last executing test programs:

32.36610232s ago: executing program 2 (id=3):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)

32.276513743s ago: executing program 4 (id=5):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000f58f71186900000000007e050000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
lsetxattr$security_evm(0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x2, 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)

30.726387007s ago: executing program 4 (id=9):
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000580"], 0x3c}}, 0x0)

30.424499627s ago: executing program 2 (id=10):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x31, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r2}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x301042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0xff40)
write$ppp(r3, &(0x7f0000000200)="bc72", 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011002527dab403a09032640840102030109029c02010e05a00c09060000000000000006240600002405240030000d240f01000100000000ff00090c2407a2090001000004090008241c09000e000109050402bf05070d101e08eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc072501027fff0709050f1020000b4f0022221b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a20709c99a84536409050202ff0307081009050a1010000aaa07072501800307000725010006070209058a1020000f00040725010282060009050003000400430007250182060300072501029d00000905070c00027f0ce70725010007090009050c0c40000906080905073600040207076f07e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb2a61e845e942814d29a0c2061076a3289e09050308ff0307070e09050e10200007070d09050403ff030a3a689801e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc090580030002050502072501808108005d0681d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab8401243117ad3"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000600)={0xa0000013})
close_range(r5, r6, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

30.334342245s ago: executing program 4 (id=11):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
socket$inet(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd)
r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x40042, 0x0)
pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0x2)

27.644884147s ago: executing program 4 (id=12):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)
r0 = gettid()
timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)

26.965134893s ago: executing program 2 (id=16):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)

25.350581037s ago: executing program 2 (id=18):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)

25.261375925s ago: executing program 3 (id=19):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(0x0, 0x9, 0x1e3a00)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r4, 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0)

23.010892803s ago: executing program 4 (id=20):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x31, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r2}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x301042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0xff40)
write$ppp(r3, &(0x7f0000000200)="bc72", 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000600)={0xa0000013})
close_range(r5, r6, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0xee01, &(0x7f0000000180)='./file0\x00')

22.950342282s ago: executing program 3 (id=21):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}})

22.25027061s ago: executing program 2 (id=24):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x58}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r6=>0x0, 0x29, 0x9, 0x1, 0xfa, 0x7, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0xffffffff, 0x8}})
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0xc, r6, 0x2b, r5}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}], 0x1)

20.874807443s ago: executing program 1 (id=27):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000f58f71186900000000007e050000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)

19.579857741s ago: executing program 1 (id=28):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
fstatfs(r2, &(0x7f0000000340)=""/168)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

18.537334258s ago: executing program 3 (id=30):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
fstatfs(r2, &(0x7f0000000340)=""/168)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

12.018818319s ago: executing program 0 (id=33):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48)
socket$inet(0xa, 0x1, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd)
r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/profiling', 0x40042, 0x0)
pwritev(r5, &(0x7f0000000500)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0x2)

11.962231537s ago: executing program 1 (id=34):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
keyctl$update(0x2, 0x0, &(0x7f0000000800)="571a92dd45a45a1ecc3f0162aaae97636f3d0f7cc778234abdbd5e59aeef65369e6e47264fe4d9ebcea825084136f3fd177c5e650800000000000000558d8ab1c6809ff08c42d60c8c949263dcda7e04329188dccffbf4125aeaae6b25d0eefa746a14b3045ba7cfe88aeba44bbc5a670c7262f11d5298244c68bf49dcb798630908ce35817522d0e92ca37806d793d82e33494df4fd52d2424bf95e0771e51069c74d082db4e06674b29700edb48f62ed253d250dd03e1597ca41df4190000000", 0xc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000100)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

10.354627704s ago: executing program 0 (id=35):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$inet6(0xa, 0x800000000000002, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$can_j1939(0x1d, 0x2, 0x7)
io_setup(0x8, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})

8.201854826s ago: executing program 0 (id=36):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(0x0, 0x9, 0x1e3a00)
syz_emit_ethernet(0x76, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c1ff182e8079f39240aaaa613e76c1"}}}}}}}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
shutdown(r4, 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0)

