last executing test programs:

30.235872969s ago: executing program 1 (id=87):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/77, 0x4d, <r2=>0x0, &(0x7f00000007c0)=""/44, 0x2c}}, 0x10)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff})
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x12, 0x4, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES16, @ANYRES32=0x0, @ANYRES64, @ANYRES64=r3], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r4, &(0x7f0000000240), 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pI4   \x00'}, 0x20)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x9)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)="4b2dc0daa054cf032f89d424cbb19926126128b298be2905dce2", 0x1a}], 0x1, &(0x7f0000000980)=[@mark={{0x96, 0x1, 0x24, 0xfffffffd}}], 0x18}, 0x24008000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={<r11=>r0, 0x4, 0x0, 0xffffffff00000001})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={<r12=>r0, 0x401, 0xfffffffffffffffc, 0x4})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r8], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc010)
poll(&(0x7f0000000a40)=[{r13, 0x400}], 0x1, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000ff03000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000008000000000000000008000018260000", @ANYRES32, @ANYBLOB="000000000100000085100000000000003ad506000100000018450000fdffffff0000000000000000bf910008652a1b00b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x5a, &(0x7f0000000180)=""/90, 0x41000, 0x26, '\x00', 0x0, @xdp, r1, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x6, 0x9, 0x4}, 0x10, r2, r3, 0x0, &(0x7f00000006c0)=[r4, 0x1, r6, r7, r8, 0x1, r10, r11, r12]}, 0x94)
listen(r0, 0xb5d6)

29.35282593s ago: executing program 1 (id=97):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @void}, 0x40)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x21}, 0x8)
close(r0)

29.351266436s ago: executing program 1 (id=98):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="f319beb801d31b4f01010800000000000000090000000804d99dd224bd40d2094685582e64f7f1b00161bf7f0fd27575fb9b96d07c50c1484353126ae4dc57a672cdb4f86602c2e31b049c58b636115e68c9e5d696be98c6041ec2d1858c2b"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="3fcb0000330001002abd7000ffdbdb25020000000800040024"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000880)={0xa, 0x4e20, 0x5, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)
sendmmsg$inet6(r7, 0x0, 0x0, 0x40)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x4)
setsockopt$inet6_buf(r7, 0x29, 0x2c, &(0x7f0000000040)="16640b14c74e2f1f92de730584327e2877f82cb729bbb4de7995d42f77cbb99c5de3572fc71c019b102ac3bd621fd8c0", 0x30)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0xea5bc50b6199d77e)
r10 = socket$inet6(0xa, 0x5, 0x5)
setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}, 0x28)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYRES64=r10, @ANYRES64=r6, @ANYRESDEC=r10, @ANYRES32, @ANYRES16=r9], 0x0, 0xfffffffffffffe5d, 0x0, 0xfffffffc}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eeffffffff"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB, @ANYRESOCT=0x0], &(0x7f00000003c0)='GPL\x00', 0xf7f, 0x1b, &(0x7f0000000640)=""/27, 0x41100, 0x2, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000440)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x9, 0xee08, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0)

28.922736424s ago: executing program 0 (id=99):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x21, 0xa, 0x10000)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000c40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0xd}})
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev(r4, &(0x7f0000000680)=[{&(0x7f0000000180)="ccb654a68f4a276980d51d8068969d80f3b6607cadec3a4403febc4324db341d0aa78ba88926eda75619d36e44e8672c218a3a9c6019d3a255896ade9a38d084b1a72def763170d40230fc446053608e3ce8d0f0c827a6d6296af0e5c46a7d4894", 0x61}, {&(0x7f00000003c0)="2e946775ee7faed6b2aedf28b744ba540175ad3a3321a4cd7e3c2675bf5695d4cd858fe38b8d9ca31876cacfd524c883204c364476aa62e1924d1b1125eed5c3758d192d97da23aeee891c43bcc8bc7de6d16e690084566fb5da35e2ffc1da8af60ce10c16f751ad2fe281242cdaf41e76f9221addb5", 0x76}, {&(0x7f0000000340)="4b4dba07f912af9706b0f5b2a2cfe6549d48d7147fef493ea118aaa5e5eb4398d7fecee1a8606bdbf31c796c", 0x2c}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="a1a90a642aa82621875d75b17805610d8d66de06dede7238cd32c7b106986fc37a2bc5673e74e51e527688094acbfb0e3233cbb266484923088c7ea38c0029676384140e4d06e453c2995f", 0x4b}, {&(0x7f00000005c0)="5b35c1dc395678fcead560df3cf47e6fbfcb2352736a723b3afa8a888b3b7d00a6d76ea2e90299a82947c8dbd571a8f12c3d4ac78fe56cabe3d3ab3f7a7429024f62d15a855040f97257b39a9622b631c3e1eb6197d2f8a9b1ccf546f2f67baf5d6a9db9587916b4a918f1bd1485002f0f6635112679cf7d20ce514d4b43e3d1d1a9a55f42b18c8b488fe0f661fa4a0c4c5448edfe47445c287ded87a01f8a961bf242129972e0016badc8780a77926971f04b9d3b3fb344", 0xb8}, {&(0x7f0000000b40)="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", 0x1000}], 0x7, 0x7ff, 0xdad8)
recvfrom$netrom(r1, 0x0, 0x0, 0x12000, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, 'syz0\x00', @null, 0x9, 0x2, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000200000008000700e0000001060010000100000008000a00", @ANYRES32=r8, @ANYBLOB="f07efcd003089dc850795e970c63d69c3597569f29dea5fc3befaa6f12e5f325adab659f7c32589a81"], 0x54}}, 0x4000)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280)

