last executing test programs:

10.39357914s ago: executing program 4 (id=17):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000845, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x122, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

8.694152736s ago: executing program 4 (id=26):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000007100010000000000000000bc07000000", @ANYRES32=r1, @ANYBLOB="0c00018008000100c50001000c00"], 0x30}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x20000000, 0x4, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={<r3=>0x0}, &(0x7f00000000c0)=0x3930)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x20000085)
unshare(0x20040600)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=r3, @ANYRESDEC=r4, @ANYBLOB="00f00100000000f863000000000000fb2900009debb23cc882920bc228dde96f5e672faf3dcf39ee0d5d88ac4b102c261854876cc62e4ae6562aea713f1aa7514fec50250da49ee0288518fd135a561e4ad62cbc519c64553be1742b85071be312300ad7b2e6d1e666a7330ead8e19c0f1ddc8d056de1600272bde59a7870f63a7a4f5f8c1dbcc6c0ddc7f9dd1b7aa7da39f81aadb02abfbdb941c73ef3c3a520eb90368c1b1808ed6e7845b578dcde8a8f08305b4a2c3dc6a418b1906722d257a5084", @ANYRESHEX, @ANYRESHEX=r4, @ANYBLOB="379d02c074f43be92cf9b0edcb4bbd7962db081d7c6bf772dc861e47e6eca937d8b880be5e2de0a29700fde91f5c566d7afc4241cf43dceec44a3dcc0ef30ff7bd7b20576751f24a3f9b05d0891c2c8af375dac76e995d4ede6baa23ebdd19055a7dc58ae76f1b52e239344f19f7d8e407d26f44074c3a0f57a5b1d089a68aa8c6b971575b7ceced33f8d48567bc7c6176fd65a6cef8faf0830889adfe6d21040500f7c95b9483c2c0", @ANYRES64=r3], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x27, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r6 = accept4$alg(r5, 0x0, 0x0, 0x0)
sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)

4.672951062s ago: executing program 4 (id=43):
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1d, 0x5, 0x0)
r1 = socket(0x8, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x24014010)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4b)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

3.833650934s ago: executing program 2 (id=47):
socket$kcm(0x10, 0x400000002, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x10000, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r6, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x700}, 0x0)

3.589275632s ago: executing program 4 (id=51):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
unshare(0x68060200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
socket$inet6(0xa, 0x200000000003, 0x87)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xba, &(0x7f00000006c0)=ANY=[], 0x0)
sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0xc0, [0x2, 0x7, 0x7, 0xffffffffffffffff, 0x648, 0x5], 0x1, &(0x7f0000000000)=[{}], &(0x7f00000002c0)=""/192}, &(0x7f0000000380)=0x78)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000100)=ANY=[], 0x48)

3.161040021s ago: executing program 2 (id=55):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r5, @ANYBLOB="003200000000000014000300624d"], 0x3c}}, 0x0)
bind$bt_hci(r2, 0x0, 0x0)
write(r2, &(0x7f0000000040)="050000", 0x3)
close(r2)
getpid()
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d8", 0x40, 0x11, 0x0, 0x0)

2.864984585s ago: executing program 2 (id=58):
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x5, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet_dccp(0x2, 0x6, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0)

2.63265573s ago: executing program 1 (id=61):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[], 0x50}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x54, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9f, 0x69}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="9392d43bcee0765c89f545061edc6932023803743100"}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x1)

2.516169034s ago: executing program 3 (id=62):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x11, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
epoll_create1(0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000a9020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c0002800cc001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0)

2.475626367s ago: executing program 2 (id=63):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = epoll_create1(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback={0x700}, 0x20}, 0x1c)
r3 = socket$unix(0x1, 0x1, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xe0028008})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x22020400)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
r5 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), 0x0)
r6 = socket(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0)
preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x0)

2.373184786s ago: executing program 1 (id=64):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r1)
unshare(0x280)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x20000fbd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66", 0x42, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0)

2.321865006s ago: executing program 0 (id=65):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000218120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.283477054s ago: executing program 2 (id=66):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
listen(r2, 0x0)
close(r2)
unshare(0x20000080)
r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000500)={0x28, 0x0, 0xffffffff}, 0x10, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, 0x0, 0x0)
listen(r4, 0x0)
vmsplice(r3, 0x0, 0x0, 0xd)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x40000)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff2f, &(0x7f0000000180)={0x0}}, 0x40054)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x14, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0)

2.239458544s ago: executing program 0 (id=67):
unshare(0x24020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = epoll_create1(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0xb0000003})
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x24000c80)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5}}}, 0x24}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
writev(r9, &(0x7f00000007c0), 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
close(r9)

1.811749272s ago: executing program 0 (id=68):
r0 = socket(0x25, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
close(r0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x25, 0x800, 0x778e, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001480)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0, 0xb032}}}, 0x84)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000004240)=0x9, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000003100), 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000003c00)=0x90)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000f005000000000000", @ANYRES32, @ANYBLOB="1b54b7277f"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000001240)=@sack_info={0x0, 0x8000000, 0x7}, 0xc)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0)

1.769159993s ago: executing program 4 (id=69):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x2000, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000500000003000c0001"], 0x30}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x21, 0x107, 0xfffffffd, 0x0, {0x2, 0x7c}}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x28000}], 0xbe, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0)

1.697299601s ago: executing program 3 (id=70):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
close(r3)
splice(r2, 0x0, r3, 0x0, 0x10500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x12, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0xf4, &(0x7f00000003c0)=""/244, 0x41000, 0x41, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x3, 0x80, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0x1, r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6f, @void, @value}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)

1.564109s ago: executing program 3 (id=71):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="405fe0536db80b0113", @ANYBLOB], 0x30}}, 0x88c0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18)

1.465329286s ago: executing program 0 (id=72):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
recvfrom$packet(r4, &(0x7f0000000380)=""/127, 0x7f, 0x1, &(0x7f00000002c0)={0x11, 0x8, 0x0, 0x1, 0xf, 0x6, @random="39d4b84bce6c"}, 0x14)
accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x18}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x18, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x700}, 0x0)

1.415039701s ago: executing program 2 (id=73):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298)
r2 = epoll_create(0x3ff)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280))
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x800, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc1fb}]}}]}, 0x50}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25010000000800020006000000493e6df72714566272ac446e1b1087aabcc537b871046766802aa3ef41b18f2a31cb155b7c39a913a3e24481e259f7dffa0e17245c03da809237c9f6d51647177001813b7356f02796b74426dbb93ad623ac89808915a8996d8302fb1500c0763bcab047ef24b7bd4c8596d8c4b736391ee27dccb570247f9e29bb8b7c9f4f23f50432aa099c52da71b2b122"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES64=r0, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x8880)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r16, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, r15, 0x1, 0x70bd2b, 0x0, {{0xa}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10)

1.318713661s ago: executing program 1 (id=74):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)
socket(0x40000000002, 0x3, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4016}, 0x20044874)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x10d, 0xe, 0x0, 0x2)
socket(0x40000000002, 0x3, 0x80000000002)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[], 0x10}, 0x1, 0xffffff7f00000000}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

1.185276808s ago: executing program 4 (id=75):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298)
r2 = epoll_create(0x3ff)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000})
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r4, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280))
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x800, 0x8}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xc1fb}]}}]}, 0x50}}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf25010000000800020006000000493e6df72714566272ac446e1b1087aabcc537b871046766802aa3ef41b18f2a31cb155b7c39a913a3e24481e259f7dffa0e17245c03da809237c9f6d51647177001813b7356f02796b74426dbb93ad623ac89808915a8996d8302fb1500c0763bcab047ef24b7bd4c8596d8c4b736391ee27dccb570247f9e29bb8b7c9f4f23f50432aa099c52da71b2b122"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES64=r0, @ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x8880)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000002200)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r16, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x24, r15, 0x1, 0x70bd2b, 0x0, {{0xa}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10)

1.132504637s ago: executing program 1 (id=76):
socket$kcm(0x2, 0x0, 0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eea", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000d218b2a3555b006600000000000000180000000000000000000000000000009500000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000190000009500"], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$qrtr(0x2a, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r2, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x1)
shutdown(r2, 0x0)
sendto(r0, &(0x7f00000001c0)="25ff8571999e1f778f0350a97e44f1b970763fa07dc8b9fe0b9017ffc8854e8baaf1413c31b7dba484267bac5aae083558afab07716cf0ad72832b1320411e32c81cd67fabb0652f0b850dfaf75004cfc278cdee43f381", 0x57, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0x8, 0x0, 0x7ff]}, &(0x7f0000000240)=0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

