last executing test programs:

13.616391094s ago: executing program 0 (id=112):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f0000001500)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0)

13.462910649s ago: executing program 0 (id=115):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000027400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002"], 0x78}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020600)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_process_wait\x00', r0}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$packet(0x11, 0x4000000000002, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\\('}, {0x20, '(\xb9-:\x8b^)$'}, {0x20, 'veth1_to_team\x00'}, {0x20, '%[:\'.^'}, {0x20, '%#'}], 0xa, "4d087aa4fc12e2b1dba989389c02f5ccdca0ca8fcf46d221b481938fa2d02fd669e3e480f146b31e1018f135eadd47045432931ae103ed9c52668b48576641934e36443fc127189e7602874aa3f3a88ff0a0aed4e8490be5e8e94c37682d63555c8aa88c564987efdb8c05f284bce15e1a45d8c03daa0a49f4680efebfa188e19b56cbfdcfa0fd16024ad1b1a60ab9eafda4"}, 0xc2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

13.185537618s ago: executing program 0 (id=120):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080006004802000005000b"], 0x44}}, 0x0)
r8 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0)
close(r0)

12.635094819s ago: executing program 0 (id=130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x34}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x60}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x234, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x3, 0x0, {0x8, 0x2, 0x0, 0x7}, 0x800, 0x1000, 0x7f}}, @NL80211_ATTR_KEYS={0x198, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e93143d9de"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, ':j'}, @NL80211_KEY_DEFAULT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0d84833195eb38a70e328310c5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2ebd74af5e"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "232ec6c5cc27b4c313853a78eb"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "285aeb25c74d0afcde42f0e50c"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fbcc8a6e603094e9dc0c55f2e1"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f5b3aa9c73"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f19c13fc3"}, @NL80211_KEY_SEQ={0x10, 0x4, "d7aaa0bc231605918161291a"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "35a140bce61073f059225ac94f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xd5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xe63}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xf0c9}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x6}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x445}, 0x4000090)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x101}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0)
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x4})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r9, 0x2b, 0x0, 0x0, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r10 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x1c, 0x0, 0x300)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f00000039c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000070601020000000000000000000000000500010007000000080006"], 0x24}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000000130a01030000000000000000010000020900020073797a310000000007470936117f6bacd285f7145ff7f3e819ad3aabbbbced32413bf493b0af27ac1c06fc30e87906dd590fc526a7472359264f5c1232900159e4d0c455bc192d91c65de9"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x44000)

12.317932502s ago: executing program 0 (id=136):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x114}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0)

11.833607496s ago: executing program 0 (id=137):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x81000)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700))
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10000}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

10.637652702s ago: executing program 2 (id=150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

10.264788756s ago: executing program 4 (id=153):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="322cbf008c6d5775cfdff9e2a3d172806b67874d8457edd1850b61ba3a910e3afb2bc5d83e9fdaf1611f1899249655bb494a1c0465737984638c6f87f31814eb61b1bb9de0e0cc90e7beb4563402b64f75c00c982fd071593eda9619533b0ece134c", 0x62}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x0)

10.189469211s ago: executing program 4 (id=154):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000040)=@llc={0x1a, 0x108, 0x4, 0x0, 0x7, 0x3, @broadcast}, 0x80, &(0x7f0000001600)=[{&(0x7f00000000c0)="0773dc80edc85518d390358668795f8a9bc1e4bde76b892acba638d50258edab5f4351922504032a3042c847d7b0eaf7cfd8a78cd45fa8673c179d4d593a3a991171cffcb0314389e2eb36a0bb34f092e3ab86206aeecd336a88a175305fe8d55100ae1c0a5d37c33d04943583c9b1c6d8cdd9599d8c02a8e071b50b66071207159d47a3c30cb8320e4c8e6e55a5bf48a2e0eefad133d704bbfe12b244864bd5384f214ad63597edb2b70e5074550774d91e", 0xb2}, {0x0}, {0x0}, {&(0x7f0000001500)="25cb3959aa56e7f0fa345e15c4e508bb99ffc32e223a24fc3946b4741dbdc99652a5f9d89e07306af0d79a78cf78eeea", 0x30}], 0x4}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, 0x0, 0xffffffffffffff86)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000001400078008000b40000004f6080008"], 0x60}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000170a000000000000000900020073797a31000000000900010073797a300000000026f8e20cd8af7e16e0547e92ba9722be40bc9c4d2210931fa3cc8451565fffa6ff4008fa0f3bf1f9f601133f883f2a3652efe3e361b0821928d8652fe39da1fb2359db09bea1be9392d3f60cd9a4c69545afdb6bf11aa902eb73ec1e1f067322993975fab0ee332f05f58acedfcde1b6de068209d4820a05fb578b44ffcb7b1f25416a2acc03d2cae6b4f3f9b56b38c26fa189b57c394ae0"], 0x2c}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x406502, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f0000000300)={0x41424344, <r7=>0x41424344}, 0xebd, 0xfffc0000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r8, 0x400454cd, 0x336)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
close(r8)
write$tun(r5, &(0x7f0000000440)={@void, @void, @eth={@local, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x8}, {0x9}, {0x6, 0x0, 0x1}], @ipv4=@tcp={{0x10, 0x4, 0x0, 0x2, 0xb9, 0x65, 0x0, 0xfb, 0x6, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x2b, 0xa6, [@multicast1, @private=0xa010102, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, {{0x4e24, 0x4e24, r6, r7, 0x1, 0x0, 0xb, 0x80, 0x8000, 0x0, 0x5, {[@sack_perm={0x4, 0x2}, @eol, @exp_fastopen={0xfe, 0x11, 0xf989, "10ccb41b3e07eba5ef01b0e7f0"}, @window={0x3, 0x3, 0x8}, @nop]}}, {"ebae9b14fd4633bae2afc63ad32864b97cfb689dad371cc474a1ef0b2903f943c35f9ea9da9747fb661d1204447929e9e333c698154782a8ff6fd020643da959fb2ef33b7c33e34fc2308738c4"}}}}}}}}, 0xdb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_devices(r9, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)

9.846255155s ago: executing program 1 (id=158):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x142}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0)

9.740457774s ago: executing program 4 (id=159):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000400000000000000000700000000000000050080000000000095000000d3031a00"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x23)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
unshare(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
unshare(0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7ca100001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f00000000000800030004"], 0x7c}}, 0x0)

9.735896641s ago: executing program 1 (id=160):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="688220b73880e922c55ce3907f3304aa8907131e327b3410cc19d7155aab358ef3a0da74cb4b04efbb4e50c4f2e38dc326e488faf103abee785425b8e5b3a859d5fad7690ca94c3456ff875888377bccb82e7833d0b7a87ddadb48e9f70a51c476a996a3e81cf32df664b9624e6c4a6dd44e3a8d31b2afe228b921b22577889ad951934ca2ea700b892c4bc45a8a496d4c2efa52d1f3a02c177772bf8688873dfb", @ANYRES16=0x0, @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}}}]}]}], {0x14}}, 0x88}}, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
shutdown(0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x30, 0x0, 0x20000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000c0000003800038034000380300001800800010000000000080001000000000408000100000000000800010000000000060002002700000004000300"], 0x4c}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000400000000010010c80130018800c00058008000000000000000800038030000280050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060"], 0x270}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000100), 0x4)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r10, 0x1, 0x1}, 0x48)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