28.668379541s ago: executing program 0 (id=100):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x48}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xfffb, @empty}}, 0x0, 0x0, 0x3f6, 0x0, 0x32, 0x2}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a00a0b887d6f4b3717a4d40a30be3e1c12f8abf6bc88844aa14e700020900010073797a3100000000080005400000001d09000200730700000000000000000a40ffffffff1800118008000100666962000c0002800800024001000000140000001100010000000000000000000100000a81a4f305843bf2568f8caf47eefae40900000072d9d3f570c56609a0e8738ddf1299d8b7efc438898d33684d5390e4c709c19aed37a51d4be498117ce72c2ea2f290418248cdae9fcfe4f5b6a00f1dadfbc82297195dd5854945411f415ab4d8f53c3117bf9104981bd8f23d3c9025ac287a45d32f3d29fc5b5043ab55b8e0d297cc2c5d5f02c50a5e3bd7257053ae5e69d6fc55e25b"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001240)="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", 0x398}], 0x1}}], 0x2, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x2, 0xd, 0x3, 0x1003, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x6}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRESOCT, @ANYRES32=r6, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x400c810}, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48)
socket$igmp6(0xa, 0x3, 0x2)

28.521594655s ago: executing program 1 (id=101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000080), 0x8)
listen(r1, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x7, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="d7b36d12a69eb4a5e40a7aec01b99dff80965d75a1201d6cf9d505a7b2b2b093de217347c8f7960ca5cb0abe8035c875854e418e4c708fcfc9b3f113949efb34a46738be1477f3ed164aff73ed70a9bcc2b4941fb5170182b669608551087fbffafdd577155aea990226fddcb205a9c04f14d92b1a67e4488b88b9b6db", 0x7d)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x10}, 0xc)

28.520465788s ago: executing program 0 (id=102):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000fffffff50000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b"], 0x140}}, 0x0)

28.412055143s ago: executing program 1 (id=104):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x2c}}, 0x20000050)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5, 0xcf, &(0x7f0000000240)="48e4b838e0a4915611529d8b8b9f54abc23f5376315e1d377038301291954267af7872dd1a412c539a99d86602fef08e468ef61ac517c3a160466240b026174f8e3e11f720c8edcddb10c42f60b2ed37d46acc3ec45d6a73f4643c050bd5202ca066818683130e6bcdb9fd91891a74ec44cdd34fa88a0504edceeaca5784fb58c8c4af8efb3ae7387eb618dc8219cd96a04bde773658d3d2bd8295ca0b3b35c345038ed6f2060df85bf4071501114e902840ce0ebc989f5fc8722fe6ef420b6f1163a3a8ab59f94f6990df7ab253d2", 0x1, 0x1}]})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x805)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
close(r3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x2c}}, 0x20000050) (async)
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x5, 0xcf, &(0x7f0000000240)="48e4b838e0a4915611529d8b8b9f54abc23f5376315e1d377038301291954267af7872dd1a412c539a99d86602fef08e468ef61ac517c3a160466240b026174f8e3e11f720c8edcddb10c42f60b2ed37d46acc3ec45d6a73f4643c050bd5202ca066818683130e6bcdb9fd91891a74ec44cdd34fa88a0504edceeaca5784fb58c8c4af8efb3ae7387eb618dc8219cd96a04bde773658d3d2bd8295ca0b3b35c345038ed6f2060df85bf4071501114e902840ce0ebc989f5fc8722fe6ef420b6f1163a3a8ab59f94f6990df7ab253d2", 0x1, 0x1}]}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x805) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async)
getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
close(r3) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) (async)

28.361745209s ago: executing program 0 (id=105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x8000000, 0x0, {0x4}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x43, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)

28.310312258s ago: executing program 0 (id=107):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x2, 0x10, 0x3, 0x2, 0x0, 0x40}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x891e, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r3=>0x0})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)={0x3, 'pim6reg\x00', {0x10000}, 0x1})
recvmmsg(r4, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x10120, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, 0x0)
r6 = gettid()
r7 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x8000, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x48)

28.309230144s ago: executing program 1 (id=108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0), 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="6103060506029509010f01"], 0xb)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01008000000001dcdf250f000000180007800c0003000000000000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x4000040)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x10, 0x6361, 0x1007, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x8, 0xc, {0x1, 0x18000, 0xb2, 0xe9, 0x8, 0xfffffffffffffffd}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

28.18223902s ago: executing program 0 (id=109):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000a0000000800a100000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000040000000000000000950000ca0001000003ebe2d92bcb6823e6d6ff7990515db308bfaeadc395274f91e4499af65d6fb24d2a92c9bf7bd5ab78b433c77ea4ccf4674746e36d24ede8d06e60e618f035264cdeda2c31722a2826139e7c371205514eced393d8e617a3d70af9856ebd49cdf45c72f4e62775cc85448ac256c2f6968ca19101f4e75081500c7e5be6ecfe685f2748ffdfc5661f6b19f4357d70d76a6263255a79685187d38c6616dbeffa9831531015c4e1139b71df7bab16f92419b2373e93128bbd8df9b61948380236d0071d67c628a1a109"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9, 0x0, 0x5}, 0x18)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r10, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r12 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback}, 0x1c)
bind$packet(r8, &(0x7f0000000180)={0x11, 0x10, r11, 0x1, 0xea, 0x6, @broadcast}, 0x14)