1.035295528s ago: executing program 3 (id=77):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000218120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

853.701262ms ago: executing program 0 (id=78):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000003000000000900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})

813.580479ms ago: executing program 3 (id=79):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb", 0xa4}, {0x0}, {&(0x7f0000000580)="5058c2de94736cc9896f3d1e1392e20a078af9b25172525f85913ccc26636f016418f32eb9038f57ea46f1fb98a509ad5701a30b6ebfbce7b06d2d0c6bc589316fdbdbe63e97238f3bda397f44473efb320b0bd8924ebd173f6d60f8b999cf78a34a9acc8c7829e3fec8dbfcb7fd5ed32e2c694cb815b7a51ea65b4739f5d6056ffa51286230cac7589556fe80f8ac0b380980a2da0d442cf2f1be49297bcb11597dc2207d7cefca1ac8d05eeb298ac416b8e39274c00a1579b7520ac8e0d28c1a1794c0dff064aaad03fe470ca76e96bbce4dee5cfc0847b0b16dd8a608d4f053b781e096c5bfaefab5646cc20e9b5e60d8b5a82725d6", 0xf7}, {&(0x7f0000000680)="ae9c7b99f6b793304cff9a01b407ddb09a0f0aa79827109adcea691da336d8f4f8eb63b2d6439a818f3ec3f37e076f8b92a234281f024c70d8ab86b10eef04601f1ed3a53b6a18f0daf647873e8099938814864086feb01b1ae86fdacbf32f4c26f3c486bef41719437ac389daa4661192e246d4ded153f67de0daae49453432c2999e31561a686db2aa3dab1c18d98b843681ffae226ac783dbbe2d9d08249a1ff231ca921224198ced00ff52d19113dd150d16877a92594ec3c92416d86a8fa515aa6b4d777fd8920607d2", 0xcc}], 0x4}}], 0x2, 0x0)
recvmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/247, 0xf7}], 0x2}, 0x10102)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x43400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000100)={0x7, 'nr0\x00', {0x1}, 0x5})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x0, 0x8}})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8004, 0xfffffffe, 0x2}, 0x10)

631.467995ms ago: executing program 1 (id=80):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}}}}}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x2, 0x3, 0xff)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)="7ca96e1548a7145621d040371d17f0e6cb718ef0d0dee1e919279bb32328e893cba362da0f60a8677cc348713966261c", 0x30}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x18}}], 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'xcbc(aes)\x00'}, 0x80, 0x0, "97a2c2df58bf2babea45840d4da5d432"}}]}, 0x14c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0xfffffffc, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1b, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$netlink(0x10, 0x3, 0x0)

610.854019ms ago: executing program 0 (id=81):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x7)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='lp\x00', 0x3)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
socket$caif_stream(0x25, 0x1, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x3, 0xcc9, 0x1, 0x18, 0x2, 0x3}, &(0x7f0000000240)=0x9c)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0x8, 0x8001, 0x6e}, 0x10)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1, &(0x7f0000001740)=""/4096, 0x1000}, 0x1)

548.108075ms ago: executing program 3 (id=82):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x98, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}]}}]}, 0x98}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='f2fs_sync_fs\x00', r5}, 0x2)
recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r6}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}, 0x300}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

