last executing test programs:

19.44401506s ago: executing program 0 (id=80):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x20, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000009010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)

19.173457016s ago: executing program 0 (id=84):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r0 = socket$l2tp(0x2, 0x2, 0x73)
getpeername$l2tp(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0)) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="0aff651df31cd774", 0x43}], 0x0, 0x0, 0x0, 0x10}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) (async)
sendto$inet6(r5, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4000, 0x1, @empty, 0x81}, 0x1c) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', <r6=>0x0, 0x4, 0x0, 0x6, 0x80000000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x5d2a2bfcb890d961, 0x0, 0x4}}) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={<r7=>0x0}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001100300029bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="001200000080010008000500", @ANYRES32=r6, @ANYBLOB="c1ff5ec8b87981000000575b11b3ef17d4520000000000", @ANYRES32=r7, @ANYBLOB="180019801400040087de51b01152d97ff4bdd7bd240488ac"], 0x48}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004980003c0000000000069078ac141400ac1e00018307d27f00000194040000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00'/12], 0x0)

19.095421448s ago: executing program 0 (id=87):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffffffc, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000500)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r6, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

19.095050079s ago: executing program 0 (id=88):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18)
r5 = socket(0x1, 0x2, 0x0)
connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000f9741a4d38db9da24068784b79f61208394b8d37ba5ba108a9473b0458a885970ddef94d8d9baae5f9e40edc3920e67dd58e86957ce8a4d68554d4ef0a606896e30e07766126b6be0d"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000300000000000000000000000000000a2c000000050a010200000000000e0000020000000900030073797a3a000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a320000"], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x4000004)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61e}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x518}], 0x54)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50000000020701020000000000000000000000000c00024000000000000000090c00030400000000000000910c00064000000000000000070800054000000001080005400000000208000540000000032bbc732f33479eea46b7af42f87932a5a577901ba30a46963fc7be338cbef6a295f4fa8f656ecc9ee6f291ef5dfd3dcffa79c53d0c866f4f1dfd4b5e14025270244ee1573e6bf36a4e371f913d8b506b655214e7896fda763a42da08a0263e376ecad3d6512a49fc219b758de1df80627b"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, 0x0, 0x25, 0x2, @void}, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x40080)

18.855586095s ago: executing program 2 (id=93):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd700000000000020000000800a000b509000008009f0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000003840)={&(0x7f0000003640)={0x14, r3, 0xb11, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29c1}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x33d}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x7fff}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r1, @ANYBLOB="01042bbd7000fddbdf251800000008000300", @ANYRES32, @ANYBLOB="ec00308024000300592c45819efd8db4bf966f84451627b2a4a98d0beb82d802123eec98ff95e16a240003004d98b61a4a5c29bac63e5a472dc234cb42bdeef928fb24d1c92bdf0128a3f0ce14000400b933907288c98ff2127ab387add7c62724000300e04c9937188fed9ba953521a44a84489437907b816b0343ec360b4aa18fe1d2f3000018014000380080002000200000006000300a3aa0000080001000400000008000100010000000800040002000000070004001b939fcb42a73e000000000000000000240003002e6f08b2da3e58eceeea0c9e63ff5b745c0f95c84c43de11f6aa5479dd337e0b08000300", @ANYRES32=r6], 0x110}}, 0x4004000)

18.805172315s ago: executing program 2 (id=94):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x21}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40044000)
ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000140)="da308458e9e33538d0f0c13c0fc0e5b7eb8d6175c5595b8cdcdaa6689e53c1b927681e813ed0b61d72bbf9056bd4bff5d1cd10e37a50e524648364883d1ecd4ae3b7f82aedf3")
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044804}, 0x800)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', <r4=>0x0, 0x700, 0x8, 0x6, 0x63888d2, {{0x21, 0x4, 0x1, 0x29, 0x84, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x1b, 0x5a, [@broadcast, @local, @remote, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x68, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@local, 0x9}, {@empty}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x7}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x1, [0x5, 0xb8, 0x6]}, @generic={0x82, 0x9, "b280b2a65f54eb"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r5=>0x0, 0x40, 0x80, 0x3, 0x0, {{0xc, 0x4, 0x3, 0x0, 0x30, 0x64, 0x0, 0xfe, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop, @lsrr={0x83, 0x1b, 0xcc, [@local, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000005c0)={@rand_addr, @loopback, <r7=>0x0}, &(0x7f0000000600)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'veth0_to_hsr\x00', <r8=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000680)={@rand_addr, @local, <r9=>0x0}, &(0x7f00000006c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r10=>0x0, 0x1, 0x40, 0xffff, 0x10000, {{0x8, 0x4, 0x3, 0x29, 0x20, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0xb, 0xc8, [@remote, @empty]}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=<r11=>0x0, &(0x7f00000007c0)=0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000800)={'erspan0\x00', <r12=>0x0, 0x7, 0x8000, 0x10001, 0xd, {{0xe, 0x4, 0x0, 0x24, 0x38, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010101, {[@timestamp={0x44, 0x8, 0x2c, 0x0, 0x5, [0x2]}, @timestamp_prespec={0x44, 0x1c, 0x7, 0x3, 0x6, [{@empty, 0x1}, {@remote, 0x80000001}, {@empty, 0x7}]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000900)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', <r14=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a80)={'erspan0\x00', &(0x7f0000000980)={'syztnl1\x00', <r15=>0x0, 0x10, 0x700, 0x6000, 0x0, {{0x2d, 0x4, 0x1, 0x5, 0xb4, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@end, @rr={0x7, 0xf, 0x74, [@remote, @local, @loopback]}, @lsrr={0x83, 0xb, 0xc2, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x2b, 0x7f, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty, @multicast1, @private=0xa010100, @remote, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x5, 0x10, "e3a7efe48f633cdff20aa7b6508a"}, {0x2, 0xe, "0779ada9db21f488901b78b8"}, {0x0, 0xe, "dc8c8f58b43ec25f0585727d"}, {0x0, 0xd, "21072dd4dd719995e7cbf3"}]}, @cipso={0x86, 0x18, 0x2, [{0x2, 0x4, "adf2"}, {0x6, 0xe, "678fbb86488543817700abab"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', <r16=>0x0, 0x29, 0x2, 0x1, 0x9, 0x6, @private2, @rand_addr=' \x01\x00', 0x10, 0x10ff87f8f9c7a21b, 0x0, 0x10001}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', <r18=>0x0, 0x2f, 0x9, 0x10, 0x0, 0x1, @private1, @remote, 0x80e0, 0x8000, 0x3}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r19=>0x0}}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d80)={<r20=>0x0, @empty, @local}, &(0x7f0000000dc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'syztnl0\x00', <r21=>0x0, 0x1, 0x1, 0x0, 0x5672, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x66, 0x0, 0x35, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_addr={0x44, 0x3c, 0x39, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4}, {@broadcast, 0xc000000}, {@local, 0x4}, {@private=0xa010100, 0x7}, {@remote, 0x784ebc8c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}, @ra={0x94, 0x4}]}}}}})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000ec0)=<r22=>0x0, &(0x7f0000000f00)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000f40)=<r23=>0x0, &(0x7f0000000f80)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'ip6tnl0\x00', &(0x7f0000000fc0)={'syztnl2\x00', <r24=>0x0, 0x6, 0x6, 0x80, 0xd0, 0x43, @private1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8, 0x1, 0x40, 0x80000000}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000019c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001080)={0x8f4, r2, 0x820, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x3, 0xc}, {0x9, 0x9, 0x1d, 0x5}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x1, 0xf8, 0x8}, {0x5, 0x1, 0xf7, 0x6}, {0x0, 0x7, 0x5, 0x5}, {0x8e, 0x1, 0xed, 0x33}, {0x7fff, 0x6, 0x10, 0x2}, {0x351, 0x14, 0x7, 0x2}, {0x9, 0x6, 0x5, 0xb}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd9c5}}}]}}, {{0x8, 0x1, r6}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8dd}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x1, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r24}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x804}, 0x8050)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b40)={@map, r1, 0x13, 0x8}, 0x20)