15.967782929s ago: executing program 2 (id=160):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x14e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tipc={{0x23, 0x4, 0x3, 0x4, 0x140, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x17, 0xb0, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x3, [{@multicast2}]}, @lsrr={0x83, 0x2b, 0xa7, [@dev={0xac, 0x14, 0x14, 0x19}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0xd9, [@loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x3c, [@loopback, @loopback, @loopback, @multicast1, @broadcast, @local, @empty]}]}}, @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xfffb, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x4e21, 0x4e23, 0x0, 0x4, 0x0, 0x0, 0x1}, [{0x6, 0x2, 0x6, 0x6, 0xfffffffa, 0x1, 0x6, 0x400}, {0x9, 0x650, 0xff, 0x8872, 0x6, 0x9, 0x0, 0x3}, {0x4, 0x6, 0x4, 0x6, 0x9, 0x39790e18, 0x9, 0xffff000}, {0x2, 0x2, 0x5, 0x6, 0x7, 0xa, 0xc, 0xbb8}, {0xc, 0x59fe, 0xc49, 0x6, 0x9, 0x7ff, 0xd, 0x2edd}]}}}}}, 0x0) (async)
syz_emit_ethernet(0x14e, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tipc={{0x23, 0x4, 0x3, 0x4, 0x140, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x17, 0xb0, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x3e, 0x1, 0x3, [{@multicast2}]}, @lsrr={0x83, 0x2b, 0xa7, [@dev={0xac, 0x14, 0x14, 0x19}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0xd9, [@loopback]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x3c, [@loopback, @loopback, @loopback, @multicast1, @broadcast, @local, @empty]}]}}, @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xfffb, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x4e21, 0x4e23, 0x0, 0x4, 0x0, 0x0, 0x1}, [{0x6, 0x2, 0x6, 0x6, 0xfffffffa, 0x1, 0x6, 0x400}, {0x9, 0x650, 0xff, 0x8872, 0x6, 0x9, 0x0, 0x3}, {0x4, 0x6, 0x4, 0x6, 0x9, 0x39790e18, 0x9, 0xffff000}, {0x2, 0x2, 0x5, 0x6, 0x7, 0xa, 0xc, 0xbb8}, {0xc, 0x59fe, 0xc49, 0x6, 0x9, 0x7ff, 0xd, 0x2edd}]}}}}}, 0x0)

15.782166347s ago: executing program 2 (id=161):
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xfffffffc}]}}}]}, 0x44}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x1, 0x4)

15.781494322s ago: executing program 2 (id=162):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000f5ffffffffffffff00000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b"], 0x140}}, 0x0)

15.732356354s ago: executing program 2 (id=163):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@getnexthop={0x34, 0x6a, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x8020)

15.671222856s ago: executing program 2 (id=164):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r2, 0x0, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b00010067726574174c0000080002800400120008000a003bf814476a20046a08960be39d7441f73f53ae93836d4ec1c420b4af6c04f1f7dc57c71238bf43ec3d6887f094632e60516287938a8b71afd15f90d28cb79c74d72ef3a64fe73f6484525e47e0a067c8e1f336c6298b1fa29ebcc160", @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

15.60019816s ago: executing program 2 (id=165):
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x62a70111dcbdcc8a, 0x200000000000028e, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000002d00010000000000000000000400003ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe0000000"], 0x3c}], 0x1, 0x0, 0x0, 0x4000040}, 0x300)

12.577494607s ago: executing program 32 (id=109):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000a0000000800a100000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000040000000000000000950000ca0001000003ebe2d92bcb6823e6d6ff7990515db308bfaeadc395274f91e4499af65d6fb24d2a92c9bf7bd5ab78b433c77ea4ccf4674746e36d24ede8d06e60e618f035264cdeda2c31722a2826139e7c371205514eced393d8e617a3d70af9856ebd49cdf45c72f4e62775cc85448ac256c2f6968ca19101f4e75081500c7e5be6ecfe685f2748ffdfc5661f6b19f4357d70d76a6263255a79685187d38c6616dbeffa9831531015c4e1139b71df7bab16f92419b2373e93128bbd8df9b61948380236d0071d67c628a1a109"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9, 0x0, 0x5}, 0x18)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r10, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r12 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback}, 0x1c)
bind$packet(r8, &(0x7f0000000180)={0x11, 0x10, r11, 0x1, 0xea, 0x6, @broadcast}, 0x14)

12.529545425s ago: executing program 33 (id=108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0), 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="6103060506029509010f01"], 0xb)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01008000000001dcdf250f000000180007800c0003000000000000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x4000040)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x10, 0x6361, 0x1007, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x8, 0xc, {0x1, 0x18000, 0xb2, 0xe9, 0x8, 0xfffffffffffffffd}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