0s ago: executing program 1 (id=83):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f017", 0x2b}], 0x1}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000280), 0x4)
close(r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x2, 0x1f, &(0x7f0000000140)="e5d2", &(0x7f0000000300)=""/31, 0x4, 0x0, 0x0, 0x2b, &(0x7f0000000340), &(0x7f00000003c0)="579657805f75506f85f202723a7e8810f677bbe372cf84d2e9fda07ed5af478b4c81179ae0268a8407c8b5", 0x5, 0x0, 0xf}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff50c8, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f5001a0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000ffff000000000000001400030076657468305f746f5f626f6e64000000080006"], 0x38}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x12, 0x83, &(0x7f0000000600)="338eddd4f8c9650d3b886450888d71bb162c", &(0x7f0000000640)=""/131, 0x5, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000900)="8785f0334a7d587fa1340730daecff329a40acf90ed4a151ff7472cc5d57cff51fc213bf9715d9e9b6b9f3eb7cc9e7a2c861456b2bec297933d837cc8c13ab683fff01d07a4ac59ffaa5ccf089fb47a5572000ee08041b7bc55e3e046693a0f575edb9a650a1b12fef7fd2a5a84ca8d59de01c49812ce165e418858c", 0x1, 0x0, 0x9}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts.
[   58.891920][ T5220] cgroup: Unknown subsys name 'net'
[   59.059551][ T5220] cgroup: Unknown subsys name 'cpuset'
[   59.068053][ T5220] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.588434][ T5220] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.810552][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.831542][ T4625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.839257][ T4625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.858729][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.914080][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.922502][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.937664][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.938795][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.945384][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.954680][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   62.960248][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.974103][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.975599][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   62.989544][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.997031][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   63.004402][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.011768][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.019839][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   63.027973][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.037211][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   63.053221][ T5248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   63.075839][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.084704][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   63.087334][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   63.092124][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   63.101091][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   63.113182][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.114148][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   63.130974][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   63.138803][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   63.470872][ T5230] chnl_net:caif_netlink_parms(): no params data found
[   63.569039][ T5240] chnl_net:caif_netlink_parms(): no params data found
[   63.674626][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.682801][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.690600][ T5230] bridge_slave_0: entered allmulticast mode
[   63.698029][ T5230] bridge_slave_0: entered promiscuous mode
[   63.719112][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.736812][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.744107][ T5230] bridge_slave_1: entered allmulticast mode
[   63.751406][ T5230] bridge_slave_1: entered promiscuous mode
[   63.782882][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.790317][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.797707][ T5240] bridge_slave_0: entered allmulticast mode
[   63.804630][ T5240] bridge_slave_0: entered promiscuous mode
[   63.829426][ T5239] chnl_net:caif_netlink_parms(): no params data found
[   63.839621][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.846859][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.854018][ T5240] bridge_slave_1: entered allmulticast mode
[   63.861577][ T5240] bridge_slave_1: entered promiscuous mode
[   63.868351][ T5235] chnl_net:caif_netlink_parms(): no params data found
[   63.932030][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.943999][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.970148][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.983239][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.031180][ T5230] team0: Port device team_slave_0 added
[   64.090606][ T5230] team0: Port device team_slave_1 added
[   64.123910][ T5240] team0: Port device team_slave_0 added
[   64.167412][ T5240] team0: Port device team_slave_1 added
[   64.177686][ T5243] chnl_net:caif_netlink_parms(): no params data found
[   64.196568][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.203857][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.230498][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.243429][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.250623][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.277128][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.330534][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.337809][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.344987][ T5235] bridge_slave_0: entered allmulticast mode
[   64.352398][ T5235] bridge_slave_0: entered promiscuous mode
[   64.364416][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.371682][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.379206][ T5239] bridge_slave_0: entered allmulticast mode
[   64.386052][ T5239] bridge_slave_0: entered promiscuous mode
[   64.410195][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.417517][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.424729][ T5235] bridge_slave_1: entered allmulticast mode
[   64.432146][ T5235] bridge_slave_1: entered promiscuous mode
[   64.461045][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.468342][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.476463][ T5239] bridge_slave_1: entered allmulticast mode
[   64.483200][ T5239] bridge_slave_1: entered promiscuous mode
[   64.491396][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.498596][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.524668][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.537683][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.544685][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.571456][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.610946][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.622889][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.705663][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.713210][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.721415][ T5243] bridge_slave_0: entered allmulticast mode
[   64.728224][ T5243] bridge_slave_0: entered promiscuous mode
[   64.742202][ T5230] hsr_slave_0: entered promiscuous mode
[   64.749179][ T5230] hsr_slave_1: entered promiscuous mode
[   64.764949][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.778505][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.795087][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.806964][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.814233][ T5243] bridge_slave_1: entered allmulticast mode
[   64.821850][ T5243] bridge_slave_1: entered promiscuous mode
[   64.851044][ T5235] team0: Port device team_slave_0 added
[   64.868282][ T5240] hsr_slave_0: entered promiscuous mode
[   64.877012][ T5240] hsr_slave_1: entered promiscuous mode
[   64.883541][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.891788][ T5240] Cannot create hsr debugfs directory
[   64.908215][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.920601][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.931587][ T5235] team0: Port device team_slave_1 added
[   64.997701][ T5239] team0: Port device team_slave_0 added
[   65.004429][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.011745][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.038083][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.049606][ T5237] Bluetooth: hci0: command tx timeout
[   65.071868][ T5243] team0: Port device team_slave_0 added
[   65.080029][ T5239] team0: Port device team_slave_1 added
[   65.102562][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.109626][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.136164][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.153870][ T5243] team0: Port device team_slave_1 added
[   65.205872][ T5250] Bluetooth: hci2: command tx timeout
[   65.206847][ T5237] Bluetooth: hci3: command tx timeout
[   65.216359][ T5236] Bluetooth: hci1: command tx timeout
[   65.220911][ T5250] Bluetooth: hci4: command tx timeout
[   65.224829][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.235059][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.261127][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.273586][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.280711][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.308271][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.337694][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.344688][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.371019][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.397828][ T5235] hsr_slave_0: entered promiscuous mode
[   65.404160][ T5235] hsr_slave_1: entered promiscuous mode
[   65.411099][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.418936][ T5235] Cannot create hsr debugfs directory
[   65.430100][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.437200][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.463240][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.554668][ T5239] hsr_slave_0: entered promiscuous mode
[   65.561213][ T5239] hsr_slave_1: entered promiscuous mode
[   65.567936][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.575510][ T5239] Cannot create hsr debugfs directory
[   65.702478][ T5243] hsr_slave_0: entered promiscuous mode
[   65.709695][ T5243] hsr_slave_1: entered promiscuous mode
[   65.717781][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.725384][ T5243] Cannot create hsr debugfs directory
