096482c273500fb8fdcb6651b1db92caf32d49f52a974c399a5c99b402d2017c8c2d3dfc9229d10be4d750e7f2342bc483603338007dde03173f145f7ebdf2c7a7d4ceeb04d4c0a29e644fb2ba2347f5ca579209c9"}}, 0x7b)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5846' (ED25519) to the list of known hosts.
syzkaller login: [   40.725265][ T5771] cgroup: Unknown subsys name 'net'
[   40.808024][ T5771] cgroup: Unknown subsys name 'cpuset'
[   40.811540][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.210129][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.878047][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.884957][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.888569][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.891690][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.892215][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.897031][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.899751][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.900448][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.904854][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.907306][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.924451][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.927242][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.929707][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.932327][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.934760][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.146287][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   46.158510][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   46.197665][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   46.290428][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.292800][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.295236][ T5843] bridge_slave_0: entered allmulticast mode
[   46.298629][ T5843] bridge_slave_0: entered promiscuous mode
[   46.301744][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.304444][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.307867][ T5852] bridge_slave_0: entered allmulticast mode
[   46.310563][ T5852] bridge_slave_0: entered promiscuous mode
[   46.313218][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.316034][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.318430][ T5844] bridge_slave_0: entered allmulticast mode
[   46.321070][ T5844] bridge_slave_0: entered promiscuous mode
[   46.324119][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.326986][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.329579][ T5844] bridge_slave_1: entered allmulticast mode
[   46.332778][ T5844] bridge_slave_1: entered promiscuous mode
[   46.335969][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.338298][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.340664][ T5843] bridge_slave_1: entered allmulticast mode
[   46.343336][ T5843] bridge_slave_1: entered promiscuous mode
[   46.352776][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.355108][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.357688][ T5852] bridge_slave_1: entered allmulticast mode
[   46.360380][ T5852] bridge_slave_1: entered promiscuous mode
[   46.379759][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.384076][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.402768][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.421954][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.426245][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.438637][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.457967][ T5843] team0: Port device team_slave_0 added
[   46.467049][ T5843] team0: Port device team_slave_1 added
[   46.470072][ T5844] team0: Port device team_slave_0 added
[   46.494972][ T5844] team0: Port device team_slave_1 added
[   46.498832][ T5852] team0: Port device team_slave_0 added
[   46.509253][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.511742][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.520793][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.526260][ T5852] team0: Port device team_slave_1 added
[   46.529069][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.531529][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.540908][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.563641][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.566044][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.574267][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.579552][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.581831][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.590450][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.611743][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.614017][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.622822][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.636611][ T5843] hsr_slave_0: entered promiscuous mode
[   46.639515][ T5843] hsr_slave_1: entered promiscuous mode
[   46.642559][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.644931][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.653982][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.702424][ T5852] hsr_slave_0: entered promiscuous mode
[   46.705139][ T5852] hsr_slave_1: entered promiscuous mode
[   46.708399][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   46.710750][ T5852] Cannot create hsr debugfs directory
[   46.715296][ T5844] hsr_slave_0: entered promiscuous mode
[   46.718276][ T5844] hsr_slave_1: entered promiscuous mode
[   46.720871][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   46.723183][ T5844] Cannot create hsr debugfs directory
[   46.932295][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.940707][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.956733][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.962723][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.987869][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.997279][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.013924][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.019773][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.039480][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.042620][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.045730][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.048262][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.070030][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.075063][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.084224][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.089637][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.098370][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.100835][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.103468][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.105851][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.127313][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.130403][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.133582][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.137470][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.193627][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.203949][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.224583][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.230676][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.234572][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   47.245473][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.247865][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.257620][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.260176][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.264129][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   47.271956][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.274332][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.278922][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.281497][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.292284][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.294719][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.319402][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.321764][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.445329][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.497731][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.506760][ T5844] veth0_vlan: entered promiscuous mode
[   47.520765][ T5844] veth1_vlan: entered promiscuous mode
[   47.528623][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.547398][ T5843] veth0_vlan: entered promiscuous mode
[   47.560115][ T5843] veth1_vlan: entered promiscuous mode
[   47.578809][ T5844] veth0_macvtap: entered promiscuous mode
[   47.582160][ T5852] veth0_vlan: entered promiscuous mode
[   47.587460][ T5844] veth1_macvtap: entered promiscuous mode
[   47.596089][ T5852] veth1_vlan: entered promiscuous mode
[   47.611413][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.614843][ T5843] veth0_macvtap: entered promiscuous mode
[   47.621548][ T5843] veth1_macvtap: entered promiscuous mode
[   47.627875][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.640755][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.645887][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.652958][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.657162][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.661914][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.667316][ T5852] veth0_macvtap: entered promiscuous mode
[   47.674617][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.687102][ T5852] veth1_macvtap: entered promiscuous mode
[   47.693537][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.706200][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.709403][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.712252][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.738889][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.756905][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.771530][ T1907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.774715][ T1907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.780026][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.783122][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.787711][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.798312][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.802526][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.820571][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.821466][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.824636][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.840724][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.843327][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.887284][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.895902][ T1907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.901034][ T1907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.926478][   T55] Bluetooth: hci1: command tx timeout
[   47.928923][   T55] Bluetooth: hci0: command tx timeout
[   47.932430][ T1907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.939306][ T1907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.005835][ T5851] Bluetooth: hci2: command tx timeout
[   48.025160][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   48.056996][ T5924] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   48.954230][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   48.960146][ T5944] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   48.963553][ T5944] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   48.968252][ T5944] Zero length message leads to an empty skb
[   49.793376][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.930787][ T5995] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   49.930938][ T5990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   50.005601][ T5851] Bluetooth: hci0: command tx timeout
[   50.005932][   T55] Bluetooth: hci1: command tx timeout
[   50.011300][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   50.095514][   T55] Bluetooth: hci2: command tx timeout
[   51.752143][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.760996][ T6048] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.085525][   T55] Bluetooth: hci1: command tx timeout
[   52.085896][ T5851] Bluetooth: hci0: command tx timeout
[   52.165527][ T5851] Bluetooth: hci2: command tx timeout
[   52.671391][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   52.677256][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'.
[   52.786843][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'.
[   52.791260][ T6110] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   52.795076][ T6110] netlink: 76 bytes leftover after parsing attributes in process `syz.0.28'.
[   53.557625][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.614467][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   54.165515][ T5851] Bluetooth: hci1: command tx timeout
[   54.175537][ T5851] Bluetooth: hci0: command tx timeout
[   54.245517][ T5851] Bluetooth: hci2: command tx timeout
[   54.455968][ T6153] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   54.468260][ T6152] Bluetooth: MGMT ver 1.23
[   54.517549][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'.
[   54.522814][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[   54.535181][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'.
[   55.408648][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'.
[   55.421460][ T6177] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[   55.470700][ T6200] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[   56.301635][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[   56.438294][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   56.448404][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'.
