last executing test programs:

23.347452695s ago: executing program 2 (id=98):
openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100f00000000002a000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, r2, 0x1, 0x70bd28, 0x25dfcbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040004)
r9 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r9, 0x0)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c)

23.130309034s ago: executing program 2 (id=101):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4d6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x114}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8850)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x400, 0x4c}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="bd6a13952a23"}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4048040)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x18, {0x40, @bearer=@l2={'ib', 0x3a, '\x00'}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000005c0)={0x1, 'gre0\x00', {}, 0x3ff})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1c5, 0x69}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x3})
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r1)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
r8 = socket(0x1f, 0x80000, 0x2)
recvfrom$l2tp(r8, &(0x7f0000000bc0)=""/153, 0x99, 0x40000040, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10)
r9 = socket$alg(0x26, 0x5, 0x0)
sendto$inet(r8, &(0x7f0000000cc0)="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", 0x1000, 0x20000000, &(0x7f0000001cc0)={0x2, 0x4e20, @loopback}, 0x10)
pipe(&(0x7f0000001d40)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
syz_genetlink_get_family_id$devlink(&(0x7f0000001d00), r10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r9)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0x20, &(0x7f0000001dc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf205}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}], &(0x7f0000001ec0)='GPL\x00', 0x174f, 0x1, &(0x7f0000001f00)=""/1, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001f40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0x2, 0xab, 0x1331}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[r10, r10, r11], 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000020c0)={r11, r12})
r13 = accept4$packet(r8, &(0x7f0000002100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002140)=0x14, 0x80000)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000002180)=0x200, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f00000031c0)={{0x0, 0x1, 0x4, 0x4, 0x9, 0x400, 0xd12, 0x3, 0xb60, 0x10001, 0x5, 0x61aa, 0x87, 0x0, 0x8f2}, 0x18, [0x0, 0x0, 0x0]})

22.911497189s ago: executing program 2 (id=103):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r3, r3, &(0x7f0000000040)=0x3, 0x8)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in=@private=0xa010101}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2004)

22.500850058s ago: executing program 2 (id=107):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
close(r0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000480)={<r2=>0x0, 0x3}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r2, &(0x7f0000000540)=0x4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000002c0)={0xfffffffa, {{0xa, 0x4e22, 0x3, @mcast2, 0x1}}, {{0xa, 0x4e22, 0x4, @empty, 0x4}}}, 0x108)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r4 = socket$inet6(0xa, 0x80001, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x7}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x11d, &(0x7f0000000600)={@local, @local, @void, {@ipv4={0x800, @udp={{0x22, 0x4, 0x2, 0xc, 0x10f, 0x68, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010102, @local, {[@cipso={0x86, 0x4e, 0x3, [{0x2, 0xa, "4650fd1fa6e2b584"}, {0x0, 0xe, "70a67a7f49308b33d2d5795d"}, {0x6, 0x10, "c50c4c69c2b30fa1ea6042c79e93"}, {0x6, 0x11, "939a5adff4f879e336a69057d82ebd"}, {0x7, 0x7, "35f5f78f04"}, {0x7, 0x8, "9faf15226450"}]}, @generic={0x89, 0xc, "134f65423d31178a3941"}, @lsrr={0x83, 0x7, 0x23, [@private=0xa010102]}, @generic={0x82, 0x8, "4de03bd672fb"}, @timestamp={0x44, 0x8, 0xa9, 0x0, 0x2, [0x8001]}]}}, {0x4e20, 0x4e22, 0x87, 0x0, @gue={{0x2, 0x1, 0x2, 0x48}, "caa5c6dcb047aa02fe606c1f7df73e4663c00a2c336caaaf78eb37a557623c9a7eb1c21bb4d59750e1c660c9a5302abad2eac5d86a9d121832c02a35ff91415edd491d34e7bce4bc466566a7c75749c01f0165d1c8aad803e55e4499407e8ce2f856c3ac771f3f5aa736465b2a6d027c6705e3bb499ef0"}}}}}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="100001"], 0x28}}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r10, 0x400442c9, 0x200000f3)

22.141782766s ago: executing program 2 (id=112):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000000e008000100000000fe9a90780200000000000000"], 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB='X\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000001500)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x81, 0xd, 0xe2c4, 0x14, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, 0x7, 0x80, 0x0, 0x4}})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0x4, 0x5, 0x6, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x28}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @exit, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x28, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x7a, '\x00', r5, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x0, 0x7, 0x4036, 0x8}, 0x10, 0x2b37b, r6, 0x1, &(0x7f0000001580)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f00000015c0)=[{0x4, 0x1, 0x0, 0x1}], 0x10, 0x3}, 0x94)
getsockopt(r3, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="98010000", @ANYRES16=r7, @ANYBLOB="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"/402], 0x198}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0))
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0xc80, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xc}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc54, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x5e0373477615dd8}, @TCA_TBF_PARMS={0x28, 0x1, {{0xe, 0x0, 0xc, 0x5, 0xa, 0x1}, {0x6, 0x2, 0xff80, 0xb, 0x3, 0x3}, 0x3, 0x1, 0x1dbd}}, @TCA_TBF_PBURST={0x8, 0x7, 0x10e4}, @TCA_TBF_PBURST={0x8, 0x7, 0x2cf}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0xf6d7, 0xd, 0xff, 0x6, 0x9, 0xa39, 0x0, 0x4, 0x5, 0x6, 0xfff, 0x67, 0x2, 0x54f, 0x9, 0x4, 0xf5, 0x10001, 0xd, 0x0, 0x7, 0xa, 0x100, 0x1, 0x401, 0xfffffffb, 0x7, 0xf, 0x4, 0x0, 0x8, 0x4, 0xfffffff7, 0x2, 0x5, 0xfffffffd, 0x9, 0xfffffff8, 0x2, 0x80000000, 0x8, 0x8, 0xd, 0x3, 0x28, 0x0, 0xfe000000, 0x6, 0x5, 0xb, 0x8, 0x5, 0x6, 0x60000, 0x4, 0x4, 0x6, 0xffff, 0x1, 0x7ff, 0x4, 0x9, 0xb, 0x9, 0x9, 0xfff, 0x1, 0x6, 0x8000, 0x7fff, 0x7, 0x6, 0x5, 0x9, 0x9, 0x39, 0x0, 0x2, 0x3, 0x0, 0x9, 0x2, 0xfffff9f0, 0x9, 0x10001, 0x8, 0x80, 0x8, 0x2b1, 0x3, 0x7ff, 0x2, 0x9f6, 0x5, 0x5, 0x8000, 0x3, 0x3, 0x40, 0x8, 0x9, 0x586, 0x5, 0x3800000, 0x8, 0x4, 0x4, 0x7ff, 0x0, 0x3, 0x5, 0x2, 0x20000000, 0x2, 0xfff, 0x80000001, 0x7, 0x6, 0x8, 0xfffffff2, 0x8, 0xfffffffd, 0xffffffff, 0x8000, 0x8d6, 0xffff, 0x7f, 0x9, 0x3, 0x1, 0x6, 0xa6b, 0xb, 0x401, 0xf6c, 0x0, 0x7c49ae00, 0x8000, 0xc946, 0x4, 0x3, 0x0, 0x81, 0xffff8001, 0x1, 0x401, 0xf, 0x2, 0x1, 0x8, 0x4, 0x0, 0xeb8, 0xe73, 0x0, 0xa8, 0x8, 0x7, 0xb5a, 0x1, 0xb4df, 0x2, 0xe0, 0x7, 0xcba9, 0x8, 0x200, 0x3, 0x1, 0xffff, 0x1, 0xff, 0x3d0b, 0x9, 0x43a, 0x4, 0xffffffff, 0x0, 0x80, 0x100, 0xc, 0x81, 0x93, 0x4, 0x401, 0xfff, 0xffff, 0xa8f, 0x449097cb, 0x7, 0x8, 0x5, 0x4, 0x101, 0x200, 0xc, 0x3, 0x101, 0x7, 0x9, 0x7, 0x994, 0x8, 0x0, 0x100000, 0x17, 0x6, 0x2, 0x7b6b, 0x0, 0x0, 0x8000, 0xfffffffa, 0x0, 0x0, 0x7, 0x7, 0x101, 0x95a, 0xa, 0x0, 0x6, 0xfd91, 0x7ff, 0x84c00000, 0x2, 0xff, 0x1, 0x1000, 0x3be3e023, 0x5, 0x6, 0x8000fff, 0x2, 0x80000001, 0x2, 0x6, 0xc5cc, 0x4, 0x7ff, 0x5, 0xfff, 0x4, 0x4, 0x6, 0x5, 0x3414, 0x6, 0xfffff001, 0x80, 0x800, 0x4, 0x81, 0x9, 0xfffffffa]}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x2, 0x8001, 0xfffffff9, 0x4, 0x8, 0xd, 0x66a, 0x5, 0x7, 0x2, 0x8, 0x999, 0xe, 0x3a436518, 0x5, 0x7, 0x5, 0xd1, 0x3, 0x6, 0x1, 0x0, 0x9, 0x7, 0x5, 0x80000001, 0x652, 0x3, 0x80000001, 0xfffffffc, 0x5, 0x10000, 0x6, 0x1ff, 0x1, 0x7, 0x400, 0xfffffff0, 0x3, 0x9, 0x5, 0xf, 0xfffffffc, 0x3, 0xe0, 0x5, 0x2, 0x1, 0xfffffff7, 0xffffffff, 0x8, 0x800, 0x1, 0xffff, 0xfff, 0x0, 0x1, 0x3, 0x6f40, 0x1, 0x7, 0x2, 0x6, 0xe03d, 0x0, 0x3, 0x2, 0x4, 0xb4d0, 0x8, 0x8, 0xfa, 0x1, 0x1, 0x0, 0xa, 0x6, 0x7, 0x8001, 0xec3e, 0x6, 0x3, 0x3, 0x5, 0x4, 0x453, 0x89, 0x7, 0x7, 0x8, 0x275a, 0x7c67, 0x3, 0x2, 0x1, 0x5f8c, 0x4, 0xb89a, 0x2262c568, 0xd, 0x1, 0x6, 0x401, 0x7, 0x7, 0xffff, 0x8, 0x4, 0x7fff, 0x0, 0xd, 0x1e9, 0x5, 0x80000000, 0x3, 0xfb, 0x81, 0x9, 0x1, 0x3, 0x101, 0xd, 0x5, 0xb250, 0x8, 0x8, 0x6, 0x200, 0x6d, 0x6, 0x6, 0x2, 0x22eb, 0x2, 0x0, 0x14cc, 0x10001, 0xf, 0x7fff, 0x7, 0x5, 0x1b, 0xfffffffa, 0x5, 0x7f, 0x400, 0x5, 0x1, 0x5, 0x8, 0x3, 0xff, 0xb, 0x1, 0x0, 0x8226, 0xee0, 0x0, 0x8, 0x8, 0x1ff, 0x3, 0x8, 0x7fffffff, 0x1, 0x3c, 0x7, 0x0, 0xf, 0x4, 0x1ff, 0xa, 0x8, 0x3, 0x9, 0x8, 0x3, 0xb249, 0x438, 0xc, 0x7fffffff, 0x0, 0x8, 0x4, 0x4, 0x402, 0x7fffffff, 0x1, 0x3, 0x7ff, 0x3, 0x101, 0x3d4, 0x2, 0x5, 0x20, 0x4, 0x8, 0x3, 0x5, 0x8, 0x0, 0x6bf1, 0xffffb697, 0x6, 0x2, 0x4, 0x6, 0x2, 0x7, 0x1, 0x5, 0x1, 0xc, 0x10001, 0xfffffffd, 0x2, 0x3, 0x1, 0x40, 0x9, 0x2, 0xa, 0x4, 0xc0000000, 0xe, 0xffff, 0x1, 0x4, 0x800, 0x6af4, 0x3, 0x9, 0x5, 0x80000001, 0xb, 0x366, 0x8, 0x5, 0x1, 0x1, 0x80000001, 0x6, 0x5, 0x8, 0x0, 0xcfc, 0x601d, 0x9, 0x81, 0x10, 0x4, 0x7, 0xfffffff9, 0x1bd]}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xa8d, 0x0, 0x0, 0x4, 0xcf, 0x5b8, 0x4, 0x0, 0x9c6, 0x9974, 0x509, 0x0, 0x10, 0x0, 0x80, 0x5, 0x4, 0x3, 0x8, 0xe, 0xf, 0x3bb82ff9, 0x585d686f, 0xfffffff4, 0x2, 0x1, 0x5, 0xa, 0x69, 0x0, 0x1, 0x5, 0x401, 0xf, 0x7, 0x3, 0x3ff, 0x2, 0x80, 0x5, 0x3, 0x2a, 0xfffffff9, 0x7, 0x10000, 0x0, 0x0, 0x5, 0x8, 0x5, 0x15, 0xb, 0x101, 0x7ff, 0xfffffffa, 0x40, 0x6, 0x7, 0x0, 0xc, 0xe7cd, 0x80000000, 0x200, 0x6, 0x3, 0x0, 0x2, 0xffff15fc, 0x7, 0xcd0, 0x7, 0x1, 0xfff, 0x7fff, 0x4, 0x1, 0xc, 0x63, 0x1000, 0x4, 0x5, 0xbd41, 0xfffffffc, 0x0, 0x7ff, 0x5, 0x2, 0xffffffc0, 0xfff, 0x6, 0xfffffffe, 0xfffffffc, 0x30000, 0x3, 0x8, 0x0, 0x8, 0x5, 0x3f8, 0x6f0b, 0xc4, 0x46abd7f9, 0x10, 0x1, 0x9, 0x800, 0x0, 0xa, 0xfffffffe, 0x3, 0x5, 0x6d4, 0x2, 0xff, 0x5, 0x966, 0x2, 0x1, 0x7, 0x81, 0x2, 0x4, 0x100, 0x3, 0x2, 0xfffffc01, 0x6, 0xd, 0xff, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x3ff, 0xfffff0a1, 0x1, 0x4, 0x28, 0xfffffe00, 0x156, 0x0, 0x1, 0x68df, 0x8, 0x8, 0x4, 0x4, 0x1, 0x6, 0xffffffc0, 0x7, 0xff, 0x3, 0x0, 0x6, 0x6, 0x7, 0x2, 0xb, 0x5, 0x4, 0x1, 0x81, 0xffffff4c, 0x1, 0x9, 0x6, 0x8, 0x7, 0x0, 0x6, 0xffff, 0x6, 0x7fff, 0x0, 0x930, 0x7, 0x148, 0x623, 0x3, 0xc000000, 0x3, 0x9, 0xc0000001, 0xb5b, 0x80, 0xfffffff7, 0x0, 0x2, 0x400, 0x2, 0x7, 0x3, 0x81, 0x9, 0x6, 0x800, 0x0, 0xbd2, 0xda62, 0x3a3, 0x9, 0x10, 0x30, 0x9, 0x7255, 0x6, 0x0, 0xfffffffe, 0x8000, 0xffffffff, 0x7fff, 0x3, 0x4, 0xe, 0x0, 0x9, 0x9, 0x9, 0x4, 0x8, 0xfc0, 0x2, 0x200, 0xfc59, 0x7fff, 0x57, 0xb, 0x8, 0x1ff, 0x200, 0x0, 0x2, 0x10001, 0x6, 0x40, 0x1, 0x9, 0x2, 0x0, 0x80, 0x8, 0x3, 0x1, 0x9, 0x1, 0xd, 0x8, 0x5, 0x80, 0x2, 0x8, 0x6, 0x5]}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
r15 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r15, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @local, 0x8}, 0x1c)
sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