[   65.831931][ T5230] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.865574][ T5230] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.885643][ T5230] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.914651][ T5230] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.957818][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.989111][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   66.016280][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   66.033872][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   66.082027][ T5235] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.098226][ T5235] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.117956][ T5235] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.129915][ T5235] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.208668][ T5239] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.238231][ T5239] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.249941][ T5239] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.268410][ T5239] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.290650][ T5243] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   66.301729][ T5243] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   66.312878][ T5243] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   66.328975][ T5243] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   66.466182][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.489666][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.550769][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.561899][ T5230] 8021q: adding VLAN 0 to HW filter on device team0
[   66.573115][ T5240] 8021q: adding VLAN 0 to HW filter on device team0
[   66.600563][ T5239] 8021q: adding VLAN 0 to HW filter on device team0
[   66.620483][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.627810][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.641164][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.648325][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.681061][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.698666][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.705861][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.717195][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.724309][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.734732][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.741908][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.769853][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.777032][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.800077][ T5235] 8021q: adding VLAN 0 to HW filter on device team0
[   66.828601][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.861971][ T5239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.875568][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.921226][   T73] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.928378][   T73] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.964863][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.972042][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.999037][ T5243] 8021q: adding VLAN 0 to HW filter on device team0
[   67.057531][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.064704][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.122792][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.130013][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.137981][ T5250] Bluetooth: hci0: command tx timeout
[   67.270673][ T5243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.289176][ T5250] Bluetooth: hci4: command tx timeout
[   67.294704][ T5250] Bluetooth: hci3: command tx timeout
[   67.295853][ T5236] Bluetooth: hci1: command tx timeout
[   67.300424][ T5250] Bluetooth: hci2: command tx timeout
[   67.439655][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.523519][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.613687][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.623254][ T5239] veth0_vlan: entered promiscuous mode
[   67.673285][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.682206][ T5239] veth1_vlan: entered promiscuous mode
[   67.691690][ T5240] veth0_vlan: entered promiscuous mode
[   67.713572][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.752083][ T5240] veth1_vlan: entered promiscuous mode
[   67.834114][ T5230] veth0_vlan: entered promiscuous mode
[   67.864183][ T5230] veth1_vlan: entered promiscuous mode
[   67.874930][ T5239] veth0_macvtap: entered promiscuous mode
[   67.889865][ T5240] veth0_macvtap: entered promiscuous mode
[   67.912965][ T5240] veth1_macvtap: entered promiscuous mode
[   67.922072][ T5239] veth1_macvtap: entered promiscuous mode
[   67.979456][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.993089][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.010895][ T5235] veth0_vlan: entered promiscuous mode
[   68.030960][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.044927][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.062778][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.072191][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.098459][ T5235] veth1_vlan: entered promiscuous mode
[   68.125028][ T5230] veth0_macvtap: entered promiscuous mode
[   68.141101][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.152433][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.164681][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.176805][ T5230] veth1_macvtap: entered promiscuous mode
[   68.204858][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.216297][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.228048][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.239395][ T5239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.249361][ T5239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.258612][ T5239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.267685][ T5239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.303894][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.316186][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.328892][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.339853][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.351342][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.390748][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.401763][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.412164][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.423629][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.435310][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.488556][ T5235] veth0_macvtap: entered promiscuous mode
[   68.519305][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.528573][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.538798][ T5230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.550483][ T5230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.561519][ T5230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.571927][ T5230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.585276][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.587170][ T5235] veth1_macvtap: entered promiscuous mode
[   68.596649][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.652827][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.663539][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.674147][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.685023][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.695000][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.706822][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.719636][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.758131][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.767312][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.772006][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.788022][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.799206][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.810225][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.824796][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.836370][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.848177][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.864877][ T5235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.873829][ T5235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.882859][ T5235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.891878][ T5235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.910929][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.920038][ T5243] veth0_vlan: entered promiscuous mode
[   68.928264][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.960820][ T5243] veth1_vlan: entered promiscuous mode
[   68.971362][ T5239] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.145668][ T5243] veth0_macvtap: entered promiscuous mode
[   69.171990][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.180458][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.192503][ T5316] team0: entered promiscuous mode
[   69.198747][ T5316] team_slave_0: entered promiscuous mode
[   69.204762][ T5316] team_slave_1: entered promiscuous mode
[   69.208615][ T5250] Bluetooth: hci0: command tx timeout
[   69.218058][ T5316] dummy0: entered promiscuous mode
[   69.248175][ T5243] veth1_macvtap: entered promiscuous mode
[   69.257698][ T5318] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.347066][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.357915][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.368232][ T5250] Bluetooth: hci2: command tx timeout
[   69.374550][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.385288][ T5250] Bluetooth: hci1: command tx timeout
[   69.391771][ T5237] Bluetooth: hci3: command tx timeout
[   69.391788][ T5236] Bluetooth: hci4: command tx timeout
[   69.403460][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.413986][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.424631][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.436642][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.448073][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.467561][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.480387][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.535924][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.544127][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.575378][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.575597][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.588928][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.613534][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.626408][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.648180][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.660783][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.671413][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.681308][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.692363][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.708074][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.723531][ T5243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.732438][ T5243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.741494][ T5243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.750843][ T5243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.869231][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'.
[   69.884561][ T5325] bond0: entered promiscuous mode
[   69.891017][ T5325] bond_slave_0: entered promiscuous mode
[   69.897322][ T5325] bond_slave_1: entered promiscuous mode
[   69.904872][ T5325] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   69.908934][ T5329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.012901][ T5331] Zero length message leads to an empty skb
[   70.028278][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.038883][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.059461][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.069054][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.174517][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.184516][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.906569][ T5361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12'.
[   71.236914][ T5372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.286418][ T5250] Bluetooth: hci0: command tx timeout