9.561177949s ago: executing program 2 (id=161):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x50) (async, rerun: 64)
openat$cgroup_ro(r2, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x7a05, 0x1700) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xfffffffd, 0xffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0x80000000}, 0x48) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001d00"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac"], 0x3c}, 0x1, 0x2}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x4}, 0xe) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x5, 0x1) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x48)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x40000000}, 0x48) (async)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000001000400092d3bb03f8f726774856215e84debda258aa14070000009e95f3d5c3", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000008500000069000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x19, &(0x7f0000000740)=ANY=[@ANYRES8=r8, @ANYRESHEX=r7, @ANYRESOCT=r9], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2678}, 0x90) (async, rerun: 64)
r12 = socket(0x0, 0x3, 0x0)
getsockname$packet(r12, &(0x7f00000022c0), &(0x7f0000000000)=0x14)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0)

9.249655008s ago: executing program 2 (id=163):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="322cbf008c6d5775cfdff9e2a3d172806b67874d8457edd1850b61ba3a910e3afb2bc5d83e9fdaf1611f1899249655bb494a1c0465737984638c6f87f31814eb61b1bb9de0e0cc90e7beb4563402b64f75c00c982fd071593eda9619533b0ece134c", 0x62}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x28}, 0x0)

9.17369008s ago: executing program 1 (id=165):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x81000)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700))
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x10000}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r2)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

9.092890975s ago: executing program 4 (id=166):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

9.081600332s ago: executing program 2 (id=167):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)='\a\x00\x00\x00', 0x4)

8.947989681s ago: executing program 4 (id=168):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x81000)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700))
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

8.905659711s ago: executing program 2 (id=169):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x142}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000980)=""/162, 0xa2}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0x1}], 0x1}, 0x0)

8.872845967s ago: executing program 2 (id=170):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

8.732284287s ago: executing program 1 (id=172):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40286608, &(0x7f00000004c0)=ANY=[])
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3563], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r3, 0x0, 0x12, 0x0, &(0x7f0000000540))
r4 = accept4(r2, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000040)="cb", 0xfffffdef)
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0)

8.12332414s ago: executing program 1 (id=175):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x6e) (async)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
close(r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000600)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000600)={'wg0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "39ebc97fccb69645", "88c7477aa032d8b04a03ac5e83f826c8", "18175e79", "7b2046c524359b7b"}, 0x28)
socket$packet(0x11, 0x2, 0x300) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000cc0), 0x4) (async)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000cc0), 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580)}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x0, 0x0, 0x6}, 0x1c)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000004c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @migrate={0x50, 0x11, [{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@local, @in6=@private2}]}]}, 0xa8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

8.048032886s ago: executing program 4 (id=177):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000000000000000000020000000001000034d0ae097139833412a45b37a816e9f8c0aec92705f6607f9ba5686e1cdf02790100137d54c4920fdcae777f7e2c1ef06f684cf5eab02856413e54"], 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010000000000000000003714000000000000000000003111d4f8f9596b84a1754ef360a0246ffc0f301dfd1fc95e6e3e4ff4b31b90872e9a7eba06c304eb0e786d1883c86189246ee933f954a0c9d96c254ace69927bcd8fa804fae19990dde3d54fd948dd2a1097c4"], 0x1c}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000001c0)="48000000140081fb7059ff00000004000aff0f030000038130216266c808222e40d6ee11000000006fabca1b4e7d06a6bd7cf750375ed08a562ad6e74703c48f93b82a020000004e", 0x48}], 0x1}, 0x10004000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x14, &(0x7f0000000000)=0x6, 0x4)
write$tun(r5, &(0x7f0000000100)=ANY=[], 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000500ff0fe500bdd235dd6af454d90100c1fe48b340a80bf30033a59cd61df045733cf66ad4b2ed0dd10d014f6f2c427ebd1090dcfedb8c11503b3bc531ea3e8377580aaec6bef9380000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
r6 = socket$kcm(0x10, 0x3, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r7, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10120, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x200800, 0x0)
ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f00000006c0)=""/188)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="146594f90124fc60", 0x8}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b}}, @common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14)

3.322199905s ago: executing program 3 (id=181):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000000e1443eb0000000000001900080001"], 0x18}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40800)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000124ac7014bb0c000180080001400000000005000500020000000500010006"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r6, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x39}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x49b7, 0x1, 0x1, 0x60, 0xffffffffffffffff, 0x5, '\x00', r8, r7, 0x5, 0x1, 0x1, 0x7}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r9, r3, 0x26}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4088, 0xff8}], 0x1)

2.655231335s ago: executing program 3 (id=182):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.654781939s ago: executing program 3 (id=183):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000060c7d59ba2525a72ad7adc7ff7c0060000000000001e000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000000000000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a30000000001400000011"], 0xe0}}, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24110088}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000f1400042abd7000fbdbdf2594db0300010000000800010002000000080001000000000008005300020000000700450073610000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800)
recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0)

2.292712797s ago: executing program 3 (id=184):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000003640)="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", 0x159}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000980)=""/162, 0xa2}], 0x3}}], 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="f6594ad766420c0b357954497a4b9a7420", 0x11}], 0x1}, 0x0)

2.039025401s ago: executing program 3 (id=185):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40286608, &(0x7f00000004c0)=ANY=[])
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3563], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r3, 0x0, 0x12, 0x0, &(0x7f0000000540))
r4 = accept4(r2, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000040)="cb", 0xfffffdef)
pipe(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0)

49.617708ms ago: executing program 3 (id=186):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x81000)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700))
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