18.804564445s ago: executing program 2 (id=95):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="11000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB="0100000000400000000000000e0000b50ed5a800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ad632f6e5dd0169b00000000000000000000000000000000000000db5fbfe041c8b583059f9865ff71a60a67c38dcbfbd547e099d08c0fdfc720817b16b168edc57fd686279ed017f4458980174ea85d8915edf0d5715915fa96e1c1e84358d0065e2d9dbad39d97e2e134f76c24b9172cdb6dd5ebbbcfcf44fbbf423eef4aed05191f7de780067aabbcf13e355713a2abbb5267415f6f5c8478000000"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$packet(0x11, 0x2, 0x300)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000440)="e03f03a1adb22afdffffff6c776394090324fc60100000000a00680200053582c137153e37000c0a80fc0b1000f8350fe5ff707bf665401822d265dd3ba61fb3a0ad91cf01fb", 0x46}, {&(0x7f0000000100)="0084be77547aa48944c089987a21d9f3df43", 0x12}, {&(0x7f0000000900)="a354dc02c20ca69d0495752098996f007332e08bb2aead517cb072a4be59c15328dbc1f6672ec3ebafd92742f9fadd1da6eb591aa3b9f2bb4ea16277c30afd44e5f196793178b5e81326df88df6da310d192e81680e1647c0488a7aeea991459394f0a730c19964f5a09d72742a5b860f5d09f7359e43524a6caa93c4bb06975d5f41718e29a599f8893811be0252c4f5d5339a32d0eae74017b4f68180f4507a2efed1f73fd932550296aa5e60e6b6d18fd7b1c568bffde46c120cbd87e03711bc804e66aef72c92fdebe0a77ccd21fd23980c21f38", 0xd6}, {&(0x7f0000000a00)="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", 0xfd}, {&(0x7f0000000180)="6dce08f87de6f29db9ba873d", 0xc}, {&(0x7f00000001c0)="d73376eef2db145c3135be4f4755e90cb250007671fe9b908c5d78932d09fbafda0a027e75678e86", 0x28}, {&(0x7f0000000280)="a7c4850cf88b0cfa4ddff335ec931f", 0xf}, {&(0x7f0000000340)="8d9225b778f0f5f35c863587fa19a72de50c510f5e83aa79f89152b07be2239cb843db8d6d7b132cb341615a202c66390d00594249dcead3e609044baf070fdcc26dd27da7a36ee8df5303c98106be11ae323f7af3fe74205780ce62848dd7e8b5d327", 0x63}, {&(0x7f00000002c0)}], 0x9}, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4)
close(r5)
pipe(&(0x7f0000000140))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000000005000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

18.714948522s ago: executing program 0 (id=96):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x1d, 0x2, 0x7)
getsockname$packet(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000040000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113e9f02000000851800000200000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
close(r4)
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
syz_genetlink_get_family_id$ethtool(0x0, r2)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0992000000", @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

18.663188424s ago: executing program 2 (id=98):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190001090000000000000000021800000000fd000000000008000100ac141400080005000a0101020c00168008000300e0000002060015200600000008000400", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12, 0x21eae}}, 0x20}}, 0x0)

18.575000069s ago: executing program 0 (id=100):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
clock_gettime(0x0, &(0x7f0000000200))
ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

18.402526226s ago: executing program 2 (id=102):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4, 0x0, 0x5}, 0x18) (async)
r5 = socket(0x1, 0x2, 0x0)
connect$rose(r5, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000f9741a4d38db9da24068784b79f61208394b8d37ba5ba108a9473b0458a885970ddef94d8d9baae5f9e40edc3920e67dd58e86957ce8a4d68554d4ef0a606896e30e07766126b6be0d"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000300000000000000000000000000000a2c000000050a010200000000000e0000020000000900030073797a3a000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (async)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a320000"], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x4000004) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61e}, @in6={0xa, 0x4e20, 0x9, @loopback, 0x1}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x518}], 0x54) (async)
sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x50, 0x2, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x191}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, 0x0, 0x25, 0x2, @void}, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x40080)

18.280336833s ago: executing program 2 (id=106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20880008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r3)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000b40)={0x0, 0x3, {0x7fffffffffffffff, @struct={0x2, 0x7}, 0x0, 0x8, 0x4, 0x1, 0x5, 0x5, 0x40, @struct={0x65b5, 0x1}, 0x8, 0x800, [0x5, 0x5, 0x9, 0x1c21, 0x7fffffff, 0xde]}, {0x80000000, @struct={0x2, 0x2}, <r10=>0x0, 0x223, 0xa, 0x5, 0xfffffffffffffff9, 0xfff, 0x68, @usage=0xf7db, 0x7, 0x1, [0x5, 0xf, 0x6, 0x2, 0x8000000000000001, 0x1]}, {0x25, @struct={0x8, 0x941}, 0x0, 0x5, 0x7, 0xfffffffffffff2b0, 0x9, 0xfff, 0xca, @usage=0x5ecd, 0x2, 0x0, [0xa1, 0x1, 0x0, 0x80000001, 0xcd, 0x4]}, {0x8, 0x0, 0x5d}})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r9}, {@val={r10}, @actul_num={@val=0x2d, 0x1, 0x67}}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x170bd27, 0x0, {0xa, 0x80, 0x80, 0x1, 0xfd, 0x0, 0xfd, 0xb, 0x2100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x200048d4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x1}, 0x18)
r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r12, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)