[   56.499207][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   58.192449][ T6271] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   58.226551][ T6277] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[   58.337096][ T6301] netlink: 76 bytes leftover after parsing attributes in process `syz.1.55'.
[   60.217040][ T6361] syzkaller0: entered promiscuous mode
[   60.219059][ T6361] syzkaller0: entered allmulticast mode
[   60.274707][ T6363] veth1_to_bond: entered allmulticast mode
[   60.277919][ T6363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.282119][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   60.294567][ T6363] bond0: (slave bond_slave_1): Releasing backup interface
[   60.305022][ T6363] veth1_to_bond (unregistering): left allmulticast mode
[   61.504714][ T6378] ip6gre1: entered allmulticast mode
[   61.865736][ T6403] bridge0: port 3(erspan0) entered blocking state
[   61.868690][ T6403] bridge0: port 3(erspan0) entered disabled state
[   61.871215][ T6403] erspan0: entered allmulticast mode
[   61.875229][ T6403] erspan0: entered promiscuous mode
[   61.879164][ T6403] bridge0: port 3(erspan0) entered blocking state
[   61.881927][ T6403] bridge0: port 3(erspan0) entered forwarding state
[   61.887042][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   61.944712][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   62.726088][ T6427] openvswitch: netlink: nsh attr 7 is out of range max 3
[   62.728491][ T6427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.869228][ T6452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'.
[   63.603785][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   63.606163][ T6463] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   63.712634][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   64.473672][ T6471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.660931][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   64.664726][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   66.359936][ T6543] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[   66.384629][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   67.180498][ T6569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   67.436497][ T6594] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   67.443622][ T6594] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   68.244594][ T6627] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'.
[   69.148093][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   69.982705][ T6664] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   70.020008][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'.
[   70.053546][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   70.967831][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.970097][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.821165][ T6720] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   72.668970][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   73.527830][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'.
[   73.589353][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   74.411170][ T6782] raw_sendmsg: syz.2.129 forgot to set AF_INET. Fix it!
[   74.453445][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   74.457153][ T6779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.607778][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'.
[   75.460618][ T6826] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   75.485248][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.136'.
[   75.530363][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[   75.588556][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[   75.594299][ T6824] xfrm0: entered promiscuous mode
[   75.596946][ T6824] xfrm0: entered allmulticast mode
[   75.606759][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.137'.
[   76.497090][ T6878] ip6erspan0: entered promiscuous mode
[   77.307711][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   78.238696][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'.
[   78.330273][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   79.119776][ T6965] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   79.434729][ T7006] bridge_slave_0: left allmulticast mode
[   79.442798][ T7006] bridge_slave_0: left promiscuous mode
[   79.445358][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.452144][ T7006] bridge_slave_1: left allmulticast mode
[   79.454222][ T7006] bridge_slave_1: left promiscuous mode
[   79.457435][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.463291][ T7006] bond0: (slave bond_slave_0): Releasing backup interface
[   79.473705][ T7006] team0: Port device team_slave_0 removed
[   79.481674][ T7006] team0: Port device team_slave_1 removed
[   79.487976][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.491262][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.497128][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.500350][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.505074][ T7006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.631934][ T7009] ieee802154 phy0 wpan0: encryption failed: -22
[   80.142076][ T7017] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   80.151277][ T7017] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   80.157300][ T7017] netlink: 216 bytes leftover after parsing attributes in process `syz.0.162'.
[   81.024100][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'.
[   81.105736][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'.
[   81.108819][ T7057] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   81.111569][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.190341][ T7056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.212367][  T972] cfg80211: failed to load regulatory.db
[   81.310206][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   81.316111][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   82.170907][ T7109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.178'.
[   82.187136][    T9] IPVS: starting estimator thread 0...
[   82.266632][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   82.269633][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.179'.
[   82.295891][ T7118] IPVS: using max 80 ests per chain, 192000 per kthread
[   83.077210][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   83.190928][ T7135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.195870][ T7144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.273541][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.279967][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.284096][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.287725][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.290384][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.292651][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.294870][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.299058][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.301651][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.303805][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.306607][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.308690][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.310794][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.312836][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.314883][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.317385][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.319463][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.321633][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.323683][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.326308][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.328772][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.330904][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.333270][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.334273][ T7160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.344308][ T7169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.484163][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   83.532552][ T7193] netlink: 144 bytes leftover after parsing attributes in process `syz.2.191'.
[   84.371987][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'.
[   85.349742][ T7327] netlink: 'syz.1.200': attribute type 11 has an invalid length.
[   85.371114][ T7331] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[   85.374803][ T7332] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   85.410225][ T7347] netlink: 'syz.0.202': attribute type 3 has an invalid length.
[   85.417517][ T7345] __nla_validate_parse: 2 callbacks suppressed
[   85.417526][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'.
[   86.315144][ T7376] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   86.348001][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'.
[   87.168105][ T7400] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   87.174889][ T7400] macsec1: entered allmulticast mode
[   87.176071][ T7401] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   87.178793][ T7400] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.377145][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   88.341889][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   88.404208][ T7482] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[   89.254251][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   90.141591][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'.
[   90.153835][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   91.052449][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'.
[   91.754125][ T7545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.899747][ T7574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.238'.
[   91.928683][ T7595] @: renamed from veth0_vlan (while UP)
[   91.938853][   T33] audit: type=1800 audit(1758125909.538:2): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="memory.events" dev="tmpfs" ino=422 res=0 errno=0
[   91.976889][ T7595] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[   93.043514][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'.
[   93.050019][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'.
[   93.116752][ T7662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.159925][ T7681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   93.207479][ T7690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.302178][ T7694] syzkaller0: entered promiscuous mode
[   93.304560][ T7694] syzkaller0: entered allmulticast mode
[   94.855265][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   94.932621][ T7748] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[   95.725915][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[   95.791204][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   96.642155][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'.
[   96.686421][ T7782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.448771][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'.
[   97.510933][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'.
[   97.519042][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   97.573071][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   98.524476][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'.
[   98.644461][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  101.213043][ T7919] tipc: Enabling of bearer <et:g> rejected, media not registered
[  101.341293][ T7919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.481065][ T7974] netlink: 'syz.2.295': attribute type 3 has an invalid length.
[  101.485146][ T7974] netlink: 128 bytes leftover after parsing attributes in process `syz.2.295'.
[  101.494891][ T7980] IPVS: set_ctl: invalid protocol: 51 172.20.20.44:20004
[  101.498457][ T7974] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.295'.
[  102.613541][ T8029] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  102.931162][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[  102.937667][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.310'.
[  103.440154][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'.
[  103.440389][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[  103.495996][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  104.429681][ T8094] netlink: 'syz.1.318': attribute type 4 has an invalid length.
[  104.433145][ T8098] netlink: 'syz.0.317': attribute type 26 has an invalid length.
[  104.442062][ T8095] netlink: 256 bytes leftover after parsing attributes in process `syz.2.319'.