0s ago: executing program 34 (id=165):
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x62a70111dcbdcc8a, 0x200000000000028e, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000020000000000000003000000180000000300000000000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc5c79a324b7d4b3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
unshare(0x68040200)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
r8 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040)=r0, 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)
sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x20, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044801}, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000fc43552a3f575381800b00010065787468647200002c681f39e53f95831692c1ab3cd422702c000280080007400000000c05000200000000000800034000000a4a"], 0x94}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000002d00010000000000000000000400003ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe0000000"], 0x3c}], 0x1, 0x0, 0x0, 0x4000040}, 0x300)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22275' (ED25519) to the list of known hosts.
syzkaller login: [   48.940568][ T5773] cgroup: Unknown subsys name 'net'
[   49.070094][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.080482][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.858450][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.850055][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.854267][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.857427][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.860697][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.863560][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.922014][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.926663][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.930706][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.934679][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.938440][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.972516][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.977620][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.980830][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.984707][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.988176][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.129307][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.225505][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.229933][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.232998][ T5841] bridge_slave_0: entered allmulticast mode
[   55.237158][ T5841] bridge_slave_0: entered promiscuous mode
[   55.245014][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.248437][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.251311][ T5841] bridge_slave_1: entered allmulticast mode
[   55.255056][ T5841] bridge_slave_1: entered promiscuous mode
[   55.340794][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.358595][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.404955][ T5841] team0: Port device team_slave_0 added
[   55.408274][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.418273][ T5841] team0: Port device team_slave_1 added
[   55.446872][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.483513][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.487700][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.500937][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.519649][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.523353][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.537748][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.612709][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.615032][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.619396][ T5846] bridge_slave_0: entered allmulticast mode
[   55.622136][ T5846] bridge_slave_0: entered promiscuous mode
[   55.629612][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.631841][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.634062][ T5846] bridge_slave_1: entered allmulticast mode
[   55.637953][ T5846] bridge_slave_1: entered promiscuous mode
[   55.643696][ T5841] hsr_slave_0: entered promiscuous mode
[   55.647920][ T5841] hsr_slave_1: entered promiscuous mode
[   55.690787][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.693561][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.697147][ T5848] bridge_slave_0: entered allmulticast mode
[   55.700071][ T5848] bridge_slave_0: entered promiscuous mode
[   55.703288][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.706073][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.708334][ T5848] bridge_slave_1: entered allmulticast mode
[   55.711548][ T5848] bridge_slave_1: entered promiscuous mode
[   55.716911][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.747867][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.781546][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.807057][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.816967][ T5846] team0: Port device team_slave_0 added
[   55.832941][ T5846] team0: Port device team_slave_1 added
[   55.872835][ T5848] team0: Port device team_slave_0 added
[   55.879953][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.882314][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.891824][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.896903][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.899065][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.907484][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.912882][ T5848] team0: Port device team_slave_1 added
[   55.975915][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.978058][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.986932][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.005172][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.007580][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.015856][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.052263][ T5846] hsr_slave_0: entered promiscuous mode
[   56.054662][ T5846] hsr_slave_1: entered promiscuous mode
[   56.057235][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.059197][ T5846] Cannot create hsr debugfs directory
[   56.064574][ T5848] hsr_slave_0: entered promiscuous mode
[   56.067351][ T5848] hsr_slave_1: entered promiscuous mode
[   56.069426][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.071156][ T5848] Cannot create hsr debugfs directory
[   56.203853][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.212668][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.229610][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.235049][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.364398][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.371929][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.380467][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.387815][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.450493][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.465428][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.472737][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.481307][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.492027][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.530509][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.550344][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.553011][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.583162][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.585510][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.688562][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.730392][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.764604][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.766966][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.781041][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.794137][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.796990][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.830838][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.842146][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.849304][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.869985][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.872389][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.877127][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.879608][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.906398][ T5844] Bluetooth: hci0: command tx timeout