15.805149465s ago: executing program 1 (id=117):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060040000004000008000500", @ANYRES32=r2], 0x50}}, 0x2)

15.803924718s ago: executing program 1 (id=118):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="5f8267877507881e48e5d9749b8c0d6d8b79ae743882c247391a8361791ffacc22f4a8b0769e8c449c55455192e7b03eb9feb2904dcf5d7b1d787e02fbd328c580eeb7c2541bcf58f31c15286ffb97c2faaef387262ebe7e1a5da4e47501411a37896a132f58ed9e6f6286f27485faeecf4ee0c96c34229ba908c69ee16b10e3372e9ce3a2e922e825c31295e1ed5f1aa88153a27174f22b08fff10aaa32980c1cda22bcea9b3fdae6c7a312417bb260d067971283e997f6f1452817c7f5a63b5efce674fe99187b7faa697ba97e8594b4da9f738b1102dafcd62c3c2be0936cbe0f336ac6f3445dbf21010f", @ANYBLOB="9bbb75a44b2d6b4bc02d9c5df04aa2813def847df44d7f4180f243bc0fcfa3f63e5e03c0ba4b57f078a08f5f0f8f481816867419e1c1c13988d232b179f90b0de8e05165222ebf6f5afe684c074ea622c2f9220cb38f063e0f9ab4238f41c54a27130cecc70f23e49311839ca729d03033414f6390aa56da497a6bb361c71bf873cb186fe01f6e95a53976ee228e7ecd0a7331ede0115454c7aec925cd62d64712f1a4a4e5ae47b693161361c3ddab"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="4e93fce8468942734784feeb2b1a0d697ab72fdb565283861639ae1edf1e3f270599d885de53803506f6ec5879781564059d6a70aa71323638e341bc99c612adae604f50ec9995a163a923f581b1636eae4df022344951925e30b389b4146a94aa95a39fa12875b6b9c8b8ea1579a9b323d870d56fe3753cf7e1a4a87b284ec4bffd2c1874196b64d5bdba1b9d4d0e3242b53d65d390a3dd405eb9a994c1dbe855a215096a5e", @ANYRES16=r1, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0) (async, rerun: 32)
r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r13, @ANYRES32=r10, @ANYRES16=r13], 0x10) (async, rerun: 32)
r14 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 32)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000004202003c0012800c0001006d6163766c616e002c0002801c00058018000400"], 0x5c}, 0x1, 0x4801000000000000}, 0x0) (async, rerun: 64)
connect$bt_rfcomm(r15, &(0x7f0000000280)={0x1f, @any, 0x4}, 0xa) (async, rerun: 64)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000240)={0x3, 0x8, 0x9f, &(0x7f0000000540)=""/159}) (async, rerun: 64)
accept4(r14, 0x0, 0x0, 0x80000) (async, rerun: 64)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

15.674008204s ago: executing program 1 (id=119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8e95479fe86e180000000200000000000008000000000000000000000000814731b44f5afeab40567fe428804634981f0a4c35e7f5feff8c73117f21b13b0443fc6e1e6b710ddad3d333a87f92"], &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a008020140000040005"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x2, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0x0, 0xfc}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

15.605514573s ago: executing program 1 (id=120):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x64, 0x0, &(0x7f0000000600))
close(r2)
splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000140))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0129a388d867142172000600000008006900543d08720c6161e18b206002c8fc6e4781aab27f422e77fa812b6a5701d322081b79e9ff5ea5f2f875ba0f6de1198cbb0cae1ce4f8d594b1d7750c13969154749c161715a75c45b6bdec6d097a", @ANYRES32=r7, @ANYBLOB="080005000b000000"], 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000000084a005670000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)

15.505662253s ago: executing program 1 (id=121):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x20, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000040010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)

15.365753847s ago: executing program 1 (id=122):
r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @null, 0x0, [@remote, @remote, @null, @rose, @bcast, @null]}, &(0x7f00000000c0)=0x40, 0x81000)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
clock_gettime(0x0, &(0x7f0000000200))
nanosleep(&(0x7f0000000100), &(0x7f0000000140))
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

2.985876139s ago: executing program 32 (id=100):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
clock_gettime(0x0, &(0x7f0000000200))
ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

2.945651366s ago: executing program 33 (id=106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
sendmsg$NFC_CMD_GET_SE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20880008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r3)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000b40)={0x0, 0x3, {0x7fffffffffffffff, @struct={0x2, 0x7}, 0x0, 0x8, 0x4, 0x1, 0x5, 0x5, 0x40, @struct={0x65b5, 0x1}, 0x8, 0x800, [0x5, 0x5, 0x9, 0x1c21, 0x7fffffff, 0xde]}, {0x80000000, @struct={0x2, 0x2}, <r10=>0x0, 0x223, 0xa, 0x5, 0xfffffffffffffff9, 0xfff, 0x68, @usage=0xf7db, 0x7, 0x1, [0x5, 0xf, 0x6, 0x2, 0x8000000000000001, 0x1]}, {0x25, @struct={0x8, 0x941}, 0x0, 0x5, 0x7, 0xfffffffffffff2b0, 0x9, 0xfff, 0xca, @usage=0x5ecd, 0x2, 0x0, [0xa1, 0x1, 0x0, 0x80000001, 0xcd, 0x4]}, {0x8, 0x0, 0x5d}})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r9}, {@val={r10}, @actul_num={@val=0x2d, 0x1, 0x67}}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x170bd27, 0x0, {0xa, 0x80, 0x80, 0x1, 0xfd, 0x0, 0xfd, 0xb, 0x2100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x200048d4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x1}, 0x18)
r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r12, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)