[  104.498681][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  104.501712][ T8095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.508344][ T8104] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[  104.511197][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.547527][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[  105.364869][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'.
[  105.374990][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  106.218023][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.326'.
[  106.298781][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  106.317565][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[  106.321480][ T8170] netlink: 80 bytes leftover after parsing attributes in process `syz.1.328'.
[  107.127664][ T8171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.279526][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  109.139022][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'.
[  109.186018][ T8265] netlink: 96 bytes leftover after parsing attributes in process `syz.0.346'.
[  109.229823][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'.
[  109.371351][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  111.069598][ T8327] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[  111.077481][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[  112.043775][ T8361] netlink: 'syz.2.362': attribute type 5 has an invalid length.
[  112.827891][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'.
[  114.639640][ T8408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.654954][ T8424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.829669][ T8449] netlink: 76 bytes leftover after parsing attributes in process `syz.1.374'.
[  115.695464][ T8474] netlink: 'syz.2.379': attribute type 12 has an invalid length.
[  115.752317][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'.
[  115.754383][ T8487] netlink: 52 bytes leftover after parsing attributes in process `syz.2.379'.
[  115.861014][ T8474] dvmrp1: tun_chr_ioctl cmd 1074025677
[  115.862915][ T8474] dvmrp1: linktype set to 773
[  115.980183][ T8507] netlink: 360 bytes leftover after parsing attributes in process `syz.1.385'.
[  116.223453][ T8533] netlink: 'syz.0.388': attribute type 1 has an invalid length.
[  117.076938][ T8550] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  117.943586][ T8566] netlink: 'syz.0.394': attribute type 1 has an invalid length.
[  117.950915][ T8566] netlink: 224 bytes leftover after parsing attributes in process `syz.0.394'.
[  119.022522][ T8622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  119.156818][ T8639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.163454][ T8648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.174225][ T8654] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.194433][ T8654] hsr0: entered allmulticast mode
[  119.196475][ T8654] hsr_slave_0: entered allmulticast mode
[  119.198900][ T8654] hsr_slave_1: entered allmulticast mode
[  119.251476][ T8645] netlink: 76 bytes leftover after parsing attributes in process `syz.2.407'.
[  119.256491][ T8667] netlink: 76 bytes leftover after parsing attributes in process `syz.2.407'.
[  120.056851][ T8675] netlink: 176 bytes leftover after parsing attributes in process `syz.0.412'.
[  120.142222][ T8685] syzkaller0: entered promiscuous mode
[  120.144235][ T8685] syzkaller0: entered allmulticast mode
[  120.151080][ T8685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  120.158244][ T8685] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  121.891086][ T8835] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[  121.893655][ T8835] netlink: 17 bytes leftover after parsing attributes in process `syz.2.420'.
[  122.837922][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  124.579378][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  125.462607][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  126.390526][ T8986] netlink: 228 bytes leftover after parsing attributes in process `syz.0.441'.
[  128.105919][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  128.904291][ T9028] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  128.984770][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  129.730413][ T9054] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  129.781825][ T9063] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.998792][ T9094] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  130.033726][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'.
[  130.040600][ T9102] netlink: 'syz.2.458': attribute type 21 has an invalid length.
[  130.044509][ T9102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.458'.
[  130.852061][   T33] audit: type=1800 audit(1758125948.448:3): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="memory.events" dev="tmpfs" ino=796 res=0 errno=0
[  130.868719][ T9107] netlink: 188 bytes leftover after parsing attributes in process `syz.2.462'.
[  130.924626][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  132.407387][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.410050][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  132.687798][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'.
[  132.781969][ T9146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.760013][ T9202] netlink: 14 bytes leftover after parsing attributes in process `syz.1.477'.
[  133.763160][ T9202] hsr_slave_0: left promiscuous mode
[  133.765648][ T9202] hsr_slave_1: left promiscuous mode
[  133.830673][ T9219] bridge0: port 3(erspan0) entered disabled state
[  133.832910][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.835706][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.840707][ T9219] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  134.614519][ T9236] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.480'.
[  134.640997][ T9237] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  134.652071][ T9248] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  134.682189][ T9256] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  134.732018][ T9235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.662782][ T9288] geneve2: entered promiscuous mode
[  135.683802][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[  135.747259][ T9301] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  135.749734][ T9301] netlink: 256 bytes leftover after parsing attributes in process `syz.0.491'.
[  135.774701][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.493'.
[  136.600629][ T9324] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  136.736691][ T9352] syzkaller0: entered promiscuous mode
[  136.742735][ T9352] syzkaller0: entered allmulticast mode
[  136.755261][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  137.575916][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  138.466819][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  138.487689][ T9392] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[  138.536469][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[  139.304891][ T9401] syzkaller1: tun_chr_ioctl cmd 2148553947
[  139.308654][ T9401] Bluetooth: MGMT ver 1.23
[  139.394170][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  139.427496][ T9423] syzkaller0: entered promiscuous mode
[  139.429424][ T9423] syzkaller0: entered allmulticast mode
[  140.224950][ T9438] netlink: 'syz.2.512': attribute type 3 has an invalid length.
[  140.230182][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'.
[  141.096103][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'.
[  141.163609][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'.
[  142.074638][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  142.915971][ T9518] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  143.839101][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  144.718876][ T9591] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  144.916638][ T9616] syzkaller0: entered promiscuous mode
[  144.921416][ T9616] syzkaller0: entered allmulticast mode
[  146.656450][ T9667] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004
[  146.699391][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  147.620548][ T9686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.621203][ T9699] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  147.713595][ T9715] netlink: 112 bytes leftover after parsing attributes in process `syz.1.552'.
[  147.792928][ T9715] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  148.461416][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[  148.518667][ T9727] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  148.654695][ T9757] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  150.251420][ T9803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.566'.
[  150.363585][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  151.141227][ T9828] openvswitch: netlink: Message has 4 unknown bytes.
[  151.143809][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.205105][ T9831] netlink: 80 bytes leftover after parsing attributes in process `syz.2.570'.
[  151.209844][ T9831] netlink: 80 bytes leftover after parsing attributes in process `syz.2.570'.
[  151.288198][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  151.357882][ T9856] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  152.067753][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'.
[  152.133496][ T9867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'.
[  152.289642][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  153.045230][ T9915] netlink: 'syz.1.582': attribute type 10 has an invalid length.
[  153.062003][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'.
[  153.124811][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  153.923750][ T9934] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.585'.
[  153.979599][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'.
[  154.261175][ T9974] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.591'.