0s ago: executing program 1 (id=187):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003880)={r0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700383a00fe8000000000000000000000000000bbff0200000000000000000000000000010500907800000000b8e9f36a4b54217833141be28b5e475a60fd906300002f00fe800000000000000000000000000000ff0100000000000000000000000000010000000000000000"], 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts.
[   54.317873][ T5085] cgroup: Unknown subsys name 'net'
[   54.451022][ T5085] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   55.914451][ T5085] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.927937][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.936403][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.946635][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.955525][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.963346][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.969735][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.972224][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.977704][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.992904][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.994671][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.001334][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.008312][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.014747][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.023294][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   59.029347][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.035273][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.042692][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.050005][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.058143][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.072637][ T5112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.080190][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.087728][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.096661][ T5112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   59.103962][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   59.104338][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.112852][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   59.123814][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   59.125770][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.132800][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   59.148244][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.653851][ T5105] chnl_net:caif_netlink_parms(): no params data found
[   59.726480][ T5107] chnl_net:caif_netlink_parms(): no params data found
[   59.807240][ T5099] chnl_net:caif_netlink_parms(): no params data found
[   59.829340][ T5095] chnl_net:caif_netlink_parms(): no params data found
[   59.898633][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.905937][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.913344][ T5105] bridge_slave_0: entered allmulticast mode
[   59.922541][ T5105] bridge_slave_0: entered promiscuous mode
[   59.941844][ T5096] chnl_net:caif_netlink_parms(): no params data found
[   59.974141][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.981276][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.989000][ T5105] bridge_slave_1: entered allmulticast mode
[   59.996467][ T5105] bridge_slave_1: entered promiscuous mode
[   60.037563][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.044775][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.051876][ T5107] bridge_slave_0: entered allmulticast mode
[   60.058992][ T5107] bridge_slave_0: entered promiscuous mode
[   60.116443][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.123709][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.130930][ T5107] bridge_slave_1: entered allmulticast mode
[   60.138666][ T5107] bridge_slave_1: entered promiscuous mode
[   60.162353][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.196476][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.203847][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.211002][ T5095] bridge_slave_0: entered allmulticast mode
[   60.218377][ T5095] bridge_slave_0: entered promiscuous mode
[   60.254021][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.281872][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.289471][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.297281][ T5095] bridge_slave_1: entered allmulticast mode
[   60.305000][ T5095] bridge_slave_1: entered promiscuous mode
[   60.314953][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.348276][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.355690][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.362833][ T5099] bridge_slave_0: entered allmulticast mode
[   60.369966][ T5099] bridge_slave_0: entered promiscuous mode
[   60.378792][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.386764][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.394384][ T5099] bridge_slave_1: entered allmulticast mode
[   60.401085][ T5099] bridge_slave_1: entered promiscuous mode
[   60.432386][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.464839][ T5105] team0: Port device team_slave_0 added
[   60.482119][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.494894][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.525218][ T5105] team0: Port device team_slave_1 added
[   60.531412][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.538723][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.545987][ T5096] bridge_slave_0: entered allmulticast mode
[   60.552825][ T5096] bridge_slave_0: entered promiscuous mode
[   60.581804][ T5107] team0: Port device team_slave_0 added
[   60.613389][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.620835][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.628197][ T5096] bridge_slave_1: entered allmulticast mode
[   60.635250][ T5096] bridge_slave_1: entered promiscuous mode
[   60.645063][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.665876][ T5107] team0: Port device team_slave_1 added
[   60.675236][ T5095] team0: Port device team_slave_0 added
[   60.682277][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.689287][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.716307][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.740241][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.783232][ T5095] team0: Port device team_slave_1 added
[   60.804643][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.811616][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.838171][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.864649][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.890256][ T5099] team0: Port device team_slave_0 added
[   60.896635][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.904309][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.930425][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.956014][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.962999][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.989225][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.007805][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.015075][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.041577][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.054822][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.065836][ T5099] team0: Port device team_slave_1 added
[   61.082408][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.089442][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.115401][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.124843][ T5112] Bluetooth: hci1: command tx timeout
[   61.183739][ T5112] Bluetooth: hci2: command tx timeout
[   61.184237][ T4498] Bluetooth: hci3: command tx timeout
[   61.189364][ T5104] Bluetooth: hci4: command tx timeout
[   61.195178][   T54] Bluetooth: hci0: command tx timeout
[   61.222312][ T5105] hsr_slave_0: entered promiscuous mode
[   61.230447][ T5105] hsr_slave_1: entered promiscuous mode
[   61.263210][ T5096] team0: Port device team_slave_0 added
[   61.299652][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.307564][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.334790][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.348191][ T5096] team0: Port device team_slave_1 added
[   61.358268][ T5107] hsr_slave_0: entered promiscuous mode
[   61.364990][ T5107] hsr_slave_1: entered promiscuous mode
[   61.371061][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.379407][ T5107] Cannot create hsr debugfs directory
[   61.405138][ T5095] hsr_slave_0: entered promiscuous mode
[   61.411514][ T5095] hsr_slave_1: entered promiscuous mode
[   61.417936][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.425612][ T5095] Cannot create hsr debugfs directory
[   61.431707][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.439121][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.465544][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.517104][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.524520][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.551012][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.605566][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.612537][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.639062][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.723076][ T5099] hsr_slave_0: entered promiscuous mode
[   61.729921][ T5099] hsr_slave_1: entered promiscuous mode