0s ago: executing program 34 (id=122):
r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @null, 0x0, [@remote, @remote, @null, @rose, @bcast, @null]}, &(0x7f00000000c0)=0x40, 0x81000)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
clock_gettime(0x0, &(0x7f0000000200))
nanosleep(&(0x7f0000000100), &(0x7f0000000140))
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57527' (ED25519) to the list of known hosts.
syzkaller login: [   49.645879][ T5816] cgroup: Unknown subsys name 'net'
[   49.767832][ T5816] cgroup: Unknown subsys name 'cpuset'
[   49.771861][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.324923][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.910952][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.913890][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.916703][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.919462][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.922040][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.985696][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.989414][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.992723][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.996059][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.999521][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.022834][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.026879][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.030302][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.034054][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.037635][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.133870][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.249932][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.252765][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.255106][ T5847] bridge_slave_0: entered allmulticast mode
[   55.258375][ T5847] bridge_slave_0: entered promiscuous mode
[   55.266177][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.274342][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.276945][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.279372][ T5847] bridge_slave_1: entered allmulticast mode
[   55.282452][ T5847] bridge_slave_1: entered promiscuous mode
[   55.318447][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.323449][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.378550][ T5847] team0: Port device team_slave_0 added
[   55.392844][ T5847] team0: Port device team_slave_1 added
[   55.404410][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.407785][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.410316][ T5853] bridge_slave_0: entered allmulticast mode
[   55.413164][ T5853] bridge_slave_0: entered promiscuous mode
[   55.423079][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   55.431327][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.433769][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.436378][ T5853] bridge_slave_1: entered allmulticast mode
[   55.439204][ T5853] bridge_slave_1: entered promiscuous mode
[   55.450297][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.452931][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.461536][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.466642][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.469113][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.478169][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.513895][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.522591][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.557004][ T5847] hsr_slave_0: entered promiscuous mode
[   55.559548][ T5847] hsr_slave_1: entered promiscuous mode
[   55.574208][ T5853] team0: Port device team_slave_0 added
[   55.592583][ T5853] team0: Port device team_slave_1 added
[   55.601764][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.604594][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.607822][ T5856] bridge_slave_0: entered allmulticast mode
[   55.611427][ T5856] bridge_slave_0: entered promiscuous mode
[   55.624990][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.627864][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.630380][ T5856] bridge_slave_1: entered allmulticast mode
[   55.633295][ T5856] bridge_slave_1: entered promiscuous mode
[   55.645217][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.648231][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.657090][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.684351][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.686848][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.696024][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.719962][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.735442][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.772324][ T5853] hsr_slave_0: entered promiscuous mode
[   55.774846][ T5853] hsr_slave_1: entered promiscuous mode
[   55.778272][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   55.780330][ T5853] Cannot create hsr debugfs directory
[   55.801130][ T5856] team0: Port device team_slave_0 added
[   55.813106][ T5856] team0: Port device team_slave_1 added
[   55.874172][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.877342][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.888572][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.898927][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.901650][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.911258][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.968785][ T5856] hsr_slave_0: entered promiscuous mode
[   55.971257][ T5856] hsr_slave_1: entered promiscuous mode
[   55.973896][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   55.977056][ T5856] Cannot create hsr debugfs directory
[   56.022429][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.031271][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.055617][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.073518][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.151400][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.168050][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.176502][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.182946][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.234664][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.243646][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.250138][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.265523][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.288803][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.313328][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.319710][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.322263][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.343089][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.345755][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.371403][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.403752][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.418438][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.421034][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.426551][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.429018][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.480293][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.503796][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   56.516079][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.518492][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.528682][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.531211][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.559889][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.563288][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.575238][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.600252][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.658260][ T5847] veth0_vlan: entered promiscuous mode
[   56.677726][ T5847] veth1_vlan: entered promiscuous mode
[   56.680392][ T5853] veth0_vlan: entered promiscuous mode
[   56.690095][ T5853] veth1_vlan: entered promiscuous mode
[   56.712076][ T5847] veth0_macvtap: entered promiscuous mode
[   56.718317][ T5847] veth1_macvtap: entered promiscuous mode
[   56.728506][ T5853] veth0_macvtap: entered promiscuous mode
[   56.737211][ T5853] veth1_macvtap: entered promiscuous mode
[   56.741370][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.749156][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.760332][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.773006][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.777272][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.783052][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.793260][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.799727][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.816788][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.849497][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.864121][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.869241][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.881054][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.884600][ T5856] veth0_vlan: entered promiscuous mode