7.678860714s ago: executing program 32 (id=20):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x31, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r2}, 0x18)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x301042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x4)
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r3, 0x0, 0xff40)
write$ppp(r3, &(0x7f0000000200)="bc72", 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r5 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2ae, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000600)={0xa0000013})
close_range(r5, r6, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0xee01, &(0x7f0000000180)='./file0\x00')

7.525828415s ago: executing program 3 (id=38):
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000f58f71186900000000007e050000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)

7.360738102s ago: executing program 1 (id=39):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0x1000, @private=0xa010101}, 0x10, 0x0}, 0x0)

6.155812375s ago: executing program 33 (id=24):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x58}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r6=>0x0, 0x29, 0x9, 0x1, 0xfa, 0x7, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0xffffffff, 0x8}})
bind$xdp(r5, &(0x7f0000000300)={0x2c, 0xc, r6, 0x2b, r5}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
writev(r2, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}], 0x1)

6.146043875s ago: executing program 1 (id=41):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpgrp(0x0)
syz_pidfd_open(r1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)

6.099398903s ago: executing program 3 (id=42):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3.699603786s ago: executing program 0 (id=43):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e120800", 0x2a}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

2.656311923s ago: executing program 0 (id=44):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
fstatfs(r2, &(0x7f0000000340)=""/168)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.053203034s ago: executing program 3 (id=45):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000008c0), 0x4, 0x741b00)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
syz_open_dev$tty1(0xc, 0x4, 0x4)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000340), 0x4)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000802}, 0x8000)
r3 = socket(0x23, 0xa, 0x40000004)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa8000000001400078008001240000000000500150001000000050001000600000005000500020000000500040000000000090002007379"], 0x60}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1b}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r6, 0x0, 0x40008003}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
epoll_create1(0x80000)

2.005875234s ago: executing program 1 (id=46):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$inet6(0xa, 0x800000000000002, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$can_j1939(0x1d, 0x2, 0x7)
io_setup(0x8, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3})