[   61.736579][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.744504][ T5099] Cannot create hsr debugfs directory
[   61.886346][ T5096] hsr_slave_0: entered promiscuous mode
[   61.892766][ T5096] hsr_slave_1: entered promiscuous mode
[   61.899921][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   61.907695][ T5096] Cannot create hsr debugfs directory
[   62.131355][ T5105] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.149209][ T5105] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.160450][ T5105] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.197429][ T5105] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.257391][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.270467][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.293233][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.302902][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.365967][ T5095] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.380996][ T5095] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.392427][ T5095] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.410931][ T5095] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.529818][ T5099] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.539891][ T5099] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.559763][ T5099] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.571311][ T5099] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.648660][ T5096] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.679851][ T5096] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.690646][ T5096] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.700551][ T5096] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.731122][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.777955][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.827946][ T5105] 8021q: adding VLAN 0 to HW filter on device team0
[   62.896424][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.903865][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.929458][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.941490][  T931] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.949379][  T931] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.963982][ T5107] 8021q: adding VLAN 0 to HW filter on device team0
[   62.999365][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.006508][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.041179][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.048395][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.069867][ T5095] 8021q: adding VLAN 0 to HW filter on device team0
[   63.091087][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.098374][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.114224][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.158507][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.165695][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.181661][ T5096] 8021q: adding VLAN 0 to HW filter on device team0
[   63.193780][   T54] Bluetooth: hci1: command tx timeout
[   63.203176][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.215206][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.263854][ T4498] Bluetooth: hci3: command tx timeout
[   63.263891][ T5104] Bluetooth: hci4: command tx timeout
[   63.269266][ T4498] Bluetooth: hci2: command tx timeout
[   63.280265][   T54] Bluetooth: hci0: command tx timeout
[   63.306624][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.313799][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.380806][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.421693][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.428883][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.453046][ T5095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.513028][ T5099] 8021q: adding VLAN 0 to HW filter on device team0
[   63.642885][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.650146][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.680104][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.687347][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.709269][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.792753][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.867600][ T5107] veth0_vlan: entered promiscuous mode
[   63.891068][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.930118][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.968199][ T5107] veth1_vlan: entered promiscuous mode
[   64.099796][ T5107] veth0_macvtap: entered promiscuous mode
[   64.137991][ T5107] veth1_macvtap: entered promiscuous mode
[   64.176613][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.200410][ T5105] veth0_vlan: entered promiscuous mode
[   64.242607][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.277072][ T5105] veth1_vlan: entered promiscuous mode
[   64.296542][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.308697][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.318166][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.327209][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.345186][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.397942][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.468635][ T5105] veth0_macvtap: entered promiscuous mode
[   64.501823][ T5105] veth1_macvtap: entered promiscuous mode
[   64.549353][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.567315][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.576337][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.587329][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.599450][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.611602][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.622545][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.636182][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.662987][ T5095] veth0_vlan: entered promiscuous mode
[   64.678831][ T5105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.688549][ T5105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.697514][ T5105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.707217][ T5105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.752995][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.753290][ T5095] veth1_vlan: entered promiscuous mode
[   64.766560][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.805827][ T5096] veth0_vlan: entered promiscuous mode
[   64.838643][ T5099] veth0_vlan: entered promiscuous mode
[   64.872738][ T5099] veth1_vlan: entered promiscuous mode
[   64.895372][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.914543][ T5096] veth1_vlan: entered promiscuous mode
[   64.920455][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.964354][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.973263][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.989813][ T5095] veth0_macvtap: entered promiscuous mode
[   65.038721][ T5095] veth1_macvtap: entered promiscuous mode
[   65.075355][ T5181] FAULT_INJECTION: forcing a failure.
[   65.075355][ T5181] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   65.083469][ T5099] veth0_macvtap: entered promiscuous mode
[   65.090495][ T5181] CPU: 1 PID: 5181 Comm: syz.2.3 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   65.103708][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   65.113768][ T5181] Call Trace:
[   65.117038][ T5181]  <TASK>
[   65.119958][ T5181]  dump_stack_lvl+0x241/0x360
[   65.124644][ T5181]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.129841][ T5181]  ? __pfx__printk+0x10/0x10
[   65.134422][ T5181]  ? __pfx_lock_release+0x10/0x10
[   65.139438][ T5181]  ? vfs_write+0x7c4/0xc90
[   65.143851][ T5181]  should_fail_ex+0x3b0/0x4e0
[   65.148530][ T5181]  _copy_from_user+0x2f/0xe0
[   65.153114][ T5181]  __sys_bpf+0x1a4/0x810
[   65.157349][ T5181]  ? __pfx___sys_bpf+0x10/0x10
[   65.162111][ T5181]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   65.168091][ T5181]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   65.174427][ T5181]  ? do_syscall_64+0x100/0x230
[   65.179288][ T5181]  __x64_sys_bpf+0x7c/0x90
[   65.183705][ T5181]  do_syscall_64+0xf3/0x230
[   65.188209][ T5181]  ? clear_bhb_loop+0x35/0x90
[   65.192882][ T5181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.198781][ T5181] RIP: 0033:0x7f89a6775f19
[   65.203194][ T5181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.222787][ T5181] RSP: 002b:00007f89a7516048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   65.231278][ T5181] RAX: ffffffffffffffda RBX: 00007f89a6905f60 RCX: 00007f89a6775f19
[   65.239238][ T5181] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a
[   65.247204][ T5181] RBP: 00007f89a75160a0 R08: 0000000000000000 R09: 0000000000000000
[   65.255163][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.263120][ T5181] R13: 000000000000000b R14: 00007f89a6905f60 R15: 00007ffddd0f1d58
[   65.271091][ T5181]  </TASK>
[   65.289198][   T54] Bluetooth: hci1: command tx timeout
[   65.329665][ T5099] veth1_macvtap: entered promiscuous mode
[   65.345264][   T54] Bluetooth: hci0: command tx timeout
[   65.348683][ T4498] Bluetooth: hci2: command tx timeout
[   65.350843][ T5104] Bluetooth: hci4: command tx timeout
[   65.356225][ T4498] Bluetooth: hci3: command tx timeout
[   65.399458][ T5096] veth0_macvtap: entered promiscuous mode