[   71.339920][ T5371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.446569][ T5250] Bluetooth: hci1: command tx timeout
[   71.452785][ T5237] Bluetooth: hci3: command tx timeout
[   71.452803][ T5236] Bluetooth: hci2: command tx timeout
[   71.456818][ T5236] Bluetooth: hci4: command tx timeout
[   71.538052][ T5374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.692042][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[   71.698766][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[   71.711827][ T5382] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET)
[   72.121309][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'.
[   72.126965][ T5382] infiniband syz1: set active
[   72.137097][ T5382] infiniband syz1: added bond_slave_1
[   72.261678][ T5382] RDS/IB: syz1: added
[   72.295187][ T5382] smc: adding ib device syz1 with port count 1
[   72.333394][ T5382] smc:    ib device syz1 port 1 has pnetid 
[   72.413818][ T5393] team0 (unregistering): Port device team_slave_0 removed
[   72.451789][ T5393] team0 (unregistering): Port device team_slave_1 removed
[   72.806018][ T5394] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20'.
[   73.150775][ T5406] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   73.560164][ T5415] netlink: 'syz.0.28': attribute type 4 has an invalid length.
[   73.697053][ T5418] netlink: 'syz.0.28': attribute type 4 has an invalid length.
[   73.886260][ T5420] dccp_xmit_packet: Payload too large (65475) for featneg.
[   75.362319][ T5438] syz.3.37: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   75.408480][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: syz.3.37 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[   75.419170][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   75.429287][ T5438] Call Trace:
[   75.432620][ T5438]  <TASK>
[   75.435657][ T5438]  dump_stack_lvl+0x241/0x360
[   75.440412][ T5438]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.445687][ T5438]  ? __pfx__printk+0x10/0x10
[   75.450334][ T5438]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[   75.456806][ T5438]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[   75.463359][ T5438]  warn_alloc+0x278/0x410
[   75.467829][ T5438]  ? stack_depot_save_flags+0x29/0x830
[   75.473342][ T5438]  ? __vmalloc_node_range_noprof+0x106/0x13f0
[   75.479459][ T5438]  ? __pfx_warn_alloc+0x10/0x10
[   75.484448][ T5438]  ? kasan_save_track+0x3f/0x80
[   75.489348][ T5438]  ? __kasan_kmalloc+0x98/0xb0
[   75.494165][ T5438]  ? xsk_setsockopt+0x4ea/0x950
[   75.499073][ T5438]  ? do_sock_setsockopt+0x3af/0x720
[   75.504320][ T5438]  ? __sys_setsockopt+0x1a2/0x250
[   75.509390][ T5438]  ? __x64_sys_setsockopt+0xb5/0xd0
[   75.514804][ T5438]  ? do_syscall_64+0xf3/0x230
[   75.519525][ T5438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.525739][ T5438]  __vmalloc_node_range_noprof+0x126/0x13f0
[   75.531710][ T5438]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   75.538180][ T5438]  ? __kasan_kmalloc+0x98/0xb0
[   75.542994][ T5438]  ? xskq_create+0x54/0x170
[   75.547629][ T5438]  vmalloc_user_noprof+0x74/0x80
[   75.552634][ T5438]  ? xskq_create+0xb6/0x170
[   75.557172][ T5438]  xskq_create+0xb6/0x170
[   75.561553][ T5438]  xsk_init_queue+0xa1/0x100
[   75.566197][ T5438]  xsk_setsockopt+0x4ea/0x950
[   75.570921][ T5438]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.576164][ T5438]  ? __pfx_aa_sk_perm+0x10/0x10
[   75.581059][ T5438]  ? __pfx_lock_acquire+0x10/0x10
[   75.586229][ T5438]  ? aa_sock_opt_perm+0x79/0x120
[   75.591214][ T5438]  ? __pfx_xsk_setsockopt+0x10/0x10
[   75.596459][ T5438]  do_sock_setsockopt+0x3af/0x720
[   75.601541][ T5438]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   75.607125][ T5438]  ? __fget_files+0x29/0x470
[   75.611768][ T5438]  ? __fget_files+0x3f3/0x470
[   75.616480][ T5438]  ? __fget_files+0x29/0x470
[   75.621146][ T5438]  __sys_setsockopt+0x1a2/0x250
[   75.626050][ T5438]  __x64_sys_setsockopt+0xb5/0xd0
[   75.631112][ T5438]  do_syscall_64+0xf3/0x230
[   75.635651][ T5438]  ? clear_bhb_loop+0x35/0x90
[   75.640371][ T5438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.646318][ T5438] RIP: 0033:0x7f620677dff9
[   75.650766][ T5438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.670421][ T5438] RSP: 002b:00007f62074b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   75.679063][ T5438] RAX: ffffffffffffffda RBX: 00007f6206935f80 RCX: 00007f620677dff9
[   75.687078][ T5438] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000f
[   75.695094][ T5438] RBP: 00007f62067f0296 R08: 0000000000000004 R09: 0000000000000000
[   75.703100][ T5438] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[   75.711104][ T5438] R13: 0000000000000000 R14: 00007f6206935f80 R15: 00007ffd38d63aa8
[   75.719132][ T5438]  </TASK>
[   75.792208][ T5438] Mem-Info:
[   75.795561][ T5438] active_anon:4028 inactive_anon:2 isolated_anon:0
[   75.795561][ T5438]  active_file:1058 inactive_file:38204 isolated_file:0
[   75.795561][ T5438]  unevictable:768 dirty:1386 writeback:0
[   75.795561][ T5438]  slab_reclaimable:8791 slab_unreclaimable:94942
[   75.795561][ T5438]  mapped:20793 shmem:1220 pagetables:728
[   75.795561][ T5438]  sec_pagetables:0 bounce:0
[   75.795561][ T5438]  kernel_misc_reclaimable:0
[   75.795561][ T5438]  free:1293964 free_pcp:19499 free_cma:0
[   75.855045][ T5438] Node 0 active_anon:16112kB inactive_anon:8kB active_file:4232kB inactive_file:152740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83172kB dirty:5544kB writeback:0kB shmem:3344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10280kB pagetables:2912kB sec_pagetables:0kB all_unreclaimable? no
[   75.896251][ T5438] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   75.933573][ T5438] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.970153][ T5438] lowmem_reserve[]: 0 2465 2466 0 0
[   75.978730][ T5438] Node 0 DMA32 free:1233372kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16072kB inactive_anon:8kB active_file:4232kB inactive_file:151912kB unevictable:1536kB writepending:5544kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:130640kB local_pcp:192kB free_cma:0kB
[   76.022839][ T5438] lowmem_reserve[]: 0 0 0 0 0
[   76.030776][ T5438] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[   76.064514][ T5438] lowmem_reserve[]: 0 0 0 0 0
[   76.105657][ T5438] Node 1 Normal free:3927748kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:288kB free_cma:0kB
[   76.234811][ T5438] lowmem_reserve[]: 0 0 0 0 0
[   76.251920][ T5438] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.283146][ T5438] Node 0 DMA32: 309*4kB (UE) 176*8kB (UME) 157*16kB (UM) 257*32kB (UME) 112*64kB (UME) 79*128kB (UM) 54*256kB (UME) 43*512kB (UME) 14*1024kB (UME) 4*2048kB (UE) 295*4096kB (M) = 1297348kB
[   76.313530][ T5438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   76.340846][ T5438] Node 1 Normal: 139*4kB (UME) 45*8kB (UE) 33*16kB (UME) 172*32kB (UME) 81*64kB (UME) 30*128kB (UME) 11*256kB (UME) 7*512kB (UME) 6*1024kB (UM) 4*2048kB (UE) 950*4096kB (M) = 3927908kB
[   76.366445][ T5438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   76.382175][ T5438] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.394947][ T5438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   76.414656][ T5438] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.425577][ T5438] 40510 total pagecache pages
[   76.450897][ T5438] 4 pages in swap cache
[   76.455106][ T5438] Free swap  = 124728kB
[   76.459600][ T5438] Total swap = 124996kB
[   76.463800][ T5438] 2097051 pages RAM
[   76.468041][ T5438] 0 pages HighMem/MovableOnly
[   76.473109][ T5438] 427078 pages reserved
[   76.477572][ T5438] 0 pages cma reserved
[   76.605030][ T5446] tipc: Started in network mode
[   76.610148][ T5446] tipc: Node identity ac1414aa, cluster identity 4711
[   76.643962][ T5446] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.898864][ T5455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.113083][ T5455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.266508][ T5455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.381745][ T5468] can: request_module (can-proto-0) failed.
[   77.398202][ T5455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.478884][ T5474] vlan2: entered promiscuous mode
[   77.496162][ T5474] bridge0: entered promiscuous mode
[   77.559478][ T5474] team0: Port device vlan2 added
[   77.741609][ T5477] raw_sendmsg: syz.3.45 forgot to set AF_INET. Fix it!
[   77.766500][  T937] tipc: Node number set to 2886997162
[   77.812494][ T5455] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.862103][ T5455] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.884771][ T5455] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.911292][ T5455] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.978051][ T5479] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'.
[   78.007292][ T5479] unsupported nlmsg_type 40
[   78.434176][ T5495] Bluetooth: MGMT ver 1.23
[   78.677271][ T5314] IPVS: starting estimator thread 0...
[   78.714371][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'.
[   78.733270][ T5505] bM: renamed from lo (while UP)
[   78.787109][ T5505] bM: entered allmulticast mode
[   78.796054][ T5503] IPVS: using max 16 ests per chain, 38400 per kthread
[   79.391919][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'.
[   79.447324][ T5523] batadv0: entered promiscuous mode
[   79.509113][ T5523] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   79.793438][ T5523] batadv0: left promiscuous mode
[   80.136239][ T5541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'.
[   81.954335][    T8] cfg80211: failed to load regulatory.db
[   84.535761][    C1] sched: DL replenish lagged too much
[   91.308011][ T5250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.317040][ T5250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.325827][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.334064][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.341850][ T5250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   91.353249][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.466632][ T5250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.477264][ T5250] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.487597][ T5250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.495640][ T5250] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.504018][ T5250] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   91.513319][ T5250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.288609][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.306007][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.314591][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.326238][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.336434][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.343798][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.457835][ T5250] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[   92.468109][ T5250] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[   92.478746][ T5250] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[   92.488015][ T5250] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[   92.496512][ T5250] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[   92.504561][ T5250] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[   92.832076][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[   92.845133][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[   92.857566][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[   92.871648][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[   92.880751][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[   92.894048][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[   93.446238][ T5236] Bluetooth: hci5: command tx timeout