[   56.899972][ T5856] veth1_vlan: entered promiscuous mode
[   56.905853][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.912046][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.945898][   T54] Bluetooth: hci0: command tx timeout
[   56.949111][ T1930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.953065][ T1930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.976299][ T5856] veth0_macvtap: entered promiscuous mode
[   56.983114][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.986118][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.991153][ T5856] veth1_macvtap: entered promiscuous mode
[   57.000855][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.010591][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.019798][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.024263][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.027368][   T54] Bluetooth: hci1: command tx timeout
[   57.042229][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.071635][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.106426][   T54] Bluetooth: hci2: command tx timeout
[   57.109383][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.113469][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.130827][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.268170][ T5924] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.4'.
[   57.312898][ T5924] netlink: 'syz.2.4': attribute type 10 has an invalid length.
[   57.320357][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.323218][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.333213][ T5924] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   57.380728][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.383314][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.483671][ T5941] bridge_slave_0: left allmulticast mode
[   57.489134][ T5941] bridge_slave_0: left promiscuous mode
[   57.491632][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.508632][ T5941] bridge_slave_1: left allmulticast mode
[   57.512106][ T5941] bridge_slave_1: left promiscuous mode
[   57.516029][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.538213][ T5941] bond0: (slave bond_slave_0): Releasing backup interface
[   57.557180][ T5941] bond0: (slave bond_slave_1): Releasing backup interface
[   57.595590][ T5941] team0: Port device team_slave_0 removed
[   57.627348][ T5941] team0: Port device team_slave_1 removed
[   57.629806][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.632385][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.671153][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.673670][ T5941] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.678913][ T5964] ieee802154 phy0 wpan0: encryption failed: -22
[   57.763930][ T5941] team0: Mode changed to "loadbalance"
[   57.789470][ T5966] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.844752][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.890094][ T5966] netlink: 'syz.1.9': attribute type 10 has an invalid length.
[   57.893150][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'.
[   57.912248][ T5966] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.062569][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.065479][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.080276][ T5999] netlink: 'syz.1.15': attribute type 1 has an invalid length.
[   58.196692][ T6000] Zero length message leads to an empty skb
[   58.198740][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.204783][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.289757][ T5877] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.293275][ T5877] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.309163][ T5877] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.318583][ T5877] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.474648][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.507012][ T6018] Bluetooth: MGMT ver 1.23
[   58.584717][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'.
[   58.586519][ T6020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.594512][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.622892][ T6022] tipc: Started in network mode
[   58.625505][ T6022] tipc: Node identity 4a4131719f6a, cluster identity 4711
[   58.628172][ T6022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.631676][ T6023] syzkaller0: entered promiscuous mode
[   58.634289][ T6023] syzkaller0: entered allmulticast mode
[   58.660227][ T6021] tipc: Resetting bearer <eth:syzkaller0>
[   58.675732][ T6021] tipc: Disabling bearer <eth:syzkaller0>
[   59.025754][   T54] Bluetooth: hci0: command tx timeout
[   59.105590][   T54] Bluetooth: hci1: command tx timeout
[   59.185592][   T54] Bluetooth: hci2: command tx timeout
[   59.667083][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.670858][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.673892][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.678651][ T6044] hsr_slave_0: left promiscuous mode
[   59.681374][ T6044] hsr_slave_1: left promiscuous mode
[   59.690908][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.693974][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.767119][ T6020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.836671][ T6020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.912670][ T6020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.984824][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.999226][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.011807][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.021537][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.082246][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.085174][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.130545][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.138038][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.189181][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.192033][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.195033][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.198376][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.273439][ T6053] netlink: 'syz.1.30': attribute type 10 has an invalid length.
[   60.277481][ T6052] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   60.491782][ T6074] bond0: (slave wlan1): Releasing backup interface
[   60.681535][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'.
[   60.730223][ T6093] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET)
[   60.871929][ T6099] netlink: 128 bytes leftover after parsing attributes in process `syz.1.39'.
[   60.881895][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.883965][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'.
[   60.885565][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.971205][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.974409][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.983144][ T6104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.105469][   T54] Bluetooth: hci0: command tx timeout
[   61.195600][   T54] Bluetooth: hci1: command tx timeout
[   61.265473][   T54] Bluetooth: hci2: command tx timeout
[   61.579657][ T6127] netlink: 72 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.688894][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.691934][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.706290][   T10] cfg80211: failed to load regulatory.db
[   61.837709][ T6139] netlink: 'syz.2.48': attribute type 10 has an invalid length.
[   61.959357][ T6172] netlink: 'syz.1.53': attribute type 13 has an invalid length.
[   61.969183][ T6175] netlink: 'syz.2.55': attribute type 12 has an invalid length.
[   61.971241][ T6172] netlink: 'syz.1.53': attribute type 17 has an invalid length.
[   61.971790][ T6175] netlink: 'syz.2.55': attribute type 29 has an invalid length.
[   62.034161][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.038979][ T6172] 8021q: adding VLAN 0 to HW filter on device team0
[   62.044224][ T6172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.179661][ T6192] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   62.395081][ T6205] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   62.433428][ T6201] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   62.566466][ T6210] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[   62.691396][ T6210] __nla_validate_parse: 6 callbacks suppressed
[   62.691408][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.61'.
[   63.099226][ T6243] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.67'.
[   63.106390][ T6243] netlink: 'syz.2.67': attribute type 10 has an invalid length.
[   63.191036][   T54] Bluetooth: hci0: command tx timeout
[   63.265559][   T54] Bluetooth: hci1: command tx timeout
[   63.324177][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.328016][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.345521][   T54] Bluetooth: hci2: command tx timeout