[   65.498733][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.519853][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.530628][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.541961][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.565311][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.573375][ T5096] veth1_macvtap: entered promiscuous mode
[   65.588715][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.608771][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.621439][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.643656][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.662301][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.688565][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.701481][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.753481][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.774492][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.799417][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.811392][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.829055][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.841202][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.852844][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.864290][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.877715][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.911185][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.925220][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.937979][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.950032][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.967356][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.971466][ T5188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.978309][ T5197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.034636][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.046431][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.057096][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.069514][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.079422][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.090396][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.102572][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.125565][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.134656][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.143355][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.152505][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.170709][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.172494][ T5188] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01)
[   66.183019][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.198254][ T5188] wlan1: send auth to 50:50:50:50:50:50 (try 1/3)
[   66.208918][ T1111] wlan1: send auth to 50:50:50:50:50:50 (try 2/3)
[   66.213318][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.217368][ T1111] wlan1: send auth to 50:50:50:50:50:50 (try 3/3)
[   66.239331][ T5188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.251485][ T1111] wlan1: authentication with 50:50:50:50:50:50 timed out
[   66.261621][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.271800][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.282360][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.292262][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.303702][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.320937][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.420021][ T5096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.431867][ T5096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.449040][ T5096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.463178][ T5096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.488836][ T5099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.499219][ T5099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.508708][ T5099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.518283][ T5099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.545556][ T5201] netlink: 165 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.724937][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.736366][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.821162][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.838746][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.867423][ T3851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.880575][ T3851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.975956][ T5211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'.
[   66.986422][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.014223][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.018736][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.033080][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.313624][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.329115][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.345009][ T4498] Bluetooth: hci1: command tx timeout
[   67.376892][ T5219] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   67.424929][ T4498] Bluetooth: hci3: command tx timeout
[   67.432865][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.435112][   T54] Bluetooth: hci4: command tx timeout
[   67.441394][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.447214][ T5104] Bluetooth: hci2: command tx timeout
[   67.460774][ T4498] Bluetooth: hci0: command tx timeout
[   67.532932][ T5214] bridge0: entered allmulticast mode
[   67.679422][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   67.776455][ T5237] FAULT_INJECTION: forcing a failure.
[   67.776455][ T5237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   67.813748][ T5237] CPU: 1 PID: 5237 Comm: syz.4.17 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   67.823396][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   67.833651][ T5237] Call Trace:
[   67.836951][ T5237]  <TASK>
[   67.839910][ T5237]  dump_stack_lvl+0x241/0x360
[   67.844630][ T5237]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.849860][ T5237]  ? __pfx__printk+0x10/0x10
[   67.854482][ T5237]  ? __pfx_lock_release+0x10/0x10
[   67.859548][ T5237]  should_fail_ex+0x3b0/0x4e0
[   67.864261][ T5237]  _copy_from_iter+0x1f6/0x1960
[   67.869139][ T5237]  ? __virt_addr_valid+0x183/0x530
[   67.874280][ T5237]  ? __pfx_lock_release+0x10/0x10
[   67.879332][ T5237]  ? __alloc_skb+0x28f/0x440
[   67.883939][ T5237]  ? __pfx__copy_from_iter+0x10/0x10
[   67.889231][ T5237]  ? __virt_addr_valid+0x183/0x530
[   67.894337][ T5237]  ? __virt_addr_valid+0x183/0x530
[   67.899438][ T5237]  ? __virt_addr_valid+0x45f/0x530
[   67.904543][ T5237]  ? __check_object_size+0x49c/0x900
[   67.909820][ T5237]  netlink_sendmsg+0x73d/0xcb0
[   67.914587][ T5237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.919862][ T5237]  ? __import_iovec+0x536/0x820
[   67.924708][ T5237]  ? aa_sock_msg_perm+0x91/0x160
[   67.929640][ T5237]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   67.934921][ T5237]  ? security_socket_sendmsg+0x87/0xb0
[   67.940382][ T5237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.945662][ T5237]  __sock_sendmsg+0x221/0x270
[   67.950336][ T5237]  ____sys_sendmsg+0x525/0x7d0
[   67.955192][ T5237]  ? __pfx_____sys_sendmsg+0x10/0x10
[   67.960488][ T5237]  __sys_sendmsg+0x2b0/0x3a0
[   67.965071][ T5237]  ? __pfx___sys_sendmsg+0x10/0x10
[   67.970173][ T5237]  ? vfs_write+0x7c4/0xc90
[   67.974612][ T5237]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   67.980931][ T5237]  ? do_syscall_64+0x100/0x230
[   67.985694][ T5237]  ? do_syscall_64+0xb6/0x230
[   67.990362][ T5237]  do_syscall_64+0xf3/0x230
[   67.994856][ T5237]  ? clear_bhb_loop+0x35/0x90
[   67.999531][ T5237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.005417][ T5237] RIP: 0033:0x7f22a5f75f19
[   68.009821][ T5237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.029421][ T5237] RSP: 002b:00007f22a6c8a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.037825][ T5237] RAX: ffffffffffffffda RBX: 00007f22a6106110 RCX: 00007f22a5f75f19
[   68.045790][ T5237] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004
[   68.053754][ T5237] RBP: 00007f22a6c8a0a0 R08: 0000000000000000 R09: 0000000000000000
[   68.061713][ T5237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.069675][ T5237] R13: 000000000000006e R14: 00007f22a6106110 R15: 00007ffced1e5178
[   68.077663][ T5237]  </TASK>
[   68.134334][ T5226] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   68.213907][ T5231] netlink: 'syz.1.16': attribute type 21 has an invalid length.
[   68.297848][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'.
[   68.658739][ T5267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.777430][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.858636][ T5273] Cannot find del_set index 0 as target
[   68.864195][ T5274] netlink: 'syz.1.25': attribute type 1 has an invalid length.
[   70.047648][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'.
[   70.069620][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'.
[   70.104411][ T5315] netlink: 'syz.3.37': attribute type 4 has an invalid length.
[   70.345751][ T5325] FAULT_INJECTION: forcing a failure.
[   70.345751][ T5325] name failslab, interval 1, probability 0, space 0, times 1
[   70.384507][ T5325] CPU: 1 PID: 5325 Comm: syz.0.41 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   70.394107][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   70.404193][ T5325] Call Trace:
[   70.407498][ T5325]  <TASK>
[   70.410722][ T5325]  dump_stack_lvl+0x241/0x360
[   70.415434][ T5325]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.420657][ T5325]  ? __pfx__printk+0x10/0x10
