last executing test programs:

25.705021884s ago: executing program 1 (id=216):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800114000000000050015000e000000050005000a000000050001400700000005000400000000000900020073797a31000a000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0)

25.476368316s ago: executing program 1 (id=219):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c3", 0xb2}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

25.35638955s ago: executing program 1 (id=220):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

24.637926816s ago: executing program 1 (id=224):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60)
r5 = gettid()
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, r6, 0x0, 0x0, 0x0}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r1, 0x4, r1}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)

24.192801731s ago: executing program 1 (id=229):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}]}, 0x40}}, 0x20000050)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3, 0x0, &(0x7f0000001580)="e08564", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000580)={'veth1_macvtap\x00', 0x7})
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

24.083898554s ago: executing program 1 (id=231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1, 0x0, 0xc6b}, 0x18)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa0881, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="ed239c4a1d6642fc871c9941ad84254d0ef1f4de95d61637c3ae3e444d244fb4c13a2c3079b5033f3a29794bd4bec7bf00d203da3987f752a26f0878cb51b31587e0e14791869a72e659c02fe08da76a743be7417c0772c6a0133e30cf5bc4b94be231ac04b28b651acc4f9b56bcb5757a37cc9a7797e48c1f430c5e38b8f8f0b010eb9c49b1e0026a04a5bd8f4501dcdc8dbb54d2d119f2805e95687c830dd5110e4d820a68d3f02c052d7fcff2b15b1cc86ee12c91896016a3a03f7b1b96d4", @ANYBLOB="0150c1c423d31171f0563df90f049cfb0028", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000001a00)=ANY=[], 0x0, 0x4}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x800003, 0x0, 0x3, 0x1}, 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006030000843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

22.669394449s ago: executing program 4 (id=242):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(0x0, r4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb9957"], 0x18}, 0xfc00)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r5], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1d0}, {r7, 0x80}], 0x2, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000380)="a8", 0x0}, 0x20)
recvmmsg(r8, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)
accept4(r3, 0x0, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r9, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback, 0x1}], 0x1c)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = accept4(r10, 0x0, 0x0, 0x80800)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

22.569862927s ago: executing program 0 (id=243):
socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x0, &(0x7f0000000bc0)})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x9, 0x9, 0x6, 0x2a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x3, 0x81ce}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg1\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000009c0)={0x94, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4840}, 0x50040)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000040)={0x6, 'veth1_vlan\x00', {0x9}, 0x5})
sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

21.679779475s ago: executing program 0 (id=249):
bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x2004a041)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004b001300000008004c"], 0x38}, 0x1, 0x0, 0x0, 0x4004836}, 0xc094)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

21.480906401s ago: executing program 0 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x60, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @initial, {0x7, 0xfff}, @value=@ver_80211n={0x0, 0x94c, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x4000, 0x46, @default, @val, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x2, 0xa, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x3, 0x9}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

21.374575206s ago: executing program 0 (id=253):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x20000050)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x3, 0x0, &(0x7f0000001580)="e08564", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000580)={'veth1_macvtap\x00', 0x7})
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

21.060748713s ago: executing program 0 (id=254):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040100000000000025d8738f80040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x2, 0x0)
unshare(0x28000600)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r1, 0x180000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x3c020400)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140))
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
socket$netlink(0x10, 0x3, 0x14)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
getpeername$packet(r0, 0x0, 0x0)

21.043396999s ago: executing program 2 (id=255):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@arp={0x8847, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0)

20.849834021s ago: executing program 2 (id=256):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5", 0xb8}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

20.682395338s ago: executing program 2 (id=257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6f}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r3 = socket(0x38, 0x4, 0xd1a7904e)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={<r4=>0x0, 0x28, "a211084912266798f75fa304ee75dad47b3fe2a2edab4bba803e9c40fe7798cd888e5723612a7c34"}, &(0x7f00000000c0)=0x30)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={r4, 0x2, 0x20, 0x401, 0x9c}, &(0x7f0000000140)=0x18)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18)
r7 = socket$rds(0x15, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0xc0)
setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xf804}, 0x1c)
shutdown(r2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10)

19.781208869s ago: executing program 0 (id=261):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
ioctl$int_in(r4, 0x5421, &(0x7f0000002640)=0x9)
listen(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x98}, 0x40)
accept4(r4, 0x0, 0x0, 0x80800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x100000001, 0x12)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r10 = accept(r9, 0x0, 0x0)
sendmmsg$inet(r10, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="b1d37e15c6735034aed95d7aa2d4ff0aa86883e0c74456962da2fa339a8dbebf6ad93d6d27f7f018040c133bc241867966b6f7353f0614ee8a587a5c349a7c89f57fefd22972cf3809ac6ed7e5c34391fc51fba364cb18498b9f2a8671128b28571bf1636fe0925d58bd324bf3402af8b6bd39465eba29980ee68dd70a535e82b5fa010ab0c49e2d6646dbf5a9d3177486a4dcf19288398e91b554ea498b8465e92d555583d8ca04b3c9", 0xaa}, {&(0x7f0000000200)="07ac9aefa2b7e3f4c176f718e8f6e196129416890a53", 0x16}], 0x2}}], 0x1, 0x4000801)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x90a4, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a45892556bb4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8d596e55ed42"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4004000)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010000000000000000000400198004001280f1c8c87b300a1040b44089465b1d6f7a36e1d6796b23593b37ea64ae75815bc463e0c18d2ab91aacaec7ff1909db"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)

19.684487781s ago: executing program 2 (id=263):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0x9, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x3, 0x4, 0x3, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0xb4c, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000000000000000010000", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

18.436910292s ago: executing program 4 (id=266):
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
socket$kcm(0x2, 0xa, 0x2)

17.875633972s ago: executing program 3 (id=268):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x806, @empty}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x40, 0x0, @val=0x1000000}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

17.772959916s ago: executing program 3 (id=269):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = epoll_create1(0x80000)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa10000000000000701006f0bffffffb702000008000000b70300007b0d000085000000060000004500f4fffcffffffbf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xe, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)

17.330821893s ago: executing program 3 (id=270):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x60, 0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4000000000000000}}, 0x1c)
shutdown(r0, 0x2)

17.181821295s ago: executing program 3 (id=271):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

17.002715394s ago: executing program 3 (id=272):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x0, 0x6}, {0x8, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x280) (fail_nth: 1)

16.842736477s ago: executing program 4 (id=273):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001cc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x30, 0x61, 0x0, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

16.73688086s ago: executing program 2 (id=274):
r0 = socket$kcm(0x21, 0x0, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
socket$kcm(0x21, 0x0, 0x2) (async)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) (async)

16.65409654s ago: executing program 2 (id=275):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d53", 0x2e, 0x840, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000040))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000400)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c157f7e22cb273a63ffa087c901a2f09330a1d3f24d938225a146796e2417f715180e7801283eb61725b77d50ed5b01e3568d52164d2f31a3cbfc74cf9b29930f21b1a4b780aadc8f26cb26b06929a6a12b850a0360f170fa83b6bb8cd25216b604a85592c3287cfc98c48ccf03909ee8ecb9dfd3be6c80b749a432b8ef9d9951afa62967"], 0x80}}, 0x0)
close(0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

15.572195355s ago: executing program 3 (id=276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x100080c4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000842}, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00'})
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0x18, 0x0, 0x0)
socket(0x2, 0x3, 0x100000001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = socket$alg(0x26, 0x5, 0x0)
accept4(r9, 0x0, 0x0, 0x800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008851)
gettid()
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

15.488937071s ago: executing program 4 (id=277):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)="c9b970a518ab", &(0x7f0000000140), 0x1003, r2, 0x0, 0x2000000}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r2}, 0x38)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

15.425567342s ago: executing program 4 (id=278):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27", 0xbb}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

15.364679471s ago: executing program 4 (id=279):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0xffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c000180"], 0x94}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

9.006413908s ago: executing program 32 (id=231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1, 0x0, 0xc6b}, 0x18)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa0881, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="ed239c4a1d6642fc871c9941ad84254d0ef1f4de95d61637c3ae3e444d244fb4c13a2c3079b5033f3a29794bd4bec7bf00d203da3987f752a26f0878cb51b31587e0e14791869a72e659c02fe08da76a743be7417c0772c6a0133e30cf5bc4b94be231ac04b28b651acc4f9b56bcb5757a37cc9a7797e48c1f430c5e38b8f8f0b010eb9c49b1e0026a04a5bd8f4501dcdc8dbb54d2d119f2805e95687c830dd5110e4d820a68d3f02c052d7fcff2b15b1cc86ee12c91896016a3a03f7b1b96d4", @ANYBLOB="0150c1c423d31171f0563df90f049cfb0028", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000001a00)=ANY=[], 0x0, 0x4}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$rfkill(r2, &(0x7f0000000080)={0x800003, 0x0, 0x3, 0x1}, 0x8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006030000843b0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4.495368326s ago: executing program 33 (id=261):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
ioctl$int_in(r4, 0x5421, &(0x7f0000002640)=0x9)
listen(r4, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x98}, 0x40)
accept4(r4, 0x0, 0x0, 0x80800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x100000001, 0x12)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
r10 = accept(r9, 0x0, 0x0)
sendmmsg$inet(r10, &(0x7f00000096c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="b1d37e15c6735034aed95d7aa2d4ff0aa86883e0c74456962da2fa339a8dbebf6ad93d6d27f7f018040c133bc241867966b6f7353f0614ee8a587a5c349a7c89f57fefd22972cf3809ac6ed7e5c34391fc51fba364cb18498b9f2a8671128b28571bf1636fe0925d58bd324bf3402af8b6bd39465eba29980ee68dd70a535e82b5fa010ab0c49e2d6646dbf5a9d3177486a4dcf19288398e91b554ea498b8465e92d555583d8ca04b3c9", 0xaa}, {&(0x7f0000000200)="07ac9aefa2b7e3f4c176f718e8f6e196129416890a53", 0x16}], 0x2}}], 0x1, 0x4000801)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x90a4, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a45892556bb4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8d596e55ed42"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4004000)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010000000000000000000400198004001280f1c8c87b300a1040b44089465b1d6f7a36e1d6796b23593b37ea64ae75815bc463e0c18d2ab91aacaec7ff1909db"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)