21.983181286s ago: executing program 1 (id=114):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x1d, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], <r1=>0x0}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f00000018c0)="3300de54", 0x4}], 0x2}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r2, r0, 0x16, 0x2, 0x0, @void, @value=r0, @void, @void, r1}, 0x20)

21.708221167s ago: executing program 1 (id=118):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=ANY=[@ANYBLOB="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"], 0x3840}}, 0x0)

21.45135619s ago: executing program 1 (id=122):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) (async)
write$tun(r0, &(0x7f0000000280)={@void, @void, @llc={@snap={0xaa, 0x0, ')', "9baaf8", 0x8808, "1efd981147132868d843ace5ed89c77922324856504ca997f13d703a1d9568205df32ccdd88c679a877f52d53a3748c3056a5f3100316534de8f84cc01e99e5515942487a4285a32f9e3c53f1eec623b797884aaf88a351e0e758bdb8db0668c518e4fbbc4a9d9b0da242a2af5f94cc4cda868bc0b62e7c192ac6fa59c1c0475b10ac6492833a2e6515df1cd9b6cb7cf02335c0ad54d995ca1bce67f15"}}}, 0xa5)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x3, 0x10001, 0x9, 0x1}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

21.070073205s ago: executing program 2 (id=125):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004)

20.939276221s ago: executing program 1 (id=127):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000000c0)="8720c45f11f34032d40a0faa62541e6be9ef2bbe90a09aa9fc989416c6d2b07db37a1e6bc5787ef946f8cea6fd5a2f57269a2f3074580189ea41e1ff95ed0ad98312e6d2d62ed4a745d3fc80bf985eff167f0eed33025894ea97106d731038da091611d9b7ccdb13b13bcfe4ebc3de445511b92eb11b7ccc04fe4bb0bc97ab54fd4d2a87c79221897450dda7301b09321fbd661aa2dad6ad4bf66b78b182887124f772513caadbd2b15cb1fc954f70ddd355abd428fc116e84f6eefe1619cdc57057caa578a8", &(0x7f0000001b00)=""/4096, 0x4}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=@delchain={0x798, 0x65, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0x6, 0xf}, {0xffff, 0x4f74942e3d58be6e}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0xc, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x74c, 0x2, [@TCA_U32_SEL={0x734, 0x5, {0xd, 0x3, 0x2, 0x6, 0x6, 0x400, 0x7f, 0xe, [{0x4, 0x72e, 0x101, 0xfffffe01}, {0x2, 0x0, 0x6, 0x8}, {0x5, 0x7, 0x8, 0x4bc}, {0x884d, 0x9, 0xfff, 0x80}, {0x4, 0x7, 0x9, 0x31a}, {0x6, 0x74eb, 0x89, 0xa32}, {0x6c4d, 0x5, 0x1, 0x2}, {0x5, 0x2, 0x4}, {0x2, 0x10, 0x2d38, 0x3}, {0x7, 0x37, 0x9, 0xaed0}, {0x5, 0xbee2, 0xf, 0xffffffff}, {0x3, 0x19c, 0x89}, {0x4, 0x4, 0x5, 0x7}, {0x101, 0x3, 0x8000, 0x4}, {0x4, 0x0, 0x200, 0xc8a8}, {0x6, 0x4, 0x7fff, 0x4}, {0xfff, 0xb2e, 0x1, 0xd0ca}, {0x0, 0x200, 0x881, 0xe}, {0x5, 0x43840000, 0xfffffff5, 0x6}, {0xffffffff, 0x1, 0x7}, {0xfffffff7, 0x10, 0x2, 0xffff}, {0x8, 0x7, 0x2, 0x4}, {0xee31, 0x8, 0x71, 0x8}, {0x6, 0x7c3, 0x7, 0x7fffffff}, {0x5, 0x9, 0x601c, 0x8}, {0x8, 0x2, 0xfffff8d7, 0x8}, {0x401, 0x1, 0x64, 0xa3a9}, {0x6, 0x7, 0xfffffffc, 0x1}, {0xfffffffa, 0x3ff, 0x10, 0xfffffffd}, {0x7, 0x2, 0xffffff7f, 0x6}, {0x0, 0x6, 0x1, 0xc}, {0x8, 0x9, 0x0, 0x4}, {0x10000, 0x7, 0xfff, 0x40}, {0x0, 0x5, 0xd}, {0x3, 0x2, 0x9d6, 0x9}, {0x9, 0x5, 0x4e, 0x5}, {0x4, 0x6, 0x4, 0x58}, {0x5, 0x6, 0xfffff12c, 0x1}, {0x8, 0x2, 0x0, 0x2}, {0x8000, 0xc, 0x1, 0x4}, {0x8, 0x101, 0x8, 0x40}, {0x7fff, 0xe066, 0x9, 0x9}, {0x4, 0x4, 0x2}, {0x0, 0xe2, 0x53, 0xfffffffc}, {0x9, 0x21, 0x0, 0x9}, {0x4, 0x101, 0x800, 0x1a9}, {0x8, 0x9, 0x4, 0x2}, {0x282f, 0x6, 0x80000001, 0x3}, {0x200, 0x6, 0x9, 0x6}, {0x3, 0x4, 0x3, 0x9}, {0xfffffffc, 0x2, 0x7, 0xffff0000}, {0x7, 0x3, 0x6, 0x7ff}, {0x0, 0x6, 0x5, 0x6}, {0x7, 0xfffffff8, 0x1ff, 0x1}, {0x2, 0x2, 0x1, 0xe1a}, {0x2, 0x10000, 0x3}, {0x1, 0x5, 0x4d1, 0x3}, {0x4, 0x0, 0x97e, 0x14}, {0x57, 0x4, 0x9, 0x4}, {0x9, 0x0, 0x4, 0x6}, {0x34e5, 0x5, 0x6, 0x7}, {0xc3b, 0x7, 0xe, 0x8}, {0x1b, 0xe, 0xffffff80, 0x2586}, {0x10001, 0x30b69c8a, 0x7}, {0x9, 0x40, 0x4, 0x2}, {0x21c, 0xd, 0x43, 0xc}, {0x6, 0x80000001, 0x0, 0x10001}, {0x6, 0x1000, 0x0, 0x6}, {0x40, 0xa6cf, 0x66, 0x80000001}, {0x2, 0x2, 0xb43b, 0x1ff}, {0xfffffffe, 0xffffff00, 0xfffffffe, 0x4}, {0x5, 0x3, 0x0, 0x1}, {0x4, 0xc4, 0x1, 0x1000}, {0xc00000, 0x80, 0x3c11c9e8, 0xe02}, {0x100, 0x800, 0xffff, 0x6}, {0x0, 0x4, 0xffff, 0x8}, {0x6, 0xffffffff, 0x5, 0xe}, {0xff, 0x5, 0x1, 0xc}, {0x2, 0x7, 0x3, 0x4}, {0x6, 0x401, 0x1, 0x3}, {0x8, 0x3, 0x3, 0x7fff}, {0x1, 0x3, 0xa, 0x5}, {0xf37, 0x8, 0x2, 0x3}, {0xb2e, 0x3, 0x9, 0xc}, {0x1, 0xc6ad, 0x4, 0x81}, {0xc, 0x3, 0xfffffff4, 0x80a}, {0x400, 0xb2, 0xfffffffc, 0x6}, {0x6, 0x0, 0x7f9, 0xe}, {0x6, 0x7cd, 0x1d32, 0x4}, {0x9, 0x400, 0x8, 0xe4}, {0x6, 0x8, 0x2, 0x3}, {0x3, 0xf, 0x5, 0x6}, {0x0, 0x10001, 0x1, 0x81}, {0x1, 0xd, 0x73, 0x8001}, {0xf, 0xff, 0x2, 0x5}, {0x4, 0x4, 0xed878227, 0x3}, {0x1ff, 0x7, 0x6, 0x5}, {0x5, 0x3, 0xfffffffd, 0x57}, {0x5, 0xfffffffe, 0x7f, 0xcf8}, {0xb64, 0x9, 0x4, 0x80000001}, {0x6, 0x1, 0x9, 0x2a}, {0xfffffffd, 0x4, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x8001}, {0x6, 0x14c, 0x1, 0x1}, {0x8000, 0x80000001, 0x4, 0x6}, {0x7, 0x0, 0x1, 0x3}, {0x0, 0x8, 0xff, 0x28}, {0x7, 0x7ff, 0x0, 0x3}, {0x60000, 0x92, 0x0, 0xb88}, {0x4, 0xfff, 0x6}, {0x6, 0x31, 0x5, 0x18c34ad0}, {0x3, 0x2, 0x6}, {0x8, 0xae11, 0x0, 0x6}, {0x2, 0x0, 0x8e, 0x9ba}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x36}, @TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x798}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x40}, 0x0)