0s ago: executing program 0 (id=47):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
fstatfs(r2, &(0x7f0000000340)=""/168)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
[   90.220732][ T5783] cgroup: Unknown subsys name 'net'
[   90.481895][ T5783] cgroup: Unknown subsys name 'cpuset'
[   90.536647][ T5783] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   92.068541][    T9] cfg80211: failed to load regulatory.db
[   92.511377][ T5783] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   96.280130][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.296747][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.301689][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.305252][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.305293][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.310765][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.312047][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.321433][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.324987][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.327261][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.355294][   T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.397838][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.398999][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.402005][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.402462][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.408296][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.408973][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.410085][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.413957][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.415010][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.420324][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.421853][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.429267][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.444172][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.445589][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   97.549391][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   97.669331][ T5797] chnl_net:caif_netlink_parms(): no params data found
[   97.684501][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   97.819931][ T5798] chnl_net:caif_netlink_parms(): no params data found
[   97.997509][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   98.377902][ T5813] Bluetooth: hci0: command tx timeout
[   98.456103][ T5813] Bluetooth: hci1: command tx timeout
[   98.458931][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.460319][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.460845][ T5810] bridge_slave_0: entered allmulticast mode
[   98.463000][ T5810] bridge_slave_0: entered promiscuous mode
[   98.536125][ T5809] Bluetooth: hci3: command tx timeout
[   98.537397][ T5809] Bluetooth: hci2: command tx timeout
[   98.537563][ T5813] Bluetooth: hci4: command tx timeout
[   98.668873][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.668984][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.669349][ T5810] bridge_slave_1: entered allmulticast mode
[   98.671207][ T5810] bridge_slave_1: entered promiscuous mode
[   98.957085][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.957226][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.957450][ T5797] bridge_slave_0: entered allmulticast mode
[   98.959521][ T5797] bridge_slave_0: entered promiscuous mode
[   99.047293][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.047402][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.047546][ T5802] bridge_slave_0: entered allmulticast mode
[   99.049440][ T5802] bridge_slave_0: entered promiscuous mode
[   99.146994][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.147134][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.147326][ T5797] bridge_slave_1: entered allmulticast mode
[   99.149460][ T5797] bridge_slave_1: entered promiscuous mode
[   99.218536][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.218685][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.218901][ T5802] bridge_slave_1: entered allmulticast mode
[   99.221175][ T5802] bridge_slave_1: entered promiscuous mode
[   99.321598][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.397174][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.397289][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.397426][ T5798] bridge_slave_0: entered allmulticast mode
[   99.399300][ T5798] bridge_slave_0: entered promiscuous mode
[   99.559774][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.657608][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.657761][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.657960][ T5798] bridge_slave_1: entered allmulticast mode
[   99.660319][ T5798] bridge_slave_1: entered promiscuous mode
[   99.817220][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.817414][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.817615][ T5803] bridge_slave_0: entered allmulticast mode
[   99.819718][ T5803] bridge_slave_0: entered promiscuous mode
[   99.912923][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.990785][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.991072][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.991223][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.991398][ T5803] bridge_slave_1: entered allmulticast mode
[   99.993525][ T5803] bridge_slave_1: entered promiscuous mode
[  100.079919][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.149724][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.221776][ T5810] team0: Port device team_slave_0 added
[  100.300873][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.449565][ T5810] team0: Port device team_slave_1 added
[  100.457240][ T5813] Bluetooth: hci0: command tx timeout
[  100.529929][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.537522][ T5813] Bluetooth: hci1: command tx timeout
[  100.610680][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.616480][ T5812] Bluetooth: hci3: command tx timeout
[  100.616593][ T5813] Bluetooth: hci4: command tx timeout
[  100.616680][ T5809] Bluetooth: hci2: command tx timeout
[  100.678908][ T5797] team0: Port device team_slave_0 added
[  100.759452][ T5802] team0: Port device team_slave_0 added
[  100.762363][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.839499][ T5797] team0: Port device team_slave_1 added