1.501081646s ago: executing program 34 (id=275):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d53", 0x2e, 0x840, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000040))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f0000000400)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c157f7e22cb273a63ffa087c901a2f09330a1d3f24d938225a146796e2417f715180e7801283eb61725b77d50ed5b01e3568d52164d2f31a3cbfc74cf9b29930f21b1a4b780aadc8f26cb26b06929a6a12b850a0360f170fa83b6bb8cd25216b604a85592c3287cfc98c48ccf03909ee8ecb9dfd3be6c80b749a432b8ef9d9951afa62967"], 0x80}}, 0x0)
close(0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

493.014884ms ago: executing program 35 (id=276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x100080c4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000842}, 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00'})
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(r7, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r8, 0x6, 0x18, 0x0, 0x0)
socket(0x2, 0x3, 0x100000001)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = socket$alg(0x26, 0x5, 0x0)
accept4(r9, 0x0, 0x0, 0x800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008851)
gettid()
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

0s ago: executing program 36 (id=279):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0xffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c000180"], 0x94}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts.
[   87.622292][ T5817] cgroup: Unknown subsys name 'net'
[   87.743888][ T5817] cgroup: Unknown subsys name 'cpuset'
[   87.753330][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.445381][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   93.392688][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.402810][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.411393][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.413316][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.420207][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.433471][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.444563][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.452527][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.460411][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.468966][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.477885][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.491193][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.499061][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.506645][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.513910][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.524824][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.526027][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.546913][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.554272][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.570578][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.591901][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.610620][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.626855][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.635211][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.646844][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.351193][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   94.430208][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   94.557791][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   94.570291][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   94.632846][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   94.791470][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.798752][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.806481][ T5829] bridge_slave_0: entered allmulticast mode
[   94.814267][ T5829] bridge_slave_0: entered promiscuous mode
[   94.847656][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.855221][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.863089][ T5836] bridge_slave_0: entered allmulticast mode
[   94.871315][ T5836] bridge_slave_0: entered promiscuous mode
[   94.881226][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.888698][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.896514][ T5829] bridge_slave_1: entered allmulticast mode
[   94.904008][ T5829] bridge_slave_1: entered promiscuous mode
[   94.937775][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.945102][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.955096][ T5836] bridge_slave_1: entered allmulticast mode
[   94.963249][ T5836] bridge_slave_1: entered promiscuous mode
[   95.063642][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.071435][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.078654][ T5842] bridge_slave_0: entered allmulticast mode
[   95.086326][ T5842] bridge_slave_0: entered promiscuous mode
[   95.111233][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.123637][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.146484][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.154763][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.162715][ T5842] bridge_slave_1: entered allmulticast mode
[   95.170561][ T5842] bridge_slave_1: entered promiscuous mode
[   95.178240][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.185721][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.193398][ T5835] bridge_slave_0: entered allmulticast mode
[   95.201232][ T5835] bridge_slave_0: entered promiscuous mode
[   95.212379][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.224971][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.264834][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.272320][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.279757][ T5835] bridge_slave_1: entered allmulticast mode
[   95.287251][ T5835] bridge_slave_1: entered promiscuous mode
[   95.323011][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.330365][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.337576][ T5828] bridge_slave_0: entered allmulticast mode
[   95.346031][ T5828] bridge_slave_0: entered promiscuous mode
[   95.408483][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.416541][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.424606][ T5828] bridge_slave_1: entered allmulticast mode
[   95.432793][ T5828] bridge_slave_1: entered promiscuous mode
[   95.442953][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.469741][ T5836] team0: Port device team_slave_0 added
[   95.477847][ T5829] team0: Port device team_slave_0 added
[   95.500524][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.513690][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.525906][ T5836] team0: Port device team_slave_1 added
[   95.548626][ T5829] team0: Port device team_slave_1 added
[   95.587110][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.607130][ T5841] Bluetooth: hci1: command tx timeout
[   95.644142][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.680635][ T5841] Bluetooth: hci4: command tx timeout
[   95.680641][ T5847] Bluetooth: hci2: command tx timeout
[   95.689755][ T5847] Bluetooth: hci0: command tx timeout
[   95.699712][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.706872][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.734053][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.759733][ T5847] Bluetooth: hci3: command tx timeout
[   95.761415][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.772712][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.799034][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.813824][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.825351][ T5842] team0: Port device team_slave_0 added
[   95.833762][ T5835] team0: Port device team_slave_0 added
[   95.840894][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.847893][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.874729][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.886765][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.894109][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.920975][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.947491][ T5842] team0: Port device team_slave_1 added
[   95.955247][ T5835] team0: Port device team_slave_1 added
[   96.034807][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.042691][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.070559][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.084260][ T5828] team0: Port device team_slave_0 added
[   96.131519][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.138618][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.164957][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.178293][ T5828] team0: Port device team_slave_1 added
[   96.185274][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.192728][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.219434][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.249710][ T5836] hsr_slave_0: entered promiscuous mode
[   96.256768][ T5836] hsr_slave_1: entered promiscuous mode
[   96.285542][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.292902][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.319540][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.360449][ T5829] hsr_slave_0: entered promiscuous mode
[   96.367243][ T5829] hsr_slave_1: entered promiscuous mode
[   96.374220][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   96.380732][ T5829] Cannot create hsr debugfs directory
[   96.453839][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.461402][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.487741][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.500857][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.508018][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.534093][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.653625][ T5842] hsr_slave_0: entered promiscuous mode
[   96.664213][ T5842] hsr_slave_1: entered promiscuous mode
[   96.671894][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   96.678047][ T5842] Cannot create hsr debugfs directory
[   96.721750][ T5835] hsr_slave_0: entered promiscuous mode
[   96.730781][ T5835] hsr_slave_1: entered promiscuous mode
[   96.738741][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   96.746231][ T5835] Cannot create hsr debugfs directory
[   96.878130][ T5828] hsr_slave_0: entered promiscuous mode
[   96.886736][ T5828] hsr_slave_1: entered promiscuous mode
[   96.898624][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   96.905740][ T5828] Cannot create hsr debugfs directory
[   97.283427][ T1072] cfg80211: failed to load regulatory.db
[   97.419152][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.433558][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.451579][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.481935][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.561402][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.576691][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.591924][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.605037][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.679375][ T5847] Bluetooth: hci1: command tx timeout
[   97.702153][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.718484][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.733954][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.747411][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.760115][ T5847] Bluetooth: hci4: command tx timeout
[   97.769513][ T5847] Bluetooth: hci0: command tx timeout
[   97.769557][ T5841] Bluetooth: hci2: command tx timeout
[   97.840140][ T5841] Bluetooth: hci3: command tx timeout