[   63.502081][ T6272] netlink: 32 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.508319][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.508368][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.541747][ T6272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.678818][ T6279] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   63.708219][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   63.778865][ T6281] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.843562][ T6286] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   63.857199][ T6286] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.865093][ T6286] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   63.915432][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   63.997263][ T6299] bridge_slave_0: left allmulticast mode
[   63.999696][ T6299] bridge_slave_0: left promiscuous mode
[   64.002169][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.022757][ T6299] bridge_slave_1: left allmulticast mode
[   64.025163][ T6299] bridge_slave_1: left promiscuous mode
[   64.032217][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.041414][ T6299] bond0: (slave bond_slave_0): Releasing backup interface
[   64.051008][ T6299] bond0: (slave bond_slave_1): Releasing backup interface
[   64.058900][ T6299] team0: Port device team_slave_0 removed
[   64.069647][ T6299] team0: Port device team_slave_1 removed
[   64.072486][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.087191][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.093640][ T6302] bond0: (slave dummy0): Releasing backup interface
[   64.099526][ T6302] bridge_slave_0: left allmulticast mode
[   64.102403][ T6302] bridge_slave_0: left promiscuous mode
[   64.105097][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.114914][ T6302] bridge_slave_1: left allmulticast mode
[   64.117815][ T6302] bridge_slave_1: left promiscuous mode
[   64.120635][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.133091][ T6302] bond0: (slave bond_slave_0): Releasing backup interface
[   64.144064][ T6302] bond0: (slave bond_slave_1): Releasing backup interface
[   64.155118][ T6302] team0: Port device team_slave_0 removed
[   64.161086][ T6302] team0: Port device team_slave_1 removed
[   64.164235][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.170997][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.177766][ T6302] bond1: (slave wlan0): Releasing active interface
[   64.202942][ T6302] syz.2.82 (6302) used greatest stack depth: 19904 bytes left
[   64.241417][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'.
[   64.346536][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   64.561089][ T6354] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   64.564591][ T6354] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   64.957451][ T6378] netlink: 'syz.2.98': attribute type 10 has an invalid length.
[   65.132648][ T6416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.072264][ T6429] netlink: 'syz.1.108': attribute type 9 has an invalid length.
[   66.130972][ T6430] netlink: 'syz.1.108': attribute type 29 has an invalid length.
[   66.289797][ T6432] netlink: 'syz.1.109': attribute type 10 has an invalid length.
[   66.539988][ T6452] netlink: 'syz.1.114': attribute type 10 has an invalid length.
[   66.714936][ T1088] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   66.724872][ T6462] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.728669][ T6462] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   67.265416][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.265463][ T6424] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   67.270402][ T6424] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   67.573401][ T6467] tipc: Started in network mode
[   67.576358][ T6467] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   67.579991][ T6467] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   67.583182][ T6467] tipc: Enabled bearer <udp:syz0>, priority 10
[   68.163737][ T6424] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   68.165925][ T6424] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   68.170555][ T6424] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   68.172655][ T6424] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   68.696332][   T10] tipc: Node number set to 1
[   71.109568][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.112083][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.548219][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.550947][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.988137][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.990624][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  213.185678][   T34] INFO: task kworker/0:2:5259 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  213.188721][   T34]       Not tainted syzkaller #0
[  213.191321][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.195171][   T34] task:kworker/0:2     state:D stack:24360 pid:5259  tgid:5259  ppid:2      task_flags:0x4208060 flags:0x00004000
[  213.200320][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  213.203102][   T34] Call Trace:
[  213.204524][   T34]  <TASK>
[  213.206561][   T34]  __schedule+0x1798/0x4cc0
[  213.208544][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  213.210794][   T34]  ? __pfx___schedule+0x10/0x10
[  213.212849][   T34]  ? schedule+0x91/0x360
[  213.214677][   T34]  schedule+0x165/0x360
[  213.216585][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.218376][   T34]  __mutex_lock+0x7e6/0x1350
[  213.220192][   T34]  ? __mutex_lock+0x5bb/0x1350
[  213.222195][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  213.224546][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.226973][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  213.229050][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  213.231114][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  213.233368][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  213.235695][   T34]  process_scheduled_works+0xae1/0x17b0
[  213.237690][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  213.239712][   T34]  worker_thread+0x8a0/0xda0
[  213.241322][   T34]  kthread+0x711/0x8a0
[  213.243042][   T34]  ? __pfx_worker_thread+0x10/0x10
[  213.245212][   T34]  ? __pfx_kthread+0x10/0x10
[  213.247880][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.250253][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.252639][   T34]  ? __pfx_kthread+0x10/0x10
[  213.254593][   T34]  ret_from_fork+0x3fc/0x770
[  213.257134][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.260554][   T34]  ? __switch_to_asm+0x39/0x70
[  213.262602][   T34]  ? __switch_to_asm+0x33/0x70
[  213.264626][   T34]  ? __pfx_kthread+0x10/0x10
[  213.267407][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.269677][   T34]  </TASK>
[  213.271183][   T34] INFO: task syz.0.100:6380 blocked for more than 143 seconds.
[  213.274503][   T34]       Not tainted syzkaller #0
[  213.277125][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.280621][   T34] task:syz.0.100       state:D stack:27520 pid:6380  tgid:6376  ppid:5856   task_flags:0x400040 flags:0x00004006
[  213.285805][   T34] Call Trace:
[  213.287224][   T34]  <TASK>
[  213.288430][   T34]  __schedule+0x1798/0x4cc0
[  213.290344][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.292419][   T34]  ? __pfx___schedule+0x10/0x10
[  213.294456][   T34]  ? schedule+0x91/0x360
[  213.296938][   T34]  schedule+0x165/0x360
[  213.298683][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.300904][   T34]  __mutex_lock+0x7e6/0x1350
[  213.302812][   T34]  ? __mutex_lock+0x5bb/0x1350
[  213.304807][   T34]  ? rfkill_fop_release+0x4b/0x220
[  213.307670][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.309829][   T34]  ? __pfx_rfkill_fop_release+0x10/0x10
[  213.312188][   T34]  rfkill_fop_release+0x4b/0x220
[  213.314000][   T34]  ? __pfx_rfkill_fop_release+0x10/0x10
[  213.316851][   T34]  __fput+0x44c/0xa70
[  213.318601][   T34]  task_work_run+0x1d4/0x260
[  213.320572][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.322686][   T34]  ? __pfx_futex_wait+0x10/0x10
[  213.324743][   T34]  get_signal+0x11ed/0x1340
[  213.327522][   T34]  ? __asan_memset+0x22/0x50
[  213.329445][   T34]  ? __pfx_poll_select_finish+0x10/0x10
[  213.331685][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  213.333939][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  213.336941][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.339151][   T34]  exit_to_user_mode_loop+0x75/0x110
[  213.341356][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.343250][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.347467][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.349944][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.351923][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.354363][   T34] RIP: 0033:0x7fa8d558ebe9
[  213.356738][   T34] RSP: 002b:00007fa8d643c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  213.360127][   T34] RAX: 0000000000000001 RBX: 00007fa8d57c5fa0 RCX: 00007fa8d558ebe9
[  213.362830][   T34] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000001c0