20.617307644s ago: executing program 1 (id=132):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
socketpair(0x29, 0xa, 0x1, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$phonet(r1, &(0x7f0000000180)={0x23, 0xd, 0xf6, 0x82}, 0x10)
ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
pipe(&(0x7f0000000100))
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0)

20.425332078s ago: executing program 1 (id=134):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) (async)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="c51eaff37b578c00287bb0fc1cf225b7", 0x10)

18.829009503s ago: executing program 3 (id=143):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000000000009c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) (async)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/28, 0x1c}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/25, 0x19}], 0x7, &(0x7f00000014c0)=""/218, 0xda}, 0x6}, {{&(0x7f00000015c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001640)=""/134, 0x86}, {&(0x7f0000001700)=""/74, 0x4a}, {&(0x7f0000001780)=""/226, 0xe2}, {&(0x7f0000001880)=""/187, 0xbb}, {&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/141, 0x8d}, {&(0x7f0000001b00)=""/100, 0x64}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000001b80)=""/2, 0x2}], 0x9, &(0x7f0000001c80)=""/170, 0xaa}, 0x32}, {{&(0x7f0000001d40)=@un=@abs, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/24, 0x18}, {&(0x7f0000001e00)=""/166, 0xa6}], 0x2}, 0x7}, {{&(0x7f0000001f00)=@caif=@rfm, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001f80)=""/204, 0xcc}, {&(0x7f0000002080)}, {&(0x7f00000020c0)=""/196, 0xc4}, {&(0x7f00000021c0)=""/46, 0x2e}, {&(0x7f0000002200)=""/140, 0x8c}], 0x5, &(0x7f0000002340)=""/172, 0xac}, 0x3}, {{&(0x7f0000002400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002480)=""/207, 0xcf}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/139, 0x8b}, {&(0x7f0000002680)=""/227, 0xe3}], 0x4, &(0x7f00000027c0)=""/124, 0x7c}}, {{&(0x7f0000002840)=@nfc_llcp, 0x80, &(0x7f0000002c40)=[{&(0x7f00000028c0)=""/33, 0x21}, {&(0x7f0000002900)=""/206, 0xce}, {&(0x7f0000002a00)=""/214, 0xd6}, {&(0x7f0000002b00)=""/168, 0xa8}, {&(0x7f0000002bc0)=""/93, 0x5d}], 0x5, &(0x7f0000002cc0)=""/130, 0x82}, 0xcf0}], 0x6, 0x103, &(0x7f0000002f00))
r5 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

18.622576951s ago: executing program 3 (id=146):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001371121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
ioctl$sock_bt_hci(r4, 0x400448cc, 0x0)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000a63052ece7ace0000", @ANYRES16=r9, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000)

18.505771569s ago: executing program 3 (id=148):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x4}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0)

18.447397623s ago: executing program 4 (id=149):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, 0x0, 0xffdd) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e23, 0x4, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b5a9c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="71f7c7", 0x3}], 0x1}}], 0x3, 0x48800) (async)
shutdown(r0, 0x2)

18.168655207s ago: executing program 4 (id=151):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x34, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x17, 0x0, 0x1, [@generic="b82f"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc1", @ANYBLOB="3baa7d57c5e2dc1040d8e43006bc76c2efa17e7c33073ba660775f37a2d892f43b7701ba97f1aca7afe1d9a6c593b8e098f331d6"], 0xfc}}, 0x4) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r9, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r10, 0x3}, 0x8) (async)
listen(r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) (async)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="000428bd7000fcdbdf25650000000400000000000000060900"/34], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4048050)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0)

17.965511564s ago: executing program 4 (id=153):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x36, 0x0, "4dc640c44aff5cdc87ad7a6e30386b9299f7db2a519db1ffd75c6b42b7f8fc5ac5c97d74d2416290d54f8b41694037415070ff625b68b77a17724d3e0786e44a5f144b5be9b79da2cb86db5e65aa4136"}, 0xd8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0200ce000a0002000180c20000010000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)

17.868436724s ago: executing program 4 (id=154):
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6020480) (async)
unshare(0x6020480)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94)

17.649595622s ago: executing program 3 (id=156):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='hsr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x500}], 0x1, 0x0)
r1 = accept4(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x80, 0x80800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8054}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8054}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', r4, 0x80, 0x8, 0x1294e5c, 0x7, {{0x19, 0x4, 0x1, 0x3d, 0x64, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x0, [{0x7, 0xa, "9ffdccfda1eee380"}, {0x1, 0xe, "9dee9aef13d0d47b46cdcdaa"}, {0x0, 0xb, "8714a2154f4ae657a3"}, {0x7, 0x8, "e4bb8caa7920"}]}, @end, @generic={0x83, 0xc, "c1ef08507b86a10f1159"}, @generic={0x94, 0xe, "d0d0e76bd04dadc0c2de4055"}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', r4, 0x80, 0x8, 0x1294e5c, 0x7, {{0x19, 0x4, 0x1, 0x3d, 0x64, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x0, [{0x7, 0xa, "9ffdccfda1eee380"}, {0x1, 0xe, "9dee9aef13d0d47b46cdcdaa"}, {0x0, 0xb, "8714a2154f4ae657a3"}, {0x7, 0x8, "e4bb8caa7920"}]}, @end, @generic={0x83, 0xc, "c1ef08507b86a10f1159"}, @generic={0x94, 0xe, "d0d0e76bd04dadc0c2de4055"}]}}}}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0)

17.523359072s ago: executing program 4 (id=158):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000180)={'b', ' *:* ', 'rwm\x00'}, 0xa)
r3 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000100)={'a', ' *:* ', 'rwm\x00'}, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r6, &(0x7f00000001c0), 0xe)
listen(r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.480426547s ago: executing program 3 (id=159):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x100}) (async)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)

17.393432505s ago: executing program 4 (id=160):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r2, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f208005700060018"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

17.275550732s ago: executing program 0 (id=161):
socket$nl_netfilter(0x10, 0x3, 0xc)

17.27470393s ago: executing program 3 (id=162):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d000100000000000000001204000080450011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09950dbe7a1520d6147f9cdbd9d15d2dcd393701e000000"], 0x5c}], 0x1}, 0x0)

17.195250152s ago: executing program 0 (id=163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100), 0x0, <r1=>0x0, &(0x7f0000000240)=""/76, 0x4c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000718a000000000000f462013c000080000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="cec286b914dc0189d2b3e2c50ad0cd9a93b9cdfe447f78e07dceb342b5a4b8d49fcd41ba2eb5b85c26ae392569b47cf86c4243b8422e904808e81a012db17c217d072c816d5a4e10bd0359ffd7a938714db7b23b41cc64860883dd44f882f83af5fbabe2fb3f9928028d7a840080a278928a477faa95cf3656de2cf4c0ffc1cb386872404d7a24658018f69f425bb7ab7ee0fc5e3e820fba", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x90)

17.093529398s ago: executing program 0 (id=164):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000007000000000000000000000b020000000f0000000000000e030000000000000a010000000000000000000003000000000400000002000000050000000d0000000000000200000000002e0e00000000"], &(0x7f0000000100)=""/237, 0x6b, 0xed, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000dccc791048070000000071041d000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r1}, 0x94)

16.14318403s ago: executing program 0 (id=165):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x178, 0x1, [@m_ctinfo={0x174, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffe, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
close(r0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x44}}, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

16.083922833s ago: executing program 0 (id=166):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r1, &(0x7f0000000040), 0x2)
close(r1) (async)
close(r1)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)

15.20591486s ago: executing program 0 (id=167):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
bind$x25(r0, &(0x7f0000000080), 0x12)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='@&\x16@\x00'}, 0x30)
r2 = socket$inet(0x2, 0xa, 0xa832)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={<r3=>0x0, 0x2}, &(0x7f0000000180)=0xc)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @empty}}}, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000300)={0x4, 0x9, 0x0, 0xb734, 0x0, [0x1000, 0x2, 0x2, 0x7]})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={<r5=>r2})
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000480)={0x7fff}, 0x4)
r6 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000004c0), 0x4)
getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000500)=""/38, &(0x7f0000000540)=0x26)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x2, 0xff, 0x1}, {0x1, 0xff, 0x4}, 0x0, 0x2}, {0x3, 0x2, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x2, {0x2, 0xf0}, {0x0, 0xf0, 0x4}, 0xfd, 0xff}, {0x0, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x3}, 0x1, 0x2}, {0x0, 0x0, {0x0, 0xf0}, {0x2, 0xf1}, 0x0, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x2, 0xff}, 0x0, 0xff}], 0xc0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}}, 0x94)
r8 = syz_open_procfs$namespace(r1, &(0x7f00000007c0)='ns/ipc\x00')
sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@setneightbl={0x5c, 0x43, 0x200, 0x70bd29, 0x25dfdbff, {0x2}, [@NDTA_NAME={0xb, 0x1, 'batadv\x00'}, @NDTA_THRESH1={0x8, 0x2, 0xa}, @NDTA_THRESH2={0x8, 0x3, 0x2}, @NDTA_THRESH1={0x8, 0x2, 0x83}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x3}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH2={0x8}, @NDTA_THRESH2={0x8, 0x3, 0x417}]}, 0x5c}}, 0x4000040)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r9, <r10=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000a80)={0x6a, "d3614917d5c08c73496caf7b2ed7a2e793cf5f4354ff6e96298a367fb7cdba99fc3a4d710fc9b8b216f98217aa30f06025adf16001f80466f9e5e5d440ea224a32dac0a1427ef3efe61b4500a0d6f0114a7408ba34258cb61466dc52275982eb233dcfc5dd923912f5ee9985c15783635032f34a6c78b68eea512573a875c6d0"})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000b40)=0x3, 0x4)
getsockname$inet6(r4, &(0x7f0000000b80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000bc0)=0x1c)
r11 = socket$isdn_base(0x22, 0x3, 0x0)
poll(&(0x7f0000000c00)=[{r10, 0x10}, {r0, 0x20a}, {r5, 0x3210}, {}, {r0, 0x4000}, {r0, 0x8080}, {r8, 0x4403}, {r11, 0xa391}, {0xffffffffffffffff, 0xb204}], 0x9, 0xc)
syz_genetlink_get_family_id$fou(&(0x7f0000000c80), r6)

5.167422317s ago: executing program 32 (id=134):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x2000400c) (async)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="c51eaff37b578c00287bb0fc1cf225b7", 0x10)

5.120855049s ago: executing program 33 (id=125):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004)

2.07699768s ago: executing program 34 (id=162):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002d000100000000000000001204000080450011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09950dbe7a1520d6147f9cdbd9d15d2dcd393701e000000"], 0x5c}], 0x1}, 0x0)