[   97.874948][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.888088][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.904851][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.918174][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.954289][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.064544][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   98.086454][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.098762][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.113430][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.131153][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.168876][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.176405][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.206072][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.213978][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.248731][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.296497][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   98.329962][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.337277][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.388560][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.395932][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.444113][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.585920][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.596841][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   98.614120][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.675842][ T4544] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.683965][ T4544] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.754991][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   98.768245][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   98.812498][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.819938][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.830626][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.837802][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.847484][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.854763][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.888204][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.895465][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.905977][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.913308][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.028224][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.068550][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.094589][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.108189][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.277949][ T5836] veth0_vlan: entered promiscuous mode
[   99.361663][ T5836] veth1_vlan: entered promiscuous mode
[   99.462859][ T5836] veth0_macvtap: entered promiscuous mode
[   99.500967][ T5836] veth1_macvtap: entered promiscuous mode
[   99.593808][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.654034][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.700770][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.721319][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.732054][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.746550][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.768520][ T5841] Bluetooth: hci1: command tx timeout
[   99.789707][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.807894][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.839963][ T5841] Bluetooth: hci0: command tx timeout
[   99.841424][ T5847] Bluetooth: hci4: command tx timeout
[   99.845641][ T5841] Bluetooth: hci2: command tx timeout
[   99.871350][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.921923][ T5841] Bluetooth: hci3: command tx timeout
[   99.966116][ T4544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.980383][ T4544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.035354][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.064886][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.066792][ T5842] veth0_vlan: entered promiscuous mode
[  100.135855][ T5842] veth1_vlan: entered promiscuous mode
[  100.156421][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.172154][ T5829] veth0_vlan: entered promiscuous mode
[  100.194839][ T5828] veth0_vlan: entered promiscuous mode
[  100.211534][ T5835] veth0_vlan: entered promiscuous mode
[  100.227844][ T5829] veth1_vlan: entered promiscuous mode
[  100.245988][ T5828] veth1_vlan: entered promiscuous mode
[  100.286133][ T5835] veth1_vlan: entered promiscuous mode
[  100.322377][ T5842] veth0_macvtap: entered promiscuous mode
[  100.349616][ T5842] veth1_macvtap: entered promiscuous mode
[  100.381132][ T5828] veth0_macvtap: entered promiscuous mode
[  100.412199][ T5828] veth1_macvtap: entered promiscuous mode
[  100.459530][ T5829] veth0_macvtap: entered promiscuous mode
[  100.493129][ T5835] veth0_macvtap: entered promiscuous mode
[  100.505228][ T5829] veth1_macvtap: entered promiscuous mode
[  100.522301][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.546228][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.575045][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.602445][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.611508][ T5835] veth1_macvtap: entered promiscuous mode
[  100.661862][   T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.671900][   T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.687466][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.704621][   T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.731578][   T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.741582][   T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.785304][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.798319][   T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.821999][   T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.851237][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.864775][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.907058][   T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.939740][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.948627][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.967312][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.005069][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.044395][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.091616][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.104770][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.134462][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.140285][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.154085][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.296293][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.322015][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.340039][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.359933][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.400836][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.412145][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.518009][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.549385][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.565381][ T4544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.573427][ T4544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.672606][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.702349][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.849493][ T5841] Bluetooth: hci1: command tx timeout
[  101.888431][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.921918][   T52] Bluetooth: hci4: command tx timeout
[  101.922127][ T5847] Bluetooth: hci0: command tx timeout
[  101.927440][ T5841] Bluetooth: hci2: command tx timeout
[  101.939551][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.000068][ T5841] Bluetooth: hci3: command tx timeout
[  102.243144][ T5976] dvmrp1: entered allmulticast mode
[  102.258564][ T5978] netlink: 'syz.4.5': attribute type 10 has an invalid length.
[  102.269893][ T5973] dvmrp1: left allmulticast mode
[  102.318766][ T5979] netlink: 'syz.4.5': attribute type 10 has an invalid length.
[  102.459423][ T5978] team0: Port device dummy0 added
[  102.487067][ T5979] team0: Port device dummy0 removed
[  102.503345][ T5979] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  103.163743][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[  103.261787][ T6005] FAULT_INJECTION: forcing a failure.
[  103.261787][ T6005] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  103.265466][ T6008] Zero length message leads to an empty skb
[  103.317577][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) 
[  103.317604][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  103.317626][ T6005] Call Trace:
[  103.317635][ T6005]  <TASK>
[  103.317644][ T6005]  dump_stack_lvl+0x189/0x250
[  103.317687][ T6005]  ? __pfx____ratelimit+0x10/0x10
[  103.317709][ T6005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.317737][ T6005]  ? __pfx__printk+0x10/0x10
[  103.317772][ T6005]  should_fail_ex+0x414/0x560
[  103.317812][ T6005]  _copy_to_user+0x31/0xb0
[  103.317842][ T6005]  simple_read_from_buffer+0xe1/0x170
[  103.317881][ T6005]  proc_fail_nth_read+0x1b3/0x220
[  103.317922][ T6005]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.317954][ T6005]  ? rw_verify_area+0x2a6/0x4d0
[  103.317983][ T6005]  ? __lock_acquire+0xab9/0xd20
[  103.318003][ T6005]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  103.318029][ T6005]  vfs_read+0x200/0xa30
[  103.318057][ T6005]  ? fdget_pos+0x247/0x320
[  103.318083][ T6005]  ? __pfx___mutex_lock+0x10/0x10
[  103.318109][ T6005]  ? __pfx_vfs_read+0x10/0x10
[  103.318137][ T6005]  ? __fget_files+0x2a/0x420
[  103.318163][ T6005]  ? __fget_files+0x3a0/0x420
[  103.318182][ T6005]  ? __fget_files+0x2a/0x420
[  103.318212][ T6005]  ksys_read+0x145/0x250
[  103.318245][ T6005]  ? __pfx_ksys_read+0x10/0x10
[  103.318278][ T6005]  ? do_syscall_64+0xbe/0xfa0
[  103.318305][ T6005]  do_syscall_64+0xfa/0xfa0
[  103.318325][ T6005]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.318345][ T6005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.318367][ T6005]  ? clear_bhb_loop+0x60/0xb0
[  103.318393][ T6005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.318414][ T6005] RIP: 0033:0x7f51d5f8e15c
[  103.318440][ T6005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  103.318458][ T6005] RSP: 002b:00007f51d6e67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.318480][ T6005] RAX: ffffffffffffffda RBX: 00007f51d61e5fa0 RCX: 00007f51d5f8e15c
[  103.318495][ T6005] RDX: 000000000000000f RSI: 00007f51d6e670a0 RDI: 0000000000000004
[  103.318509][ T6005] RBP: 00007f51d6e67090 R08: 0000000000000000 R09: 0000000000000000
[  103.318522][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  103.318534][ T6005] R13: 00007f51d61e6038 R14: 00007f51d61e5fa0 R15: 00007ffe171c1278
[  103.318570][ T6005]  </TASK>
[  103.668088][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv1
[  103.678369][ T6003] team0: Port device batadv1 added
[  104.212584][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'.
[  104.318613][ T6033] trusted_key: syz.0.27 sent an empty control message without MSG_MORE.
[  104.374786][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'.
[  104.453664][ T6022] dummy0: entered promiscuous mode
[  104.460600][ T6022] vlan2: entered promiscuous mode
[  104.872760][ T6049] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  104.945998][ T6049] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.194315][ T6078] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.214739][ T6078] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  106.802532][ T6081] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.42'.
[  106.842731][ T6080] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.42'.
[  107.406102][ T6102] Bluetooth: MGMT ver 1.23
[  107.526842][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'.
[  107.654969][ T6116] netlink: 'syz.3.53': attribute type 39 has an invalid length.
[  107.688642][ T6109] bridge_slave_1: left allmulticast mode
[  107.696329][ T6109] bridge_slave_1: left promiscuous mode
[  107.703657][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.722765][ T6109] bridge_slave_0: left allmulticast mode