[   56.934648][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.975057][ T5841] veth0_vlan: entered promiscuous mode
[   56.982337][ T5841] veth1_vlan: entered promiscuous mode
[   56.985918][ T5844] Bluetooth: hci1: command tx timeout
[   57.014123][ T5841] veth0_macvtap: entered promiscuous mode
[   57.034330][ T5841] veth1_macvtap: entered promiscuous mode
[   57.059228][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.066904][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.075890][ T5844] Bluetooth: hci2: command tx timeout
[   57.078200][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.089154][ T5694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.097959][ T5694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.103050][ T5694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.108273][ T5694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.112384][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.181322][ T5848] veth0_vlan: entered promiscuous mode
[   57.202665][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.202923][ T5846] veth0_vlan: entered promiscuous mode
[   57.205247][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.232308][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.235188][ T5848] veth1_vlan: entered promiscuous mode
[   57.235433][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.248533][ T5846] veth1_vlan: entered promiscuous mode
[   57.280528][ T5846] veth0_macvtap: entered promiscuous mode
[   57.293337][ T5846] veth1_macvtap: entered promiscuous mode
[   57.302562][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.303788][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.314505][ T5848] veth0_macvtap: entered promiscuous mode
[   57.336784][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.341350][ T5848] veth1_macvtap: entered promiscuous mode
[   57.366907][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.369999][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.377052][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.380431][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.433260][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.438791][ T5910] bridge: RTM_NEWNEIGH with invalid ether address
[   57.442907][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.469629][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.472942][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.480179][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.484956][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.519034][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.521679][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.572287][ T5912] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   57.574848][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   57.582212][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.588925][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.617261][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.619763][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.668572][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.678671][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.768942][ T5926] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.121715][ T3984] IPVS: starting estimator thread 0...
[   58.236595][ T5948] IPVS: using max 64 ests per chain, 153600 per kthread
[   58.351784][ T5952] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   58.690618][ T5973] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   58.702121][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.878855][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.885885][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.986969][ T5844] Bluetooth: hci0: command tx timeout
[   59.066422][ T5844] Bluetooth: hci1: command tx timeout
[   59.146919][ T5844] Bluetooth: hci2: command tx timeout
[   59.334311][ T6006] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   59.349856][ T6006] bridge_slave_0: left allmulticast mode
[   59.352269][ T6006] bridge_slave_0: left promiscuous mode
[   59.355690][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.369480][ T6006] bridge_slave_1: left allmulticast mode
[   59.371590][ T6006] bridge_slave_1: left promiscuous mode
[   59.373698][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.381784][ T6006] bond0: (slave bond_slave_0): Releasing backup interface
[   59.389334][ T6006] bond0: (slave bond_slave_1): Releasing backup interface
[   59.402244][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   59.409432][ T6006] team0: Port device team_slave_0 removed
[   59.420079][ T6006] team0: Port device team_slave_1 removed
[   59.423205][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.426409][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.431418][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.434392][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.440345][ T6006] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.462957][ T6006] netlink: 'syz.0.24': attribute type 10 has an invalid length.
[   59.467851][ T6006] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   59.475064][ T6006] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.981411][ T6022] netlink: 144 bytes leftover after parsing attributes in process `syz.2.28'.
[   60.048002][ T6024] netlink: 'syz.2.30': attribute type 4 has an invalid length.
[   60.132159][  T792] cfg80211: failed to load regulatory.db
[   60.140911][ T6028] netlink: 'syz.2.32': attribute type 4 has an invalid length.
[   60.158145][ T6028] netlink: 'syz.2.32': attribute type 4 has an invalid length.
[   60.172054][ T6032] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET)
[   60.298314][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'.
[   60.449578][ T6041] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   60.500675][ T6041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.36'.
[   60.569512][ T6053] vcan0: tx drop: invalid da for name 0x00000000000000f5
[   60.733090][ T6064] netlink: 'syz.0.41': attribute type 13 has an invalid length.
[   60.740091][ T6064] netlink: 'syz.0.41': attribute type 17 has an invalid length.
[   60.801465][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.812292][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.818287][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811db6e800: rx timeout, send abort
[   60.919210][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   60.922810][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   60.963684][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.066944][ T5236] Bluetooth: hci0: command tx timeout
[   61.146340][ T5236] Bluetooth: hci1: command tx timeout
[   61.226540][ T5236] Bluetooth: hci2: command tx timeout
[   61.318847][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811db6d800: rx timeout, send abort
[   61.321635][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811db6e800: abort rx timeout. Force session deactivation
[   61.430205][ T6109] vcan0: tx drop: invalid sa for name 0x0000000000000002
[   61.494275][ T6114] syz_tun: entered allmulticast mode
[   61.509561][ T6114] dvmrp8: entered allmulticast mode
[   61.528090][ T6114] syz_tun: left allmulticast mode
[   61.531745][ T6114] dvmrp8: left allmulticast mode
[   61.680755][ T6119] netlink: 'syz.2.54': attribute type 15 has an invalid length.
[   61.772131][ T6121] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   61.774597][ T6121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.780549][ T6121] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x11
[   61.821166][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.821628][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811db6d800: abort rx timeout. Force session deactivation