[  154.266718][ T9963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  154.400616][ T9990] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  154.621207][T10001] tc_dump_action: action bad kind
[  155.252502][T10036] tipc: Started in network mode
[  155.255350][T10036] tipc: Node identity c2ef0e90d1f6, cluster identity 4711
[  155.259799][T10036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.269946][T10036] syzkaller0: entered promiscuous mode
[  155.271885][T10036] syzkaller0: entered allmulticast mode
[  155.281079][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  155.285145][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  155.293360][T10036] tipc: Resetting bearer <eth:syzkaller0>
[  155.321191][ T5874] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  156.038702][T10033] tipc: Resetting bearer <eth:syzkaller0>
[  156.057388][T10033] tipc: Disabling bearer <eth:syzkaller0>
[  156.273260][T10099] batadv_slave_1: entered promiscuous mode
[  156.970630][T10099] batadv_slave_1: left promiscuous mode
[  157.041557][ T5895] IPVS: starting estimator thread 0...
[  157.118888][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  157.155952][T10121] IPVS: using max 80 ests per chain, 192000 per kthread
[  157.981807][T10137] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  158.007067][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'.
[  158.012951][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'.
[  158.028608][T10155] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  158.041487][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.615'.
[  158.063988][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  158.874743][T10172] netlink: 'syz.0.618': attribute type 12 has an invalid length.
[  158.932609][ T5874] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  159.766012][T10198] syzkaller1: entered promiscuous mode
[  159.767890][T10198] syzkaller1: entered allmulticast mode
[  159.876423][T10209] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  159.902993][T10216] nbd: must specify at least one socket
[  159.916502][T10225] openvswitch: netlink: IP tunnel dst address not specified
[  159.929631][T10225] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  160.941780][T10268] netlink: 'syz.2.637': attribute type 8 has an invalid length.
[  160.947565][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'.
[  160.953164][T10268] bond0: entered promiscuous mode
[  160.954857][T10268] bond_slave_0: entered promiscuous mode
[  160.957184][T10268] bond_slave_1: entered promiscuous mode
[  160.960111][T10268] bond0: left promiscuous mode
[  160.961802][T10268] bond_slave_0: left promiscuous mode
[  160.963713][T10268] bond_slave_1: left promiscuous mode
[  162.719161][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[  162.733439][T10310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.733654][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  162.738136][T10314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.797880][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  162.933656][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'.
[  162.937560][T10333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'.
[  163.682487][T10365] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  163.710646][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  164.519501][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[  164.538825][T10378] netlink: 'syz.0.655': attribute type 3 has an invalid length.
[  164.566372][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  165.389970][T10404] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  167.207898][T10457] syzkaller1: entered promiscuous mode
[  167.209739][T10457] syzkaller1: entered allmulticast mode
[  167.219682][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  167.276263][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  167.330923][T10474] sctp: [Deprecated]: syz.2.671 (pid 10474) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.330923][T10474] Use struct sctp_sack_info instead
[  168.269092][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  169.181772][T10536] netlink: 76 bytes leftover after parsing attributes in process `syz.1.683'.
[  170.186208][T10565] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  170.325629][ T5241] Bluetooth: hci0: command 0x0406 tx timeout
[  170.328993][ T5241] Bluetooth: hci1: command 0x0406 tx timeout
[  171.080031][T10594] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.691'.
[  171.090580][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  171.093473][T10594] netlink: 'syz.2.691': attribute type 5 has an invalid length.
[  171.096231][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'.
[  171.102651][T10594] geneve3: entered promiscuous mode
[  171.104415][T10594] geneve3: entered allmulticast mode
[  171.108012][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  171.110863][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  171.113761][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  171.117100][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  172.760398][T10630] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[  172.949072][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'.
[  173.054621][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  173.058684][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  173.681642][T10682] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  173.771823][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  175.529498][T10733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.584850][T10751] netlink: 168 bytes leftover after parsing attributes in process `syz.1.714'.
[  176.004204][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.719'.
[  176.008381][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.719'.
[  176.862656][T10826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  177.852017][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  178.700089][T10889] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  178.706862][T10889] netlink: 224 bytes leftover after parsing attributes in process `syz.1.734'.
[  178.750934][T10914] netlink: 'syz.0.736': attribute type 26 has an invalid length.
[  179.629206][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'.
[  179.638814][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'.
[  179.664435][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'.
[  179.670099][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'.
[  179.690876][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  181.463942][T11001] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  181.527104][T11013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'.
[  181.538015][T11013] netlink: 'syz.0.752': attribute type 3 has an invalid length.
[  181.588572][T11025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.753'.
[  183.338373][T11056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'.
[  183.406015][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  184.142778][T11073] netlink: 'syz.1.761': attribute type 1 has an invalid length.
[  184.145240][T11073] netlink: 'syz.1.761': attribute type 4 has an invalid length.
[  184.150220][T11073] netlink: 212 bytes leftover after parsing attributes in process `syz.1.761'.
[  184.279809][T11108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'.
[  184.282327][T11104] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  184.372087][T11124] netlink: 120 bytes leftover after parsing attributes in process `syz.0.767'.
[  186.031025][T11156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.034795][T11162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.090457][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  186.095033][T11164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  187.105220][T11222] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  187.952563][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  188.834664][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  188.940169][T11266] syzkaller0: entered promiscuous mode
[  188.946054][T11266] syzkaller0: entered allmulticast mode
[  188.975242][T11277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.793'.
[  188.978803][T11277] netlink: 35 bytes leftover after parsing attributes in process `syz.2.793'.
[  188.983134][T11277] netlink: 'syz.2.793': attribute type 5 has an invalid length.
[  188.985926][T11277] netlink: 'syz.2.793': attribute type 6 has an invalid length.
[  188.988304][T11277] netlink: 35 bytes leftover after parsing attributes in process `syz.2.793'.
[  189.086676][T11279] netlink: 48 bytes leftover after parsing attributes in process `syz.0.794'.
[  189.800434][T11296] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  189.880097][T11316] netlink: 'syz.2.800': attribute type 12 has an invalid length.
[  189.893363][T11310] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  189.940436][T11321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.801'.
[  190.002271][T11334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.017357][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.798'.
[  190.193097][T11347] syzkaller0: entered promiscuous mode
[  190.194992][T11347] syzkaller0: entered allmulticast mode
[  190.811702][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  190.814659][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'.
[  190.824284][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.824340][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  190.828034][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.833415][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.838745][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'.
[  190.839420][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.743779][T11388] netlink: 17 bytes leftover after parsing attributes in process `syz.0.810'.
[  191.803247][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  192.706483][T11432] netlink: 596 bytes leftover after parsing attributes in process `syz.1.813'.
[  192.749653][T11438] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  193.555282][T11458] 8021q: VLANs not supported on lo
[  193.856977][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  194.387849][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'.
[  194.439601][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'.
[  194.442890][T11480] netlink: 'syz.2.823': attribute type 15 has an invalid length.
[  194.449636][T11480] netlink: 'syz.2.823': attribute type 15 has an invalid length.
[  195.310374][T11512] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  195.310489][T11494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.106096][T11499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.269400][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  196.269541][T11540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  196.271865][T11552] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  197.312757][T11602] __nla_validate_parse: 3 callbacks suppressed
[  197.312773][T11602] netlink: 204 bytes leftover after parsing attributes in process `syz.2.841'.