[  107.728818][ T6109] bridge_slave_0: left promiscuous mode
[  107.762769][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.288796][ T6127] syz.4.57 uses obsolete (PF_INET,SOCK_PACKET)
[  108.310263][ T6131] ipvlan2: entered promiscuous mode
[  108.311469][ T6127] x_tables: duplicate underflow at hook 1
[  108.315535][ T6131] ipvlan2: entered allmulticast mode
[  108.334439][ T6131] dummy0: entered allmulticast mode
[  108.435664][ T6136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.60'.
[  108.451710][ T6135] netlink: 96 bytes leftover after parsing attributes in process `syz.2.60'.
[  109.015323][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'.
[  109.057358][ T6157] macsec1: entered promiscuous mode
[  109.769965][ T5197] udevd[5197]: worker [6172] terminated by signal 33 (Unknown signal 33)
[  109.812943][ T5197] udevd[5197]: worker [6172] failed while handling '/devices/virtual/block/loop0'
[  110.120891][ T6178] warning: `syz.2.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  110.172687][ T6180] bridge0: entered promiscuous mode
[  110.195652][ T6180] bridge0: port 3(vlan2) entered blocking state
[  110.219649][ T6180] bridge0: port 3(vlan2) entered disabled state
[  110.241926][ T6180] vlan2: entered allmulticast mode
[  110.259092][ T6180] bridge0: entered allmulticast mode
[  110.293229][ T6180] vlan2: left allmulticast mode
[  110.298163][ T6180] bridge0: left allmulticast mode
[  110.316500][ T6180] bridge0: left promiscuous mode
[  110.541654][ T6196] FAULT_INJECTION: forcing a failure.
[  110.541654][ T6196] name failslab, interval 1, probability 0, space 0, times 0
[  110.570986][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) 
[  110.571018][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  110.571032][ T6196] Call Trace:
[  110.571041][ T6196]  <TASK>
[  110.571050][ T6196]  dump_stack_lvl+0x189/0x250
[  110.571087][ T6196]  ? __pfx____ratelimit+0x10/0x10
[  110.571109][ T6196]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.571146][ T6196]  ? __pfx__printk+0x10/0x10
[  110.571172][ T6196]  ? __pfx___might_resched+0x10/0x10
[  110.571197][ T6196]  ? fs_reclaim_acquire+0x7d/0x100
[  110.571223][ T6196]  should_fail_ex+0x414/0x560
[  110.571263][ T6196]  should_failslab+0xa8/0x100
[  110.571288][ T6196]  kmem_cache_alloc_node_noprof+0x77/0x710
[  110.571320][ T6196]  ? __alloc_skb+0x255/0x430
[  110.571341][ T6196]  ? napi_skb_cache_get+0x4a5/0x790
[  110.571362][ T6196]  ? napi_skb_cache_get+0x151/0x790
[  110.571390][ T6196]  __alloc_skb+0x255/0x430
[  110.571417][ T6196]  ? __pfx___alloc_skb+0x10/0x10
[  110.571443][ T6196]  ? netlink_autobind+0xdb/0x300
[  110.571481][ T6196]  ? netlink_autobind+0x2c2/0x300
[  110.571510][ T6196]  netlink_sendmsg+0x5c6/0xb30
[  110.571540][ T6196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.571571][ T6196]  ? aa_sock_msg_perm+0xf1/0x1d0
[  110.571607][ T6196]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.571629][ T6196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  110.571656][ T6196]  __sock_sendmsg+0x21c/0x270
[  110.571698][ T6196]  ____sys_sendmsg+0x505/0x830
[  110.571731][ T6196]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.571768][ T6196]  ? import_iovec+0x74/0xa0
[  110.571799][ T6196]  ___sys_sendmsg+0x21f/0x2a0
[  110.571828][ T6196]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.571895][ T6196]  ? __fget_files+0x2a/0x420
[  110.571916][ T6196]  ? __fget_files+0x3a0/0x420
[  110.571949][ T6196]  __x64_sys_sendmsg+0x19b/0x260
[  110.571983][ T6196]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  110.572021][ T6196]  ? __pfx_ksys_write+0x10/0x10
[  110.572057][ T6196]  ? do_syscall_64+0xbe/0xfa0
[  110.572084][ T6196]  do_syscall_64+0xfa/0xfa0
[  110.572106][ T6196]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.572137][ T6196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.572159][ T6196]  ? clear_bhb_loop+0x60/0xb0
[  110.572186][ T6196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.572208][ T6196] RIP: 0033:0x7f7b14d8f749
[  110.572227][ T6196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.572246][ T6196] RSP: 002b:00007f7b15cc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.572269][ T6196] RAX: ffffffffffffffda RBX: 00007f7b14fe5fa0 RCX: 00007f7b14d8f749
[  110.572285][ T6196] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  110.572299][ T6196] RBP: 00007f7b15cc2090 R08: 0000000000000000 R09: 0000000000000000
[  110.572311][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.572323][ T6196] R13: 00007f7b14fe6038 R14: 00007f7b14fe5fa0 R15: 00007fff8ea772e8
[  110.572359][ T6196]  </TASK>
[  111.182849][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.201291][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[  111.388630][ T6218] netlink: 'syz.4.91': attribute type 39 has an invalid length.
[  111.563560][ T6228] netlink: 96 bytes leftover after parsing attributes in process `syz.1.94'.
[  111.665449][ T6225] netlink: 'syz.2.93': attribute type 16 has an invalid length.
[  111.715692][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.720688][ T6225] netlink: 'syz.2.93': attribute type 17 has an invalid length.
[  111.769336][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.123458][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.202533][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.96'.
[  112.211698][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  112.916600][ T6255] FAULT_INJECTION: forcing a failure.
[  112.916600][ T6255] name failslab, interval 1, probability 0, space 0, times 0
[  112.929413][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) 
[  112.929442][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  112.929454][ T6255] Call Trace:
[  112.929462][ T6255]  <TASK>
[  112.929472][ T6255]  dump_stack_lvl+0x189/0x250
[  112.929509][ T6255]  ? __pfx____ratelimit+0x10/0x10
[  112.929531][ T6255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.929562][ T6255]  ? __pfx__printk+0x10/0x10
[  112.929593][ T6255]  ? kasan_quarantine_put+0xdd/0x220
[  112.929627][ T6255]  should_fail_ex+0x414/0x560
[  112.929667][ T6255]  should_failslab+0xa8/0x100
[  112.929703][ T6255]  kmem_cache_alloc_noprof+0x74/0x6e0
[  112.929736][ T6255]  ? skb_clone+0x212/0x3a0
[  112.929770][ T6255]  skb_clone+0x212/0x3a0
[  112.929804][ T6255]  bpf_clone_redirect+0xad/0x3d0
[  112.929846][ T6255]  ? bpf_test_run+0x192/0x7a0
[  112.929870][ T6255]  bpf_prog_4653d16e8163849f+0x22/0x2a
[  112.929891][ T6255]  bpf_test_run+0x313/0x7a0
[  112.929937][ T6255]  ? __pfx_bpf_test_run+0x10/0x10
[  112.929993][ T6255]  ? convert___skb_to_skb+0x3d/0x590
[  112.930020][ T6255]  bpf_prog_test_run_skb+0xb4e/0x1550
[  112.930053][ T6255]  ? __fget_files+0x2a/0x420
[  112.930081][ T6255]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  112.930107][ T6255]  bpf_prog_test_run+0x2c7/0x340
[  112.930136][ T6255]  __sys_bpf+0x562/0x860
[  112.930161][ T6255]  ? __pfx___sys_bpf+0x10/0x10
[  112.930202][ T6255]  ? ksys_write+0x22a/0x250
[  112.930236][ T6255]  ? __pfx_ksys_write+0x10/0x10
[  112.930274][ T6255]  __x64_sys_bpf+0x7c/0x90
[  112.930307][ T6255]  do_syscall_64+0xfa/0xfa0
[  112.930338][ T6255]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.930361][ T6255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.930383][ T6255]  ? clear_bhb_loop+0x60/0xb0
[  112.930410][ T6255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.930432][ T6255] RIP: 0033:0x7f1e31f8f749
[  112.930451][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.930469][ T6255] RSP: 002b:00007f1e32e4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  112.930492][ T6255] RAX: ffffffffffffffda RBX: 00007f1e321e5fa0 RCX: 00007f1e31f8f749
[  112.930507][ T6255] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  112.930520][ T6255] RBP: 00007f1e32e4b090 R08: 0000000000000000 R09: 0000000000000000
[  112.930533][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  112.930546][ T6255] R13: 00007f1e321e6038 R14: 00007f1e321e5fa0 R15: 00007ffce60f1a18
[  112.930583][ T6255]  </TASK>
[  113.276964][ T6249] infiniband syû: set active
[  113.286066][ T6249] infiniband syû: added bond_slave_0
[  113.503423][ T6261] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  113.537542][ T6261] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  113.562185][ T6249] RDS/IB: syû: added
[  113.622828][ T6249] smc: adding ib device syû with port count 1
[  113.657651][ T6249] smc:    ib device syû port 1 has no pnetid
[  115.813406][ T6302] netlink: 'syz.1.120': attribute type 10 has an invalid length.
[  115.822018][ T6302] netlink: 228 bytes leftover after parsing attributes in process `syz.1.120'.
[  119.149511][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'.
[  119.489658][ T6383] netlink: 'syz.1.134': attribute type 3 has an invalid length.
[  119.532264][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.571122][ T6381] bridge_slave_0: left allmulticast mode
[  119.577027][ T6381] bridge_slave_0: left promiscuous mode
[  119.584790][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.607490][ T6381] bridge_slave_1: left allmulticast mode
[  119.690104][ T6381] bridge_slave_1: left promiscuous mode
[  119.719101][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'.
[  119.719868][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.841313][ T6381] bond0: (slave bond_slave_0): Releasing backup interface
[  119.963640][ T6381] bond0: (slave bond_slave_1): Releasing backup interface
[  120.088224][ T6381] team0: Port device team_slave_0 removed
[  120.166610][ T6381] team0: Port device team_slave_1 removed
[  120.168819][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'.
[  120.198888][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.212963][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.340163][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.400557][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.456596][ T6381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  120.519583][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'.
[  120.919276][ T5932] IPVS: starting estimator thread 0...
[  121.026001][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.143'.
[  121.079384][ T6427] IPVS: using max 27 ests per chain, 64800 per kthread
[  121.519806][ T6451] netlink: 'syz.3.149': attribute type 12 has an invalid length.
[  121.570135][ T6451] netlink: 'syz.3.149': attribute type 29 has an invalid length.
[  121.634285][ T6451] netlink: 148 bytes leftover after parsing attributes in process `syz.3.149'.
[  121.654006][ T6451] netlink: 59 bytes leftover after parsing attributes in process `syz.3.149'.
[  122.332262][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.4.156'.
[  122.503580][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'.
[  123.333684][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.165'.
[  123.396645][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.165'.
[  123.794186][ T6515] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[  123.871890][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[  123.909947][ T6515] bond1: entered promiscuous mode
[  123.915532][ T6515] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.924798][ T6517] bond1: entered allmulticast mode
[  124.068279][ T6517] bond1: (slave bridge1): making interface the new active one
[  124.105492][ T6517] bridge1: entered promiscuous mode
[  124.148777][ T6517] bridge1: entered allmulticast mode
[  124.173993][ T6517] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  124.502949][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[  124.558937][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'.
[  125.984622][ T6570] netlink: 'syz.2.180': attribute type 8 has an invalid length.
[  126.752767][ T6556] bridge0: port 3(vlan2) entered blocking state
[  126.760673][ T6556] bridge0: port 3(vlan2) entered disabled state
[  126.767497][ T6556] vlan2: entered allmulticast mode