2.042745342s ago: executing program 35 (id=160):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r2, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@empty, 0x4e21, 0x8000, 0x4e24, 0x9, 0xfcf8d278083eddec, 0xa0}, {0x5, 0x1000, 0x5, 0x8001, 0x7, 0x3, 0x98, 0x2}, {0x9, 0x0, 0x9, 0x73}, 0x10000, 0x0, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d6, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xf701a192b5f05b74, 0x3, 0x40, 0x9, 0x10001, 0x2}}, 0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="4b003300509c0600080211000001080211000001fffffffffffff3ff08004841940000000000000064000e0201000406b40a010006000602090072060303030303037107254c79370f04d0f208005700060018"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c000)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 36 (id=167):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
bind$x25(r0, &(0x7f0000000080), 0x12)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='@&\x16@\x00'}, 0x30)
r2 = socket$inet(0x2, 0xa, 0xa832)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={<r3=>0x0, 0x2}, &(0x7f0000000180)=0xc)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @empty}}}, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000300)={0x4, 0x9, 0x0, 0xb734, 0x0, [0x1000, 0x2, 0x2, 0x7]})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={<r5=>r2})
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000480)={0x7fff}, 0x4)
r6 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000004c0), 0x4)
getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000500)=""/38, &(0x7f0000000540)=0x26)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x3, {0x2, 0xff, 0x1}, {0x1, 0xff, 0x4}, 0x0, 0x2}, {0x3, 0x2, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x2, {0x2, 0xf0}, {0x0, 0xf0, 0x4}, 0xfd, 0xff}, {0x0, 0x0, {0x0, 0x1, 0x2}, {0x0, 0x0, 0x3}, 0x1, 0x2}, {0x0, 0x0, {0x0, 0xf0}, {0x2, 0xf1}, 0x0, 0xfe}, {0x0, 0x2, {0x0, 0xf0}, {0x2, 0xff}, 0x0, 0xff}], 0xc0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}}, 0x94)
r8 = syz_open_procfs$namespace(r1, &(0x7f00000007c0)='ns/ipc\x00')
sendmsg$nl_route(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@setneightbl={0x5c, 0x43, 0x200, 0x70bd29, 0x25dfdbff, {0x2}, [@NDTA_NAME={0xb, 0x1, 'batadv\x00'}, @NDTA_THRESH1={0x8, 0x2, 0xa}, @NDTA_THRESH2={0x8, 0x3, 0x2}, @NDTA_THRESH1={0x8, 0x2, 0x83}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x3}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_THRESH2={0x8}, @NDTA_THRESH2={0x8, 0x3, 0x417}]}, 0x5c}}, 0x4000040)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r9, <r10=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20)
ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000a80)={0x6a, "d3614917d5c08c73496caf7b2ed7a2e793cf5f4354ff6e96298a367fb7cdba99fc3a4d710fc9b8b216f98217aa30f06025adf16001f80466f9e5e5d440ea224a32dac0a1427ef3efe61b4500a0d6f0114a7408ba34258cb61466dc52275982eb233dcfc5dd923912f5ee9985c15783635032f34a6c78b68eea512573a875c6d0"})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000b40)=0x3, 0x4)
getsockname$inet6(r4, &(0x7f0000000b80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000bc0)=0x1c)
r11 = socket$isdn_base(0x22, 0x3, 0x0)
poll(&(0x7f0000000c00)=[{r10, 0x10}, {r0, 0x20a}, {r5, 0x3210}, {}, {r0, 0x4000}, {r0, 0x8080}, {r8, 0x4403}, {r11, 0xa391}, {0xffffffffffffffff, 0xb204}], 0x9, 0xc)
syz_genetlink_get_family_id$fou(&(0x7f0000000c80), r6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts.
[   81.869918][ T5856] cgroup: Unknown subsys name 'net'
[   81.980843][ T5856] cgroup: Unknown subsys name 'cpuset'
[   81.989949][ T5856] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.680838][ T5856] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.348564][ T5886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.356388][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.365145][ T5886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.373285][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.373893][ T5889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.388631][ T5889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.403314][ T5887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.411326][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.420394][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.429040][ T5887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.437037][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.446337][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.454880][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.455291][ T5886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.462417][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.470285][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.477774][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.485378][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.491647][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.498479][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.504262][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.512413][ T5886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.519064][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.534965][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.535446][ T5187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.961036][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   87.441923][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.451045][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.458884][ T5866] bridge_slave_0: entered allmulticast mode
[   87.466754][ T5866] bridge_slave_0: entered promiscuous mode
[   87.492530][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   87.524492][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.531718][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.540629][ T5866] bridge_slave_1: entered allmulticast mode
[   87.548588][ T5866] bridge_slave_1: entered promiscuous mode
[   87.640711][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.652562][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   87.694559][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.725350][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   87.818087][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.825514][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.832658][ T5868] bridge_slave_0: entered allmulticast mode
[   87.840111][ T5868] bridge_slave_0: entered promiscuous mode
[   87.849953][ T5866] team0: Port device team_slave_0 added
[   87.866230][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   87.885245][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.892440][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.900016][ T5868] bridge_slave_1: entered allmulticast mode
[   87.907457][ T5868] bridge_slave_1: entered promiscuous mode
[   87.930605][ T5866] team0: Port device team_slave_1 added
[   88.059129][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.069757][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.077246][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.103871][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.144096][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.151251][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.158739][ T5870] bridge_slave_0: entered allmulticast mode
[   88.166418][ T5870] bridge_slave_0: entered promiscuous mode
[   88.176388][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.183560][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.190868][ T5870] bridge_slave_1: entered allmulticast mode
[   88.199259][ T5870] bridge_slave_1: entered promiscuous mode
[   88.208072][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.218600][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.226365][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.252870][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.346132][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.354588][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.361772][ T5869] bridge_slave_0: entered allmulticast mode
[   88.370059][ T5869] bridge_slave_0: entered promiscuous mode
[   88.393830][ T5868] team0: Port device team_slave_0 added
[   88.404076][ T5868] team0: Port device team_slave_1 added
[   88.416345][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.423472][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.431141][ T5869] bridge_slave_1: entered allmulticast mode
[   88.438608][ T5869] bridge_slave_1: entered promiscuous mode
[   88.461197][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.553560][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.564612][   T51] Bluetooth: hci2: command tx timeout
[   88.564837][ T5878] Bluetooth: hci1: command tx timeout
[   88.599271][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.606366][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.633100][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.644485][ T5878] Bluetooth: hci4: command tx timeout
[   88.646865][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.657699][   T51] Bluetooth: hci3: command tx timeout
[   88.657716][ T5878] Bluetooth: hci0: command tx timeout
[   88.669597][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.695596][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.707068][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.714357][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.721550][ T5867] bridge_slave_0: entered allmulticast mode
[   88.729514][ T5867] bridge_slave_0: entered promiscuous mode
[   88.740094][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.766227][ T5870] team0: Port device team_slave_0 added
[   88.779033][ T5866] hsr_slave_0: entered promiscuous mode
[   88.785700][ T5866] hsr_slave_1: entered promiscuous mode
[   88.799986][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.807274][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.815023][ T5867] bridge_slave_1: entered allmulticast mode
[   88.822205][ T5867] bridge_slave_1: entered promiscuous mode
[   88.831206][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.855554][ T5870] team0: Port device team_slave_1 added
[   88.880104][ T5869] team0: Port device team_slave_0 added
[   88.889283][ T5869] team0: Port device team_slave_1 added
[   88.992145][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.002198][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.029186][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.070539][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.097619][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.104774][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.131132][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.147963][ T5868] hsr_slave_0: entered promiscuous mode
[   89.154941][ T5868] hsr_slave_1: entered promiscuous mode
[   89.161107][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   89.166994][ T5868] Cannot create hsr debugfs directory
[   89.173340][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.180660][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.207071][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.220574][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.268294][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.275747][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.303028][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.337654][ T5867] team0: Port device team_slave_0 added
[   89.377643][ T5867] team0: Port device team_slave_1 added
[   89.473431][ T5870] hsr_slave_0: entered promiscuous mode
[   89.480080][ T5870] hsr_slave_1: entered promiscuous mode
[   89.486418][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   89.492175][ T5870] Cannot create hsr debugfs directory
[   89.562540][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.570388][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.596847][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.621347][ T5869] hsr_slave_0: entered promiscuous mode
[   89.627955][ T5869] hsr_slave_1: entered promiscuous mode
[   89.634381][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   89.640130][ T5869] Cannot create hsr debugfs directory
[   89.668078][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.675330][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.701815][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.991555][ T5867] hsr_slave_0: entered promiscuous mode
[   89.998498][ T5867] hsr_slave_1: entered promiscuous mode
[   90.005089][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   90.010830][ T5867] Cannot create hsr debugfs directory
[   90.159681][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.173515][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.212223][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.249154][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.381114][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.395240][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.418297][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.450177][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.517697][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.548696][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.561208][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.596429][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.648785][ T5878] Bluetooth: hci1: command tx timeout
[   90.655053][   T51] Bluetooth: hci2: command tx timeout
[   90.702920][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.715911][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.725052][ T5878] Bluetooth: hci0: command tx timeout
[   90.730545][   T51] Bluetooth: hci3: command tx timeout
[   90.730557][ T5187] Bluetooth: hci4: command tx timeout