[  101.158922][ T5802] team0: Port device team_slave_1 added
[  101.228083][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.228098][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.228126][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.310296][ T5798] team0: Port device team_slave_0 added
[  101.448023][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.448042][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.448070][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.569595][ T5798] team0: Port device team_slave_1 added
[  101.670392][ T5803] team0: Port device team_slave_0 added
[  101.688829][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.688844][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.688863][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.797637][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.797656][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.797675][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.800415][ T5803] team0: Port device team_slave_1 added
[  101.803235][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.803251][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.803271][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.987943][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.987963][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  101.987989][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.178221][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.178240][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.178270][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.340396][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.340412][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.340477][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.344952][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.344971][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.344999][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.509000][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.509022][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  102.509043][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.517079][ T5810] hsr_slave_0: entered promiscuous mode
[  102.518859][ T5810] hsr_slave_1: entered promiscuous mode
[  102.535981][ T5809] Bluetooth: hci0: command tx timeout
[  102.616078][ T5809] Bluetooth: hci1: command tx timeout
[  102.696119][ T5809] Bluetooth: hci2: command tx timeout
[  102.696152][ T5812] Bluetooth: hci3: command tx timeout
[  102.696230][ T5813] Bluetooth: hci4: command tx timeout
[  102.878129][ T5797] hsr_slave_0: entered promiscuous mode
[  102.879104][ T5797] hsr_slave_1: entered promiscuous mode
[  102.879970][ T5797] debugfs: 'hsr0' already exists in 'hsr'
[  102.880059][ T5797] Cannot create hsr debugfs directory
[  102.962949][ T5802] hsr_slave_0: entered promiscuous mode
[  102.964082][ T5802] hsr_slave_1: entered promiscuous mode
[  102.964741][ T5802] debugfs: 'hsr0' already exists in 'hsr'
[  102.964765][ T5802] Cannot create hsr debugfs directory
[  103.353142][ T5798] hsr_slave_0: entered promiscuous mode
[  103.354215][ T5798] hsr_slave_1: entered promiscuous mode
[  103.354874][ T5798] debugfs: 'hsr0' already exists in 'hsr'
[  103.354894][ T5798] Cannot create hsr debugfs directory
[  103.644404][ T5803] hsr_slave_0: entered promiscuous mode
[  103.645365][ T5803] hsr_slave_1: entered promiscuous mode
[  103.648221][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[  103.648266][ T5803] Cannot create hsr debugfs directory
[  104.616054][ T5813] Bluetooth: hci0: command tx timeout
[  104.697235][ T5813] Bluetooth: hci1: command tx timeout
[  104.776091][ T5812] Bluetooth: hci3: command tx timeout
[  104.776139][ T5813] Bluetooth: hci4: command tx timeout
[  104.785977][ T5813] Bluetooth: hci2: command tx timeout
[  104.909514][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.954926][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.990804][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.049319][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.174061][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.223646][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.243658][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.297276][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.447223][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  105.475470][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  105.518654][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  105.572896][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.721112][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.773443][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.802363][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.869255][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.985118][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.024664][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  106.064572][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  106.098969][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  106.137101][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  106.202689][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[  106.263268][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.265567][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.281978][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.320482][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.320599][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.390020][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[  106.431460][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.431613][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.476243][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.484420][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.484582][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.591486][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[  106.621835][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.652858][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.653792][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.712630][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.714682][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.793567][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[  106.821231][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.870121][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.871309][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.923440][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.932171][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.973329][ T5797] 8021q: adding VLAN 0 to HW filter on device team0