[   61.859651][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.865024][ T6125] sock: sock_set_timeout: `syz.1.57' (pid 6125) tries to set negative timeout
[   61.908441][ T6131] !: renamed from dummy0 (while UP)
[   62.033182][  T792] IPVS: starting estimator thread 0...
[   62.139152][ T6141] IPVS: using max 64 ests per chain, 153600 per kthread
[   62.559848][ T6179] Bluetooth: MGMT ver 1.23
[   62.653196][ T6190] __nla_validate_parse: 8 callbacks suppressed
[   62.653207][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   62.710173][ T6190] netlink: 'syz.0.75': attribute type 4 has an invalid length.
[   62.725268][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'.
[   62.893938][ T6206] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   62.917497][ T6206] team0: Port device dummy0 added
[   63.156142][ T5236] Bluetooth: hci0: command tx timeout
[   63.236023][ T5236] Bluetooth: hci1: command tx timeout
[   63.308137][ T5236] Bluetooth: hci2: command 0x0419 tx timeout
[   63.384802][ T6182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   63.455300][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   63.489066][ T6234] netlink: 224 bytes leftover after parsing attributes in process `syz.1.87'.
[   63.492408][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.87'.
[   63.957629][ T6253] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   64.041531][ T6257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.92'.
[   64.856074][ T6295] gretap1: entered allmulticast mode
[   65.022108][ T6301] netlink: 64 bytes leftover after parsing attributes in process `syz.0.100'.
[   65.198967][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.101'.
[   65.202905][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'.
[   65.212534][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.101'.
[   65.291853][ T6313] Zero length message leads to an empty skb
[   65.328962][ T6316] netlink: 'syz.0.105': attribute type 1 has an invalid length.
[   65.386453][ T5844] Bluetooth: hci2: command 0x0419 tx timeout
[   65.453409][ T6326] v: renamed from ipvlan0
[   65.497689][ T5694] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   65.612603][ T6342] netem: change failed
[   66.356070][ T6339] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   66.358590][ T6339] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   66.381471][ T6339] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   66.383873][ T6339] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   66.411073][ T6339] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   66.413201][ T6339] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   66.445487][ T6377] tc_dump_action: action bad kind
[   67.505434][ T6391] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   67.508361][ T6391] netlink: 'syz.2.114': attribute type 2 has an invalid length.
[   67.511553][ T6391] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   67.516438][ T6391] netlink: 'syz.2.114': attribute type 2 has an invalid length.
[   70.183794][ T6427] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   70.243290][ T6429] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   70.270271][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.298573][ T6429] bond1: (slave veth3): Enslaving as an active interface with a down link
[   70.313502][ T6429] gretap1: entered promiscuous mode
[   70.318496][ T6429] bond1: (slave gretap1): making interface the new active one
[   70.321944][ T6429] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   70.423828][ T6432] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.491332][ T6437] netlink: 'syz.2.127': attribute type 13 has an invalid length.
[   70.494402][ T6437] netlink: 'syz.2.127': attribute type 17 has an invalid length.
[   70.549868][ T6437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.614967][ T6440] __nla_validate_parse: 6 callbacks suppressed
[   70.615004][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'.
[   70.629967][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.654572][ T6440] bridge_slave_1 (unregistering): left allmulticast mode
[   70.656935][ T6440] bridge_slave_1 (unregistering): left promiscuous mode
[   70.659165][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.150083][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.152977][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.570454][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.574168][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.579308][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.582144][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.585350][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.588552][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.591744][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.594398][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.598637][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.679252][ T6453] lo speed is unknown, defaulting to 1000
[   71.682433][ T6453] lo speed is unknown, defaulting to 1000
[   71.688615][ T6453] lo speed is unknown, defaulting to 1000
[   71.693684][ T6453] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.700586][ T6453] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   71.721158][ T6453] lo speed is unknown, defaulting to 1000
[   71.724132][ T6453] lo speed is unknown, defaulting to 1000
[   71.728214][ T6453] lo speed is unknown, defaulting to 1000
[   71.733278][ T6453] netlink: 'syz.2.132': attribute type 12 has an invalid length.
[   73.066572][ T6470] Bluetooth: MGMT ver 1.23
[   73.069381][ T6470] Bluetooth: hci1: too big key_count value 32778
[   73.534732][ T6487] lo speed is unknown, defaulting to 1000
[   74.101651][ T6500] tipc: Invalid UDP bearer configuration
[   74.101696][ T6500] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.919339][ T6506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   74.922477][ T6506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   75.222031][ T6514] lo speed is unknown, defaulting to 1000
[   75.586031][ T6523] syzkaller0: entered promiscuous mode
[   75.587837][ T6523] syzkaller0: entered allmulticast mode
[   76.558489][ T6525] __nla_validate_parse: 46 callbacks suppressed
[   76.558508][ T6525] netlink: 212856 bytes leftover after parsing attributes in process `syz.2.151'.
[   76.660341][ T6531] lo speed is unknown, defaulting to 1000
[   76.752032][ T6536] ieee802154 phy0 wpan0: encryption failed: -22
[   76.754074][ T6536] ieee802154 phy0 wpan0: encryption failed: -22
[   77.618812][ T6543] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   77.621340][ T6543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.157'.
[   77.628201][ T6543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'.
[   78.019359][ T6568] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   78.034449][ T6568] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.099597][ T6572] lo speed is unknown, defaulting to 1000
[   78.250530][ T6572] netlink: 'syz.2.165': attribute type 2 has an invalid length.
[   78.257697][ T6572] netlink: 64 bytes leftover after parsing attributes in process `syz.2.165'.
[   78.261303][ T6572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.165'.
[  132.600176][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.603013][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.028662][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.031195][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  212.585892][   T34] INFO: task kworker/1:3:5888 blocked for more than 143 seconds.
[  212.588500][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  212.591996][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  212.595901][   T34] task:kworker/1:3     state:D stack:23016 pid:5888  tgid:5888  ppid:2      task_flags:0x4208060 flags:0x00004000
[  212.615725][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  212.619621][   T34] Call Trace:
[  212.621018][   T34]  <TASK>
[  212.622163][   T34]  __schedule+0x1798/0x4cc0