[   90.747787][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.772760][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.785926][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.880051][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.893670][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.918362][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.931493][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.957220][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   90.969418][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.998863][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.006166][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.040346][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.047519][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.070422][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   91.111011][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.118196][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.180911][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.188101][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.212003][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.311926][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.322438][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   91.381242][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.399640][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.406919][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.418904][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.426107][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.468330][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   91.560604][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.567888][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.582133][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.589353][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.717674][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.756744][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.789462][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   91.831018][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.838206][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.889839][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.897311][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.946017][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.988505][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.193789][ T5866] veth0_vlan: entered promiscuous mode
[   92.241194][ T5868] veth0_vlan: entered promiscuous mode
[   92.276321][ T5866] veth1_vlan: entered promiscuous mode
[   92.321285][ T5868] veth1_vlan: entered promiscuous mode
[   92.358116][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.479197][ T5866] veth0_macvtap: entered promiscuous mode
[   92.529464][ T5866] veth1_macvtap: entered promiscuous mode
[   92.566869][ T5868] veth0_macvtap: entered promiscuous mode
[   92.595905][ T5868] veth1_macvtap: entered promiscuous mode
[   92.641604][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.663470][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.691137][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.712361][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.724378][ T5187] Bluetooth: hci1: command tx timeout
[   92.729824][ T5187] Bluetooth: hci2: command tx timeout
[   92.795405][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.806196][   T51] Bluetooth: hci3: command tx timeout
[   92.806209][ T5187] Bluetooth: hci0: command tx timeout
[   92.814275][ T5187] Bluetooth: hci4: command tx timeout
[   92.828073][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.846689][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.867536][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.877868][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.890790][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.953475][   T33] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.962815][   T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.973605][ T5867] veth0_vlan: entered promiscuous mode
[   92.990937][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.999949][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.033372][ T5867] veth1_vlan: entered promiscuous mode
[   93.145294][ T5870] veth0_vlan: entered promiscuous mode
[   93.200480][ T5869] veth0_vlan: entered promiscuous mode
[   93.201332][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.210607][ T5870] veth1_vlan: entered promiscuous mode
[   93.228823][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.244106][ T3522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.252190][ T3522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.323069][ T5869] veth1_vlan: entered promiscuous mode
[   93.346967][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.348240][ T5867] veth0_macvtap: entered promiscuous mode
[   93.355823][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.388029][ T5867] veth1_macvtap: entered promiscuous mode
[   93.401074][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.412137][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.470409][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.498072][ T5869] veth0_macvtap: entered promiscuous mode
[   93.516144][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.520128][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.528462][ T5870] veth0_macvtap: entered promiscuous mode
[   93.550867][ T5869] veth1_macvtap: entered promiscuous mode
[   93.598276][ T5870] veth1_macvtap: entered promiscuous mode
[   93.630665][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.674997][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.718493][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.741602][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.750983][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.777651][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.801426][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.807070][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   93.877526][   T33] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.899564][   T33] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.915740][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.929285][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   93.949430][   T33] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.960231][   T33] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.981769][   T33] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.025397][   T33] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.101563][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.141111][   T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.156739][   T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.209455][ T6005] Zero length message leads to an empty skb
[   94.282695][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.303925][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.337602][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'.
[   94.352394][ T6005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'.
[   94.437406][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.451251][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.545991][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.580034][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.626715][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.638359][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.726689][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.752179][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.804721][ T5187] Bluetooth: hci2: command tx timeout
[   94.805040][   T51] Bluetooth: hci1: command tx timeout
[   94.851104][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.869215][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.886336][   T51] Bluetooth: hci4: command tx timeout
[   94.886355][ T5187] Bluetooth: hci0: command tx timeout
[   94.891785][   T51] Bluetooth: hci3: command tx timeout
[   94.935646][ T6023] netlink: 'syz.3.13': attribute type 11 has an invalid length.
[   94.989464][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   95.059135][ T6027] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5'.
[   95.259805][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   95.666209][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20'.
[   95.767249][ T6051] netlink: 108 bytes leftover after parsing attributes in process `syz.2.20'.
[   95.869966][ T6064] netlink: 'syz.3.25': attribute type 1 has an invalid length.
[   95.942873][ T6064] bond1 (unregistering): Released all slaves
[   95.948979][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'.
[   96.081522][ T6066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.314225][ T6086] netlink: 'syz.3.28': attribute type 1 has an invalid length.
[   96.600232][ T6101] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[   96.893803][ T6109] tipc: Started in network mode
[   96.898944][ T6109] tipc: Node identity ba74cee9f91a, cluster identity 4711
[   96.947164][ T6109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.121835][ T6117] syzkaller0: entered promiscuous mode
[   97.128727][ T6117] syzkaller0: entered allmulticast mode
[   97.135733][ T6117] tipc: Resetting bearer <eth:syzkaller0>
[   97.152522][ T6108] tipc: Resetting bearer <eth:syzkaller0>
[   97.218074][   T24] cfg80211: failed to load regulatory.db
[   98.015906][ T5877] tipc: Node number set to 1131335401
[   98.531661][ T6108] tipc: Disabling bearer <eth:syzkaller0>
[   99.110398][ T6172] __nla_validate_parse: 5 callbacks suppressed
[   99.110419][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'.
[   99.409254][ T6181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.032952][ T6210] netlink: 'syz.3.60': attribute type 12 has an invalid length.
[  100.439635][ T6212] syzkaller0: entered promiscuous mode
[  100.470241][ T6212] syzkaller0: entered allmulticast mode
[  100.491473][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'.
[  100.544438][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'.
[  100.648657][ T6236] netlink: 'syz.0.68': attribute type 10 has an invalid length.
[  100.723707][ T6240] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  100.851637][ T6249] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.70'.
[  100.923470][ T6253] sctp: [Deprecated]: syz.4.71 (pid 6253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.923470][ T6253] Use struct sctp_sack_info instead
[  101.220888][ T6265] netlink: 64 bytes leftover after parsing attributes in process `syz.4.72'.
[  102.037189][ T6236] team0: Device veth1_macvtap failed to register rx_handler
[  102.056621][ T6268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 4, id = 0
[  102.069587][ T6267] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  102.112948][ T6267] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  102.201103][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[  102.239166][ T6270] gtp0: entered promiscuous mode
[  102.256772][ T6274] sctp: [Deprecated]: syz.4.77 (pid 6274) Use of int in maxseg socket option.
[  102.256772][ T6274] Use struct sctp_assoc_value instead
[  102.273943][ T6270] gtp0: entered allmulticast mode
[  102.431763][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'.
[  102.512293][ T6288] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET)
[  102.672483][ T6297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.787545][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  102.824395][ T6303] chnl_net:caif_netlink_parms(): no params data found
[  102.887794][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  103.235722][ T6326] openvswitch: netlink: EtherType 0 is less than min 600
[  103.246843][ T6329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.94'.
[  103.266111][ T6329] hsr_slave_0: left promiscuous mode
[  103.294681][ T6329] hsr_slave_1: left promiscuous mode
[  103.458052][ T6333] tipc: Started in network mode
[  103.463620][ T6333] tipc: Node identity de952433c57e, cluster identity 4711
[  103.471691][ T6333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.524337][ T6329] syzkaller0: entered promiscuous mode
[  103.554089][ T6329] syzkaller0: entered allmulticast mode
[  103.598817][ T6329] tipc: Resetting bearer <eth:syzkaller0>
[  103.657808][ T6328] tipc: Resetting bearer <eth:syzkaller0>
[  103.674614][ T6345] netlink: 'syz.4.99': attribute type 1 has an invalid length.
[  103.689707][ T6328] tipc: Disabling bearer <eth:syzkaller0>
[  103.707658][ T6349] sctp: [Deprecated]: syz.2.101 (pid 6349) Use of int in max_burst socket option.
[  103.707658][ T6349] Use struct sctp_assoc_value instead
[  104.395204][ T6374] __nla_validate_parse: 5 callbacks suppressed
[  104.395225][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'.
[  104.416159][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'.
[  104.436821][ T6376] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[  104.593697][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'.
[  104.602926][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'.
[  104.653977][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'.
[  104.827836][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'.
[  104.843112][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[  105.066692][ T6411] netlink: 388 bytes leftover after parsing attributes in process `syz.1.118'.
[  105.099437][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'.
[  105.141477][ T6411] netlink: 5 bytes leftover after parsing attributes in process `syz.1.118'.
[  105.273513][ T6423] FAULT_INJECTION: forcing a failure.
[  105.273513][ T6423] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  105.302196][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) 
[  105.302222][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  105.302242][ T6423] Call Trace:
[  105.302251][ T6423]  <TASK>
[  105.302259][ T6423]  dump_stack_lvl+0x189/0x250
[  105.302289][ T6423]  ? __pfx____ratelimit+0x10/0x10
[  105.302310][ T6423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.302330][ T6423]  ? __pfx__printk+0x10/0x10
[  105.302357][ T6423]  ? __might_fault+0xb0/0x130
[  105.302395][ T6423]  should_fail_ex+0x414/0x560
[  105.302430][ T6423]  _copy_from_user+0x2d/0xb0
[  105.302457][ T6423]  ___sys_sendmsg+0x158/0x2a0
[  105.302487][ T6423]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.302564][ T6423]  ? __fget_files+0x2a/0x420
[  105.302580][ T6423]  ? __fget_files+0x3a0/0x420
[  105.302609][ T6423]  __x64_sys_sendmsg+0x19b/0x260
[  105.302636][ T6423]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.302672][ T6423]  ? __pfx_ksys_write+0x10/0x10
[  105.302697][ T6423]  ? rcu_is_watching+0x15/0xb0
[  105.302723][ T6423]  ? do_syscall_64+0xbe/0x3b0
[  105.302750][ T6423]  do_syscall_64+0xfa/0x3b0
[  105.302770][ T6423]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.302790][ T6423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.302810][ T6423]  ? clear_bhb_loop+0x60/0xb0