[  107.031876][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.032029][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.088030][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.088214][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.171302][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.352445][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.752199][ T5802] veth0_vlan: entered promiscuous mode
[  107.782742][ T5802] veth1_vlan: entered promiscuous mode
[  107.875790][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.970398][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.010374][ T5802] veth0_macvtap: entered promiscuous mode
[  108.040669][ T5802] veth1_macvtap: entered promiscuous mode
[  108.112710][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.130448][ T5810] veth0_vlan: entered promiscuous mode
[  108.165346][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.181357][ T5803] veth0_vlan: entered promiscuous mode
[  108.199771][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.219917][ T5810] veth1_vlan: entered promiscuous mode
[  108.244448][ T5803] veth1_vlan: entered promiscuous mode
[  108.252713][  T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.282051][  T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.293068][  T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.304151][ T5798] veth0_vlan: entered promiscuous mode
[  108.307185][  T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.434319][ T5798] veth1_vlan: entered promiscuous mode
[  108.539572][ T5797] veth0_vlan: entered promiscuous mode
[  108.590783][ T5803] veth0_macvtap: entered promiscuous mode
[  108.633618][ T5797] veth1_vlan: entered promiscuous mode
[  108.651085][ T5803] veth1_macvtap: entered promiscuous mode
[  108.655187][ T5810] veth0_macvtap: entered promiscuous mode
[  108.668350][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.668380][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.710811][ T5810] veth1_macvtap: entered promiscuous mode
[  108.753750][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.767775][ T5798] veth0_macvtap: entered promiscuous mode
[  108.810327][ T5798] veth1_macvtap: entered promiscuous mode
[  108.813294][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.842672][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.842692][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.862779][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.891002][  T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.926537][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.926654][  T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.949141][ T1462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.960807][ T1462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.982660][ T1214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.984955][ T5797] veth0_macvtap: entered promiscuous mode
[  108.994353][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.994447][ T1214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.009809][ T1214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.055726][ T1214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.064870][ T5797] veth1_macvtap: entered promiscuous mode
[  109.074374][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.211762][ T1410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.226312][ T1410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.321974][ T1410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.344038][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.561628][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.647744][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.781774][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.781798][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.868654][   T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.869049][ T1214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.869067][ T1214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.900607][   T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.922911][   T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.926355][   T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.986977][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  109.995923][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.005892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.015888][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.025892][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.035898][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.045909][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.055903][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.065882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  110.075874][    T0] NOHZ tick-stop error: local softirq work is pending, handler #90!!!
[  112.117132][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.117150][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.328847][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.328870][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.560531][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.560555][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.583922][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.583946][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.878964][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.878988][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.321652][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.321675][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.407618][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9'.
[  115.452131][ T5952] kernel profiling enabled (shift: 9)
[  117.396263][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  117.857675][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  117.911647][ T5878] usb 3-1: device descriptor read/all, error -71
[  122.490100][ T5998] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[  122.552336][ T5998] netlink: 'syz.0.22': attribute type 10 has an invalid length.