[   70.425341][ T5325]  ? __pfx___might_resched+0x10/0x10
[   70.430668][ T5325]  should_fail_ex+0x3b0/0x4e0
[   70.435373][ T5325]  should_failslab+0x9/0x20
[   70.439892][ T5325]  __kmalloc_node_noprof+0xdf/0x440
[   70.445153][ T5325]  ? __kvmalloc_node_noprof+0x72/0x190
[   70.450730][ T5325]  __kvmalloc_node_noprof+0x72/0x190
[   70.456046][ T5325]  xt_alloc_table_info+0x3d/0xa0
[   70.461001][ T5325]  do_ipt_set_ctl+0xb97/0x1250
[   70.465787][ T5325]  ? __pfx___might_resched+0x10/0x10
[   70.471092][ T5325]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   70.476288][ T5325]  ? __pfx_lock_release+0x10/0x10
[   70.481314][ T5325]  ? __mutex_unlock_slowpath+0x21d/0x750
[   70.486952][ T5325]  ? __pfx_do_ip_setsockopt+0x10/0x10
[   70.492336][ T5325]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   70.498315][ T5325]  ? __pfx_aa_sk_perm+0x10/0x10
[   70.503158][ T5325]  ? module_put+0x13a/0x2d0
[   70.507658][ T5325]  nf_setsockopt+0x295/0x2c0
[   70.512247][ T5325]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   70.518154][ T5325]  do_sock_setsockopt+0x3af/0x720
[   70.523202][ T5325]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   70.528752][ T5325]  ? __fget_files+0x29/0x470
[   70.533341][ T5325]  ? __fget_files+0x3f6/0x470
[   70.538021][ T5325]  __sys_setsockopt+0x1ae/0x250
[   70.542872][ T5325]  __x64_sys_setsockopt+0xb5/0xd0
[   70.547893][ T5325]  do_syscall_64+0xf3/0x230
[   70.552390][ T5325]  ? clear_bhb_loop+0x35/0x90
[   70.557064][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.562948][ T5325] RIP: 0033:0x7f063fb75f19
[   70.567353][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.586964][ T5325] RSP: 002b:00007f06408d5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.595379][ T5325] RAX: ffffffffffffffda RBX: 00007f063fd05f60 RCX: 00007f063fb75f19
[   70.603343][ T5325] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003
[   70.611312][ T5325] RBP: 00007f06408d50a0 R08: 0000000000000298 R09: 0000000000000000
[   70.619284][ T5325] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001
[   70.627244][ T5325] R13: 000000000000000b R14: 00007f063fd05f60 R15: 00007ffe4eedc1e8
[   70.635231][ T5325]  </TASK>
[   70.764072][ T5330] FAULT_INJECTION: forcing a failure.
[   70.764072][ T5330] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   70.802900][ T5330] CPU: 0 PID: 5330 Comm: syz.4.42 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   70.812924][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   70.822981][ T5330] Call Trace:
[   70.826259][ T5330]  <TASK>
[   70.829180][ T5330]  dump_stack_lvl+0x241/0x360
[   70.833858][ T5330]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.839049][ T5330]  ? __pfx__printk+0x10/0x10
[   70.843631][ T5330]  ? __pfx_lock_release+0x10/0x10
[   70.848654][ T5330]  should_fail_ex+0x3b0/0x4e0
[   70.853326][ T5330]  _copy_from_iter+0x1f6/0x1960
[   70.858257][ T5330]  ? __virt_addr_valid+0x183/0x530
[   70.863367][ T5330]  ? __pfx_lock_release+0x10/0x10
[   70.868406][ T5330]  ? __alloc_skb+0x28f/0x440
[   70.872999][ T5330]  ? __pfx__copy_from_iter+0x10/0x10
[   70.878372][ T5330]  ? __virt_addr_valid+0x183/0x530
[   70.883488][ T5330]  ? __virt_addr_valid+0x183/0x530
[   70.888597][ T5330]  ? __virt_addr_valid+0x45f/0x530
[   70.893711][ T5330]  ? __check_object_size+0x49c/0x900
[   70.899106][ T5330]  netlink_sendmsg+0x73d/0xcb0
[   70.903873][ T5330]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.909150][ T5330]  ? __import_iovec+0x536/0x820
[   70.914001][ T5330]  ? aa_sock_msg_perm+0x91/0x160
[   70.918936][ T5330]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   70.924254][ T5330]  ? security_socket_sendmsg+0x87/0xb0
[   70.929713][ T5330]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.934998][ T5330]  __sock_sendmsg+0x221/0x270
[   70.939698][ T5330]  ____sys_sendmsg+0x525/0x7d0
[   70.944488][ T5330]  ? __pfx_____sys_sendmsg+0x10/0x10
[   70.949808][ T5330]  __sys_sendmsg+0x2b0/0x3a0
[   70.954411][ T5330]  ? __pfx___sys_sendmsg+0x10/0x10
[   70.959531][ T5330]  ? vfs_write+0x7c4/0xc90
[   70.963975][ T5330]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   70.970302][ T5330]  ? do_syscall_64+0x100/0x230
[   70.975080][ T5330]  ? do_syscall_64+0xb6/0x230
[   70.979783][ T5330]  do_syscall_64+0xf3/0x230
[   70.984284][ T5330]  ? clear_bhb_loop+0x35/0x90
[   70.988965][ T5330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.994852][ T5330] RIP: 0033:0x7f22a5f75f19
[   70.999256][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.018864][ T5330] RSP: 002b:00007f22a6ccc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.027283][ T5330] RAX: ffffffffffffffda RBX: 00007f22a6105f60 RCX: 00007f22a5f75f19
[   71.035255][ T5330] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003
[   71.043221][ T5330] RBP: 00007f22a6ccc0a0 R08: 0000000000000000 R09: 0000000000000000
[   71.051181][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.059141][ T5330] R13: 000000000000000b R14: 00007f22a6105f60 R15: 00007ffced1e5178
[   71.067116][ T5330]  </TASK>
[   71.280129][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'.
[   71.385423][ T5342] Zero length message leads to an empty skb
[   71.399827][ T5345] netlink: 'syz.3.47': attribute type 1 has an invalid length.
[   71.666538][ T5356] netlink: 'syz.4.50': attribute type 4 has an invalid length.
[   71.750929][ T1236] ieee802154 phy0 wpan0: encryption failed: -22
[   71.758440][ T1236] ieee802154 phy1 wpan1: encryption failed: -22
[   72.014362][ T5370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.046549][ T5370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'.
[   72.209290][ T5376] netlink: 'syz.2.56': attribute type 4 has an invalid length.
[   72.218440][ T5376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.56'.
[   72.379499][ T5358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.503723][ T5392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'.
[   73.029687][ T5409] netlink: 'syz.2.68': attribute type 4 has an invalid length.
[   73.654660][ T5438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'.
[   73.735257][ T5444] Cannot find add_set index 0 as target
[   73.747922][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.76'.
[   74.108511][ T5456] netlink: 'syz.3.83': attribute type 4 has an invalid length.
[   74.243866][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'.
[   74.415088][ T5469] netlink: 92 bytes leftover after parsing attributes in process `syz.3.88'.
[   74.600171][ T5476] netlink: 92 bytes leftover after parsing attributes in process `syz.0.90'.
[   74.916396][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'.
[   74.980274][ T5490] netlink: 'syz.0.93': attribute type 4 has an invalid length.
[   75.396013][ T5514] FAULT_INJECTION: forcing a failure.
[   75.396013][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.411936][ T5514] CPU: 1 PID: 5514 Comm: syz.4.103 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   75.421608][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   75.431684][ T5514] Call Trace:
[   75.434990][ T5514]  <TASK>
[   75.437931][ T5514]  dump_stack_lvl+0x241/0x360
[   75.442631][ T5514]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.447853][ T5514]  ? __pfx__printk+0x10/0x10
[   75.452476][ T5514]  ? __pfx_lock_release+0x10/0x10
[   75.457535][ T5514]  should_fail_ex+0x3b0/0x4e0
[   75.462242][ T5514]  _copy_to_user+0x2f/0xb0
[   75.466680][ T5514]  bpf_test_finish+0x593/0x8b0
[   75.471488][ T5514]  ? __pfx_bpf_test_finish+0x10/0x10
[   75.476799][ T5514]  ? _copy_from_user+0xa6/0xe0
[   75.481577][ T5514]  ? bpf_test_init+0x15a/0x180
[   75.486362][ T5514]  bpf_prog_test_run_xdp+0x905/0x11b0
[   75.491771][ T5514]  ? __pfx_lock_release+0x10/0x10
[   75.496833][ T5514]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   75.502669][ T5514]  ? __fget_files+0x29/0x470
[   75.507294][ T5514]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   75.513129][ T5514]  bpf_prog_test_run+0x33a/0x3b0
[   75.518103][ T5514]  __sys_bpf+0x48d/0x810
[   75.522363][ T5514]  ? __pfx___sys_bpf+0x10/0x10
[   75.527135][ T5514]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   75.533118][ T5514]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   75.539444][ T5514]  ? do_syscall_64+0x100/0x230
[   75.544204][ T5514]  __x64_sys_bpf+0x7c/0x90
[   75.548615][ T5514]  do_syscall_64+0xf3/0x230
[   75.553107][ T5514]  ? clear_bhb_loop+0x35/0x90
[   75.557779][ T5514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.563669][ T5514] RIP: 0033:0x7f22a5f75f19
[   75.568075][ T5514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.587671][ T5514] RSP: 002b:00007f22a6ccc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   75.596079][ T5514] RAX: ffffffffffffffda RBX: 00007f22a6105f60 RCX: 00007f22a5f75f19
[   75.604040][ T5514] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a
[   75.611998][ T5514] RBP: 00007f22a6ccc0a0 R08: 0000000000000000 R09: 0000000000000000
[   75.619967][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.627948][ T5514] R13: 000000000000000b R14: 00007f22a6105f60 R15: 00007ffced1e5178
[   75.635928][ T5514]  </TASK>
[   75.777431][ T5504] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   75.962538][ T5528] netlink: 'syz.1.108': attribute type 4 has an invalid length.
[   76.006263][ T5525] netlink: 'syz.2.106': attribute type 4 has an invalid length.