[  105.302835][ T6423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.302854][ T6423] RIP: 0033:0x7fc3cc18eec9
[  105.302878][ T6423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.302893][ T6423] RSP: 002b:00007fc3ca3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.302914][ T6423] RAX: ffffffffffffffda RBX: 00007fc3cc3e5fa0 RCX: 00007fc3cc18eec9
[  105.302928][ T6423] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000003
[  105.302940][ T6423] RBP: 00007fc3ca3f6090 R08: 0000000000000000 R09: 0000000000000000
[  105.302951][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.302962][ T6423] R13: 00007fc3cc3e6038 R14: 00007fc3cc3e5fa0 R15: 00007ffe753f4548
[  105.302994][ T6423]  </TASK>
[  106.073066][ T6461] warning: `syz.3.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  106.149261][ T6461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  106.193433][ T6461] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  106.202829][ T6461] gretap1: entered promiscuous mode
[  106.212076][ T6461] gretap1: entered allmulticast mode
[  106.921955][ T6492] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[  106.939104][ T6493] netlink: 'syz.4.137': attribute type 21 has an invalid length.
[  107.122295][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.229306][ T6473] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  107.244521][ T6473] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  107.289824][ T6498] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.297422][ T6498] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.342015][ T6498] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  107.353472][ T6473] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  107.361780][ T6473] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  107.380393][ T6473] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  107.387049][ T6473] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  107.412823][ T6506] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2
[  107.432107][ T6506] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€
[  107.443471][ T6473] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  107.483562][ T6473] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  107.532139][ T6473] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  107.545809][ T6473] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  108.285137][ T6548] netlink: 'syz.3.148': attribute type 2 has an invalid length.
[  108.300290][ T6548] netlink: 'syz.3.148': attribute type 1 has an invalid length.
[  108.380597][ T6556] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  108.399659][ T6556] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  108.468462][ T6548] gretap2: entered promiscuous mode
[  108.491149][ T6548] bond1: (slave gretap2): making interface the new active one
[  108.523915][ T6548] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  108.598111][ T6556] macvlan2: entered promiscuous mode
[  108.606465][ T6556] macvlan2: entered allmulticast mode
[  108.636419][ T6556] bond1: entered promiscuous mode
[  108.648756][ T6556] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.715412][ T6556] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  108.798885][ T6556] bond1: left promiscuous mode
[  108.939784][ T6580] pim6reg1: entered promiscuous mode
[  108.946240][ T6580] pim6reg1: entered allmulticast mode
[  110.561097][ T6652] __nla_validate_parse: 17 callbacks suppressed
[  110.561117][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[  138.170256][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.176990][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  199.617588][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.624006][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  261.047482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  261.055238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  266.163994][   T31] INFO: task kworker/0:6:5999 blocked for more than 143 seconds.
[  266.171777][   T31]       Not tainted syzkaller #0
[  266.178202][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.187007][   T31] task:kworker/0:6     state:D stack:24808 pid:5999  tgid:5999  ppid:2      task_flags:0x4208060 flags:0x00004000
[  266.199371][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  266.206321][   T31] Call Trace:
[  266.209628][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  266.212586][   T31]  __schedule+0x1798/0x4cc0
[  266.226693][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  266.232213][   T31]  ? __pfx___schedule+0x10/0x10
[  266.248424][   T31]  ? schedule+0x91/0x360
[  266.252824][   T31]  schedule+0x165/0x360
[  266.258632][   T31]  schedule_preempt_disabled+0x13/0x30
[  266.264728][   T31]  __mutex_lock+0x7e6/0x1350
[  266.269377][   T31]  ? __mutex_lock+0x5bb/0x1350
[  266.274703][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  266.281093][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  266.286676][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  266.292446][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  266.298664][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  266.322897][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  266.336661][   T31]  process_scheduled_works+0xae1/0x17b0
[  266.342312][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.357663][   T31]  worker_thread+0x8a0/0xda0
[  266.362349][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.369197][   T31]  ? __kthread_parkme+0x7b/0x200
[  266.374336][   T31]  kthread+0x70e/0x8a0
[  266.378455][   T31]  ? __pfx_worker_thread+0x10/0x10
[  266.383786][   T31]  ? __pfx_kthread+0x10/0x10
[  266.388446][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.393791][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.399013][   T31]  ? __pfx_kthread+0x10/0x10
[  266.403616][   T31]  ret_from_fork+0x439/0x7d0
[  266.408287][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  266.413452][   T31]  ? __switch_to_asm+0x39/0x70
[  266.418455][   T31]  ? __switch_to_asm+0x33/0x70
[  266.425095][   T31]  ? __pfx_kthread+0x10/0x10
[  266.429739][   T31]  ret_from_fork_asm+0x1a/0x30
[  266.434862][   T31]  </TASK>
[  266.438018][   T31] INFO: task syz.2.125:6438 blocked for more than 143 seconds.
[  266.445682][   T31]       Not tainted syzkaller #0
[  266.450733][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.459613][   T31] task:syz.2.125       state:D stack:25096 pid:6438  tgid:6438  ppid:5867   task_flags:0x400040 flags:0x00004006
[  266.471888][   T31] Call Trace:
[  266.475288][   T31]  <TASK>
[  266.478443][   T31]  __schedule+0x1798/0x4cc0
[  266.482999][   T31]  ? __lock_acquire+0xab9/0xd20
[  266.488127][   T31]  ? __lock_acquire+0xab9/0xd20
[  266.493032][   T31]  ? __pfx___schedule+0x10/0x10
[  266.498009][   T31]  ? schedule+0x91/0x360
[  266.502293][   T31]  schedule+0x165/0x360
[  266.506603][   T31]  schedule_preempt_disabled+0x13/0x30
[  266.512099][   T31]  __mutex_lock+0x7e6/0x1350
[  266.516797][   T31]  ? __mutex_lock+0x5bb/0x1350
[  266.521594][   T31]  ? rfkill_unregister+0xc8/0x220
[  266.526703][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  266.531790][   T31]  ? __pfx_device_del+0x10/0x10
[  266.539739][   T31]  rfkill_unregister+0xc8/0x220
[  266.545005][   T31]  nfc_unregister_device+0x96/0x2a0
[  266.550259][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  266.556165][   T31]  virtual_ncidev_close+0x56/0x90
[  266.561236][   T31]  __fput+0x44c/0xa70
[  266.565474][   T31]  task_work_run+0x1d1/0x260
[  266.570277][   T31]  ? __pfx_task_work_run+0x10/0x10
[  266.575555][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  266.581160][   T31]  exit_to_user_mode_loop+0xec/0x110
[  266.586685][   T31]  do_syscall_64+0x2bd/0x3b0
[  266.591439][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.597235][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.603525][   T31]  ? clear_bhb_loop+0x60/0xb0
[  266.608406][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.614468][   T31] RIP: 0033:0x7f27f858eec9
[  266.618931][   T31] RSP: 002b:00007fff9956dab8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  266.627502][   T31] RAX: 0000000000000000 RBX: 00007f27f87e7da0 RCX: 00007f27f858eec9
[  266.635639][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  266.643738][   T31] RBP: 00007f27f87e7da0 R08: 00000000000000dc R09: 0000000b9956ddaf
[  266.651749][   T31] R10: 00007f27f87e7cb0 R11: 0000000000000246 R12: 000000000001a070
[  266.659892][   T31] R13: 00007f27f87e6090 R14: ffffffffffffffff R15: 00007fff9956dbd0
[  266.667960][   T31]  </TASK>
[  266.671056][   T31] INFO: task syz.1.134:6473 blocked for more than 143 seconds.
[  266.685632][   T31]       Not tainted syzkaller #0
[  266.690788][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  266.699790][   T31] task:syz.1.134       state:D stack:24280 pid:6473  tgid:6470  ppid:5869   task_flags:0x400040 flags:0x00004006
[  266.711899][   T31] Call Trace:
[  266.715246][   T31]  <TASK>
[  266.718516][   T31]  __schedule+0x1798/0x4cc0
[  266.723611][   T31]  ? __lock_acquire+0xab9/0xd20
[  266.729448][   T31]  ? __lock_acquire+0xab9/0xd20
[  266.734582][   T31]  ? __pfx___schedule+0x10/0x10
[  266.739482][   T31]  ? schedule+0x91/0x360
[  266.743785][   T31]  schedule+0x165/0x360
[  266.748061][   T31]  schedule_preempt_disabled+0x13/0x30
[  266.753528][   T31]  __mutex_lock+0x7e6/0x1350
[  266.758225][   T31]  ? __mutex_lock+0x5bb/0x1350
[  266.763026][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  266.768524][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  266.773593][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.778902][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.784883][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.791435][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  266.797215][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  266.802455][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  266.814999][   T31]  rfkill_set_block+0x1d2/0x440
[  266.819920][   T31]  rfkill_fop_write+0x44b/0x570
[  266.824906][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  266.830323][   T31]  ? security_kernfs_init_security+0x250/0x290
[  266.836718][   T31]  ? rw_verify_area+0x255/0x4d0
[  266.841608][   T31]  ? __lock_acquire+0xab9/0xd20
[  266.846522][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  266.851943][   T31]  vfs_write+0x27b/0xb30
[  266.856282][   T31]  ? __pfx_vfs_write+0x10/0x10
[  266.861167][   T31]  ? __fget_files+0x2a/0x420
[  266.865836][   T31]  ? __fget_files+0x2a/0x420
[  266.870447][   T31]  ? __fget_files+0x3a0/0x420
[  266.875205][   T31]  ? __fget_files+0x2a/0x420
[  266.879831][   T31]  ksys_write+0x145/0x250
[  266.884256][   T31]  ? __pfx_ksys_write+0x10/0x10
[  266.889135][   T31]  ? rcu_is_watching+0x15/0xb0
[  266.894057][   T31]  ? do_syscall_64+0xbe/0x3b0
[  266.898763][   T31]  do_syscall_64+0xfa/0x3b0
[  266.903271][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.908552][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.914694][   T31]  ? clear_bhb_loop+0x60/0xb0
[  266.919399][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.925360][   T31] RIP: 0033:0x7fed3618eec9
[  266.929832][   T31] RSP: 002b:00007fed36f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  266.938386][   T31] RAX: ffffffffffffffda RBX: 00007fed363e5fa0 RCX: 00007fed3618eec9
[  266.946442][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  266.954490][   T31] RBP: 00007fed36211f91 R08: 0000000000000000 R09: 0000000000000000
[  266.962487][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.970876][   T31] R13: 00007fed363e6038 R14: 00007fed363e5fa0 R15: 00007ffc29d2b068
[  266.979036][   T31]  </TASK>
[  266.982086][   T31] INFO: task syz.4.160:6608 blocked for more than 144 seconds.
[  266.989726][   T31]       Not tainted syzkaller #0
[  266.994789][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.003484][   T31] task:syz.4.160       state:D stack:27640 pid:6608  tgid:6606  ppid:5870   task_flags:0x400140 flags:0x00004004
[  267.015549][   T31] Call Trace:
[  267.018859][   T31]  <TASK>
[  267.021811][   T31]  __schedule+0x1798/0x4cc0
[  267.026463][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.031444][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.036384][   T31]  ? __pfx___schedule+0x10/0x10
[  267.041268][   T31]  ? schedule+0x91/0x360
[  267.045753][   T31]  schedule+0x165/0x360
[  267.049944][   T31]  schedule_preempt_disabled+0x13/0x30
[  267.055474][   T31]  __mutex_lock+0x7e6/0x1350
[  267.060113][   T31]  ? __mutex_lock+0x5bb/0x1350
[  267.064965][   T31]  ? genl_rcv_msg+0x10d/0x790
[  267.069671][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  267.074881][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  267.080383][   T31]  ? radix_tree_lookup+0x240/0x290
[  267.085570][   T31]  genl_rcv_msg+0x10d/0x790
[  267.090207][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.095333][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  267.100467][   T31]  ? __asan_memcpy+0x40/0x70
[  267.105135][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  267.110539][   T31]  netlink_rcv_skb+0x208/0x470
[  267.115384][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.120273][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.125425][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.130758][   T31]  ? down_read+0x1ad/0x2e0
[  267.135246][   T31]  genl_rcv+0x28/0x40
[  267.139270][   T31]  netlink_unicast+0x82f/0x9e0
[  267.144109][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  267.149406][   T31]  ? netlink_sendmsg+0x642/0xb30
[  267.154419][   T31]  ? skb_put+0x11b/0x210
[  267.158711][   T31]  netlink_sendmsg+0x805/0xb30
[  267.163536][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.168966][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.173984][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.179311][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.184688][   T31]  __sock_sendmsg+0x219/0x270
[  267.189406][   T31]  __sys_sendto+0x3bd/0x520
[  267.194274][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  267.199359][   T31]  ? count_memcg_event_mm+0x21/0x260
[  267.204750][   T31]  ? exc_page_fault+0x76/0xf0
[  267.210091][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  267.216378][   T31]  __x64_sys_sendto+0xde/0x100