[  197.318003][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.324273][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.330288][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.337266][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.339988][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.343085][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.346125][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.348514][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.350813][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.353458][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.355958][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.358375][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.360702][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.363175][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.365749][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.368020][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.370967][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.373561][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.376070][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.378481][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.380916][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.383523][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.386121][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.388936][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.391292][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.394498][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.397252][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.399751][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.402241][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.404590][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.407139][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.409616][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.412265][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.414676][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.417340][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.419589][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.421915][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.424425][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.427234][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.429992][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.432698][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.436242][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.438969][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.441515][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.444136][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.446978][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.449714][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.452457][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.454757][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.457733][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.460344][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.462990][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.465864][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.468484][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.471162][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.474309][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.476963][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.479193][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.481502][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.483854][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.486190][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.488426][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.490701][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.493240][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  197.495368][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  198.235861][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  198.236709][T11621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  198.382617][T11645] vlan0: entered allmulticast mode
[  198.384617][T11645] veth0_vlan: entered allmulticast mode
[  199.117743][T11699] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  199.162308][T11702] veth0_to_bond: entered promiscuous mode
[  199.199423][T11699] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  200.116551][T11731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.259473][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  201.969716][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  202.824219][T11836] netlink: 'syz.0.867': attribute type 17 has an invalid length.
[  202.962430][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.868'.
[  203.076908][T11876] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  205.460988][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'.
[  205.517224][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  206.354257][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  206.372495][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'.
[  206.472821][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  207.348457][T12025] netlink: 'syz.0.890': attribute type 2 has an invalid length.
[  207.350889][T12025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.890'.
[  208.163392][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[  208.195033][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  209.072807][T12082] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  209.156382][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  209.975120][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  211.792160][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'.
[  211.797908][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'.
[  211.813647][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  212.783425][T12190] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_rx_wq": -EINTR
[  214.367631][T12209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  214.589087][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  214.647807][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'.
[  214.650616][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.929'.
[  214.654706][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.929'.
[  214.683004][T12462] syzkaller1: entered promiscuous mode
[  214.691909][T12462] syzkaller1: entered allmulticast mode
[  215.496131][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'.
[  215.539640][T12481] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  215.541792][T12481] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  215.551747][T12481] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  215.554011][T12481] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  215.561244][T12481] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  215.564027][T12481] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  255.287128][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  316.737121][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  367.925569][   T34] INFO: task kworker/1:0:24 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  367.928090][   T34]       Not tainted syzkaller #0
[  367.930519][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  367.933579][   T34] task:kworker/1:0     state:D stack:24712 pid:24    tgid:24    ppid:2      task_flags:0x4208060 flags:0x00004000
[  367.951344][   T34] Workqueue: events rfkill_sync_work
[  367.953165][   T34] Call Trace:
[  367.954539][   T34]  <TASK>
[  367.958210][   T34]  __schedule+0x1798/0x4cc0
[  367.959775][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  367.961964][   T34]  ? __pfx___schedule+0x10/0x10
[  367.963728][   T34]  ? schedule+0x91/0x360
[  367.965229][   T34]  schedule+0x165/0x360
[  367.967190][   T34]  schedule_preempt_disabled+0x13/0x30
[  367.969046][   T34]  __mutex_lock+0x7e6/0x1350
[  367.970631][   T34]  ? __mutex_lock+0x5bb/0x1350
[  367.972202][   T34]  ? rfkill_sync_work+0x2e/0x200
[  367.973912][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  367.977815][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  367.979910][   T34]  rfkill_sync_work+0x2e/0x200
[  367.981528][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  367.983437][   T34]  process_scheduled_works+0xae1/0x17b0
[  367.985300][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.003465][   T34]  worker_thread+0x8a0/0xda0
[  368.005312][   T34]  kthread+0x711/0x8a0
[  368.007314][   T34]  ? __pfx_worker_thread+0x10/0x10
[  368.009025][   T34]  ? __pfx_kthread+0x10/0x10
[  368.010851][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.012966][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.014907][   T34]  ? __pfx_kthread+0x10/0x10
[  368.018484][   T34]  ret_from_fork+0x439/0x7d0
[  368.020260][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  368.022020][   T34]  ? __switch_to_asm+0x39/0x70
[  368.023982][   T34]  ? __switch_to_asm+0x33/0x70
[  368.026192][   T34]  ? __pfx_kthread+0x10/0x10
[  368.028066][   T34]  ret_from_fork_asm+0x1a/0x30
[  368.030045][   T34]  </TASK>
[  368.031355][   T34] INFO: task kworker/1:4:5895 blocked for more than 143 seconds.
[  368.034344][   T34]       Not tainted syzkaller #0
[  368.037496][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  368.040951][   T34] task:kworker/1:4     state:D stack:21912 pid:5895  tgid:5895  ppid:2      task_flags:0x4208060 flags:0x00004000
[  368.046116][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  368.048799][   T34] Call Trace:
[  368.050192][   T34]  <TASK>
[  368.051402][   T34]  __schedule+0x1798/0x4cc0
[  368.053279][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  368.057240][   T34]  ? __pfx___schedule+0x10/0x10
[  368.059235][   T34]  ? schedule+0x91/0x360
[  368.061000][   T34]  schedule+0x165/0x360
[  368.062714][   T34]  schedule_preempt_disabled+0x13/0x30
[  368.064975][   T34]  __mutex_lock+0x7e6/0x1350
[  368.067996][   T34]  ? __mutex_lock+0x5bb/0x1350
[  368.069711][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  368.071798][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  368.073635][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  368.077683][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  368.080037][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  368.082509][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  368.084754][   T34]  process_scheduled_works+0xae1/0x17b0
[  368.087402][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.089842][   T34]  worker_thread+0x8a0/0xda0
[  368.091787][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.094370][   T34]  ? __kthread_parkme+0x7b/0x200
[  368.097917][   T34]  kthread+0x711/0x8a0
[  368.099557][   T34]  ? __pfx_worker_thread+0x10/0x10
[  368.101620][   T34]  ? __pfx_kthread+0x10/0x10
[  368.103518][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.106022][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.108147][   T34]  ? __pfx_kthread+0x10/0x10
[  368.110063][   T34]  ret_from_fork+0x439/0x7d0
[  368.111966][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  368.114089][   T34]  ? __switch_to_asm+0x39/0x70
[  368.117119][   T34]  ? __switch_to_asm+0x33/0x70
[  368.119058][   T34]  ? __pfx_kthread+0x10/0x10
[  368.120930][   T34]  ret_from_fork_asm+0x1a/0x30
[  368.122922][   T34]  </TASK>
[  368.124266][   T34] INFO: task syz.2.932:12481 blocked for more than 143 seconds.