[   76.040981][ T5530] dummy0: entered promiscuous mode
[   76.790087][ T5569] netlink: 'syz.4.123': attribute type 4 has an invalid length.
[   76.885240][   T25] cfg80211: failed to load regulatory.db
[   77.173227][ T5587] __nla_validate_parse: 3 callbacks suppressed
[   77.173248][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   77.402987][ T5596] FAULT_INJECTION: forcing a failure.
[   77.402987][ T5596] name failslab, interval 1, probability 0, space 0, times 0
[   77.417352][ T5596] CPU: 0 PID: 5596 Comm: syz.4.133 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   77.427021][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   77.437101][ T5596] Call Trace:
[   77.440390][ T5596]  <TASK>
[   77.443328][ T5596]  dump_stack_lvl+0x241/0x360
[   77.448036][ T5596]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.453274][ T5596]  ? __pfx__printk+0x10/0x10
[   77.457898][ T5596]  should_fail_ex+0x3b0/0x4e0
[   77.462592][ T5596]  ? rtnl_newlink+0xf2/0x20a0
[   77.467288][ T5596]  should_failslab+0x9/0x20
[   77.471819][ T5596]  __kmalloc_cache_noprof+0x6c/0x2c0
[   77.477127][ T5596]  rtnl_newlink+0xf2/0x20a0
[   77.481745][ T5596]  ? __pfx_lock_acquire+0x10/0x10
[   77.486791][ T5596]  ? __mutex_lock+0x99b/0xd70
[   77.491494][ T5596]  ? __pfx_lock_release+0x10/0x10
[   77.496546][ T5596]  ? do_raw_spin_lock+0x14f/0x370
[   77.501591][ T5596]  ? __pfx_rtnl_newlink+0x10/0x10
[   77.506632][ T5596]  ? do_raw_spin_unlock+0x13c/0x8b0
[   77.511859][ T5596]  ? __mutex_lock+0x9a5/0xd70
[   77.516559][ T5596]  ? __mutex_lock+0x527/0xd70
[   77.521252][ T5596]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[   77.526384][ T5596]  ? __pfx___mutex_lock+0x10/0x10
[   77.531439][ T5596]  ? __pfx_rtnl_newlink+0x10/0x10
[   77.536485][ T5596]  rtnetlink_rcv_msg+0x73f/0xcf0
[   77.541440][ T5596]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[   77.546577][ T5596]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.552063][ T5596]  ? ref_tracker_free+0x643/0x7e0
[   77.557115][ T5596]  netlink_rcv_skb+0x1e3/0x430
[   77.561901][ T5596]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.567386][ T5596]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.572716][ T5596]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.577933][ T5596]  netlink_unicast+0x7f0/0x990
[   77.582811][ T5596]  ? __pfx_netlink_unicast+0x10/0x10
[   77.588103][ T5596]  ? __virt_addr_valid+0x183/0x530
[   77.593232][ T5596]  ? __check_object_size+0x49c/0x900
[   77.598555][ T5596]  ? bpf_lsm_netlink_send+0x9/0x10
[   77.603688][ T5596]  netlink_sendmsg+0x8e4/0xcb0
[   77.608479][ T5596]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.613784][ T5596]  ? __import_iovec+0x536/0x820
[   77.618652][ T5596]  ? aa_sock_msg_perm+0x91/0x160
[   77.623613][ T5596]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   77.628908][ T5596]  ? security_socket_sendmsg+0x87/0xb0
[   77.634389][ T5596]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.639692][ T5596]  __sock_sendmsg+0x221/0x270
[   77.644394][ T5596]  ____sys_sendmsg+0x525/0x7d0
[   77.649188][ T5596]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.654518][ T5596]  __sys_sendmsg+0x2b0/0x3a0
[   77.659126][ T5596]  ? __pfx___sys_sendmsg+0x10/0x10
[   77.664258][ T5596]  ? vfs_write+0x7c4/0xc90
[   77.668739][ T5596]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   77.675089][ T5596]  ? do_syscall_64+0x100/0x230
[   77.679864][ T5596]  ? do_syscall_64+0xb6/0x230
[   77.684554][ T5596]  do_syscall_64+0xf3/0x230
[   77.689072][ T5596]  ? clear_bhb_loop+0x35/0x90
[   77.693779][ T5596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.699686][ T5596] RIP: 0033:0x7f22a5f75f19
[   77.704115][ T5596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.723828][ T5596] RSP: 002b:00007f22a6ccc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.732288][ T5596] RAX: ffffffffffffffda RBX: 00007f22a6105f60 RCX: 00007f22a5f75f19
[   77.740292][ T5596] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003
[   77.748292][ T5596] RBP: 00007f22a6ccc0a0 R08: 0000000000000000 R09: 0000000000000000
[   77.756312][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.764308][ T5596] R13: 000000000000000b R14: 00007f22a6105f60 R15: 00007ffced1e5178
[   77.772344][ T5596]  </TASK>
[   78.069315][ T5602] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   78.109573][ T5609] veth0_macvtap: left promiscuous mode
[   78.234551][ T5616] netlink: 'syz.0.137': attribute type 4 has an invalid length.
[   78.271531][ T5597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.831523][ T5643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.149'.
[   78.979965][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.990450][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.001277][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.010283][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.018587][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.044469][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.091027][ T5653] FAULT_INJECTION: forcing a failure.
[   79.091027][ T5653] name failslab, interval 1, probability 0, space 0, times 0
[   79.115074][ T5653] CPU: 1 PID: 5653 Comm: syz.4.151 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[   79.124768][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[   79.134856][ T5653] Call Trace:
[   79.138160][ T5653]  <TASK>
[   79.141107][ T5653]  dump_stack_lvl+0x241/0x360
[   79.145821][ T5653]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.151046][ T5653]  ? __pfx__printk+0x10/0x10
[   79.155667][ T5653]  ? __pfx___might_resched+0x10/0x10
[   79.160985][ T5653]  should_fail_ex+0x3b0/0x4e0
[   79.165687][ T5653]  ? sk_prot_alloc+0xe0/0x210
[   79.170390][ T5653]  should_failslab+0x9/0x20
[   79.174921][ T5653]  __kmalloc_noprof+0xd8/0x400
[   79.179713][ T5653]  sk_prot_alloc+0xe0/0x210
[   79.184237][ T5653]  ? sk_alloc+0x26/0x370
[   79.188500][ T5653]  sk_alloc+0x38/0x370
[   79.192589][ T5653]  ? bpf_test_init+0x15a/0x180
[   79.197364][ T5653]  ? bpf_ctx_init+0x162/0x1b0
[   79.202061][ T5653]  bpf_prog_test_run_skb+0x3bd/0x1820
[   79.207450][ T5653]  ? __pfx_lock_release+0x10/0x10
[   79.212509][ T5653]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   79.218338][ T5653]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   79.224169][ T5653]  bpf_prog_test_run+0x33a/0x3b0
[   79.229217][ T5653]  __sys_bpf+0x48d/0x810
[   79.233479][ T5653]  ? __pfx___sys_bpf+0x10/0x10
[   79.238271][ T5653]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   79.244279][ T5653]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   79.250633][ T5653]  ? do_syscall_64+0x100/0x230
[   79.255421][ T5653]  __x64_sys_bpf+0x7c/0x90
[   79.259858][ T5653]  do_syscall_64+0xf3/0x230
[   79.264390][ T5653]  ? clear_bhb_loop+0x35/0x90
[   79.267987][ T5648] chnl_net:caif_netlink_parms(): no params data found
[   79.269077][ T5653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.269107][ T5653] RIP: 0033:0x7f22a5f75f19
[   79.269130][ T5653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.269146][ T5653] RSP: 002b:00007f22a6ccc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   79.314195][ T5653] RAX: ffffffffffffffda RBX: 00007f22a6105f60 RCX: 00007f22a5f75f19
[   79.322196][ T5653] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a
[   79.330182][ T5653] RBP: 00007f22a6ccc0a0 R08: 0000000000000000 R09: 0000000000000000
[   79.338176][ T5653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.346167][ T5653] R13: 000000000000000b R14: 00007f22a6105f60 R15: 00007ffced1e5178
[   79.354186][ T5653]  </TASK>
[   79.530765][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.615089][ T5668] netlink: 'syz.3.152': attribute type 4 has an invalid length.
[   79.652832][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.661588][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.722925][ T5648] bridge_slave_0: entered allmulticast mode
[   79.739850][ T5648] bridge_slave_0: entered promiscuous mode
[   79.811175][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.855321][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.871420][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.890969][ T5648] bridge_slave_1: entered allmulticast mode
[   79.899612][ T5648] bridge_slave_1: entered promiscuous mode
[   80.031009][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.339832][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.385749][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.467258][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.677229][    C1] hrtimer: interrupt took 6743627 ns
[   80.810171][ T5648] team0: Port device team_slave_0 added
[   80.838060][ T5648] team0: Port device team_slave_1 added
[   80.881306][ T5707] netlink: 'syz.1.165': attribute type 4 has an invalid length.
[   81.144016][ T4498] Bluetooth: hci2: command tx timeout
[   83.241314][ T4498] Bluetooth: hci2: command tx timeout
[   83.270174][ T5737] nbd: device at index 3 is going down
[   83.275843][ T5737] nbd: device at index 3 is going down
[   83.281504][ T5737] nbd: device at index 3 is going down
[   83.287132][ T5737] nbd: device at index 3 is going down
[   83.292740][ T5737] nbd: device at index 3 is going down
[   83.298361][ T5737] nbd: device at index 3 is going down
[   85.988386][ T4498] Bluetooth: hci2: command tx timeout
[   85.997214][ T5738] nbd: device at index 3 is going down
[   89.625885][   T54] Bluetooth: hci2: command tx timeout