[  213.367485][   T34] RBP: 00007fa8d5611e19 R08: 0000000000000000 R09: 0000000000000000
[  213.370679][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.373829][   T34] R13: 00007fa8d57c6038 R14: 00007fa8d57c5fa0 R15: 00007ffdc6224d78
[  213.378142][   T34]  </TASK>
[  213.379514][   T34] INFO: task syz.2.106:6417 blocked for more than 143 seconds.
[  213.382690][   T34]       Not tainted syzkaller #0
[  213.384769][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.389061][   T34] task:syz.2.106       state:D stack:25096 pid:6417  tgid:6417  ppid:5853   task_flags:0x400040 flags:0x00004004
[  213.393789][   T34] Call Trace:
[  213.395190][   T34]  <TASK>
[  213.396546][   T34]  __schedule+0x1798/0x4cc0
[  213.398421][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.400426][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.402392][   T34]  ? __pfx___schedule+0x10/0x10
[  213.404385][   T34]  ? schedule+0x91/0x360
[  213.406586][   T34]  schedule+0x165/0x360
[  213.408282][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.410439][   T34]  __mutex_lock+0x7e6/0x1350
[  213.412342][   T34]  ? __mutex_lock+0x5bb/0x1350
[  213.414284][   T34]  ? rfkill_unregister+0xc8/0x220
[  213.416412][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.418464][   T34]  ? __pfx_device_del+0x10/0x10
[  213.420481][   T34]  rfkill_unregister+0xc8/0x220
[  213.422430][   T34]  nfc_unregister_device+0x96/0x2a0
[  213.424553][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  213.426895][   T34]  virtual_ncidev_close+0x56/0x90
[  213.428936][   T34]  __fput+0x44c/0xa70
[  213.430574][   T34]  task_work_run+0x1d4/0x260
[  213.432562][   T34]  ? __pfx_task_work_run+0x10/0x10
[  213.434714][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  213.437357][   T34]  exit_to_user_mode_loop+0xec/0x110
[  213.439704][   T34]  do_syscall_64+0x2bd/0x3b0
[  213.441664][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.443785][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.446353][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.448237][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.450632][   T34] RIP: 0033:0x7f8cf398ebe9
[  213.452471][   T34] RSP: 002b:00007ffc2ec80008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  213.455986][   T34] RAX: 0000000000000000 RBX: 00007f8cf3bc7da0 RCX: 00007f8cf398ebe9
[  213.459153][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  213.462259][   T34] RBP: 00007f8cf3bc7da0 R08: 00000000000001c4 R09: 000000192ec802ff
[  213.465563][   T34] R10: 00007f8cf3bc7cb0 R11: 0000000000000246 R12: 000000000001014d
[  213.468754][   T34] R13: 00007ffc2ec80100 R14: ffffffffffffffff R15: 00007ffc2ec80120
[  213.471945][   T34]  </TASK>
[  213.473188][   T34] INFO: task syz.2.106:6424 blocked for more than 143 seconds.
[  213.476251][   T34]       Not tainted syzkaller #0
[  213.478246][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.481633][   T34] task:syz.2.106       state:D stack:26232 pid:6424  tgid:6417  ppid:5853   task_flags:0x400140 flags:0x00004006
[  213.486416][   T34] Call Trace:
[  213.487840][   T34]  <TASK>
[  213.489104][   T34]  __schedule+0x1798/0x4cc0
[  213.491041][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.493096][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.495100][   T34]  ? __pfx___schedule+0x10/0x10
[  213.497252][   T34]  ? schedule+0x91/0x360
[  213.499065][   T34]  schedule+0x165/0x360
[  213.500890][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.503286][   T34]  __mutex_lock+0x7e6/0x1350
[  213.505189][   T34]  ? __mutex_lock+0x5bb/0x1350
[  213.507433][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  213.509705][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.511881][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.514144][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.516634][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.519127][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  213.521389][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  213.523414][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  213.525794][   T34]  rfkill_set_block+0x1d2/0x440
[  213.527777][   T34]  rfkill_fop_write+0x44b/0x570
[  213.529787][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  213.531977][   T34]  ? security_kernfs_init_security+0x270/0x290
[  213.534434][   T34]  ? rw_verify_area+0x255/0x4d0
[  213.536498][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.538462][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  213.540586][   T34]  vfs_write+0x27e/0xb30
[  213.542313][   T34]  ? __pfx_vfs_write+0x10/0x10
[  213.544247][   T34]  ? __fget_files+0x2a/0x420
[  213.546350][   T34]  ? __fget_files+0x2a/0x420
[  213.548208][   T34]  ? __fget_files+0x3a0/0x420
[  213.550081][   T34]  ? __fget_files+0x2a/0x420
[  213.551897][   T34]  ksys_write+0x145/0x250
[  213.553630][   T34]  ? __pfx_ksys_write+0x10/0x10
[  213.555676][   T34]  ? rcu_is_watching+0x15/0xb0
[  213.557705][   T34]  ? do_syscall_64+0xbe/0x3b0
[  213.559596][   T34]  do_syscall_64+0xfa/0x3b0
[  213.561470][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.563548][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.566277][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.568316][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.570853][   T34] RIP: 0033:0x7f8cf398ebe9
[  213.572784][   T34] RSP: 002b:00007f8cf473a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  213.576460][   T34] RAX: ffffffffffffffda RBX: 00007f8cf3bc6090 RCX: 00007f8cf398ebe9
[  213.579630][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 000000000000000c
[  213.582826][   T34] RBP: 00007f8cf3a11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.586183][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.589347][   T34] R13: 00007f8cf3bc6128 R14: 00007f8cf3bc6090 R15: 00007ffc2ec7fea8
[  213.592505][   T34]  </TASK>
[  213.593778][   T34] INFO: task syz.1.122:6499 blocked for more than 143 seconds.
[  213.602155][   T34]       Not tainted syzkaller #0
[  213.604149][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.607632][   T34] task:syz.1.122       state:D stack:28328 pid:6499  tgid:6498  ppid:5847   task_flags:0x400040 flags:0x00004004
[  213.612284][   T34] Call Trace:
[  213.613655][   T34]  <TASK>
[  213.614868][   T34]  __schedule+0x1798/0x4cc0
[  213.616892][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.618887][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.620897][   T34]  ? __pfx___schedule+0x10/0x10
[  213.622865][   T34]  ? schedule+0x91/0x360
[  213.624657][   T34]  schedule+0x165/0x360
[  213.626499][   T34]  schedule_preempt_disabled+0x13/0x30
[  213.628698][   T34]  __mutex_lock+0x7e6/0x1350
[  213.630592][   T34]  ? __mutex_lock+0x5bb/0x1350
[  213.632537][   T34]  ? rfkill_fop_open+0x12d/0x820
[  213.634665][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  213.636953][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  213.639229][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  213.641534][   T34]  rfkill_fop_open+0x12d/0x820
[  213.643607][   T34]  ? __pfx_rfkill_fop_open+0x10/0x10
[  213.645959][   T34]  misc_open+0x2bc/0x330
[  213.647804][   T34]  chrdev_open+0x4cc/0x5e0
[  213.649743][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  213.651796][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  213.654375][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  213.656631][   T34]  do_dentry_open+0x953/0x13f0
[  213.658597][   T34]  vfs_open+0x3b/0x340
[  213.660241][   T34]  ? path_openat+0x2ecd/0x3830
[  213.662189][   T34]  path_openat+0x2ee5/0x3830
[  213.664123][   T34]  ? arch_stack_walk+0xfc/0x150
[  213.668421][   T34]  ? stack_depot_save_flags+0x40/0x860
[  213.670635][   T34]  ? __pfx_path_openat+0x10/0x10
[  213.672661][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.675141][   T34]  do_filp_open+0x1fa/0x410
[  213.677103][   T34]  ? __lock_acquire+0xab9/0xd20
[  213.679049][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  213.681077][   T34]  ? _raw_spin_unlock+0x28/0x50
[  213.683052][   T34]  ? alloc_fd+0x64c/0x6c0
[  213.684808][   T34]  do_sys_openat2+0x121/0x1c0
[  213.686823][   T34]  ? __se_sys_futex+0x36f/0x400
[  213.688907][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  213.691041][   T34]  ? __fget_files+0x2a/0x420
[  213.692943][   T34]  ? __pfx___se_sys_futex+0x10/0x10
[  213.695099][   T34]  ? __fget_files+0x2a/0x420
[  213.697137][   T34]  __x64_sys_openat+0x138/0x170
[  213.699134][   T34]  do_syscall_64+0xfa/0x3b0
[  213.701046][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.703235][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.705906][   T34]  ? exc_page_fault+0x9f/0xf0
[  213.707941][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.710493][   T34] RIP: 0033:0x7f2f6a78ebe9
[  213.712422][   T34] RSP: 002b:00007f2f689f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  213.715888][   T34] RAX: ffffffffffffffda RBX: 00007f2f6a9c5fa0 RCX: 00007f2f6a78ebe9
[  213.719115][   T34] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  213.722209][   T34] RBP: 00007f2f6a811e19 R08: 0000000000000000 R09: 0000000000000000