[  368.127654][   T34]       Not tainted syzkaller #0
[  368.129649][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  368.133160][   T34] task:syz.2.932       state:D stack:24360 pid:12481 tgid:12479 ppid:5843   task_flags:0x400140 flags:0x00004006
[  368.139438][   T34] Call Trace:
[  368.140796][   T34]  <TASK>
[  368.142001][   T34]  __schedule+0x1798/0x4cc0
[  368.143890][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.147546][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.149475][   T34]  ? __pfx___schedule+0x10/0x10
[  368.151462][   T34]  ? schedule+0x91/0x360
[  368.153201][   T34]  schedule+0x165/0x360
[  368.154934][   T34]  schedule_preempt_disabled+0x13/0x30
[  368.158530][   T34]  __mutex_lock+0x7e6/0x1350
[  368.160421][   T34]  ? __mutex_lock+0x5bb/0x1350
[  368.162407][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  368.164598][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  368.167178][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.169230][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  368.171650][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.174271][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  368.177406][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  368.179297][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  368.181273][   T34]  rfkill_set_block+0x1d2/0x440
[  368.182906][   T34]  rfkill_fop_write+0x44b/0x570
[  368.184614][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  368.186614][   T34]  ? security_kernfs_init_security+0x290/0x290
[  368.189308][   T34]  ? rw_verify_area+0x255/0x4d0
[  368.191297][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.193274][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  368.195983][   T34]  vfs_write+0x27e/0xb30
[  368.197890][   T34]  ? __pfx_vfs_write+0x10/0x10
[  368.199816][   T34]  ? __fget_files+0x2a/0x420
[  368.201746][   T34]  ? __fget_files+0x2a/0x420
[  368.203615][   T34]  ? __fget_files+0x3a0/0x420
[  368.205277][   T34]  ? __fget_files+0x2a/0x420
[  368.206995][   T34]  ksys_write+0x145/0x250
[  368.208781][   T34]  ? __pfx_ksys_write+0x10/0x10
[  368.210706][   T34]  ? rcu_is_watching+0x15/0xb0
[  368.212312][   T34]  ? do_syscall_64+0xbe/0x3b0
[  368.213879][   T34]  do_syscall_64+0xfa/0x3b0
[  368.215487][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.218511][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.220572][   T34]  ? exc_page_fault+0x9f/0xf0
[  368.222192][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.224147][   T34] RIP: 0033:0x7ffb4f58eba9
[  368.225778][   T34] RSP: 002b:00007ffb504ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  368.228828][   T34] RAX: ffffffffffffffda RBX: 00007ffb4f7d5fa0 RCX: 00007ffb4f58eba9
[  368.231648][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  368.234327][   T34] RBP: 00007ffb4f611e19 R08: 0000000000000000 R09: 0000000000000000
[  368.237207][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.240128][   T34] R13: 00007ffb4f7d6038 R14: 00007ffb4f7d5fa0 R15: 00007ffd7b9d12b8
[  368.242957][   T34]  </TASK>
[  368.244060][   T34] INFO: task syz.2.932:12483 blocked for more than 143 seconds.
[  368.249133][   T34]       Not tainted syzkaller #0
[  368.250817][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  368.253788][   T34] task:syz.2.932       state:D stack:28936 pid:12483 tgid:12479 ppid:5843   task_flags:0x400140 flags:0x00004004
[  368.257824][   T34] Call Trace:
[  368.259027][   T34]  <TASK>
[  368.260296][   T34]  __schedule+0x1798/0x4cc0
[  368.261964][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.263767][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.265703][   T34]  ? __pfx___schedule+0x10/0x10
[  368.267446][   T34]  ? schedule+0x91/0x360
[  368.268915][   T34]  schedule+0x165/0x360
[  368.270392][   T34]  schedule_preempt_disabled+0x13/0x30
[  368.272393][   T34]  __mutex_lock+0x7e6/0x1350
[  368.274082][   T34]  ? __mutex_lock+0x5bb/0x1350
[  368.275798][   T34]  ? rfkill_fop_write+0x191/0x570
[  368.277494][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  368.279177][   T34]  rfkill_fop_write+0x191/0x570
[  368.280878][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  368.282895][   T34]  ? security_kernfs_init_security+0x290/0x290
[  368.285043][   T34]  ? rw_verify_area+0x255/0x4d0
[  368.286797][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.288431][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  368.290214][   T34]  vfs_write+0x27e/0xb30
[  368.291623][   T34]  ? __pfx_vfs_write+0x10/0x10
[  368.293420][   T34]  ? __fget_files+0x2a/0x420
[  368.294968][   T34]  ? __fget_files+0x2a/0x420
[  368.296555][   T34]  ? __fget_files+0x3a0/0x420
[  368.298111][   T34]  ? __fget_files+0x2a/0x420
[  368.299622][   T34]  ksys_write+0x145/0x250
[  368.301066][   T34]  ? __pfx_ksys_write+0x10/0x10
[  368.302935][   T34]  ? rcu_is_watching+0x15/0xb0
[  368.304699][   T34]  ? do_syscall_64+0xbe/0x3b0
[  368.306760][   T34]  do_syscall_64+0xfa/0x3b0
[  368.308263][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.309966][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.312006][   T34]  ? exc_page_fault+0x9f/0xf0
[  368.313696][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.315757][   T34] RIP: 0033:0x7ffb4f58eba9
[  368.317300][   T34] RSP: 002b:00007ffb504cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  368.320071][   T34] RAX: ffffffffffffffda RBX: 00007ffb4f7d6090 RCX: 00007ffb4f58eba9
[  368.322961][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  368.325806][   T34] RBP: 00007ffb4f611e19 R08: 0000000000000000 R09: 0000000000000000
[  368.328457][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.331087][   T34] R13: 00007ffb4f7d6128 R14: 00007ffb4f7d6090 R15: 00007ffd7b9d12b8
[  368.333883][   T34]  </TASK>
[  368.334948][   T34] INFO: task syz.1.934:12482 blocked for more than 143 seconds.