[   93.606091][ T5236] Bluetooth: hci6: command tx timeout
[   94.406048][ T5236] Bluetooth: hci7: command tx timeout
[   94.567319][ T5236] Bluetooth: hci8: command tx timeout
[   94.965963][ T5236] Bluetooth: hci9: command tx timeout
[   95.525936][ T5236] Bluetooth: hci5: command tx timeout
[   95.686865][ T5236] Bluetooth: hci6: command tx timeout
[   96.486089][ T5236] Bluetooth: hci7: command tx timeout
[   96.647783][ T5236] Bluetooth: hci8: command tx timeout
[   97.046059][ T5236] Bluetooth: hci9: command tx timeout
[   97.605872][ T5236] Bluetooth: hci5: command tx timeout
[   97.766091][ T5236] Bluetooth: hci6: command tx timeout
[   98.568850][ T5236] Bluetooth: hci7: command tx timeout
[   98.726299][ T5236] Bluetooth: hci8: command tx timeout
[   99.126025][ T5236] Bluetooth: hci9: command tx timeout
[   99.686039][ T5236] Bluetooth: hci5: command tx timeout
[   99.848809][ T5236] Bluetooth: hci6: command tx timeout
[  100.647410][ T5236] Bluetooth: hci7: command tx timeout
[  100.807665][ T5236] Bluetooth: hci8: command tx timeout
[  101.206053][ T5236] Bluetooth: hci9: command tx timeout
[  133.130790][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  152.006602][ T5250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.015619][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.023913][ T5250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.036619][ T5250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.047674][ T5250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  152.056609][ T5250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.207617][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.223296][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.231500][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.243713][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.252072][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.259622][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.637725][ T5250] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  152.652467][ T5250] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  152.662004][ T5250] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  152.674924][ T5250] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  152.685067][ T5250] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  152.693679][ T5250] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  152.904512][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  152.913711][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  152.922074][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  152.931069][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  152.939152][ T5236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  152.947427][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  153.554748][ T5250] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  153.563730][ T5250] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  153.576669][ T5250] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  153.586274][ T5250] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  153.598211][ T5250] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  153.606666][ T5250] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  154.166063][ T5250] Bluetooth: hci2: command tx timeout
[  154.326065][ T5250] Bluetooth: hci3: command tx timeout
[  154.725946][ T5250] Bluetooth: hci10: command tx timeout
[  154.966313][ T5250] Bluetooth: hci11: command tx timeout
[  155.686113][ T5250] Bluetooth: hci12: command tx timeout
[  156.245953][ T5250] Bluetooth: hci2: command tx timeout
[  156.411837][ T5250] Bluetooth: hci3: command tx timeout
[  156.809083][ T5250] Bluetooth: hci10: command tx timeout
[  157.046308][ T5250] Bluetooth: hci11: command tx timeout
[  157.766069][ T5250] Bluetooth: hci12: command tx timeout
[  158.326046][ T5250] Bluetooth: hci2: command tx timeout
[  158.491745][ T5250] Bluetooth: hci3: command tx timeout
[  158.887128][ T5250] Bluetooth: hci10: command tx timeout
[  159.126139][ T5250] Bluetooth: hci11: command tx timeout
[  159.846055][ T5250] Bluetooth: hci12: command tx timeout
[  160.406004][ T5250] Bluetooth: hci2: command tx timeout
[  160.566013][ T5250] Bluetooth: hci3: command tx timeout
[  160.966048][ T5250] Bluetooth: hci10: command tx timeout
[  161.208885][ T5250] Bluetooth: hci11: command tx timeout
[  161.926061][ T5250] Bluetooth: hci12: command tx timeout
[  186.425012][ T5237] Bluetooth: hci4: command 0x0406 tx timeout
[  186.431284][ T5248] Bluetooth: hci0: command 0x0406 tx timeout
[  186.437440][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  194.576271][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  213.328105][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  213.338527][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  213.346800][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  213.355022][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  213.365506][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  213.373228][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  213.740029][ T4625] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  213.755705][ T4625] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  213.764952][ T4625] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  213.782631][ T4625] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  213.797200][ T4625] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  213.804690][ T4625] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  213.911598][ T5236] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  213.924083][ T5236] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  213.933025][ T5236] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  213.941527][ T5236] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  213.958116][ T5236] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  213.966049][ T5236] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  214.060585][ T4625] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  214.069945][ T4625] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  214.078657][ T4625] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  214.087106][ T4625] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  214.106511][ T4625] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  214.117942][ T4625] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  214.422729][ T5236] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  214.441006][ T5236] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  214.449720][ T5236] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  214.463912][ T5236] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  214.472970][ T5236] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  214.485965][ T5236] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  215.445893][   T54] Bluetooth: hci13: command tx timeout
[  215.846901][   T54] Bluetooth: hci14: command tx timeout
[  216.006182][   T54] Bluetooth: hci15: command tx timeout
[  216.165894][   T54] Bluetooth: hci16: command tx timeout
[  216.566070][   T54] Bluetooth: hci17: command tx timeout
[  217.156692][   T54] Bluetooth: hci6: command 0x0406 tx timeout
[  217.162803][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  217.169156][ T5234] Bluetooth: hci8: command 0x0406 tx timeout
[  217.175308][ T5234] Bluetooth: hci7: command 0x0406 tx timeout
[  217.181532][ T5234] Bluetooth: hci9: command 0x0406 tx timeout
[  217.525973][ T5236] Bluetooth: hci13: command tx timeout
[  217.934245][ T5236] Bluetooth: hci14: command tx timeout
[  218.089049][ T5236] Bluetooth: hci15: command tx timeout
[  218.245954][ T5236] Bluetooth: hci16: command tx timeout
[  218.645878][ T5236] Bluetooth: hci17: command tx timeout
[  219.605926][ T5236] Bluetooth: hci13: command tx timeout
[  220.009496][ T5236] Bluetooth: hci14: command tx timeout
[  220.167604][ T5236] Bluetooth: hci15: command tx timeout
[  220.326002][ T5236] Bluetooth: hci16: command tx timeout
[  220.725896][ T5236] Bluetooth: hci17: command tx timeout
[  221.685894][ T5236] Bluetooth: hci13: command tx timeout
[  222.094245][ T5236] Bluetooth: hci14: command tx timeout
[  222.247686][ T5236] Bluetooth: hci15: command tx timeout
[  222.409327][ T5236] Bluetooth: hci16: command tx timeout
[  222.805951][ T5236] Bluetooth: hci17: command tx timeout
[  256.023570][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  275.515253][ T5250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.524349][ T5250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.535197][ T5250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.543404][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.551731][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.570136][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.912371][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.926206][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.934741][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.944362][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.952581][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.965866][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.066424][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  276.075274][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  276.084241][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  276.092466][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  276.105944][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  276.113423][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  276.157345][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.167043][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.174820][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.186980][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  276.194614][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  276.209549][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  276.266508][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  276.277173][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  276.288934][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  276.297201][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  276.306516][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  276.313916][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.606315][ T5251] Bluetooth: hci0: command tx timeout
[  278.006073][ T5251] Bluetooth: hci1: command tx timeout
[  278.166013][ T5251] Bluetooth: hci4: command tx timeout
[  278.326342][ T5251] Bluetooth: hci5: command tx timeout
[  278.406132][ T5251] Bluetooth: hci6: command tx timeout
[  278.575699][ T5251] Bluetooth: hci12: command 0x0406 tx timeout
[  278.581920][ T5251] Bluetooth: hci10: command 0x0406 tx timeout
[  278.588177][ T5234] Bluetooth: hci2: command 0x0406 tx timeout
[  278.594258][ T5234] Bluetooth: hci3: command 0x0406 tx timeout
[  278.602573][   T54] Bluetooth: hci11: command 0x0406 tx timeout
[  279.686234][ T5250] Bluetooth: hci0: command tx timeout
[  280.085903][ T5250] Bluetooth: hci1: command tx timeout
[  280.246928][ T5250] Bluetooth: hci4: command tx timeout
[  280.406093][ T5250] Bluetooth: hci5: command tx timeout
[  280.494334][ T5250] Bluetooth: hci6: command tx timeout