[  267.221365][   T31]  do_syscall_64+0xfa/0x3b0
[  267.226076][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.231310][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.237482][   T31]  ? clear_bhb_loop+0x60/0xb0
[  267.242198][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.248271][   T31] RIP: 0033:0x7fcad0790d5c
[  267.252722][   T31] RSP: 002b:00007fcad16f5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  267.261286][   T31] RAX: ffffffffffffffda RBX: 00007fcad16f5fc0 RCX: 00007fcad0790d5c
[  267.269405][   T31] RDX: 0000000000000020 RSI: 00007fcad16f6010 RDI: 0000000000000008
[  267.277562][   T31] RBP: 0000000000000000 R08: 00007fcad16f5f14 R09: 000000000000000c
[  267.285657][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  267.293754][   T31] R13: 00007fcad16f5f68 R14: 00007fcad16f6010 R15: 0000000000000000
[  267.301785][   T31]  </TASK>
[  267.304893][   T31] INFO: task syz.4.160:6620 blocked for more than 144 seconds.
[  267.312460][   T31]       Not tainted syzkaller #0
[  267.317545][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.327370][   T31] task:syz.4.160       state:D stack:26760 pid:6620  tgid:6606  ppid:5870   task_flags:0x400140 flags:0x00004004
[  267.339397][   T31] Call Trace:
[  267.342711][   T31]  <TASK>
[  267.346018][   T31]  __schedule+0x1798/0x4cc0
[  267.350564][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.355825][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.360732][   T31]  ? __pfx___schedule+0x10/0x10
[  267.365919][   T31]  ? schedule+0x91/0x360
[  267.370200][   T31]  schedule+0x165/0x360
[  267.374650][   T31]  schedule_preempt_disabled+0x13/0x30
[  267.380142][   T31]  __mutex_lock+0x7e6/0x1350
[  267.385088][   T31]  ? __mutex_lock+0x5bb/0x1350
[  267.390019][   T31]  ? genl_rcv_msg+0x10d/0x790
[  267.394768][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  267.399904][   T31]  ? stack_trace_save+0x9c/0xe0
[  267.404844][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  267.410243][   T31]  ? radix_tree_lookup+0x240/0x290
[  267.415466][   T31]  genl_rcv_msg+0x10d/0x790
[  267.420097][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.425020][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.430117][   T31]  netlink_rcv_skb+0x208/0x470
[  267.435010][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.439912][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.445169][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.450544][   T31]  ? down_read+0x1ad/0x2e0
[  267.455052][   T31]  genl_rcv+0x28/0x40
[  267.459074][   T31]  netlink_unicast+0x82f/0x9e0
[  267.463939][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  267.469357][   T31]  ? netlink_sendmsg+0x642/0xb30
[  267.474350][   T31]  ? skb_put+0x11b/0x210
[  267.478642][   T31]  netlink_sendmsg+0x805/0xb30
[  267.483438][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.488812][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.493881][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.499365][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.504846][   T31]  __sock_sendmsg+0x219/0x270
[  267.509591][   T31]  ____sys_sendmsg+0x505/0x830
[  267.514461][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.519783][   T31]  ? import_iovec+0x74/0xa0
[  267.524583][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  267.529317][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.534632][   T31]  ? __fget_files+0x2a/0x420
[  267.539259][   T31]  ? __fget_files+0x3a0/0x420
[  267.544004][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  267.548980][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.554547][   T31]  ? rcu_is_watching+0x15/0xb0
[  267.559435][   T31]  ? do_syscall_64+0xbe/0x3b0
[  267.564200][   T31]  do_syscall_64+0xfa/0x3b0
[  267.568755][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.574050][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.580168][   T31]  ? clear_bhb_loop+0x60/0xb0
[  267.584950][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.590876][   T31] RIP: 0033:0x7fcad078eec9
[  267.595388][   T31] RSP: 002b:00007fcad16b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.603918][   T31] RAX: ffffffffffffffda RBX: 00007fcad09e6180 RCX: 00007fcad078eec9
[  267.611993][   T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006
[  267.620036][   T31] RBP: 00007fcad0811f91 R08: 0000000000000000 R09: 0000000000000000
[  267.628200][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.636248][   T31] R13: 00007fcad09e6218 R14: 00007fcad09e6180 R15: 00007fff9f6ed9a8
[  267.644285][   T31]  </TASK>
[  267.647326][   T31] INFO: task syz.3.162:6611 blocked for more than 144 seconds.
[  267.655123][   T31]       Not tainted syzkaller #0
[  267.660276][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  267.669108][   T31] task:syz.3.162       state:D stack:23504 pid:6611  tgid:6610  ppid:5868   task_flags:0x400140 flags:0x00004004
[  267.681108][   T31] Call Trace:
[  267.684448][   T31]  <TASK>
[  267.687432][   T31]  __schedule+0x1798/0x4cc0
[  267.692046][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.696989][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.701975][   T31]  ? __pfx___schedule+0x10/0x10
[  267.706959][   T31]  ? schedule+0x91/0x360
[  267.711236][   T31]  schedule+0x165/0x360
[  267.715469][   T31]  schedule_preempt_disabled+0x13/0x30
[  267.720959][   T31]  __mutex_lock+0x7e6/0x1350
[  267.725671][   T31]  ? rcu_is_watching+0x15/0xb0
[  267.730718][   T31]  ? __mutex_lock+0x5bb/0x1350
[  267.735578][   T31]  ? rfkill_register+0x37/0x8e0
[  267.740457][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  267.745561][   T31]  ? netdev_run_todo+0xe1d/0xea0
[  267.750537][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.755808][   T31]  ? __pfx_netdev_run_todo+0x10/0x10
[  267.761124][   T31]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  267.767153][   T31]  rfkill_register+0x37/0x8e0
[  267.771894][   T31]  wiphy_register+0x214c/0x28d0
[  267.777002][   T31]  ? __pfx_wiphy_register+0x10/0x10
[  267.782247][   T31]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  267.787491][   T31]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  267.793627][   T31]  ieee80211_register_hw+0x3484/0x4100
[  267.799352][   T31]  ? ieee80211_register_hw+0x1421/0x4100
[  267.805113][   T31]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  267.810958][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  267.817379][   T31]  ? __hrtimer_setup+0x187/0x210
[  267.822347][   T31]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  267.828292][   T31]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  267.834164][   T31]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  267.840282][   T31]  ? trace_kmalloc+0x1f/0xd0
[  267.845108][   T31]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  267.851743][   T31]  ? kstrndup+0xbf/0x160
[  267.856268][   T31]  hwsim_new_radio_nl+0xea4/0x1b10
[  267.861517][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  267.867585][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.873278][   T31]  ? __nla_parse+0x40/0x60
[  267.878196][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  267.884680][   T31]  genl_family_rcv_msg_doit+0x212/0x300
[  267.890361][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  267.896538][   T31]  ? bpf_lsm_capable+0x9/0x20
[  267.901267][   T31]  ? security_capable+0x7e/0x2e0
[  267.906338][   T31]  genl_rcv_msg+0x60e/0x790
[  267.910888][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.916005][   T31]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.921670][   T31]  netlink_rcv_skb+0x208/0x470
[  267.926534][   T31]  ? __lock_acquire+0xab9/0xd20
[  267.931460][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.936693][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.942044][   T31]  ? down_read+0x1ad/0x2e0
[  267.946564][   T31]  genl_rcv+0x28/0x40
[  267.950620][   T31]  netlink_unicast+0x82f/0x9e0
[  267.955753][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  267.961090][   T31]  ? netlink_sendmsg+0x642/0xb30
[  267.966185][   T31]  ? skb_put+0x11b/0x210
[  267.970471][   T31]  netlink_sendmsg+0x805/0xb30
[  267.975327][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.980654][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.985661][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.990976][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.996504][   T31]  __sock_sendmsg+0x219/0x270
[  268.001229][   T31]  ____sys_sendmsg+0x505/0x830
[  268.006163][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.011505][   T31]  ? import_iovec+0x74/0xa0
[  268.016332][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  268.021197][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.026489][   T31]  ? __fget_files+0x2a/0x420
[  268.031101][   T31]  ? __fget_files+0x3a0/0x420
[  268.035892][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  268.040862][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.046386][   T31]  ? rcu_is_watching+0x15/0xb0
[  268.051178][   T31]  ? do_syscall_64+0xbe/0x3b0
[  268.055934][   T31]  do_syscall_64+0xfa/0x3b0
[  268.060461][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.065763][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.071879][   T31]  ? clear_bhb_loop+0x60/0xb0
[  268.076690][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.082630][   T31] RIP: 0033:0x7f173618eec9
[  268.087314][   T31] RSP: 002b:00007f1737113038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.095969][   T31] RAX: ffffffffffffffda RBX: 00007f17363e5fa0 RCX: 00007f173618eec9
[  268.104039][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  268.112041][   T31] RBP: 00007f1736211f91 R08: 0000000000000000 R09: 0000000000000000
[  268.120076][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.128122][   T31] R13: 00007f17363e6038 R14: 00007f17363e5fa0 R15: 00007ffec0af3ca8
[  268.136185][   T31]  </TASK>
[  268.139238][   T31] INFO: task syz.0.167:6664 blocked for more than 145 seconds.
[  268.146874][   T31]       Not tainted syzkaller #0
[  268.151854][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.160566][   T31] task:syz.0.167       state:D stack:26040 pid:6664  tgid:6663  ppid:5866   task_flags:0x400140 flags:0x00004004
[  268.172662][   T31] Call Trace:
[  268.176032][   T31]  <TASK>
[  268.178997][   T31]  __schedule+0x1798/0x4cc0
[  268.183614][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.188738][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.193642][   T31]  ? __pfx___schedule+0x10/0x10
[  268.198597][   T31]  ? schedule+0x91/0x360
[  268.202874][   T31]  schedule+0x165/0x360
[  268.207188][   T31]  schedule_preempt_disabled+0x13/0x30
[  268.212680][   T31]  __mutex_lock+0x7e6/0x1350
[  268.217402][   T31]  ? __mutex_lock+0x5bb/0x1350
[  268.222196][   T31]  ? genl_rcv_msg+0x10d/0x790
[  268.226950][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  268.231999][   T31]  ? __dev_queue_xmit+0x27b/0x3b50
[  268.237177][   T31]  ? radix_tree_lookup+0x240/0x290
[  268.242332][   T31]  genl_rcv_msg+0x10d/0x790
[  268.246927][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.251982][   T31]  ? ref_tracker_free+0x63a/0x7d0
[  268.257099][   T31]  ? __asan_memcpy+0x40/0x70
[  268.261722][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  268.267206][   T31]  netlink_rcv_skb+0x208/0x470
[  268.272012][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.276939][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.282002][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.287392][   T31]  ? down_read+0x1ad/0x2e0
[  268.291851][   T31]  genl_rcv+0x28/0x40
[  268.295929][   T31]  netlink_unicast+0x82f/0x9e0
[  268.300740][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  268.306105][   T31]  ? netlink_sendmsg+0x642/0xb30
[  268.311076][   T31]  ? skb_put+0x11b/0x210
[  268.315432][   T31]  netlink_sendmsg+0x805/0xb30
[  268.320233][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.325622][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  268.330590][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.336001][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.341320][   T31]  __sock_sendmsg+0x219/0x270
[  268.346105][   T31]  __sys_sendto+0x3bd/0x520
[  268.350658][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  268.355859][   T31]  ? count_memcg_event_mm+0x21/0x260
[  268.361196][   T31]  ? exc_page_fault+0x76/0xf0
[  268.366450][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  268.371802][   T31]  __x64_sys_sendto+0xde/0x100
[  268.376787][   T31]  do_syscall_64+0xfa/0x3b0
[  268.381331][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.386621][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.392717][   T31]  ? clear_bhb_loop+0x60/0xb0
[  268.397491][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.403414][   T31] RIP: 0033:0x7fc3cc190d5c
[  268.407984][   T31] RSP: 002b:00007fc3ca3f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  268.416585][   T31] RAX: ffffffffffffffda RBX: 00007fc3ca3f4fc0 RCX: 00007fc3cc190d5c
[  268.424756][   T31] RDX: 0000000000000020 RSI: 00007fc3ca3f5010 RDI: 0000000000000006
[  268.432768][   T31] RBP: 0000000000000000 R08: 00007fc3ca3f4f14 R09: 000000000000000c
[  268.440885][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  268.448995][   T31] R13: 00007fc3ca3f4f68 R14: 00007fc3ca3f5010 R15: 0000000000000000
[  268.457057][   T31]  </TASK>
[  268.460123][   T31] INFO: task syz-executor:6671 blocked for more than 145 seconds.
[  268.468154][   T31]       Not tainted syzkaller #0
[  268.473126][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.481960][   T31] task:syz-executor    state:D stack:28040 pid:6671  tgid:6671  ppid:1      task_flags:0x400040 flags:0x00004000
[  268.494119][   T31] Call Trace:
[  268.497436][   T31]  <TASK>
[  268.500468][   T31]  __schedule+0x1798/0x4cc0
[  268.505102][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.510002][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.514939][   T31]  ? __pfx___schedule+0x10/0x10
[  268.519857][   T31]  ? schedule+0x91/0x360
[  268.524283][   T31]  schedule+0x165/0x360
[  268.528512][   T31]  schedule_preempt_disabled+0x13/0x30
[  268.534090][   T31]  __mutex_lock+0x7e6/0x1350
[  268.538735][   T31]  ? __mutex_lock+0x5bb/0x1350
[  268.543543][   T31]  ? rfkill_register+0x37/0x8e0