[  126.781275][ T6556] bridge0: entered allmulticast mode
[  126.830670][ T6556] vlan2: left allmulticast mode
[  126.835594][ T6556] bridge0: left allmulticast mode
[  126.888135][ T6566] netlink: 'syz.4.179': attribute type 4 has an invalid length.
[  127.343949][ T6597] __nla_validate_parse: 3 callbacks suppressed
[  127.343968][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'.
[  127.379109][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'.
[  127.592638][ T6597] bridge_slave_1: left allmulticast mode
[  127.609462][ T6597] bridge_slave_1: left promiscuous mode
[  127.632429][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.678006][ T6597] bridge_slave_0: left allmulticast mode
[  127.684160][ T6597] bridge_slave_0: left promiscuous mode
[  127.698005][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.978880][ T6596] bridge_slave_1: left allmulticast mode
[  127.994464][ T6596] bridge_slave_1: left promiscuous mode
[  128.023641][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.064659][ T6596] bridge_slave_0: left allmulticast mode
[  128.078018][ T6596] bridge_slave_0: left promiscuous mode
[  128.107677][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.618297][ T6634] xt_TPROXY: Can be used only with -p tcp or -p udp
[  128.641588][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'.
[  128.684468][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'.
[  128.746488][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'.
[  128.762384][ T6637] netlink: 5 bytes leftover after parsing attributes in process `syz.0.197'.
[  128.772872][ T6637] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  128.808315][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv1
[  128.884393][ T6640] team0: Port device batadv1 added
[  129.091670][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.149273][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.158066][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.205635][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.239347][ T6664] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  129.274907][ T6664] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.627870][ T6675] netlink: 'syz.4.208': attribute type 39 has an invalid length.
[  129.732098][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'.
[  130.165927][ T6693] FAULT_INJECTION: forcing a failure.
[  130.165927][ T6693] name failslab, interval 1, probability 0, space 0, times 0
[  130.219268][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) 
[  130.219297][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  130.219311][ T6693] Call Trace:
[  130.219319][ T6693]  <TASK>
[  130.219328][ T6693]  dump_stack_lvl+0x189/0x250
[  130.219362][ T6693]  ? __pfx____ratelimit+0x10/0x10
[  130.219383][ T6693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.219412][ T6693]  ? __pfx__printk+0x10/0x10
[  130.219438][ T6693]  ? __pfx___might_resched+0x10/0x10
[  130.219462][ T6693]  ? fs_reclaim_acquire+0x7d/0x100
[  130.219489][ T6693]  should_fail_ex+0x414/0x560
[  130.219528][ T6693]  should_failslab+0xa8/0x100
[  130.219552][ T6693]  __kmalloc_cache_noprof+0x6f/0x6f0
[  130.219584][ T6693]  ? nfnetlink_rcv+0xf97/0x2590
[  130.219604][ T6693]  ? __nla_parse+0x40/0x60
[  130.219633][ T6693]  nfnetlink_rcv+0xf97/0x2590
[  130.219695][ T6693]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  130.219741][ T6693]  ? ref_tracker_free+0x63a/0x7d0
[  130.219795][ T6693]  ? __netlink_deliver_tap+0x807/0x850
[  130.219821][ T6693]  ? netlink_deliver_tap+0x2e/0x1b0
[  130.219866][ T6693]  netlink_unicast+0x82f/0x9e0
[  130.219906][ T6693]  ? __pfx_netlink_unicast+0x10/0x10
[  130.219930][ T6693]  ? netlink_sendmsg+0x642/0xb30
[  130.219954][ T6693]  ? skb_put+0x11b/0x210
[  130.219983][ T6693]  netlink_sendmsg+0x805/0xb30
[  130.220020][ T6693]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.220050][ T6693]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.220085][ T6693]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.220107][ T6693]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.220134][ T6693]  __sock_sendmsg+0x21c/0x270
[  130.220170][ T6693]  ____sys_sendmsg+0x505/0x830
[  130.220204][ T6693]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.220241][ T6693]  ? import_iovec+0x74/0xa0
[  130.220275][ T6693]  ___sys_sendmsg+0x21f/0x2a0
[  130.220305][ T6693]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.220371][ T6693]  ? __fget_files+0x2a/0x420
[  130.220392][ T6693]  ? __fget_files+0x3a0/0x420
[  130.220425][ T6693]  __x64_sys_sendmsg+0x19b/0x260
[  130.220456][ T6693]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.220494][ T6693]  ? __pfx_ksys_write+0x10/0x10
[  130.220531][ T6693]  ? do_syscall_64+0xbe/0xfa0
[  130.220559][ T6693]  do_syscall_64+0xfa/0xfa0
[  130.220580][ T6693]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.220603][ T6693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.220625][ T6693]  ? clear_bhb_loop+0x60/0xb0
[  130.220651][ T6693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.220673][ T6693] RIP: 0033:0x7f51d5f8f749
[  130.220692][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.220710][ T6693] RSP: 002b:00007f51d6e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.220732][ T6693] RAX: ffffffffffffffda RBX: 00007f51d61e5fa0 RCX: 00007f51d5f8f749
[  130.220748][ T6693] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  130.220762][ T6693] RBP: 00007f51d6e67090 R08: 0000000000000000 R09: 0000000000000000
[  130.220776][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.220788][ T6693] R13: 00007f51d61e6038 R14: 00007f51d61e5fa0 R15: 00007ffe171c1278
[  130.220825][ T6693]  </TASK>
[  131.473342][ T6723] netlink: 'syz.1.220': attribute type 39 has an invalid length.
[  131.491270][ T6719] netlink: 6 bytes leftover after parsing attributes in process `syz.3.218'.
[  131.640705][ T6719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.830108][ T6755] netlink: 'syz.1.231': attribute type 2 has an invalid length.
[  132.883124][ T6755] : entered promiscuous mode
[  133.656939][ T6781] bridge_slave_0: default FDB implementation only supports local addresses
[  133.696205][ T6781] netlink: 'syz.3.239': attribute type 1 has an invalid length.
[  133.704354][ T6781] netlink: 'syz.3.239': attribute type 7 has an invalid length.
[  133.712827][ T6781] netlink: 'syz.3.239': attribute type 8 has an invalid length.
[  133.729928][ T6781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.239'.
[  134.799645][ T6763] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  134.808515][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout
[  134.822402][ T6763] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  135.709431][ T6763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  135.715490][ T6763] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  135.818561][ T6763] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  135.849939][ T6763] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  135.921995][ T6763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  135.959867][ T6763] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  136.059225][ T6763] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  136.065432][ T6763] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  136.521580][ T6841] netlink: 'syz.3.259': attribute type 1 has an invalid length.
[  136.991955][ T6846] netlink: 'syz.0.261': attribute type 27 has an invalid length.
[  137.714185][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.723307][ T6849] 8021q: adding VLAN 0 to HW filter on device team0
[  137.737843][ T6849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.827629][ T6854] syzkaller0: entered promiscuous mode
[  137.833384][ T6854] syzkaller0: entered allmulticast mode
[  137.840998][   T80] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.859307][   T80] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.891974][   T80] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.920532][   T80] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.244164][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.250973][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  139.730458][   T80] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.740348][   T80] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.749961][   T80] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.759114][   T80] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.900611][ T6895] netlink: 'syz.4.273': attribute type 1 has an invalid length.
[  141.032816][ T6895] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  141.174778][ T6907] team0: Port device bridge0 added
[  199.683264][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.690192][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  261.122209][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  261.129102][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  292.479573][   T31] INFO: task kworker/1:4:5901 blocked for more than 143 seconds.
[  292.487372][   T31]       Not tainted syzkaller #0
[  292.492539][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.501392][   T31] task:kworker/1:4     state:D stack:22952 pid:5901  tgid:5901  ppid:2      task_flags:0x4208060 flags:0x00080000
[  292.513614][   T31] Workqueue: events rfkill_sync_work
[  292.518984][   T31] Call Trace:
[  292.522390][   T31]  <TASK>
[  292.525359][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  292.530196][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.536816][   T31]  ? __pfx___schedule+0x10/0x10
[  292.542485][   T31]  ? preempt_schedule+0xae/0xc0
[  292.548270][   T31]  ? schedule+0x91/0x360
[  292.552737][   T31]  schedule+0x165/0x360
[  292.556971][   T31]  schedule_preempt_disabled+0x13/0x30
[  292.562572][   T31]  __mutex_lock+0x7e6/0x1350
[  292.567218][   T31]  ? __mutex_lock+0x5bb/0x1350
[  292.590425][   T31]  ? rfkill_sync_work+0x2e/0x200
[  292.595450][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  292.621394][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  292.627255][   T31]  rfkill_sync_work+0x2e/0x200
[  292.649260][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  292.655182][   T31]  process_scheduled_works+0xae1/0x17b0
[  292.660928][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  292.667802][   T31]  worker_thread+0x8a0/0xda0
[  292.672575][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.679056][   T31]  ? __kthread_parkme+0x7b/0x200
[  292.684252][   T31]  kthread+0x711/0x8a0
[  292.688339][   T31]  ? __pfx_worker_thread+0x10/0x10
[  292.693612][   T31]  ? __pfx_kthread+0x10/0x10
[  292.698241][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.703683][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.708916][   T31]  ? __pfx_kthread+0x10/0x10
[  292.713674][   T31]  ret_from_fork+0x4bc/0x870
[  292.718383][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  292.723655][   T31]  ? __switch_to_asm+0x39/0x70
[  292.728448][   T31]  ? __switch_to_asm+0x33/0x70
[  292.733420][   T31]  ? __pfx_kthread+0x10/0x10
[  292.738060][   T31]  ret_from_fork_asm+0x1a/0x30
[  292.742907][   T31]  </TASK>
[  292.746058][   T31] INFO: task kworker/1:5:5920 blocked for more than 143 seconds.
[  292.754287][   T31]       Not tainted syzkaller #0
[  292.759337][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.768031][   T31] task:kworker/1:5     state:D stack:24744 pid:5920  tgid:5920  ppid:2      task_flags:0x4208060 flags:0x00080000
[  292.780321][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  292.787034][   T31] Call Trace:
[  292.790372][   T31]  <TASK>
[  292.793332][   T31]  __schedule+0x1798/0x4cc0
[  292.797860][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  292.803345][   T31]  ? __pfx___schedule+0x10/0x10
[  292.808238][   T31]  ? schedule+0x91/0x360
[  292.812554][   T31]  schedule+0x165/0x360
[  292.816737][   T31]  schedule_preempt_disabled+0x13/0x30