[  368.337544][   T34]       Not tainted syzkaller #0
[  368.339213][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  368.342181][   T34] task:syz.1.934       state:D stack:25928 pid:12482 tgid:12480 ppid:5844   task_flags:0x400140 flags:0x00004004
[  368.346406][   T34] Call Trace:
[  368.347537][   T34]  <TASK>
[  368.348527][   T34]  __schedule+0x1798/0x4cc0
[  368.350038][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.351642][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.353366][   T34]  ? __pfx___schedule+0x10/0x10
[  368.354994][   T34]  ? schedule+0x91/0x360
[  368.356484][   T34]  schedule+0x165/0x360
[  368.357874][   T34]  schedule_preempt_disabled+0x13/0x30
[  368.359640][   T34]  __mutex_lock+0x7e6/0x1350
[  368.361171][   T34]  ? __mutex_lock+0x5bb/0x1350
[  368.362885][   T34]  ? rfkill_register+0x37/0x8e0
[  368.364590][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  368.366389][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  368.368252][   T34]  ? device_initialize+0x24b/0x440
[  368.369972][   T34]  rfkill_register+0x37/0x8e0
[  368.371588][   T34]  nfc_register_device+0x14a/0x320
[  368.373423][   T34]  nci_register_device+0x87f/0x9d0
[  368.375213][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  368.377199][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  368.378996][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  368.380827][   T34]  virtual_ncidev_open+0x129/0x1a0
[  368.382727][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  368.384825][   T34]  misc_open+0x2bc/0x330
[  368.386370][   T34]  chrdev_open+0x4cc/0x5e0
[  368.387903][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  368.389565][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  368.391700][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  368.393487][   T34]  do_dentry_open+0x953/0x13f0
[  368.395104][   T34]  vfs_open+0x3b/0x340
[  368.396569][   T34]  ? path_openat+0x2ecd/0x3830
[  368.398234][   T34]  path_openat+0x2ee5/0x3830
[  368.399795][   T34]  ? arch_stack_walk+0xfc/0x150
[  368.401490][   T34]  ? stack_depot_save_flags+0x40/0x860
[  368.403711][   T34]  ? __pfx_path_openat+0x10/0x10
[  368.405357][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.407535][   T34]  do_filp_open+0x1fa/0x410
[  368.409042][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.410635][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  368.412488][   T34]  ? _raw_spin_unlock+0x28/0x50
[  368.414499][   T34]  ? alloc_fd+0x64c/0x6c0
[  368.416409][   T34]  do_sys_openat2+0x121/0x1c0
[  368.418216][   T34]  ? __se_sys_futex+0x36f/0x400
[  368.420065][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  368.422166][   T34]  ? rcu_is_watching+0x15/0xb0
[  368.424221][   T34]  __x64_sys_openat+0x138/0x170
[  368.426236][   T34]  do_syscall_64+0xfa/0x3b0
[  368.428034][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.430250][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.432845][   T34]  ? exc_page_fault+0x9f/0xf0
[  368.434912][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.437583][   T34] RIP: 0033:0x7f56b838eba9
[  368.439515][   T34] RSP: 002b:00007f56b9254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  368.443033][   T34] RAX: ffffffffffffffda RBX: 00007f56b85d5fa0 RCX: 00007f56b838eba9
[  368.446459][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  368.449834][   T34] RBP: 00007f56b8411e19 R08: 0000000000000000 R09: 0000000000000000
[  368.453195][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.456541][   T34] R13: 00007f56b85d6038 R14: 00007f56b85d5fa0 R15: 00007ffed4a8c768
[  368.459908][   T34]  </TASK>
[  368.461282][   T34] INFO: task syz.0.933:12485 blocked for more than 143 seconds.
[  368.464472][   T34]       Not tainted syzkaller #0
[  368.466691][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  368.470227][   T34] task:syz.0.933       state:D stack:26920 pid:12485 tgid:12485 ppid:5852   task_flags:0x400040 flags:0x00004004
[  368.475076][   T34] Call Trace:
[  368.476691][   T34]  <TASK>
[  368.478008][   T34]  __schedule+0x1798/0x4cc0
[  368.479968][   T34]  ? validate_chain+0x897/0x2140
[  368.482081][   T34]  ? __lock_acquire+0xab9/0xd20
[  368.484191][   T34]  ? __pfx___schedule+0x10/0x10
[  368.486410][   T34]  ? schedule+0x91/0x360
[  368.488273][   T34]  schedule+0x165/0x360
[  368.490068][   T34]  schedule_timeout+0x9a/0x270
[  368.492157][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  368.494450][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.496765][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.498842][   T34]  ? wait_for_completion+0x267/0x5d0
[  368.500877][   T34]  wait_for_completion+0x2bf/0x5d0
[  368.502903][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  368.505265][   T34]  ? __flush_work+0xd2/0xbc0
[  368.507345][   T34]  ? __flush_work+0xd2/0xbc0
[  368.509324][   T34]  __flush_work+0x9b9/0xbc0
[  368.511249][   T34]  ? __flush_work+0xd2/0xbc0
[  368.513147][   T34]  ? __pfx___flush_work+0x10/0x10
[  368.515237][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  368.517612][   T34]  ? __pfx___cancel_work+0x10/0x10
[  368.519747][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  368.522184][   T34]  __cancel_work_sync+0xbe/0x110
[  368.524259][   T34]  rfkill_unregister+0x92/0x220
[  368.527169][   T34]  nfc_unregister_device+0x96/0x2a0
[  368.529339][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  368.531775][   T34]  virtual_ncidev_close+0x56/0x90
[  368.533944][   T34]  __fput+0x44c/0xa70
[  368.535776][   T34]  task_work_run+0x1d4/0x260
[  368.537790][   T34]  ? __pfx_task_work_run+0x10/0x10
[  368.539931][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  368.542234][   T34]  exit_to_user_mode_loop+0xec/0x110
[  368.544479][   T34]  do_syscall_64+0x2bd/0x3b0
[  368.546613][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.548835][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.551395][   T34]  ? exc_page_fault+0x9f/0xf0
[  368.553416][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.555715][   T34] RIP: 0033:0x7f38edb8eba9
[  368.557223][   T34] RSP: 002b:00007ffd5ddf6cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  368.559930][   T34] RAX: 0000000000000000 RBX: 000000000003492a RCX: 00007f38edb8eba9
[  368.562848][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  368.566776][   T34] RBP: 00007f38eddd7da0 R08: 0000000000000001 R09: 000000075ddf6fcf
[  368.569885][   T34] R10: 0000001b31020000 R11: 0000000000000246 R12: 00007f38eddd5fac
[  368.572647][   T34] R13: 00007f38eddd5fa0 R14: ffffffffffffffff R15: 00007ffd5ddf6df0
[  368.575543][   T34]  </TASK>
[  368.576589][   T34] 
[  368.576589][   T34] Showing all locks held in the system:
[  368.579089][   T34] 3 locks held by kworker/1:0/24:
[  368.580698][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  368.584294][   T34]  #1: ffffc900001c7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  368.588421][   T34]  #2: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  368.591934][   T34] 1 lock held by khungtaskd/34:
[  368.593679][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  368.596962][   T34] 1 lock held by klogd/5284:
[  368.598512][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  368.601693][   T34] 2 locks held by getty/5674:
[  368.603409][   T34]  #0: ffff8880297390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  368.606604][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  368.609900][   T34] 3 locks held by kworker/1:4/5895:
[  368.611576][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  368.615848][   T34]  #1: ffffc9000465fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  368.620276][   T34]  #2: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  368.623947][   T34] 2 locks held by syz.2.932/12481:
[  368.625732][   T34]  #0: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  368.629040][   T34]  #1: ffff88803b0e7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  368.632249][   T34] 1 lock held by syz.2.932/12483:
[  368.634205][   T34]  #0: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  368.637974][   T34] 3 locks held by syz.1.934/12482:
[  368.639676][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.642463][   T34]  #1: ffff88810533f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  368.645622][   T34]  #2: ffffffff8f812948 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  368.649042][   T34] 1 lock held by syz.0.933/12485:
[  368.650678][   T34]  #0: ffff88803b0e7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  368.654201][   T34] 1 lock held by syz-executor/12535:
[  368.656022][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.658738][   T34] 1 lock held by syz-executor/12536:
[  368.660490][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.663348][   T34] 1 lock held by syz-executor/12537:
[  368.665086][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.668136][   T34] 1 lock held by syz-executor/12539:
[  368.669918][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.672938][   T34] 1 lock held by syz-executor/12542:
[  368.674837][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.677716][   T34] 1 lock held by syz-executor/12543:
[  368.679639][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.682462][   T34] 1 lock held by syz-executor/12549:
[  368.684242][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.687108][   T34] 1 lock held by syz-executor/12552:
[  368.688875][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.691793][   T34] 1 lock held by syz-executor/12553:
[  368.693976][   T34]  #0: ffffffff8e9c2608 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  368.696845][   T34] 
[  368.697693][   T34] =============================================
[  368.697693][   T34] 
[  368.700467][   T34] NMI backtrace for cpu 1
[  368.700477][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  368.700490][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.700497][   T34] Call Trace:
[  368.700502][   T34]  <TASK>
[  368.700508][   T34]  dump_stack_lvl+0x189/0x250
[  368.700527][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.700538][   T34]  ? __pfx__printk+0x10/0x10
[  368.700551][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  368.700564][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  368.700576][   T34]  ? __pfx__printk+0x10/0x10
[  368.700588][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  368.700600][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  368.700613][   T34]  watchdog+0xf93/0xfe0
[  368.700625][   T34]  ? watchdog+0x1de/0xfe0
[  368.700637][   T34]  kthread+0x711/0x8a0
[  368.700647][   T34]  ? __pfx_watchdog+0x10/0x10
[  368.700662][   T34]  ? __pfx_kthread+0x10/0x10
[  368.700672][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.700679][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.700687][   T34]  ? __pfx_kthread+0x10/0x10
[  368.700696][   T34]  ret_from_fork+0x439/0x7d0
[  368.700704][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  368.700713][   T34]  ? __switch_to_asm+0x39/0x70
[  368.700722][   T34]  ? __switch_to_asm+0x33/0x70
[  368.700731][   T34]  ? __pfx_kthread+0x10/0x10
[  368.700740][   T34]  ret_from_fork_asm+0x1a/0x30
[  368.700755][   T34]  </TASK>
[  368.700757][   T34] Sending NMI from CPU 1 to CPUs 0:
[  368.751099][    C0] NMI backtrace for cpu 0
[  368.751109][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  368.751116][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.751120][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  368.751133][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 39 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  368.751138][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  368.751145][    C0] RAX: 8d17a26ef4836f00 RBX: ffffffff819693f8 RCX: 8d17a26ef4836f00
[  368.751150][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba61b RDI: ffffffff8be33c00
[  368.751155][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  368.751159][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38d30
[  368.751164][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  368.751168][    C0] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  368.751173][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  368.751177][    C0] CR2: 00007f397ac12822 CR3: 000000000df36000 CR4: 00000000000006f0
[  368.751203][    C0] Call Trace:
[  368.751207][    C0]  <TASK>
[  368.751210][    C0]  default_idle+0x13/0x20
[  368.751219][    C0]  default_idle_call+0x74/0xb0
[  368.751228][    C0]  do_idle+0x1e8/0x510
[  368.751236][    C0]  ? __pfx_do_idle+0x10/0x10
[  368.751244][    C0]  cpu_startup_entry+0x44/0x60
[  368.751250][    C0]  rest_init+0x2de/0x300
[  368.751259][    C0]  start_kernel+0x3a9/0x410
[  368.751269][    C0]  x86_64_start_reservations+0x24/0x30
[  368.751278][    C0]  x86_64_start_kernel+0x143/0x1c0
[  368.751287][    C0]  common_startup_64+0x13e/0x147
[  368.751299][    C0]  </TASK>
[  368.752128][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  368.811834][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  368.815135][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.818387][   T34] Call Trace:
[  368.819490][   T34]  <TASK>
[  368.820467][   T34]  dump_stack_lvl+0x99/0x250
[  368.822115][   T34]  ? __asan_memcpy+0x40/0x70
[  368.823638][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.825343][   T34]  ? __pfx__printk+0x10/0x10
[  368.826883][   T34]  vpanic+0x281/0x750
[  368.828189][   T34]  ? __pfx_vpanic+0x10/0x10
[  368.829679][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  368.831486][   T34]  ? preempt_schedule+0xae/0xc0
[  368.833495][   T34]  ? preempt_schedule_common+0x83/0xd0
[  368.835287][   T34]  panic+0xb9/0xc0
[  368.836520][   T34]  ? __pfx_panic+0x10/0x10
[  368.838006][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  368.839752][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  368.841781][   T34]  watchdog+0xfd2/0xfe0
[  368.843252][   T34]  ? watchdog+0x1de/0xfe0
[  368.844681][   T34]  kthread+0x711/0x8a0
[  368.846034][   T34]  ? __pfx_watchdog+0x10/0x10
[  368.847581][   T34]  ? __pfx_kthread+0x10/0x10
[  368.849109][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.850801][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.852725][   T34]  ? __pfx_kthread+0x10/0x10
[  368.854470][   T34]  ret_from_fork+0x439/0x7d0
[  368.855997][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  368.857666][   T34]  ? __switch_to_asm+0x39/0x70
[  368.859240][   T34]  ? __switch_to_asm+0x33/0x70
[  368.860804][   T34]  ? __pfx_kthread+0x10/0x10
[  368.862421][   T34]  ret_from_fork_asm+0x1a/0x30
[  368.864016][   T34]  </TASK>
[  368.865692][   T34] Kernel Offset: disabled
[  368.867121][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:23:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000023 RBX=0000000000000023 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888020bb0237 R9 =1ffff11004176046 R10=dffffc0000000000 R11=ffffffff854f95c0
R12=dffffc0000000000 R13=ffffffff99b028f4 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f963c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f397ac12822 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f397b90d6c0 00007f397b90d6c0 XMM01=00007f397b90d6b0 00007f397b90d6b0
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000087 RCX=a066b7d166659600 RDX=0000000000000000
RSI=ffffffff8dba9a3d RDI=ffffffff8be33c00 RBP=ffff88801e4d4470 RSP=ffffc9000343faf0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000687f50
R12=0000000000000000 R13=0000000000000000 R14=ffff88801ed80018 R15=ffff88801e4d3980
RIP=ffffffff8b7b1190 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556ae02500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4d48707d60 CR3=000000010a06e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f4d47ba76c3 00007f4d47ba76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=000002080606013c 9c03e40400000007 XMM07=0800380300000000 0000000000000000
XMM08=0000000000000030 6e616c7600000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