[  122.589483][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.593125][ T5998] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  122.702587][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.702615][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.723447][  T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.743341][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.743370][ T5998] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.909133][  T981] usb 5-1: unable to get BOS descriptor or descriptor too short
[  122.938168][  T981] usb 5-1: config 14 contains an unexpected descriptor of type 0x1, skipping
[  122.938195][  T981] usb 5-1: config 14 has 0 interfaces, different from the descriptor's value: 1
[  122.945701][  T981] usb 5-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=84.40
[  122.945732][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.945751][  T981] usb 5-1: Product: syz
[  122.945764][  T981] usb 5-1: Manufacturer: Э
[  122.945777][  T981] usb 5-1: SerialNumber: syz
[  123.163205][ T5998] bond0: (slave batadv0): Releasing backup interface
[  123.458606][ T6009] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[  123.678165][ T6009] team0: Port device dummy0 added
[  124.058595][  T981] usb 5-1: USB disconnect, device number 2
[  125.157787][ T6029] netlink: 'syz.0.26': attribute type 10 has an invalid length.
[  126.065236][ T6041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.127350][ T6010] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  126.127376][ T6010] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  126.363043][ T6041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.733059][ T6010] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  126.733086][ T6010] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  129.172436][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout
[  130.796003][ T6071] syz.0.31 (6071) used greatest stack depth: 18544 bytes left
[  131.686163][ T6041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.694947][ T6010] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  131.694971][ T6010] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  131.882587][ T6010] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  131.882614][ T6010] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  131.939479][ T6062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.078197][ T6010] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  132.078224][ T6010] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  132.109409][ T6041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.299519][ T6062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.700837][ T6062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.720204][ T6062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.747586][ T1214] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.882015][ T1214] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.899110][ T6103] tipc: Started in network mode
[  136.899142][ T6103] tipc: Node identity 7f000001, cluster identity 4711
[  136.901261][ T6103] tipc: Enabled bearer <udp:syz2>, priority 10
[  137.041762][ T1214] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.158074][ T1214] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.828007][ T5977] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.828497][ T5977] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.828535][ T5977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.828569][ T5977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.649806][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  138.649919][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  139.012759][ T6068] tipc: Node number set to 2130706433
[  139.049189][ T6142] netlink: 96 bytes leftover after parsing attributes in process `syz.1.41'.
[  141.474139][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.501407][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.087039][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.112035][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.247088][ T6175] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.43'.
[  144.950284][ T5981] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.953320][ T5981] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.953370][ T5981] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.953408][ T5981] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.987719][ T6010] ------------[ cut here ]------------
[  144.987736][ T6010] rtmutex deadlock detected
[  144.987748][ T6010] WARNING: kernel/locking/rtmutex.c:1674 at 0x0, CPU#0: syz.2.24/6010
[  144.987791][ T6010] Modules linked in:
[  144.987834][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  144.987860][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.987878][ T6010] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0
[  144.987913][ T6010] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 66 3b 01 00 48 8d 3d cf eb 08 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 a0 b1 91 4c
[  144.987932][ T6010] RSP: 0018:ffffc9000524f8b0 EFLAGS: 00010286
[  144.987951][ T6010] RAX: 0000000080000000 RBX: ffffc9000524f940 RCX: 0000000000000000
[  144.987967][ T6010] RDX: 0000000000000006 RSI: ffffffff8ce093ac RDI: ffffffff8ede2bf0
[  144.987983][ T6010] RBP: ffffc9000524fa58 R08: ffffffff8edb0977 R09: 1ffffffff1db612e
[  144.988001][ T6010] R10: dffffc0000000000 R11: fffffbfff1db612f R12: 1ffff92000a49f24
[  144.988017][ T6010] R13: ffffffff8ad53b09 R14: ffff8880374d4098 R15: dffffc0000000000
[  144.988034][ T6010] FS:  00007f2701a646c0(0000) GS:ffff888126d06000(0000) knlGS:0000000000000000
[  144.988053][ T6010] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.988069][ T6010] CR2: 00007fc6736a56c0 CR3: 000000003ac28000 CR4: 00000000003526f0
[  144.988088][ T6010] Call Trace:
[  144.988105][ T6010]  <TASK>
[  144.988117][ T6010]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  144.988157][ T6010]  rt_mutex_slowlock+0x666/0x6b0
[  144.988186][ T6010]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  144.988213][ T6010]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  144.988251][ T6010]  ? nfc_dev_down+0x3b/0x290
[  144.988289][ T6010]  ? rt_mutex_slowunlock+0x493/0x8a0
[  144.988321][ T6010]  ? nfc_dev_down+0x3b/0x290
[  144.988349][ T6010]  mutex_lock_nested+0x16a/0x1d0