[  268.548571][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  268.553627][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  268.559011][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  268.564709][   T31]  ? device_initialize+0x24b/0x440
[  268.569861][   T31]  rfkill_register+0x37/0x8e0
[  268.574634][   T31]  hci_register_dev+0x3f5/0x890
[  268.579535][   T31]  vhci_create_device+0x39c/0x650
[  268.584661][   T31]  vhci_write+0x3ce/0x4a0
[  268.589042][   T31]  vfs_write+0x5c9/0xb30
[  268.593303][   T31]  ? __pfx_vhci_write+0x10/0x10
[  268.598376][   T31]  ? __pfx_vfs_write+0x10/0x10
[  268.603197][   T31]  ? count_memcg_event_mm+0x21/0x260
[  268.608622][   T31]  ksys_write+0x145/0x250
[  268.613088][   T31]  ? __pfx_ksys_write+0x10/0x10
[  268.618041][   T31]  ? do_syscall_64+0xbe/0x3b0
[  268.622766][   T31]  do_syscall_64+0xfa/0x3b0
[  268.627369][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.632639][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.638858][   T31]  ? clear_bhb_loop+0x60/0xb0
[  268.643567][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.649723][   T31] RIP: 0033:0x7f5e4958d940
[  268.654226][   T31] RSP: 002b:00007ffc00cfecf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  268.662740][   T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5e4958d940
[  268.670794][   T31] RDX: 0000000000000002 RSI: 00007ffc00cfed0a RDI: 00000000000000ca
[  268.678861][   T31] RBP: 00007f5e497e67b8 R08: 0000000000000000 R09: 00007f5e4a31d6c0
[  268.686898][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  268.694957][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  268.702982][   T31]  </TASK>
[  268.706135][   T31] INFO: task syz-executor:6672 blocked for more than 145 seconds.
[  268.714010][   T31]       Not tainted syzkaller #0
[  268.718981][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  268.728027][   T31] task:syz-executor    state:D stack:28040 pid:6672  tgid:6672  ppid:1      task_flags:0x400040 flags:0x00004000
[  268.740044][   T31] Call Trace:
[  268.743351][   T31]  <TASK>
[  268.746357][   T31]  __schedule+0x1798/0x4cc0
[  268.750899][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.755828][   T31]  ? __lock_acquire+0xab9/0xd20
[  268.760716][   T31]  ? __pfx___schedule+0x10/0x10
[  268.765672][   T31]  ? schedule+0x91/0x360
[  268.769938][   T31]  schedule+0x165/0x360
[  268.774255][   T31]  schedule_preempt_disabled+0x13/0x30
[  268.779733][   T31]  __mutex_lock+0x7e6/0x1350
[  268.784390][   T31]  ? __mutex_lock+0x5bb/0x1350
[  268.789227][   T31]  ? rfkill_register+0x37/0x8e0
[  268.794145][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  268.799197][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  268.805199][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  268.810719][   T31]  ? device_initialize+0x24b/0x440
[  268.815913][   T31]  rfkill_register+0x37/0x8e0
[  268.820629][   T31]  hci_register_dev+0x3f5/0x890
[  268.825605][   T31]  vhci_create_device+0x39c/0x650
[  268.830686][   T31]  vhci_write+0x3ce/0x4a0
[  268.835097][   T31]  vfs_write+0x5c9/0xb30
[  268.839381][   T31]  ? __pfx_vhci_write+0x10/0x10
[  268.844298][   T31]  ? __pfx_vfs_write+0x10/0x10
[  268.849093][   T31]  ? count_memcg_event_mm+0x21/0x260
[  268.854497][   T31]  ksys_write+0x145/0x250
[  268.858876][   T31]  ? __pfx_ksys_write+0x10/0x10
[  268.863953][   T31]  ? do_syscall_64+0xbe/0x3b0
[  268.868671][   T31]  do_syscall_64+0xfa/0x3b0
[  268.873219][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.878542][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.887360][   T31]  ? clear_bhb_loop+0x60/0xb0
[  268.892117][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.898500][   T31] RIP: 0033:0x7f718a98d940
[  268.902950][   T31] RSP: 002b:00007ffff5013b68 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  268.911431][   T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f718a98d940
[  268.919492][   T31] RDX: 0000000000000002 RSI: 00007ffff5013b7a RDI: 00000000000000ca
[  268.927547][   T31] RBP: 00007f718abe67b8 R08: 0000000000000000 R09: 00007f718b71d6c0
[  268.935589][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  268.943584][   T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  268.951633][   T31]  </TASK>
[  268.954748][   T31] 
[  268.954748][   T31] Showing all locks held in the system:
[  268.962565][   T31] 1 lock held by khungtaskd/31:
[  268.967530][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  268.977490][   T31] 2 locks held by getty/5631:
[  268.982165][   T31]  #0: ffff88814d3f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  268.991992][   T31]  #1: ffffc9000363b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  269.002209][   T31] 3 locks held by kworker/0:6/5999:
[  269.007491][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  269.018548][   T31]  #1: ffffc9000ad27bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  269.032107][   T31]  #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  269.043530][   T31] 2 locks held by syz.2.125/6438:
[  269.048747][   T31]  #0: ffff88806b1e9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  269.058824][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  269.069121][   T31] 2 locks held by syz.1.134/6473:
[  269.074209][   T31]  #0: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  269.084527][   T31]  #1: ffff88806b1e9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  269.094311][   T31] 2 locks held by syz.4.160/6608:
[  269.099362][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  269.107622][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  269.116683][   T31] 2 locks held by syz.4.160/6620:
[  269.121911][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  269.130264][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  269.139332][   T31] 3 locks held by syz.3.162/6611:
[  269.144441][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  269.152694][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  269.161778][   T31]  #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.171784][   T31] 2 locks held by syz.0.167/6664:
[  269.176865][   T31]  #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  269.185140][   T31]  #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  269.194213][   T31] 2 locks held by syz-executor/6671:
[  269.199521][   T31]  #0: ffff888055664918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.209737][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.219773][   T31] 2 locks held by syz-executor/6672:
[  269.225137][   T31]  #0: ffff8880555f2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.235281][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.245305][   T31] 2 locks held by syz-executor/6679:
[  269.250784][   T31]  #0: ffff888027470118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.260888][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.270907][   T31] 2 locks held by syz-executor/6680:
[  269.276472][   T31]  #0: ffff88806b1bd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.286600][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.296625][   T31] 2 locks held by syz-executor/6682:
[  269.301921][   T31]  #0: ffff888030ed6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.312179][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.322199][   T31] 2 locks held by syz-executor/6686:
[  269.327528][   T31]  #0: ffff888143bf3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.337626][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.347690][   T31] 2 locks held by syz-executor/6687:
[  269.352991][   T31]  #0: ffff8880559a4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.363086][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.373111][   T31] 2 locks held by syz-executor/6692:
[  269.378525][   T31]  #0: ffff888033aeb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.388647][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.398787][   T31] 2 locks held by syz-executor/6694:
[  269.404325][   T31]  #0: ffff888028915118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.414492][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.425062][   T31] 2 locks held by syz-executor/6698:
[  269.430552][   T31]  #0: ffff888055c20918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.440692][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.450806][   T31] 2 locks held by syz-executor/6703:
[  269.456323][   T31]  #0: ffff888055ded918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.466417][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.476761][   T31] 2 locks held by syz-executor/6705:
[  269.482102][   T31]  #0: ffff88801a5d2918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.493006][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.503095][   T31] 2 locks held by syz-executor/6708:
[  269.508443][   T31]  #0: ffff888030db9918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.518838][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.528914][   T31] 2 locks held by syz-executor/6709:
[  269.534274][   T31]  #0: ffff88802781c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.544443][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.554478][   T31] 2 locks held by syz-executor/6713:
[  269.559965][   T31]  #0: ffff888023e3c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  269.570089][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  269.580111][   T31] 
[  269.582526][   T31] =============================================
[  269.582526][   T31] 
[  269.591014][   T31] NMI backtrace for cpu 1
[  269.591035][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  269.591056][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  269.591067][   T31] Call Trace:
[  269.591074][   T31]  <TASK>
[  269.591082][   T31]  dump_stack_lvl+0x189/0x250
[  269.591112][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.591136][   T31]  ? __pfx__printk+0x10/0x10
[  269.591175][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  269.591208][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  269.591238][   T31]  ? __pfx__printk+0x10/0x10
[  269.591272][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  269.591307][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  269.591341][   T31]  watchdog+0xf93/0xfe0
[  269.591417][   T31]  ? watchdog+0x1de/0xfe0
[  269.591453][   T31]  kthread+0x70e/0x8a0
[  269.591483][   T31]  ? __pfx_watchdog+0x10/0x10
[  269.591510][   T31]  ? __pfx_kthread+0x10/0x10
[  269.591538][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.591558][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.591577][   T31]  ? __pfx_kthread+0x10/0x10
[  269.591604][   T31]  ret_from_fork+0x439/0x7d0
[  269.591626][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  269.591653][   T31]  ? __switch_to_asm+0x39/0x70
[  269.591679][   T31]  ? __switch_to_asm+0x33/0x70
[  269.591705][   T31]  ? __pfx_kthread+0x10/0x10
[  269.591732][   T31]  ret_from_fork_asm+0x1a/0x30
[  269.591777][   T31]  </TASK>
[  269.591785][   T31] Sending NMI from CPU 1 to CPUs 0:
[  269.738064][    C0] NMI backtrace for cpu 0
[  269.738082][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  269.738100][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  269.738111][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  269.738135][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  269.738149][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  269.738164][    C0] RAX: d1d958fe986b6700 RBX: ffffffff819683f8 RCX: d1d958fe986b6700
[  269.738177][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00
[  269.738188][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  269.738201][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630
[  269.738213][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  269.738224][    C0] FS:  0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
[  269.738237][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.738248][    C0] CR2: 000055ea059444d8 CR3: 000000000df36000 CR4: 00000000003526f0
[  269.738263][    C0] Call Trace:
[  269.738272][    C0]  <TASK>
[  269.738279][    C0]  default_idle+0x13/0x20
[  269.738299][    C0]  default_idle_call+0x74/0xb0
[  269.738321][    C0]  do_idle+0x1e8/0x510
[  269.738348][    C0]  ? __pfx_do_idle+0x10/0x10
[  269.738373][    C0]  cpu_startup_entry+0x44/0x60
[  269.738389][    C0]  rest_init+0x2de/0x300
[  269.738413][    C0]  start_kernel+0x3a9/0x410
[  269.738434][    C0]  x86_64_start_reservations+0x24/0x30
[  269.738457][    C0]  x86_64_start_kernel+0x143/0x1c0
[  269.738480][    C0]  common_startup_64+0x13e/0x147
[  269.738512][    C0]  </TASK>
[  269.739114][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  269.920620][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  269.929734][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  269.939782][   T31] Call Trace:
[  269.943063][   T31]  <TASK>
[  269.945993][   T31]  dump_stack_lvl+0x99/0x250
[  269.950587][   T31]  ? __asan_memcpy+0x40/0x70
[  269.955191][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.960390][   T31]  ? __pfx__printk+0x10/0x10
[  269.964991][   T31]  vpanic+0x281/0x750
[  269.968975][   T31]  ? __pfx_vpanic+0x10/0x10
[  269.973473][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  269.979024][   T31]  ? preempt_schedule+0xae/0xc0
[  269.983873][   T31]  ? preempt_schedule_common+0x83/0xd0
[  269.989364][   T31]  panic+0xb9/0xc0
[  269.993114][   T31]  ? __pfx_panic+0x10/0x10
[  269.997541][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  270.002927][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  270.009093][   T31]  watchdog+0xfd2/0xfe0
[  270.013267][   T31]  ? watchdog+0x1de/0xfe0
[  270.017626][   T31]  kthread+0x70e/0x8a0
[  270.021700][   T31]  ? __pfx_watchdog+0x10/0x10
[  270.026421][   T31]  ? __pfx_kthread+0x10/0x10
[  270.031029][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.036237][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.041440][   T31]  ? __pfx_kthread+0x10/0x10
[  270.046036][   T31]  ret_from_fork+0x439/0x7d0
[  270.050631][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  270.055745][   T31]  ? __switch_to_asm+0x39/0x70
[  270.060513][   T31]  ? __switch_to_asm+0x33/0x70
[  270.065291][   T31]  ? __pfx_kthread+0x10/0x10
[  270.069889][   T31]  ret_from_fork_asm+0x1a/0x30
[  270.074666][   T31]  </TASK>
[  270.078010][   T31] Kernel Offset: disabled
[  270.082339][   T31] Rebooting in 86400 seconds..