[  292.822366][   T31]  __mutex_lock+0x7e6/0x1350
[  292.827005][   T31]  ? __mutex_lock+0x5bb/0x1350
[  292.831845][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  292.838128][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  292.843296][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  292.849060][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  292.854945][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  292.861414][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  292.867181][   T31]  process_scheduled_works+0xae1/0x17b0
[  292.872854][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  292.878872][   T31]  worker_thread+0x8a0/0xda0
[  292.883757][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.890220][   T31]  ? __kthread_parkme+0x7b/0x200
[  292.895211][   T31]  kthread+0x711/0x8a0
[  292.899432][   T31]  ? __pfx_worker_thread+0x10/0x10
[  292.904661][   T31]  ? __pfx_kthread+0x10/0x10
[  292.909337][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.914576][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.919873][   T31]  ? __pfx_kthread+0x10/0x10
[  292.924517][   T31]  ret_from_fork+0x4bc/0x870
[  292.929208][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  292.934354][   T31]  ? __switch_to_asm+0x39/0x70
[  292.939323][   T31]  ? __switch_to_asm+0x33/0x70
[  292.944125][   T31]  ? __pfx_kthread+0x10/0x10
[  292.948751][   T31]  ret_from_fork_asm+0x1a/0x30
[  292.953605][   T31]  </TASK>
[  292.956757][   T31] INFO: task syz.1.231:6753 blocked for more than 143 seconds.
[  292.970756][   T31]       Not tainted syzkaller #0
[  292.975742][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  292.984507][   T31] task:syz.1.231       state:D stack:25960 pid:6753  tgid:6753  ppid:5836   task_flags:0x400040 flags:0x00080002
[  292.996684][   T31] Call Trace:
[  293.000069][   T31]  <TASK>
[  293.003024][   T31]  __schedule+0x1798/0x4cc0
[  293.007569][   T31]  ? validate_chain+0x897/0x2140
[  293.012575][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.017458][   T31]  ? __pfx___schedule+0x10/0x10
[  293.022451][   T31]  ? schedule+0x91/0x360
[  293.026736][   T31]  schedule+0x165/0x360
[  293.030970][   T31]  schedule_timeout+0x9a/0x270
[  293.035781][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  293.041292][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.046532][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.051816][   T31]  ? wait_for_completion+0x267/0x5d0
[  293.057138][   T31]  wait_for_completion+0x2bf/0x5d0
[  293.062374][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  293.068044][   T31]  ? __flush_work+0xd2/0xbc0
[  293.072722][   T31]  ? __flush_work+0xd2/0xbc0
[  293.077345][   T31]  __flush_work+0x9b9/0xbc0
[  293.082163][   T31]  ? __flush_work+0xd2/0xbc0
[  293.086789][   T31]  ? __pfx___flush_work+0x10/0x10
[  293.091938][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  293.097267][   T31]  ? __pfx___cancel_work+0x10/0x10
[  293.102493][   T31]  ? nfc_genl_device_removed+0x23c/0x330
[  293.108182][   T31]  __cancel_work_sync+0xbe/0x110
[  293.113222][   T31]  rfkill_unregister+0x92/0x220
[  293.118109][   T31]  nfc_unregister_device+0x96/0x2a0
[  293.123519][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  293.129329][   T31]  virtual_ncidev_close+0x56/0x90
[  293.134396][   T31]  __fput+0x44c/0xa70
[  293.138418][   T31]  task_work_run+0x1d4/0x260
[  293.143171][   T31]  ? __pfx_task_work_run+0x10/0x10
[  293.148337][   T31]  ? exit_to_user_mode_loop+0x40/0x130
[  293.153985][   T31]  exit_to_user_mode_loop+0xe9/0x130
[  293.159368][   T31]  do_syscall_64+0x2bd/0xfa0
[  293.164025][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.170216][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  293.176404][   T31]  ? clear_bhb_loop+0x60/0xb0
[  293.181177][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.187098][   T31] RIP: 0033:0x7f7b14d8f749
[  293.191812][   T31] RSP: 002b:00007fff8ea77448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  293.200367][   T31] RAX: 0000000000000000 RBX: 00007f7b14fe7da0 RCX: 00007f7b14d8f749
[  293.208375][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  293.216497][   T31] RBP: 00007f7b14fe7da0 R08: 00000000000001fc R09: 0000001e8ea7773f
[  293.224558][   T31] R10: 00007f7b14fe7cb0 R11: 0000000000000246 R12: 0000000000020940
[  293.232626][   T31] R13: 00007f7b14fe5fa0 R14: ffffffffffffffff R15: 00007fff8ea77560
[  293.240841][   T31]  </TASK>
[  293.243887][   T31] INFO: task syz.1.231:6763 blocked for more than 144 seconds.
[  293.256163][   T31]       Not tainted syzkaller #0
[  293.261221][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  293.270062][   T31] task:syz.1.231       state:D stack:26592 pid:6763  tgid:6753  ppid:5836   task_flags:0x400140 flags:0x00080003
[  293.282322][   T31] Call Trace:
[  293.285830][   T31]  <TASK>
[  293.288787][   T31]  __schedule+0x1798/0x4cc0
[  293.293479][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.298515][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.303693][   T31]  ? __pfx___schedule+0x10/0x10
[  293.308582][   T31]  ? schedule+0x91/0x360
[  293.312886][   T31]  schedule+0x165/0x360
[  293.317103][   T31]  schedule_preempt_disabled+0x13/0x30
[  293.322667][   T31]  __mutex_lock+0x7e6/0x1350
[  293.327288][   T31]  ? __mutex_lock+0x5bb/0x1350
[  293.332143][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  293.337462][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  293.342610][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.347839][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  293.353801][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.360294][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  293.366241][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  293.371483][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  293.377242][   T31]  rfkill_set_block+0x1d2/0x440
[  293.382257][   T31]  rfkill_fop_write+0x44b/0x570
[  293.387150][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  293.392604][   T31]  ? security_kernfs_init_security+0x220/0x290
[  293.398794][   T31]  ? rw_verify_area+0x255/0x4d0
[  293.403737][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.408616][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  293.414284][   T31]  vfs_write+0x27e/0xb30
[  293.418629][   T31]  ? __pfx_vfs_write+0x10/0x10
[  293.423537][   T31]  ? __fget_files+0x2a/0x420
[  293.428172][   T31]  ? __fget_files+0x2a/0x420
[  293.432897][   T31]  ? __fget_files+0x3a0/0x420
[  293.437622][   T31]  ? __fget_files+0x2a/0x420
[  293.442861][   T31]  ksys_write+0x145/0x250
[  293.447289][   T31]  ? __pfx_ksys_write+0x10/0x10
[  293.452269][   T31]  ? do_syscall_64+0xbe/0xfa0
[  293.457001][   T31]  do_syscall_64+0xfa/0xfa0
[  293.461623][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.467215][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.473414][   T31]  ? clear_bhb_loop+0x60/0xb0
[  293.478154][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.484377][   T31] RIP: 0033:0x7f7b14d8f749
[  293.488838][   T31] RSP: 002b:00007f7b15ca1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  293.497795][   T31] RAX: ffffffffffffffda RBX: 00007f7b14fe6090 RCX: 00007f7b14d8f749
[  293.505913][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006
[  293.513998][   T31] RBP: 00007f7b14e13f91 R08: 0000000000000000 R09: 0000000000000000
[  293.522264][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.530340][   T31] R13: 00007f7b14fe6128 R14: 00007f7b14fe6090 R15: 00007fff8ea772e8
[  293.538374][   T31]  </TASK>
[  293.541587][   T31] INFO: task syz.0.261:6853 blocked for more than 144 seconds.
[  293.549794][   T31]       Not tainted syzkaller #0
[  293.554866][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  293.563829][   T31] task:syz.0.261       state:D stack:23288 pid:6853  tgid:6845  ppid:5828   task_flags:0x400140 flags:0x00080002
[  293.575937][   T31] Call Trace:
[  293.579385][   T31]  <TASK>
[  293.582366][   T31]  __schedule+0x1798/0x4cc0
[  293.586908][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.591856][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.596735][   T31]  ? __pfx___schedule+0x10/0x10
[  293.601717][   T31]  ? schedule+0x91/0x360
[  293.606042][   T31]  schedule+0x165/0x360
[  293.610330][   T31]  schedule_preempt_disabled+0x13/0x30
[  293.615830][   T31]  __mutex_lock+0x7e6/0x1350
[  293.620527][   T31]  ? rcu_is_watching+0x15/0xb0
[  293.625324][   T31]  ? __mutex_lock+0x5bb/0x1350
[  293.630429][   T31]  ? rfkill_register+0x37/0x8e0
[  293.635311][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  293.640419][   T31]  ? netdev_run_todo+0xe1d/0xea0
[  293.645409][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.650730][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  293.656066][   T31]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  293.661837][   T31]  rfkill_register+0x37/0x8e0
[  293.666555][   T31]  wiphy_register+0x246a/0x2d20
[  293.671625][   T31]  ? __pfx_wiphy_register+0x10/0x10
[  293.676921][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  293.682419][   T31]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  293.687566][   T31]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  293.693715][   T31]  ieee80211_register_hw+0x3473/0x40d0
[  293.699309][   T31]  ? ieee80211_register_hw+0x1461/0x40d0
[  293.704988][   T31]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  293.710858][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  293.716795][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  293.722824][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.729272][   T31]  ? __hrtimer_setup+0x187/0x210
[  293.734255][   T31]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  293.740382][   T31]  mac80211_hwsim_new_radio+0x2f9a/0x5260
[  293.746164][   T31]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  293.752325][   T31]  ? __nla_validate_parse+0x2400/0x2d40
[  293.757904][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  293.763375][   T31]  hwsim_new_radio_nl+0xf5b/0x1bd0
[  293.768540][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  293.774401][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  293.780067][   T31]  ? rcu_is_watching+0x15/0xb0
[  293.784881][   T31]  ? __nla_parse+0x40/0x60
[  293.789365][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  293.795744][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  293.801424][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  293.807647][   T31]  ? bpf_lsm_capable+0x9/0x20
[  293.812455][   T31]  ? security_capable+0x7e/0x2e0
[  293.817447][   T31]  genl_rcv_msg+0x60e/0x790
[  293.822080][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  293.827145][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  293.832780][   T31]  netlink_rcv_skb+0x208/0x470
[  293.837576][   T31]  ? __lock_acquire+0xab9/0xd20
[  293.842858][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  293.847963][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.853621][   T31]  ? down_read+0x1ad/0x2e0
[  293.858091][   T31]  genl_rcv+0x28/0x40
[  293.862325][   T31]  netlink_unicast+0x82f/0x9e0
[  293.867219][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  293.872778][   T31]  ? netlink_sendmsg+0x642/0xb30
[  293.877872][   T31]  ? skb_put+0x11b/0x210
[  293.882277][   T31]  netlink_sendmsg+0x805/0xb30
[  293.887092][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.892479][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  293.897471][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  293.902882][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.908214][   T31]  __sock_sendmsg+0x21c/0x270
[  293.913000][   T31]  ____sys_sendmsg+0x505/0x830
[  293.917814][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.923496][   T31]  ? import_iovec+0x74/0xa0