[  281.766089][ T5250] Bluetooth: hci0: command tx timeout
[  282.165902][ T5250] Bluetooth: hci1: command tx timeout
[  282.325875][ T5250] Bluetooth: hci4: command tx timeout
[  282.486055][ T5250] Bluetooth: hci5: command tx timeout
[  282.584349][ T5250] Bluetooth: hci6: command tx timeout
[  283.846286][ T5250] Bluetooth: hci0: command tx timeout
[  284.168136][   T30] INFO: task syz.2.73:5552 blocked for more than 143 seconds.
[  284.186322][   T30]       Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[  284.194040][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  284.233364][   T30] task:syz.2.73        state:D stack:23808 pid:5552  tgid:5552  ppid:5239   flags:0x00004006
[  284.245846][ T5250] Bluetooth: hci1: command tx timeout
[  284.270303][   T30] Call Trace:
[  284.273762][   T30]  <TASK>
[  284.283917][   T30]  __schedule+0x1895/0x4b30
[  284.354979][   T30]  ? __pfx___schedule+0x10/0x10
[  284.381770][   T30]  ? __pfx_lock_release+0x10/0x10
[  284.405947][ T5250] Bluetooth: hci4: command tx timeout
[  284.433810][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  284.439856][   T30]  ? schedule+0x90/0x320
[  284.444157][   T30]  schedule+0x14b/0x320
[  284.454874][   T30]  schedule_preempt_disabled+0x13/0x30
[  284.460816][   T30]  __mutex_lock+0x6a7/0xd70
[  284.465385][   T30]  ? __mutex_lock+0x52a/0xd70
[  284.474952][   T30]  ? tun_chr_close+0x3b/0x1b0
[  284.484890][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  284.492308][   T30]  ? __pfx_call_rcu+0x10/0x10
[  284.502210][   T30]  tun_chr_close+0x3b/0x1b0
[  284.508467][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  284.513642][   T30]  __fput+0x23f/0x880
[  284.523154][   T30]  task_work_run+0x24f/0x310
[  284.529549][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  284.534905][   T30]  ? __pfx_task_work_run+0x10/0x10
[  284.545405][   T30]  ? do_exit+0xa2a/0x28e0
[  284.551598][   T30]  ? kmem_cache_free+0x1a2/0x420
[  284.561879][   T30]  ? do_exit+0xa2a/0x28e0
[  284.566565][ T5250] Bluetooth: hci5: command tx timeout
[  284.573806][   T30]  do_exit+0xa2f/0x28e0
[  284.587374][   T30]  ? __pfx_do_exit+0x10/0x10
[  284.592046][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  284.602944][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  284.610790][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  284.622599][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  284.629369][   T30]  do_group_exit+0x207/0x2c0
[  284.634019][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.645215][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  284.655859][ T5250] Bluetooth: hci6: command tx timeout
[  284.672235][   T30]  get_signal+0x16a3/0x1740
[  284.681464][   T30]  ? __pfx_get_signal+0x10/0x10
[  284.691493][   T30]  arch_do_signal_or_restart+0x96/0x860
[  284.701442][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  284.713191][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  284.723328][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  284.732122][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  284.741789][   T30]  do_syscall_64+0x100/0x230
[  284.749195][   T30]  ? clear_bhb_loop+0x35/0x90
[  284.753943][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.763996][   T30] RIP: 0033:0x7f3a4497dff9
[  284.773190][   T30] RSP: 002b:00007fff9ba159c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  284.785794][   T30] RAX: 0000000000000000 RBX: 00007f3a44b37a80 RCX: 00007f3a4497dff9
[  284.793841][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  284.810095][   T30] RBP: 00007f3a44b37a80 R08: 0000000000000006 R09: 00007fff9ba15cbf
[  284.824351][   T30] R10: 00000000003ff2d0 R11: 0000000000000246 R12: 0000000000013d74
[  284.835148][   T30] R13: 00007fff9ba15ad0 R14: 0000000000000032 R15: ffffffffffffffff
[  284.847534][   T30]  </TASK>
[  284.850701][   T30] INFO: task syz.3.82:5593 blocked for more than 144 seconds.
[  284.865767][   T30]       Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[  284.873464][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  284.889083][   T30] task:syz.3.82        state:D stack:23504 pid:5593  tgid:5586  ppid:5240   flags:0x00004002
[  284.904188][   T30] Call Trace:
[  284.911590][   T30]  <TASK>
[  284.914596][   T30]  __schedule+0x1895/0x4b30
[  284.922116][   T30]  ? __pfx___schedule+0x10/0x10
[  284.931885][   T30]  ? __pfx_lock_release+0x10/0x10
[  284.940122][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  284.949547][   T30]  ? schedule+0x90/0x320
[  284.953865][   T30]  schedule+0x14b/0x320
[  284.961044][   T30]  schedule_preempt_disabled+0x13/0x30
[  284.970439][   T30]  __mutex_lock+0x6a7/0xd70
[  284.975059][   T30]  ? __mutex_lock+0x52a/0xd70
[  284.984490][   T30]  ? tun_chr_close+0x3b/0x1b0
[  284.994008][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  285.007187][   T30]  ? __pfx_call_rcu+0x10/0x10
[  285.011959][   T30]  tun_chr_close+0x3b/0x1b0
[  285.020727][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  285.028963][   T30]  __fput+0x23f/0x880
[  285.033117][   T30]  task_work_run+0x24f/0x310
[  285.042445][   T30]  ? kasan_quarantine_put+0xdc/0x230
[  285.051804][   T30]  ? __pfx_task_work_run+0x10/0x10
[  285.060973][   T30]  ? do_exit+0xa2a/0x28e0
[  285.065384][   T30]  ? kmem_cache_free+0x1a2/0x420
[  285.075042][   T30]  ? do_exit+0xa2a/0x28e0
[  285.083332][   T30]  do_exit+0xa2f/0x28e0
[  285.091169][   T30]  ? __pfx_do_exit+0x10/0x10
[  285.099991][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  285.105437][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  285.114635][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  285.125036][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  285.133164][   T30]  do_group_exit+0x207/0x2c0
[  285.141770][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.151660][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  285.160838][   T30]  get_signal+0x16a3/0x1740
[  285.165402][   T30]  ? fput+0x1af/0x230
[  285.172351][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  285.181467][   T30]  ? __pfx_get_signal+0x10/0x10
[  285.189060][   T30]  arch_do_signal_or_restart+0x96/0x860
[  285.195399][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  285.214347][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  285.221003][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  285.233161][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  285.239288][   T30]  do_syscall_64+0x100/0x230
[  285.243951][   T30]  ? clear_bhb_loop+0x35/0x90
[  285.256543][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.262512][   T30] RIP: 0033:0x7f620677dff9
[  285.274119][   T30] RSP: 002b:00007f62074b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  285.283121][   T30] RAX: 0000000000000012 RBX: 00007f6206935f80 RCX: 00007f620677dff9
[  285.298414][   T30] RDX: 0000000000000012 RSI: 0000000020000740 RDI: 0000000000000003
[  285.309284][   T30] RBP: 00007f62067f0296 R08: 0000000000000000 R09: 0000000000000000
[  285.321567][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.332378][   T30] R13: 0000000000000000 R14: 00007f6206935f80 R15: 00007ffd38d63aa8
[  285.344552][   T30]  </TASK>
[  285.350542][   T30] 
[  285.350542][   T30] Showing all locks held in the system:
[  285.364723][   T30] 3 locks held by kworker/0:0/8:
[  285.374994][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  285.394282][   T30]  #1: ffffc900000d7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  285.406214][   T30]  #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50
[  285.415563][   T30] 3 locks held by kworker/1:0/25:
[  285.427823][   T30] 1 lock held by khungtaskd/30:
[  285.432727][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  285.449496][   T30] 3 locks held by kworker/u8:2/35:
[  285.454670][   T30]  #0: ffff88802e1b7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  285.474498][   T30]  #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  285.495919][   T30]  #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  285.512878][   T30] 3 locks held by kworker/u8:10/3031:
[  285.518704][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  285.543322][   T30]  #1: ffffc90009b97d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  285.555059][   T30]  #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  285.570667][   T30] 2 locks held by getty/4988:
[  285.575481][   T30]  #0: ffff88814c3d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  285.586870][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  285.603048][   T30] 7 locks held by kworker/1:3/5246:
[  285.611410][   T30] 1 lock held by syz.2.73/5552:
[  285.622214][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  285.632919][   T30] 1 lock held by syz.4.75/5558:
[  285.642972][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  285.653793][   T30] 1 lock held by syz.0.81/5582:
[  285.664088][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  285.674749][   T30] 1 lock held by syz.3.82/5593:
[  285.684741][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  285.710698][   T30] 2 locks held by syz.1.83/5599:
[  285.716066][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  285.725140][   T30]  #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  285.743604][   T30] 1 lock held by syz-executor/5630:
[  285.749309][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.765230][   T30] 1 lock held by syz-executor/5634:
[  285.773903][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.790964][   T30] 1 lock held by syz-executor/5637:
[  285.796693][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.813034][   T30] 1 lock held by syz-executor/5639:
[  285.818698][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.834394][   T30] 1 lock held by syz-executor/5642:
[  285.840078][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.855965][   T30] 1 lock held by syz-executor/5651:
[  285.861218][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.877530][   T30] 1 lock held by syz-executor/5656:
[  285.882882][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.897810][   T30] 1 lock held by syz-executor/5659:
[  285.903062][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.915663][   T30] 1 lock held by syz-executor/5661:
[  285.920916][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.936919][   T30] 1 lock held by syz-executor/5663:
[  285.942182][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.959847][   T30] 1 lock held by syz-executor/5678:
[  285.965189][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  285.980741][   T30] 1 lock held by syz-executor/5682:
[  285.987837][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  286.002865][   T30] 1 lock held by syz-executor/5684:
[  286.009985][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  286.028400][   T30] 1 lock held by syz-executor/5686:
[  286.033663][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  286.048370][   T30] 1 lock held by syz-executor/5688:
[  286.053629][   T30]  #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  286.066283][   T30] 
[  286.068651][   T30] =============================================
[  286.068651][   T30] 
[  286.084614][   T30] NMI backtrace for cpu 0
[  286.089015][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[  286.099556][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  286.109648][   T30] Call Trace:
[  286.112954][   T30]  <TASK>
[  286.115917][   T30]  dump_stack_lvl+0x241/0x360
[  286.120640][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.125880][   T30]  ? __pfx__printk+0x10/0x10