[  212.624048][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  212.626255][   T34]  ? __pfx___schedule+0x10/0x10
[  212.628232][   T34]  ? schedule+0x91/0x360
[  212.629940][   T34]  schedule+0x165/0x360
[  212.631603][   T34]  schedule_preempt_disabled+0x13/0x30
[  212.633720][   T34]  __mutex_lock+0x7e6/0x1350
[  212.638116][   T34]  ? __mutex_lock+0x5bb/0x1350
[  212.640036][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  212.642474][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  212.645849][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  212.648118][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  212.650365][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  212.652756][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  212.654964][   T34]  process_scheduled_works+0xae1/0x17b0
[  212.658760][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  212.660966][   T34]  worker_thread+0x8a0/0xda0
[  212.662513][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.664944][   T34]  ? __kthread_parkme+0x7b/0x200
[  212.668389][   T34]  kthread+0x711/0x8a0
[  212.669985][   T34]  ? __pfx_worker_thread+0x10/0x10
[  212.671861][   T34]  ? __pfx_kthread+0x10/0x10
[  212.673385][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.675029][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.677335][   T34]  ? __pfx_kthread+0x10/0x10
[  212.678953][   T34]  ret_from_fork+0x3fc/0x770
[  212.680373][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  212.682064][   T34]  ? __switch_to_asm+0x39/0x70
[  212.683798][   T34]  ? __switch_to_asm+0x33/0x70
[  212.685890][   T34]  ? __pfx_kthread+0x10/0x10
[  212.687745][   T34]  ret_from_fork_asm+0x1a/0x30
[  212.689655][   T34]  </TASK>
[  212.690873][   T34] INFO: task syz.1.108:6328 blocked for more than 143 seconds.
[  212.693765][   T34]       Not tainted syzkaller #0
[  212.695742][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  212.698722][   T34] task:syz.1.108       state:D stack:24104 pid:6328  tgid:6328  ppid:5841   task_flags:0x400040 flags:0x00004004
[  212.702841][   T34] Call Trace:
[  212.703850][   T34]  <TASK>
[  212.704725][   T34]  __schedule+0x1798/0x4cc0
[  212.706840][   T34]  ? __lock_acquire+0xab9/0xd20
[  212.708664][   T34]  ? __pfx___schedule+0x10/0x10
[  212.710186][   T34]  ? schedule+0x91/0x360
[  212.711532][   T34]  schedule+0x165/0x360
[  212.713057][   T34]  schedule_preempt_disabled+0x13/0x30
[  212.714894][   T34]  __mutex_lock+0x7e6/0x1350
[  212.716618][   T34]  ? __mutex_lock+0x5bb/0x1350
[  212.718397][   T34]  ? rfkill_unregister+0xc8/0x220
[  212.720390][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  212.722407][   T34]  ? __pfx_device_del+0x10/0x10
[  212.724371][   T34]  rfkill_unregister+0xc8/0x220
[  212.726437][   T34]  nfc_unregister_device+0x96/0x2a0
[  212.728715][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  212.730797][   T34]  virtual_ncidev_close+0x56/0x90
[  212.732553][   T34]  __fput+0x44c/0xa70
[  212.733862][   T34]  task_work_run+0x1d4/0x260
[  212.735489][   T34]  ? __pfx_task_work_run+0x10/0x10
[  212.737822][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  212.739771][   T34]  exit_to_user_mode_loop+0xec/0x110
[  212.741667][   T34]  do_syscall_64+0x2bd/0x3b0
[  212.743258][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.745006][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.747526][   T34]  ? exc_page_fault+0x9f/0xf0
[  212.749297][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.751271][   T34] RIP: 0033:0x7f9bc158eba9
[  212.752777][   T34] RSP: 002b:00007ffc7fda1518 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  212.756304][   T34] RAX: 0000000000000000 RBX: 00007f9bc17d7da0 RCX: 00007f9bc158eba9
[  212.759061][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  212.761739][   T34] RBP: 00007f9bc17d7da0 R08: 0000000000000174 R09: 000000147fda180f
[  212.764666][   T34] R10: 00007f9bc17d7cb0 R11: 0000000000000246 R12: 000000000001024e
[  212.768376][   T34] R13: 00007f9bc17d6270 R14: ffffffffffffffff R15: 00007ffc7fda1630
[  212.771532][   T34]  </TASK>
[  212.772905][   T34] INFO: task syz.0.109:6339 blocked for more than 143 seconds.
[  212.775245][   T34]       Not tainted syzkaller #0
[  212.777960][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  212.780947][   T34] task:syz.0.109       state:D stack:24344 pid:6339  tgid:6335  ppid:5848   task_flags:0x400140 flags:0x00004006
[  212.785248][   T34] Call Trace:
[  212.786721][   T34]  <TASK>
[  212.787999][   T34]  __schedule+0x1798/0x4cc0
[  212.789662][   T34]  ? __lock_acquire+0xab9/0xd20
[  212.791643][   T34]  ? __lock_acquire+0xab9/0xd20
[  212.793712][   T34]  ? __pfx___schedule+0x10/0x10
[  212.801541][   T34]  ? schedule+0x91/0x360
[  212.803328][   T34]  schedule+0x165/0x360
[  212.804970][   T34]  schedule_preempt_disabled+0x13/0x30
[  212.807277][   T34]  __mutex_lock+0x7e6/0x1350
[  212.809117][   T34]  ? __mutex_lock+0x5bb/0x1350
[  212.811052][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  212.813213][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  212.815275][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.817407][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.819890][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.822482][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  212.824701][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  212.827061][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  212.829405][   T34]  rfkill_set_block+0x1d2/0x440
[  212.831382][   T34]  rfkill_fop_write+0x44b/0x570
[  212.833377][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  212.835732][   T34]  ? security_kernfs_init_security+0x240/0x290
[  212.838218][   T34]  ? rw_verify_area+0x255/0x4d0
[  212.840212][   T34]  ? __lock_acquire+0xab9/0xd20
[  212.842131][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  212.844287][   T34]  vfs_write+0x27e/0xb30
[  212.846876][   T34]  ? __pfx_vfs_write+0x10/0x10
[  212.848837][   T34]  ? __fget_files+0x2a/0x420
[  212.850384][   T34]  ? __fget_files+0x2a/0x420
[  212.852012][   T34]  ? __fget_files+0x3a0/0x420
[  212.853829][   T34]  ? __fget_files+0x2a/0x420
[  212.855419][   T34]  ksys_write+0x145/0x250
[  212.856950][   T34]  ? __pfx_ksys_write+0x10/0x10
[  212.858487][   T34]  ? do_syscall_64+0xbe/0x3b0
[  212.859964][   T34]  do_syscall_64+0xfa/0x3b0
[  212.861563][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.863369][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.865319][   T34]  ? exc_page_fault+0x9f/0xf0
[  212.866896][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.868707][   T34] RIP: 0033:0x7f857b98eba9
[  212.870089][   T34] RSP: 002b:00007f857c87d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  212.873173][   T34] RAX: ffffffffffffffda RBX: 00007f857bbd6090 RCX: 00007f857b98eba9
[  212.877311][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 000000000000000e
[  212.880139][   T34] RBP: 00007f857ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  212.882754][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.885401][   T34] R13: 00007f857bbd6128 R14: 00007f857bbd6090 R15: 00007ffffbafc7a8
[  212.888102][   T34]  </TASK>
[  212.889215][   T34] 
[  212.889215][   T34] Showing all locks held in the system:
[  212.891632][   T34] 1 lock held by khungtaskd/34:
[  212.893168][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  212.896674][   T34] 2 locks held by getty/5673:
[  212.898443][   T34]  #0: ffff8881089120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  212.901778][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  212.906069][   T34] 3 locks held by kworker/1:3/5888:
[  212.908287][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  212.912300][   T34]  #1: ffffc9000471fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  212.916687][   T34]  #2: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  212.920472][   T34] 2 locks held by syz.1.108/6328:
[  212.922242][   T34]  #0: ffff888121428100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  212.925324][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  212.928826][   T34] 2 locks held by syz.0.109/6339:
[  212.930359][   T34]  #0: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  212.933454][   T34]  #1: ffff888121428100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  212.936501][   T34] 3 locks held by syz.2.165/6572:
[  212.938027][   T34]  #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  212.940561][   T34]  #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  212.943287][   T34]  #2: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.946492][   T34] 2 locks held by syz-executor/6577:
[  212.948559][   T34]  #0: ffff88802a2d4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  212.951835][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.955288][   T34] 2 locks held by syz-executor/6578:
[  212.958341][   T34]  #0: ffff88802a2d0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  212.961508][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.964591][   T34] 2 locks held by syz-executor/6583:
[  212.966334][   T34]  #0: ffff888109380118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  212.969490][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.972592][   T34] 2 locks held by syz-executor/6590:
[  212.974367][   T34]  #0: ffff8881216e5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  212.978772][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.982670][   T34] 2 locks held by syz-executor/6592:
[  212.984815][   T34]  #0: ffff888121d31118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  212.989815][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  212.993735][   T34] 2 locks held by syz-executor/6594:
[  212.996224][   T34]  #0: ffff888033851118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  213.000017][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  213.003712][   T34] 2 locks held by syz-executor/6597:
[  213.005951][   T34]  #0: ffff8881130a9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  213.009688][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  213.013402][   T34] 2 locks held by syz-executor/6600:
[  213.015486][   T34]  #0: ffff88811d1d4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  213.019426][   T34]  #1: ffffffff8f812aa8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  213.023309][   T34] 
[  213.024220][   T34] =============================================
[  213.024220][   T34] 
[  213.027611][   T34] NMI backtrace for cpu 0
[  213.027657][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  213.027672][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.027680][   T34] Call Trace:
[  213.027687][   T34]  <TASK>
[  213.027693][   T34]  dump_stack_lvl+0x189/0x250
[  213.027715][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.027730][   T34]  ? __pfx__printk+0x10/0x10
[  213.027756][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  213.027777][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  213.027797][   T34]  ? __pfx__printk+0x10/0x10
[  213.027817][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  213.027841][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  213.027861][   T34]  watchdog+0xf93/0xfe0
[  213.027885][   T34]  ? watchdog+0x1de/0xfe0
[  213.027906][   T34]  kthread+0x711/0x8a0
[  213.027925][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.027940][   T34]  ? __pfx_kthread+0x10/0x10
[  213.027956][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.027969][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.027981][   T34]  ? __pfx_kthread+0x10/0x10
[  213.027996][   T34]  ret_from_fork+0x3fc/0x770
[  213.028011][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.028029][   T34]  ? __switch_to_asm+0x39/0x70
[  213.028044][   T34]  ? __switch_to_asm+0x33/0x70
[  213.028059][   T34]  ? __pfx_kthread+0x10/0x10
[  213.028075][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.028103][   T34]  </TASK>
[  213.028130][   T34] Sending NMI from CPU 0 to CPUs 1:
[  213.081940][    C1] NMI backtrace for cpu 1
[  213.081957][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  213.081970][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.081977][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  213.081997][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  213.082008][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  213.082019][    C1] RAX: c7c5621e467f5100 RBX: ffffffff819683f8 RCX: c7c5621e467f5100
[  213.082028][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9a32 RDI: ffffffff8be33880
[  213.082035][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  213.082045][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  213.082053][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  213.082061][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  213.082070][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.082078][    C1] CR2: 00005619daf1e528 CR3: 000000010f492000 CR4: 00000000000006f0
[  213.082110][    C1] Call Trace:
[  213.082118][    C1]  <TASK>
[  213.082123][    C1]  default_idle+0x13/0x20
[  213.082139][    C1]  default_idle_call+0x74/0xb0
[  213.082154][    C1]  do_idle+0x1e8/0x510
[  213.082170][    C1]  ? __pfx_do_idle+0x10/0x10
[  213.082226][    C1]  cpu_startup_entry+0x44/0x60
[  213.082238][    C1]  start_secondary+0x101/0x110
[  213.082260][    C1]  common_startup_64+0x13e/0x147
[  213.082283][    C1]  </TASK>
[  213.082918][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  213.145594][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  213.148601][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.151898][   T34] Call Trace:
[  213.153054][   T34]  <TASK>
[  213.154009][   T34]  dump_stack_lvl+0x99/0x250
[  213.155487][   T34]  ? __asan_memcpy+0x40/0x70
[  213.157091][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.158805][   T34]  ? __pfx__printk+0x10/0x10
[  213.160315][   T34]  vpanic+0x281/0x750
[  213.161617][   T34]  ? __pfx_vpanic+0x10/0x10
[  213.163315][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  213.165540][   T34]  ? preempt_schedule+0xae/0xc0
[  213.167104][   T34]  ? preempt_schedule_common+0x83/0xd0
[  213.168820][   T34]  panic+0xb9/0xc0
[  213.170046][   T34]  ? __pfx_panic+0x10/0x10
[  213.171764][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  213.173766][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  213.176145][   T34]  watchdog+0xfd2/0xfe0
[  213.177592][   T34]  ? watchdog+0x1de/0xfe0
[  213.179401][   T34]  kthread+0x711/0x8a0
[  213.181063][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.182906][   T34]  ? __pfx_kthread+0x10/0x10
[  213.184388][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.186006][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.187647][   T34]  ? __pfx_kthread+0x10/0x10
[  213.189401][   T34]  ret_from_fork+0x3fc/0x770
[  213.190966][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.192607][   T34]  ? __switch_to_asm+0x39/0x70
[  213.194142][   T34]  ? __switch_to_asm+0x33/0x70
[  213.195661][   T34]  ? __pfx_kthread+0x10/0x10
[  213.197124][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.198675][   T34]  </TASK>
[  213.200279][   T34] Kernel Offset: disabled
[  213.201815][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:24:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e699a RBX=ffffffff822e691a RCX=ffff8880232b1cc0 RDX=0000000000000000
RSI=0000000000000002 RDI=0000000000000000 RBP=ffffea000000000f RSP=ffffc90002f2f550
R8 =0000000000000000 R9 =ffffffff822e691a R10=dffffc0000000000 R11=fffff940008d5821
R12=dffffc0000000000 R13=1ffff1100bfff50c R14=000000000011ab04 R15=ffff88805fffa860
RIP=ffffffff81bfb338 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fba63f07d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fba633a76c3 00007fba633a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=000998030785f4d8 0800099000000017 XMM07=098c034400000000 0328080009800309
XMM08=8004068003068004 01a0030000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc9000068f6b0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005619daf1e528 CR3=0000000020afa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