[  293.928140][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  293.932956][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.938283][   T31]  ? __fget_files+0x2a/0x420
[  293.943006][   T31]  ? __fget_files+0x3a0/0x420
[  293.947736][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  293.952865][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.958385][   T31]  ? do_syscall_64+0xbe/0xfa0
[  293.963373][   T31]  do_syscall_64+0xfa/0xfa0
[  293.967916][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.973238][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.979483][   T31]  ? clear_bhb_loop+0x60/0xb0
[  293.984199][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.990168][   T31] RIP: 0033:0x7f566818f749
[  293.994614][   T31] RSP: 002b:00007f56663b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.003385][   T31] RAX: ffffffffffffffda RBX: 00007f56683e6180 RCX: 00007f566818f749
[  294.011738][   T31] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  294.019868][   T31] RBP: 00007f5668213f91 R08: 0000000000000000 R09: 0000000000000000
[  294.027962][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.035994][   T31] R13: 00007f56683e6218 R14: 00007f56683e6180 R15: 00007fffe6eb40c8
[  294.044064][   T31]  </TASK>
[  294.047142][   T31] INFO: task syz.2.275:6903 blocked for more than 144 seconds.
[  294.054870][   T31]       Not tainted syzkaller #0
[  294.060093][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.068791][   T31] task:syz.2.275       state:D stack:28144 pid:6903  tgid:6902  ppid:5835   task_flags:0x400040 flags:0x00080002
[  294.081020][   T31] Call Trace:
[  294.084334][   T31]  <TASK>
[  294.087274][   T31]  __schedule+0x1798/0x4cc0
[  294.091928][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.096818][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.101884][   T31]  ? __pfx___schedule+0x10/0x10
[  294.106785][   T31]  ? schedule+0x91/0x360
[  294.111171][   T31]  schedule+0x165/0x360
[  294.115483][   T31]  schedule_preempt_disabled+0x13/0x30
[  294.121152][   T31]  __mutex_lock+0x7e6/0x1350
[  294.125777][   T31]  ? __mutex_lock+0x5bb/0x1350
[  294.130632][   T31]  ? genl_rcv_msg+0x10d/0x790
[  294.135359][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  294.140492][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  294.145910][   T31]  ? radix_tree_lookup+0x240/0x290
[  294.151129][   T31]  genl_rcv_msg+0x10d/0x790
[  294.155677][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.160911][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  294.165983][   T31]  ? __asan_memcpy+0x40/0x70
[  294.170785][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  294.176189][   T31]  netlink_rcv_skb+0x208/0x470
[  294.181067][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.185953][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.191110][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.196456][   T31]  ? down_read+0x1ad/0x2e0
[  294.201123][   T31]  genl_rcv+0x28/0x40
[  294.205296][   T31]  netlink_unicast+0x82f/0x9e0
[  294.210205][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  294.215522][   T31]  ? netlink_sendmsg+0x642/0xb30
[  294.220582][   T31]  ? skb_put+0x11b/0x210
[  294.224857][   T31]  netlink_sendmsg+0x805/0xb30
[  294.229701][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.235083][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.240137][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.245445][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.250929][   T31]  __sock_sendmsg+0x21c/0x270
[  294.256349][   T31]  __sys_sendto+0x3bd/0x520
[  294.261081][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  294.266138][   T31]  ? count_memcg_event_mm+0x21/0x260
[  294.271535][   T31]  ? exc_page_fault+0x82/0x100
[  294.276364][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  294.281985][   T31]  __x64_sys_sendto+0xde/0x100
[  294.286866][   T31]  do_syscall_64+0xfa/0xfa0
[  294.291463][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.296689][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.302859][   T31]  ? clear_bhb_loop+0x60/0xb0
[  294.307662][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.313864][   T31] RIP: 0033:0x7f1e31f915dc
[  294.318320][   T31] RSP: 002b:00007f1e32e49ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  294.326938][   T31] RAX: ffffffffffffffda RBX: 00007f1e32e49fc0 RCX: 00007f1e31f915dc
[  294.335163][   T31] RDX: 0000000000000020 RSI: 00007f1e32e4a010 RDI: 0000000000000003
[  294.343258][   T31] RBP: 0000000000000000 R08: 00007f1e32e49f14 R09: 000000000000000c
[  294.351319][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  294.359393][   T31] R13: 00007f1e32e49f68 R14: 00007f1e32e4a010 R15: 0000000000000000
[  294.367413][   T31]  </TASK>
[  294.370533][   T31] INFO: task syz.3.276:6907 blocked for more than 145 seconds.
[  294.378097][   T31]       Not tainted syzkaller #0
[  294.383205][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.392003][   T31] task:syz.3.276       state:D stack:21880 pid:6907  tgid:6906  ppid:5842   task_flags:0x400140 flags:0x00080002
[  294.404115][   T31] Call Trace:
[  294.407749][   T31]  <TASK>
[  294.410987][   T31]  __schedule+0x1798/0x4cc0
[  294.415670][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.420937][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.425827][   T31]  ? __pfx___schedule+0x10/0x10
[  294.430781][   T31]  ? schedule+0x91/0x360
[  294.435055][   T31]  schedule+0x165/0x360
[  294.439352][   T31]  schedule_preempt_disabled+0x13/0x30
[  294.444841][   T31]  __mutex_lock+0x7e6/0x1350
[  294.449520][   T31]  ? __mutex_lock+0x5bb/0x1350
[  294.454351][   T31]  ? genl_rcv_msg+0x10d/0x790
[  294.459189][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  294.464275][   T31]  ? stack_trace_save+0x9c/0xe0
[  294.469242][   T31]  ? stack_trace_save+0x9c/0xe0
[  294.474169][   T31]  ? radix_tree_lookup+0x240/0x290
[  294.479547][   T31]  genl_rcv_msg+0x10d/0x790
[  294.484112][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.488980][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.494125][   T31]  netlink_rcv_skb+0x208/0x470
[  294.498930][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.503916][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.508999][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.514418][   T31]  ? down_read+0x1ad/0x2e0
[  294.518884][   T31]  genl_rcv+0x28/0x40
[  294.523017][   T31]  netlink_unicast+0x82f/0x9e0
[  294.527824][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  294.533415][   T31]  ? netlink_sendmsg+0x642/0xb30
[  294.538394][   T31]  ? skb_put+0x11b/0x210
[  294.542758][   T31]  netlink_sendmsg+0x805/0xb30
[  294.547561][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.552928][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.557911][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.563341][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.568672][   T31]  __sock_sendmsg+0x21c/0x270
[  294.573560][   T31]  __sys_sendto+0x3bd/0x520
[  294.578132][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  294.583286][   T31]  ? count_memcg_event_mm+0x21/0x260
[  294.588657][   T31]  ? exc_page_fault+0x82/0x100
[  294.593526][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  294.598866][   T31]  __x64_sys_sendto+0xde/0x100
[  294.603726][   T31]  do_syscall_64+0xfa/0xfa0
[  294.608252][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.613582][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.619867][   T31]  ? clear_bhb_loop+0x60/0xb0
[  294.624685][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.630664][   T31] RIP: 0033:0x7f51d5f915dc
[  294.635135][   T31] RSP: 002b:00007f51d6e65ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  294.643963][   T31] RAX: ffffffffffffffda RBX: 00007f51d6e65fc0 RCX: 00007f51d5f915dc
[  294.652154][   T31] RDX: 0000000000000024 RSI: 00007f51d6e66010 RDI: 0000000000000006
[  294.660227][   T31] RBP: 0000000000000000 R08: 00007f51d6e65f14 R09: 000000000000000c
[  294.668234][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  294.676321][   T31] R13: 00007f51d6e65f68 R14: 00007f51d6e66010 R15: 0000000000000000
[  294.684392][   T31]  </TASK>
[  294.687438][   T31] INFO: task syz.4.279:6918 blocked for more than 145 seconds.
[  294.695056][   T31]       Not tainted syzkaller #0
[  294.700095][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  294.708775][   T31] task:syz.4.279       state:D stack:26984 pid:6918  tgid:6917  ppid:5829   task_flags:0x400040 flags:0x00080002
[  294.720845][   T31] Call Trace:
[  294.724163][   T31]  <TASK>
[  294.727125][   T31]  __schedule+0x1798/0x4cc0
[  294.731754][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.736654][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.741623][   T31]  ? __pfx___schedule+0x10/0x10
[  294.746602][   T31]  ? schedule+0x91/0x360
[  294.751127][   T31]  schedule+0x165/0x360
[  294.755317][   T31]  schedule_preempt_disabled+0x13/0x30
[  294.760869][   T31]  __mutex_lock+0x7e6/0x1350
[  294.765502][   T31]  ? __mutex_lock+0x5bb/0x1350
[  294.770353][   T31]  ? genl_rcv_msg+0x10d/0x790
[  294.775079][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  294.780505][   T31]  ? __pfx___dev_queue_xmit+0x10/0x10
[  294.785953][   T31]  ? radix_tree_lookup+0x240/0x290
[  294.791179][   T31]  genl_rcv_msg+0x10d/0x790
[  294.795745][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.800890][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  294.805947][   T31]  ? __asan_memcpy+0x40/0x70
[  294.810616][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  294.816033][   T31]  netlink_rcv_skb+0x208/0x470
[  294.820916][   T31]  ? __lock_acquire+0xab9/0xd20
[  294.825795][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.830923][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.836255][   T31]  ? down_read+0x1ad/0x2e0
[  294.840815][   T31]  genl_rcv+0x28/0x40
[  294.844834][   T31]  netlink_unicast+0x82f/0x9e0
[  294.849896][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  294.855229][   T31]  ? netlink_sendmsg+0x642/0xb30
[  294.860761][   T31]  ? skb_put+0x11b/0x210
[  294.865123][   T31]  netlink_sendmsg+0x805/0xb30
[  294.869991][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.875412][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  294.880448][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  294.885761][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.891126][   T31]  __sock_sendmsg+0x21c/0x270
[  294.895848][   T31]  ____sys_sendmsg+0x505/0x830
[  294.900727][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.906055][   T31]  ? import_iovec+0x74/0xa0
[  294.910631][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  294.915348][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.920694][   T31]  ? __fget_files+0x2a/0x420
[  294.925432][   T31]  ? __fget_files+0x3a0/0x420
[  294.930505][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  294.935497][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.941078][   T31]  ? do_syscall_64+0xbe/0xfa0
[  294.945798][   T31]  do_syscall_64+0xfa/0xfa0
[  294.950385][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.955644][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.961996][   T31]  ? clear_bhb_loop+0x60/0xb0
[  294.966718][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.972884][   T31] RIP: 0033:0x7fc4eb38f749
[  294.977350][   T31] RSP: 002b:00007fc4ec2ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.985898][   T31] RAX: ffffffffffffffda RBX: 00007fc4eb5e5fa0 RCX: 00007fc4eb38f749
[  294.993952][   T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  295.002051][   T31] RBP: 00007fc4eb413f91 R08: 0000000000000000 R09: 0000000000000000
[  295.010102][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.018198][   T31] R13: 00007fc4eb5e6038 R14: 00007fc4eb5e5fa0 R15: 00007ffc68476e98
[  295.026460][   T31]  </TASK>
[  295.029559][   T31] INFO: task syz-executor:6920 blocked for more than 145 seconds.