[  213.725462][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.728631][   T34] R13: 00007f2f6a9c6038 R14: 00007f2f6a9c5fa0 R15: 00007ffc78e0a448
[  213.731839][   T34]  </TASK>
[  213.733149][   T34] 
[  213.733149][   T34] Showing all locks held in the system:
[  213.736330][   T34] 1 lock held by khungtaskd/34:
[  213.738280][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  213.742204][   T34] 3 locks held by kworker/0:2/5259:
[  213.744327][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  213.748808][   T34]  #1: ffffc90003edfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  213.754077][   T34]  #2: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  213.758613][   T34] 2 locks held by getty/5677:
[  213.760618][   T34]  #0: ffff888020a260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  213.764548][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  213.768879][   T34] 1 lock held by syz.0.100/6380:
[  213.771007][   T34]  #0: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220
[  213.775474][   T34] 2 locks held by syz.2.106/6417:
[  213.777657][   T34]  #0: ffff88811aa2c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  213.781764][   T34]  #1: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  213.785992][   T34] 2 locks held by syz.2.106/6424:
[  213.788095][   T34]  #0: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  213.792148][   T34]  #1: ffff88811aa2c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  213.795988][   T34] 2 locks held by syz.1.122/6499:
[  213.798049][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.801409][   T34]  #1: ffffffff8f8128a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820
[  213.805495][   T34] 1 lock held by syz-executor/6507:
[  213.807562][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.810964][   T34] 1 lock held by syz-executor/6508:
[  213.813065][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.816560][   T34] 1 lock held by syz-executor/6511:
[  213.818690][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.822121][   T34] 1 lock held by syz-executor/6521:
[  213.824218][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.827756][   T34] 1 lock held by syz-executor/6522:
[  213.829862][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.833231][   T34] 1 lock held by syz-executor/6524:
[  213.835569][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.839388][   T34] 1 lock held by syz-executor/6527:
[  213.841624][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.845230][   T34] 1 lock held by syz-executor/6529:
[  213.847481][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.850814][   T34] 1 lock held by syz-executor/6531:
[  213.852903][   T34]  #0: ffffffff8e9c1b48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  213.856485][   T34] 
[  213.857502][   T34] =============================================
[  213.857502][   T34] 
[  213.860881][   T34] NMI backtrace for cpu 1
[  213.860893][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  213.860921][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.860929][   T34] Call Trace:
[  213.860934][   T34]  <TASK>
[  213.860938][   T34]  dump_stack_lvl+0x189/0x250
[  213.860956][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.860968][   T34]  ? __pfx__printk+0x10/0x10
[  213.860990][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  213.861033][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  213.861048][   T34]  ? __pfx__printk+0x10/0x10
[  213.861065][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  213.861084][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  213.861098][   T34]  watchdog+0xf93/0xfe0
[  213.861117][   T34]  ? watchdog+0x1de/0xfe0
[  213.861134][   T34]  kthread+0x711/0x8a0
[  213.861150][   T34]  ? __pfx_watchdog+0x10/0x10
[  213.861162][   T34]  ? __pfx_kthread+0x10/0x10
[  213.861176][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.861189][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.861204][   T34]  ? __pfx_kthread+0x10/0x10
[  213.861216][   T34]  ret_from_fork+0x3fc/0x770
[  213.861229][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  213.861243][   T34]  ? __switch_to_asm+0x39/0x70
[  213.861256][   T34]  ? __switch_to_asm+0x33/0x70
[  213.861268][   T34]  ? __pfx_kthread+0x10/0x10
[  213.861280][   T34]  ret_from_fork_asm+0x1a/0x30
[  213.861302][   T34]  </TASK>
[  213.861324][   T34] Sending NMI from CPU 1 to CPUs 0:
[  213.922332][    C0] NMI backtrace for cpu 0
[  213.922347][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  213.922358][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.922364][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  213.922383][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  213.922391][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  213.922401][    C0] RAX: 174cb14dbf1c4d00 RBX: ffffffff819683c8 RCX: 174cb14dbf1c4d00
[  213.922408][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  213.922414][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  213.922421][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39030
[  213.922428][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  213.922434][    C0] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  213.922441][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.922448][    C0] CR2: 00007fe38f812822 CR3: 0000000111242000 CR4: 00000000000006f0
[  213.922481][    C0] Call Trace:
[  213.922487][    C0]  <TASK>
[  213.922491][    C0]  default_idle+0x13/0x20
[  213.922502][    C0]  default_idle_call+0x74/0xb0
[  213.922512][    C0]  do_idle+0x1e8/0x510
[  213.922524][    C0]  ? __pfx_do_idle+0x10/0x10
[  213.922536][    C0]  cpu_startup_entry+0x44/0x60
[  213.922545][    C0]  rest_init+0x2de/0x300
[  213.922556][    C0]  start_kernel+0x3a9/0x410
[  213.922569][    C0]  x86_64_start_reservations+0x24/0x30
[  213.922579][    C0]  x86_64_start_kernel+0x143/0x1c0
[  213.922589][    C0]  common_startup_64+0x13e/0x147
[  213.922606][    C0]  </TASK>
[  213.923307][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  213.997496][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  214.001173][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.005254][   T34] Call Trace:
[  214.006657][   T34]  <TASK>
[  214.007913][   T34]  dump_stack_lvl+0x99/0x250
[  214.009834][   T34]  ? __asan_memcpy+0x40/0x70
[  214.011769][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.013916][   T34]  ? __pfx__printk+0x10/0x10
[  214.015843][   T34]  vpanic+0x281/0x750
[  214.017463][   T34]  ? __pfx_vpanic+0x10/0x10
[  214.019301][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  214.021545][   T34]  ? preempt_schedule+0xae/0xc0
[  214.023516][   T34]  ? preempt_schedule_common+0x83/0xd0
[  214.025779][   T34]  panic+0xb9/0xc0
[  214.027359][   T34]  ? __pfx_panic+0x10/0x10
[  214.029296][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  214.031493][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  214.033994][   T34]  watchdog+0xfd2/0xfe0
[  214.035672][   T34]  ? watchdog+0x1de/0xfe0
[  214.037509][   T34]  kthread+0x711/0x8a0
[  214.039217][   T34]  ? __pfx_watchdog+0x10/0x10
[  214.041190][   T34]  ? __pfx_kthread+0x10/0x10
[  214.043166][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  214.045431][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.047624][   T34]  ? __pfx_kthread+0x10/0x10
[  214.049635][   T34]  ret_from_fork+0x3fc/0x770
[  214.051570][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  214.053699][   T34]  ? __switch_to_asm+0x39/0x70
[  214.055641][   T34]  ? __switch_to_asm+0x33/0x70
[  214.057589][   T34]  ? __pfx_kthread+0x10/0x10
[  214.059547][   T34]  ret_from_fork_asm+0x1a/0x30
[  214.061543][   T34]  </TASK>
[  214.063627][   T34] Kernel Offset: disabled
[  214.065441][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:57:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106fd0237 R9 =1ffff11020dfa046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ef R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe38f812822 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f6b99597d20
XMM02=0000000500000007 0000555500000001 XMM03=000055557aa211a0 000055557aa210f0
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=000055557aa25960 0000555500000007 XMM07=0000555500000000 000055557aa25810
XMM08=000055557aa25760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8211086c RBX=ffffea0000da5cc0 RCX=0000000000000000 RDX=0000000000000001
RSI=ffffea0000da5cc0 RDI=ffffea0000da5cc0 RBP=0000000000000001 RSP=ffffc90003277548
R8 =ffff88801c20f43b R9 =1ffff11003841e87 R10=dffffc0000000000 R11=ffffed1003841e88
R12=ffffea0000da5cc0 R13=ffff888028b18600 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8211c7f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b9a0f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f6b995976c3 00007f6b995976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=000055557aa25960 0000555500000007 XMM07=0000555500000000 000055557aa25810
XMM08=000055557aa25760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