[  144.988374][ T6010]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  144.988400][ T6010]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  144.988436][ T6010]  nfc_dev_down+0x3b/0x290
[  144.988465][ T6010]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  144.988500][ T6010]  nfc_rfkill_set_block+0x2d/0x100
[  144.988537][ T6010]  rfkill_set_block+0x1e5/0x450
[  144.988571][ T6010]  rfkill_fop_write+0x44e/0x580
[  144.988607][ T6010]  ? __pfx_rfkill_fop_write+0x10/0x10
[  144.988644][ T6010]  ? rw_verify_area+0x25b/0x4e0
[  144.988681][ T6010]  vfs_writev+0x4bf/0x970
[  144.988709][ T6010]  ? __pfx_rfkill_fop_write+0x10/0x10
[  144.988746][ T6010]  ? __pfx_vfs_writev+0x10/0x10
[  144.988786][ T6010]  ? __fget_files+0x2a/0x420
[  144.988817][ T6010]  ? __fget_files+0x3a6/0x420
[  144.988839][ T6010]  ? __fget_files+0x2a/0x420
[  144.988873][ T6010]  do_writev+0x153/0x2d0
[  144.988900][ T6010]  ? __pfx_do_writev+0x10/0x10
[  144.988950][ T6010]  ? do_syscall_64+0xbe/0xf80
[  144.989016][ T6010]  do_syscall_64+0xfa/0xf80
[  144.989051][ T6010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.989074][ T6010]  ? clear_bhb_loop+0x60/0xb0
[  144.989102][ T6010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.989124][ T6010] RIP: 0033:0x7f270383f749
[  144.989143][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.989177][ T6010] RSP: 002b:00007f2701a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  144.989201][ T6010] RAX: ffffffffffffffda RBX: 00007f2703a96180 RCX: 00007f270383f749
[  144.989217][ T6010] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  144.989231][ T6010] RBP: 00007f27038c3f91 R08: 0000000000000000 R09: 0000000000000000
[  144.989245][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.989258][ T6010] R13: 00007f2703a96218 R14: 00007f2703a96180 R15: 00007ffd89b600a8
[  144.989295][ T6010]  </TASK>
[  144.989313][ T6010] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  144.989328][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  144.989354][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  144.989367][ T6010] Call Trace:
[  144.989376][ T6010]  <TASK>
[  144.989384][ T6010]  dump_stack_lvl+0x99/0x250
[  144.989417][ T6010]  ? __asan_memcpy+0x40/0x70
[  144.989447][ T6010]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.989478][ T6010]  ? __pfx__printk+0x10/0x10
[  144.989516][ T6010]  vpanic+0x237/0x6d0
[  144.989548][ T6010]  ? __pfx_vpanic+0x10/0x10
[  144.989577][ T6010]  ? is_bpf_text_address+0x292/0x2b0
[  144.989606][ T6010]  ? is_bpf_text_address+0x26/0x2b0
[  144.989645][ T6010]  panic+0xb9/0xc0
[  144.989675][ T6010]  ? __pfx_panic+0x10/0x10
[  144.989725][ T6010]  __warn+0x317/0x4b0
[  144.989763][ T6010]  __report_bug+0x288/0x500
[  144.989795][ T6010]  ? __lock_acquire+0x6b6/0x2cf0
[  144.989834][ T6010]  ? __pfx___report_bug+0x10/0x10
[  144.989871][ T6010]  ? lockdep_hardirqs_on+0x98/0x140
[  144.989916][ T6010]  report_bug_entry+0x16a/0x220
[  144.989947][ T6010]  ? rt_mutex_handle_deadlock+0x21/0xb0
[  144.989971][ T6010]  ? rt_mutex_handle_deadlock+0x26/0xb0
[  144.989996][ T6010]  handle_bug+0xca/0x200
[  144.990019][ T6010]  exc_invalid_op+0x1a/0x50
[  144.990040][ T6010]  asm_exc_invalid_op+0x1a/0x20
[  144.990061][ T6010] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0
[  144.990088][ T6010] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 66 3b 01 00 48 8d 3d cf eb 08 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 a0 b1 91 4c
[  144.990107][ T6010] RSP: 0018:ffffc9000524f8b0 EFLAGS: 00010286
[  144.990127][ T6010] RAX: 0000000080000000 RBX: ffffc9000524f940 RCX: 0000000000000000
[  144.990143][ T6010] RDX: 0000000000000006 RSI: ffffffff8ce093ac RDI: ffffffff8ede2bf0
[  144.990168][ T6010] RBP: ffffc9000524fa58 R08: ffffffff8edb0977 R09: 1ffffffff1db612e
[  144.990185][ T6010] R10: dffffc0000000000 R11: fffffbfff1db612f R12: 1ffff92000a49f24
[  144.990202][ T6010] R13: ffffffff8ad53b09 R14: ffff8880374d4098 R15: dffffc0000000000
[  144.990221][ T6010]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  144.990263][ T6010]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  144.990288][ T6010]  rt_mutex_slowlock+0x666/0x6b0
[  144.990316][ T6010]  ? rt_mutex_slowlock+0x1c9/0x6b0
[  144.990344][ T6010]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  144.990382][ T6010]  ? nfc_dev_down+0x3b/0x290
[  144.990415][ T6010]  ? rt_mutex_slowunlock+0x493/0x8a0
[  144.990444][ T6010]  ? nfc_dev_down+0x3b/0x290
[  144.990472][ T6010]  mutex_lock_nested+0x16a/0x1d0
[  144.990496][ T6010]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  144.990523][ T6010]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  144.990560][ T6010]  nfc_dev_down+0x3b/0x290
[  144.990590][ T6010]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  144.990627][ T6010]  nfc_rfkill_set_block+0x2d/0x100
[  144.990664][ T6010]  rfkill_set_block+0x1e5/0x450
[  144.990698][ T6010]  rfkill_fop_write+0x44e/0x580
[  144.990734][ T6010]  ? __pfx_rfkill_fop_write+0x10/0x10
[  144.990771][ T6010]  ? rw_verify_area+0x25b/0x4e0
[  144.990807][ T6010]  vfs_writev+0x4bf/0x970
[  144.990834][ T6010]  ? __pfx_rfkill_fop_write+0x10/0x10
[  144.990872][ T6010]  ? __pfx_vfs_writev+0x10/0x10
[  144.990913][ T6010]  ? __fget_files+0x2a/0x420
[  144.990943][ T6010]  ? __fget_files+0x3a6/0x420
[  144.990966][ T6010]  ? __fget_files+0x2a/0x420
[  144.991001][ T6010]  do_writev+0x153/0x2d0
[  144.991028][ T6010]  ? __pfx_do_writev+0x10/0x10
[  144.991057][ T6010]  ? do_syscall_64+0xbe/0xf80
[  144.991093][ T6010]  do_syscall_64+0xfa/0xf80
[  144.991127][ T6010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.991203][ T6010]  ? clear_bhb_loop+0x60/0xb0
[  144.991233][ T6010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.991255][ T6010] RIP: 0033:0x7f270383f749
[  144.991275][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.991293][ T6010] RSP: 002b:00007f2701a64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  144.991316][ T6010] RAX: ffffffffffffffda RBX: 00007f2703a96180 RCX: 00007f270383f749
[  144.991333][ T6010] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000004
[  144.991347][ T6010] RBP: 00007f27038c3f91 R08: 0000000000000000 R09: 0000000000000000
[  144.991361][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.991375][ T6010] R13: 00007f2703a96218 R14: 00007f2703a96180 R15: 00007ffd89b600a8
[  144.991412][ T6010]  </TASK>
[  144.991688][ T6010] Kernel Offset: disabled