[  286.130521][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  286.135510][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  286.141017][   T30]  ? _printk+0xd5/0x120
[  286.145295][   T30]  ? __pfx__printk+0x10/0x10
[  286.149923][   T30]  ? __wake_up_klogd+0xcc/0x110
[  286.154820][   T30]  ? __pfx__printk+0x10/0x10
[  286.159447][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  286.164519][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  286.170544][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  286.176578][   T30]  watchdog+0xff4/0x1040
[  286.180865][   T30]  ? watchdog+0x1ea/0x1040
[  286.185329][   T30]  ? __pfx_watchdog+0x10/0x10
[  286.190054][   T30]  kthread+0x2f0/0x390
[  286.194155][   T30]  ? __pfx_watchdog+0x10/0x10
[  286.198870][   T30]  ? __pfx_kthread+0x10/0x10
[  286.203499][   T30]  ret_from_fork+0x4b/0x80
[  286.207965][   T30]  ? __pfx_kthread+0x10/0x10
[  286.212607][   T30]  ret_from_fork_asm+0x1a/0x30
[  286.217439][   T30]  </TASK>
[  286.221241][   T30] Sending NMI from CPU 0 to CPUs 1:
[  286.226709][    C1] NMI backtrace for cpu 1
[  286.226724][    C1] CPU: 1 UID: 0 PID: 5246 Comm: kworker/1:3 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[  286.226745][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  286.226756][    C1] Workqueue: events nsim_dev_trap_report_work
[  286.226783][    C1] RIP: 0010:unwind_next_frame+0x6d1/0x22d0
[  286.226803][    C1] Code: 4c 29 f0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c
[  286.226818][    C1] RSP: 0018:ffffc90000a17690 EFLAGS: 00000a02
[  286.226832][    C1] RAX: 1ffffffff206af9d RBX: ffffffff90357ce8 RCX: dffffc0000000000
[  286.226846][    C1] RDX: 00000000000b0001 RSI: ffffffff90aecefe RDI: 0000000000000001
[  286.226858][    C1] RBP: ffffffff90357cf4 R08: 0000000000000006 R09: ffffc90000a17850
[  286.226870][    C1] R10: ffffc90000a177b0 R11: ffffffff8180a0e0 R12: ffffffff90357ce0
[  286.226884][    C1] R13: ffffffff90357ce0 R14: ffffffff90357ce0 R15: ffffffff81f2b1e8
[  286.226897][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  286.226912][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  286.226924][    C1] CR2: 00007f62067b13c0 CR3: 000000000e734000 CR4: 00000000003526f0
[  286.226940][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  286.226950][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  286.226961][    C1] Call Trace:
[  286.226967][    C1]  <NMI>
[  286.226975][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  286.227001][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  286.227030][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  286.227055][    C1]  ? nmi_handle+0x2a/0x5a0
[  286.227081][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  286.227105][    C1]  ? nmi_handle+0x14f/0x5a0
[  286.227123][    C1]  ? nmi_handle+0x2a/0x5a0
[  286.227142][    C1]  ? unwind_next_frame+0x6d1/0x22d0
[  286.227158][    C1]  ? default_do_nmi+0x63/0x160
[  286.227185][    C1]  ? exc_nmi+0x123/0x1f0
[  286.227210][    C1]  ? end_repeat_nmi+0xf/0x53
[  286.227232][    C1]  ? kmem_cache_free+0x2e8/0x420
[  286.227257][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  286.227282][    C1]  ? unwind_next_frame+0x6d1/0x22d0
[  286.227299][    C1]  ? unwind_next_frame+0x6d1/0x22d0
[  286.227317][    C1]  ? unwind_next_frame+0x6d1/0x22d0
[  286.227333][    C1]  </NMI>
[  286.227339][    C1]  <IRQ>
[  286.227350][    C1]  ? kmem_cache_free+0x2e9/0x420
[  286.227375][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  286.227398][    C1]  arch_stack_walk+0x11c/0x150
[  286.227420][    C1]  ? kmem_cache_free+0x2e9/0x420
[  286.227446][    C1]  stack_trace_save+0x118/0x1d0
[  286.227467][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  286.227491][    C1]  ? __lock_acquire+0x1384/0x2050
[  286.227520][    C1]  kasan_save_stack+0x3f/0x60
[  286.227537][    C1]  ? kasan_save_stack+0x3f/0x60
[  286.227554][    C1]  ? __kasan_record_aux_stack+0xac/0xc0
[  286.227578][    C1]  ? kmem_cache_free+0x2e9/0x420
[  286.227624][    C1]  ? __phys_addr+0xba/0x170
[  286.227650][    C1]  __kasan_record_aux_stack+0xac/0xc0
[  286.227676][    C1]  kmem_cache_free+0x2e9/0x420
[  286.227699][    C1]  ? __pfx___nf_conntrack_find_get+0x10/0x10
[  286.227717][    C1]  ? nf_conntrack_free+0x2fd/0x390
[  286.227736][    C1]  nf_conntrack_free+0x2fd/0x390
[  286.227754][    C1]  nf_conntrack_in+0xb51/0x1890
[  286.227785][    C1]  ? __pfx_nf_conntrack_in+0x10/0x10
[  286.227808][    C1]  ? ipt_do_table+0x312/0x1860
[  286.227827][    C1]  ? __pfx_ipt_do_table+0x10/0x10
[  286.227847][    C1]  ? ip_route_me_harder+0xcf1/0x1360
[  286.227871][    C1]  ? ipv4_conntrack_defrag+0x2a2/0x5a0
[  286.227895][    C1]  ? ipv4_conntrack_local+0x120/0x200
[  286.227923][    C1]  ? __pfx_ipv4_conntrack_local+0x10/0x10
[  286.227949][    C1]  nf_hook_slow+0xc3/0x220
[  286.227974][    C1]  ? __pfx_dst_output+0x10/0x10
[  286.228001][    C1]  nf_hook+0x2c4/0x450
[  286.228028][    C1]  ? nf_hook+0x9e/0x450
[  286.228052][    C1]  ? __pfx_nf_hook+0x10/0x10
[  286.228079][    C1]  ? __pfx_dst_output+0x10/0x10
[  286.228108][    C1]  ? ip_fast_csum+0x1f0/0x2b0
[  286.228130][    C1]  __ip_local_out+0x3d9/0x4e0
[  286.228155][    C1]  ? __pfx_dst_output+0x10/0x10
[  286.228184][    C1]  ip_local_out+0x26/0x70
[  286.228210][    C1]  synproxy_send_client_synack+0x8b8/0xf30
[  286.228244][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  286.228274][    C1]  ? synproxy_pernet+0x45/0x270
[  286.228293][    C1]  nft_synproxy_eval_v4+0x3ca/0x610
[  286.228314][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  286.228332][    C1]  ? NF_HOOK+0x29e/0x450
[  286.228354][    C1]  ? nf_ip_checksum+0x13a/0x500
[  286.228374][    C1]  nft_synproxy_do_eval+0x362/0xa60
[  286.228395][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  286.228415][    C1]  ? __lock_acquire+0x1384/0x2050
[  286.228442][    C1]  ? __pfx_validate_chain+0x10/0x10
[  286.228467][    C1]  nft_do_chain+0x4ad/0x1da0
[  286.228493][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  286.228510][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  286.228553][    C1]  nft_do_chain_inet+0x418/0x6b0
[  286.228573][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  286.228589][    C1]  ? ipt_do_table+0x312/0x1860
[  286.228615][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  286.228632][    C1]  nf_hook_slow+0xc3/0x220
[  286.228662][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  286.228684][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  286.228707][    C1]  NF_HOOK+0x29e/0x450
[  286.228730][    C1]  ? NF_HOOK+0x9a/0x450
[  286.228751][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  286.228773][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  286.228799][    C1]  ? ip_rcv_finish+0x406/0x560
[  286.228821][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  286.228843][    C1]  NF_HOOK+0x3a4/0x450
[  286.228864][    C1]  ? __lock_acquire+0x1384/0x2050
[  286.228891][    C1]  ? NF_HOOK+0x9a/0x450
[  286.228911][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  286.228932][    C1]  ? ip_rcv_core+0x801/0xd10
[  286.228954][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  286.228980][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  286.229002][    C1]  __netif_receive_skb+0x2bf/0x650
[  286.229028][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  286.229053][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  286.229076][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  286.229102][    C1]  ? __pfx_lock_release+0x10/0x10
[  286.229128][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  286.229153][    C1]  process_backlog+0x662/0x15b0
[  286.229180][    C1]  ? process_backlog+0x33b/0x15b0
[  286.229209][    C1]  ? __pfx_process_backlog+0x10/0x10
[  286.229233][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  286.229261][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  286.229289][    C1]  __napi_poll+0xcb/0x490
[  286.229313][    C1]  net_rx_action+0x89b/0x1240
[  286.229349][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  286.229374][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  286.229419][    C1]  handle_softirqs+0x2c5/0x980
[  286.229445][    C1]  ? do_softirq+0x11b/0x1e0
[  286.229469][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  286.229494][    C1]  ? rcu_is_watching+0x15/0xb0
[  286.229515][    C1]  do_softirq+0x11b/0x1e0
[  286.229537][    C1]  </IRQ>
[  286.229543][    C1]  <TASK>
[  286.229549][    C1]  ? __pfx_do_softirq+0x10/0x10
[  286.229572][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  286.229601][    C1]  ? rcu_is_watching+0x15/0xb0
[  286.229621][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  286.229651][    C1]  ? nsim_dev_trap_report_work+0x75d/0xaa0
[  286.229672][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  286.229696][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  286.229719][    C1]  ? nsim_dev_trap_report_work+0x6a7/0xaa0
[  286.229743][    C1]  nsim_dev_trap_report_work+0x75d/0xaa0
[  286.229771][    C1]  ? process_scheduled_works+0x976/0x1850
[  286.229796][    C1]  process_scheduled_works+0xa63/0x1850
[  286.229834][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  286.229863][    C1]  ? assign_work+0x364/0x3d0
[  286.229888][    C1]  worker_thread+0x870/0xd30
[  286.229917][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  286.229938][    C1]  ? __kthread_parkme+0x169/0x1d0
[  286.229965][    C1]  ? __pfx_worker_thread+0x10/0x10
[  286.229990][    C1]  kthread+0x2f0/0x390
[  286.230006][    C1]  ? __pfx_worker_thread+0x10/0x10
[  286.230030][    C1]  ? __pfx_kthread+0x10/0x10
[  286.230047][    C1]  ret_from_fork+0x4b/0x80
[  286.230072][    C1]  ? __pfx_kthread+0x10/0x10
[  286.230089][    C1]  ret_from_fork_asm+0x1a/0x30
[  286.230121][    C1]  </TASK>
[  287.084455][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  287.091395][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0
[  287.101971][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  287.112072][   T30] Call Trace:
[  287.115385][   T30]  <TASK>
[  287.118360][   T30]  dump_stack_lvl+0x241/0x360
[  287.123091][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.128345][   T30]  ? __pfx__printk+0x10/0x10
[  287.132977][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  287.139017][   T30]  ? vscnprintf+0x5d/0x90
[  287.143406][   T30]  panic+0x349/0x880
[  287.147356][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  287.153561][   T30]  ? __pfx_panic+0x10/0x10
[  287.158018][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  287.163520][   T30]  ? __irq_work_queue_local+0x137/0x410
[  287.169112][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  287.174527][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  287.180726][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  287.186935][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  287.193138][   T30]  watchdog+0x1033/0x1040
[  287.197555][   T30]  ? watchdog+0x1ea/0x1040
[  287.202023][   T30]  ? __pfx_watchdog+0x10/0x10
[  287.206740][   T30]  kthread+0x2f0/0x390
[  287.210861][   T30]  ? __pfx_watchdog+0x10/0x10
[  287.215584][   T30]  ? __pfx_kthread+0x10/0x10
[  287.220203][   T30]  ret_from_fork+0x4b/0x80
[  287.224666][   T30]  ? __pfx_kthread+0x10/0x10
[  287.229293][   T30]  ret_from_fork_asm+0x1a/0x30
[  287.234123][   T30]  </TASK>
[  287.237554][   T30] Kernel Offset: disabled
[  287.241889][   T30] Rebooting in 86400 seconds..