[  295.037418][   T31]       Not tainted syzkaller #0
[  295.042851][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  295.051898][   T31] task:syz-executor    state:D stack:28008 pid:6920  tgid:6920  ppid:1      task_flags:0x400040 flags:0x00080000
[  295.063993][   T31] Call Trace:
[  295.067388][   T31]  <TASK>
[  295.070401][   T31]  __schedule+0x1798/0x4cc0
[  295.075058][   T31]  ? __lock_acquire+0xab9/0xd20
[  295.080153][   T31]  ? __lock_acquire+0xab9/0xd20
[  295.085067][   T31]  ? __pfx___schedule+0x10/0x10
[  295.090118][   T31]  ? schedule+0x91/0x360
[  295.094393][   T31]  schedule+0x165/0x360
[  295.098555][   T31]  schedule_preempt_disabled+0x13/0x30
[  295.104191][   T31]  __mutex_lock+0x7e6/0x1350
[  295.108823][   T31]  ? __mutex_lock+0x5bb/0x1350
[  295.114006][   T31]  ? rfkill_register+0x37/0x8e0
[  295.118978][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  295.124222][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  295.129731][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  295.135179][   T31]  ? device_initialize+0x24b/0x440
[  295.140427][   T31]  rfkill_register+0x37/0x8e0
[  295.145245][   T31]  hci_register_dev+0x3f5/0x890
[  295.150242][   T31]  vhci_create_device+0x39c/0x650
[  295.155316][   T31]  vhci_write+0x3ce/0x4a0
[  295.159787][   T31]  vfs_write+0x5c9/0xb30
[  295.164093][   T31]  ? __pfx_vhci_write+0x10/0x10
[  295.168988][   T31]  ? __pfx_vfs_write+0x10/0x10
[  295.174037][   T31]  ? count_memcg_event_mm+0x21/0x260
[  295.179487][   T31]  ksys_write+0x145/0x250
[  295.183856][   T31]  ? __pfx_ksys_write+0x10/0x10
[  295.188736][   T31]  ? do_syscall_64+0xbe/0xfa0
[  295.193523][   T31]  do_syscall_64+0xfa/0xfa0
[  295.198067][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.203673][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.209882][   T31]  ? clear_bhb_loop+0x60/0xb0
[  295.214610][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.220639][   T31] RIP: 0033:0x7f606fd8e1c0
[  295.225182][   T31] RSP: 002b:00007ffd66e69308 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  295.233682][   T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f606fd8e1c0
[  295.241772][   T31] RDX: 0000000000000002 RSI: 00007ffd66e6931a RDI: 00000000000000ca
[  295.249841][   T31] RBP: 00007f606ffe67b8 R08: 0000000000000000 R09: 00007f6070b1d6c0
[  295.257852][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  295.265974][   T31] R13: 0000000000000003 R14: 00007ffd66e69668 R15: 0000000000000000
[  295.274114][   T31]  </TASK>
[  295.277258][   T31] 
[  295.277258][   T31] Showing all locks held in the system:
[  295.285159][   T31] 1 lock held by khungtaskd/31:
[  295.290102][   T31]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  295.300107][   T31] 5 locks held by kworker/u8:3/37:
[  295.305256][   T31]  #0: ffff8880b883a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  295.315515][   T31]  #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  295.324546][   T31]  #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  295.333661][   T31]  #3: ffffffff99a88568 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  295.344075][   T31]  #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[  295.353870][   T31] 2 locks held by getty/5589:
[  295.358556][   T31]  #0: ffff88814dcf80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  295.368913][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  295.379358][   T31] 3 locks held by kworker/1:4/5901:
[  295.384584][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  295.395632][   T31]  #1: ffffc9000a98fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  295.408134][   T31]  #2: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200
[  295.418256][   T31] 3 locks held by kworker/1:5/5920:
[  295.423761][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  295.434872][   T31]  #1: ffffc9000ab07ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  295.448813][   T31]  #2: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  295.460595][   T31] 1 lock held by syz.1.231/6753:
[  295.465571][   T31]  #0: ffff888054c57100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  295.475451][   T31] 2 locks held by syz.1.231/6763:
[  295.480519][   T31]  #0: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  295.490727][   T31]  #1: ffff888054c57100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  295.500504][   T31] 3 locks held by syz.0.261/6853:
[  295.505549][   T31]  #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.513837][   T31]  #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.523043][   T31]  #2: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.533521][   T31] 2 locks held by syz.2.275/6903:
[  295.538575][   T31]  #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.546905][   T31]  #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.556048][   T31] 2 locks held by syz.3.276/6907:
[  295.561171][   T31]  #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.569484][   T31]  #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.578607][   T31] 2 locks held by syz.4.279/6918:
[  295.583688][   T31]  #0: ffffffff8f332630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  295.592039][   T31]  #1: ffffffff8f332448 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  295.601216][   T31] 2 locks held by syz-executor/6920:
[  295.606680][   T31]  #0: ffff88807e36f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.616857][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.627012][   T31] 2 locks held by syz-executor/6923:
[  295.632379][   T31]  #0: ffff88804a55f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.642678][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.652772][   T31] 2 locks held by syz-executor/6926:
[  295.658218][   T31]  #0: ffff888026fe7918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.668378][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.678440][   T31] 2 locks held by syz-executor/6928:
[  295.683867][   T31]  #0: ffff88807f2bd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.694020][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.704080][   T31] 2 locks held by syz-executor/6930:
[  295.709473][   T31]  #0: ffff88807f2bc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.719961][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.730151][   T31] 2 locks held by syz-executor/6936:
[  295.735723][   T31]  #0: ffff8880302bd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.745958][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.756517][   T31] 2 locks held by syz-executor/6939:
[  295.761877][   T31]  #0: ffff8880302bf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.772069][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.782520][   T31] 2 locks held by syz-executor/6942:
[  295.787835][   T31]  #0: ffff88802ec5e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.798036][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.808169][   T31] 2 locks held by syz-executor/6945:
[  295.813536][   T31]  #0: ffff88802673b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.823646][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.833696][   T31] 2 locks held by syz-executor/6947:
[  295.839008][   T31]  #0: ffff88804b567118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.849169][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.859457][   T31] 2 locks held by syz-executor/6953:
[  295.864778][   T31]  #0: ffff8880566bd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.875149][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.885206][   T31] 2 locks held by syz-executor/6956:
[  295.890635][   T31]  #0: ffff8880223b4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.901374][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.911645][   T31] 2 locks held by syz-executor/6959:
[  295.916967][   T31]  #0: ffff888054bdb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.927183][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.937333][   T31] 2 locks held by syz-executor/6961:
[  295.942699][   T31]  #0: ffff88804bffe118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.952916][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.963033][   T31] 2 locks held by syz-executor/6963:
[  295.968336][   T31]  #0: ffff888049dc4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  295.978675][   T31]  #1: ffffffff8f5ad108 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  295.988740][   T31] 
[  295.991129][   T31] =============================================
[  295.991129][   T31] 
[  295.999803][   T31] NMI backtrace for cpu 1
[  295.999826][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  295.999850][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  295.999863][   T31] Call Trace:
[  295.999872][   T31]  <TASK>
[  295.999880][   T31]  dump_stack_lvl+0x189/0x250
[  295.999917][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.999949][   T31]  ? __pfx__printk+0x10/0x10
[  295.999985][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  296.000020][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  296.000053][   T31]  ? __pfx__printk+0x10/0x10
[  296.000080][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  296.000118][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  296.000152][   T31]  watchdog+0xf60/0xfa0
[  296.000181][   T31]  ? watchdog+0x1e2/0xfa0
[  296.000210][   T31]  kthread+0x711/0x8a0
[  296.000243][   T31]  ? __pfx_watchdog+0x10/0x10
[  296.000264][   T31]  ? __pfx_kthread+0x10/0x10
[  296.000296][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.000330][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.000351][   T31]  ? __pfx_kthread+0x10/0x10
[  296.000382][   T31]  ret_from_fork+0x4bc/0x870
[  296.000406][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  296.000437][   T31]  ? __switch_to_asm+0x39/0x70
[  296.000456][   T31]  ? __switch_to_asm+0x33/0x70
[  296.000473][   T31]  ? __pfx_kthread+0x10/0x10
[  296.000505][   T31]  ret_from_fork_asm+0x1a/0x30
[  296.000544][   T31]  </TASK>
[  296.000552][   T31] Sending NMI from CPU 1 to CPUs 0:
[  296.146926][    C0] NMI backtrace for cpu 0
[  296.146958][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  296.146981][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  296.146993][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  296.147027][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 20 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  296.147044][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[  296.147062][    C0] RAX: 92194240c243e200 RBX: ffffffff81967b47 RCX: 92194240c243e200
[  296.147078][    C0] RDX: 0000000000000001 RSI: ffffffff8d7113f9 RDI: ffffffff8bbf08e0
[  296.147092][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb
[  296.147107][    C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d0470
[  296.147122][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40
[  296.147135][    C0] FS:  0000000000000000(0000) GS:ffff888126135000(0000) knlGS:0000000000000000
[  296.147151][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  296.147165][    C0] CR2: 00007f2a63742bd0 CR3: 000000000dd38000 CR4: 00000000003526f0
[  296.147183][    C0] Call Trace:
[  296.147191][    C0]  <TASK>
[  296.147198][    C0]  default_idle+0x13/0x20
[  296.147222][    C0]  default_idle_call+0x73/0xb0
[  296.147248][    C0]  do_idle+0x1e7/0x510
[  296.147272][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  296.147295][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.147317][    C0]  ? __pfx_do_idle+0x10/0x10
[  296.147344][    C0]  ? do_idle+0xa/0x510
[  296.147372][    C0]  cpu_startup_entry+0x44/0x60
[  296.147394][    C0]  rest_init+0x2de/0x300
[  296.147422][    C0]  start_kernel+0x3ae/0x410
[  296.147455][    C0]  x86_64_start_reservations+0x24/0x30
[  296.147480][    C0]  x86_64_start_kernel+0x143/0x1c0
[  296.147504][    C0]  common_startup_64+0x13e/0x147
[  296.147543][    C0]  </TASK>