[   89.679292][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.696318][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.725757][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.458438][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.473717][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.506974][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.334897][ T5761] netlink: 'syz.3.186': attribute type 4 has an invalid length.
[  105.764057][ T5112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  105.772442][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.893626][ T5112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  105.901498][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.945151][ T5112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  105.952440][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.968775][ T5112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  105.976281][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.992342][ T5112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  106.002524][ T5112] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  106.009688][ T5112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  106.016801][ T5112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  106.035637][ T5112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  106.042774][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  106.049909][ T5112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  106.061626][ T4498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  106.116569][   T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  106.131007][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.843683][   T54] Bluetooth: hci7: command tx timeout
[  113.849670][   T54] Bluetooth: hci6: command tx timeout
[  113.856513][   T54] Bluetooth: hci5: command tx timeout
[  126.393202][ T5104] Bluetooth: hci5: command tx timeout
[  126.398799][ T5104] Bluetooth: hci6: command tx timeout
[  126.404245][ T5104] Bluetooth: hci7: command tx timeout
[  144.253546][   T54] Bluetooth: hci7: command tx timeout
[  144.259027][   T54] Bluetooth: hci6: command tx timeout
[  144.264537][   T54] Bluetooth: hci5: command tx timeout
[  144.344080][ T1236] ieee802154 phy0 wpan0: encryption failed: -22
[  144.350503][ T1236] ieee802154 phy1 wpan1: encryption failed: -22
[  208.270139][ T5104] Bluetooth: hci5: command tx timeout
[  208.275660][ T5104] Bluetooth: hci6: command tx timeout
[  208.281092][ T5104] Bluetooth: hci7: command tx timeout
[  208.371105][ T1236] ieee802154 phy0 wpan0: encryption failed: -22
[  208.382888][ T5648] hsr_slave_0: entered promiscuous mode
[  208.394035][ T1236] ieee802154 phy1 wpan1: encryption failed: -22
[  208.410747][ T4498] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  208.423018][ T4498] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  269.378872][   T30] INFO: task kworker/1:1:46 blocked for more than 142 seconds.
[  269.389937][   T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P5148 } 6102 jiffies s: 2661 root: 0x0/T
[  269.402031][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  269.410503][ T4498] Bluetooth: hci2: command 0x0406 tx timeout
[  269.423459][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.432167][   T30] task:kworker/1:1     state:D stack:23512 pid:46    tgid:46    ppid:2      flags:0x00004000
[  269.449201][   T19] rcu: blocking rcu_node structures (internal RCU debug):
[  269.456494][   T30] Workqueue: events bpf_prog_free_deferred
[  269.463942][   T30] Call Trace:
[  269.467236][   T30]  <TASK>
[  269.470181][   T30]  __schedule+0x1800/0x4a60
[  269.474854][   T30]  ? __pfx___schedule+0x10/0x10
[  269.479717][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  269.486236][   T30]  ? __pfx_lock_release+0x10/0x10
[  269.491282][   T30]  ? kick_pool+0x45c/0x620
[  269.495767][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.500986][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  269.506233][   T30]  ? schedule+0x90/0x320
[  269.510495][   T30]  schedule+0x14b/0x320
[  269.514733][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.520207][   T30]  __mutex_lock+0x6a4/0xd70
[  269.524760][   T30]  ? __mutex_lock+0x527/0xd70
[  269.529536][   T30]  ? bpf_prog_pack_free+0x27/0x410
[  269.534780][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.539934][   T30]  ? bpf_prog_free_deferred+0x375/0x710
[  269.547691][   T30]  ? rcu_is_watching+0x15/0xb0
[  269.552636][   T30]  ? bpf_prog_free_deferred+0x375/0x710
[  269.560500][   T30]  bpf_prog_pack_free+0x27/0x410
[  269.566419][   T30]  bpf_jit_binary_pack_free+0x3b/0x80
[  269.571818][   T30]  bpf_jit_free+0x119/0x1d0
[  269.577306][   T30]  ? process_scheduled_works+0x945/0x1830
[  269.583074][   T30]  process_scheduled_works+0xa2c/0x1830
[  269.588819][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.594865][   T30]  ? assign_work+0x364/0x3d0
[  269.599474][   T30]  worker_thread+0x86d/0xd40
[  269.604134][   T30]  ? __kthread_parkme+0x169/0x1d0
[  269.609174][   T30]  ? __pfx_worker_thread+0x10/0x10
[  269.614330][   T30]  kthread+0x2f0/0x390
[  269.618424][   T30]  ? __pfx_worker_thread+0x10/0x10
[  269.623580][   T30]  ? __pfx_kthread+0x10/0x10
[  269.628185][   T30]  ret_from_fork+0x4b/0x80
[  269.632610][   T30]  ? __pfx_kthread+0x10/0x10
[  269.637339][   T30]  ret_from_fork_asm+0x1a/0x30
[  269.642220][   T30]  </TASK>
[  269.646457][   T30] INFO: task kworker/u8:6:1101 blocked for more than 143 seconds.
[  269.654351][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  269.661784][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.671600][   T30] task:kworker/u8:6    state:D stack:22512 pid:1101  tgid:1101  ppid:2      flags:0x00004000
[  269.693207][   T30] Workqueue: netns cleanup_net
[  269.703493][   T30] Call Trace:
[  269.707006][   T30]  <TASK>
[  269.709953][   T30]  __schedule+0x1800/0x4a60
[  269.720588][   T30]  ? __pfx___schedule+0x10/0x10
[  269.725553][   T30]  ? __pfx_lock_release+0x10/0x10
[  269.730685][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  269.736634][   T30]  ? kthread_data+0x52/0xd0
[  269.741167][   T30]  ? schedule+0x90/0x320
[  269.745576][   T30]  ? wq_worker_sleeping+0x66/0x240
[  269.750710][   T30]  ? schedule+0x90/0x320
[  269.755006][   T30]  schedule+0x14b/0x320
[  269.759188][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.764697][   T30]  __mutex_lock+0x6a4/0xd70
[  269.770843][   T30]  ? __mutex_lock+0x527/0xd70
[  269.775593][   T30]  ? cleanup_net+0x6af/0xcc0
[  269.780205][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.785428][   T30]  ? bpf_prog_array_free+0x34/0x40
[  269.790557][   T30]  cleanup_net+0x6af/0xcc0
[  269.795042][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  269.800005][   T30]  ? process_scheduled_works+0x945/0x1830
[  269.805944][   T30]  process_scheduled_works+0xa2c/0x1830
[  269.811968][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.818089][   T30]  ? assign_work+0x364/0x3d0
[  269.822798][   T30]  worker_thread+0x86d/0xd40
[  269.827454][   T30]  ? __kthread_parkme+0x169/0x1d0
[  269.832513][   T30]  ? __pfx_worker_thread+0x10/0x10
[  269.838264][   T30]  kthread+0x2f0/0x390
[  269.842358][   T30]  ? __pfx_worker_thread+0x10/0x10
[  269.848901][   T30]  ? __pfx_kthread+0x10/0x10
[  269.853762][   T30]  ret_from_fork+0x4b/0x80
[  269.858198][   T30]  ? __pfx_kthread+0x10/0x10
[  269.862808][   T30]  ret_from_fork_asm+0x1a/0x30
[  269.867645][   T30]  </TASK>
[  269.872340][   T30] INFO: task dhcpcd:4766 blocked for more than 143 seconds.
[  269.879699][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  269.887093][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  269.895942][   T30] task:dhcpcd          state:D stack:23728 pid:4766  tgid:4766  ppid:1      flags:0x00000002
[  269.906270][   T30] Call Trace:
[  269.909558][   T30]  <TASK>
[  269.912512][   T30]  __schedule+0x1800/0x4a60
[  269.917116][   T30]  ? __pfx___schedule+0x10/0x10
[  269.921992][   T30]  ? __pfx_lock_release+0x10/0x10
[  269.927134][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  269.932732][   T30]  ? schedule+0x90/0x320
[  269.937195][   T30]  schedule+0x14b/0x320
[  269.941379][   T30]  schedule_preempt_disabled+0x13/0x30
[  269.946907][   T30]  __mutex_lock+0x6a4/0xd70
[  269.951435][   T30]  ? __mutex_lock+0x527/0xd70
[  269.956157][   T30]  ? vlan_ioctl_handler+0x112/0x9d0
[  269.961372][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  269.966445][   T30]  ? __might_fault+0xc6/0x120
[  269.971145][   T30]  vlan_ioctl_handler+0x112/0x9d0
[  269.977172][   T30]  ? sock_ioctl+0x664/0x8e0
[  269.981703][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  269.988095][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  269.993745][   T30]  sock_ioctl+0x683/0x8e0
[  269.998121][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  270.003003][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[  270.008092][   T30]  ? security_file_ioctl+0x87/0xb0
[  270.013296][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  270.018334][   T30]  __se_sys_ioctl+0xfc/0x170
[  270.022982][   T30]  do_syscall_64+0xf3/0x230
[  270.042903][   T30]  ? clear_bhb_loop+0x35/0x90
[  270.047795][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.053740][   T30] RIP: 0033:0x7f0f4dd0ad49
[  270.058175][   T30] RSP: 002b:00007ffff8dafd88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.066638][   T30] RAX: ffffffffffffffda RBX: 0000560822cf0820 RCX: 00007f0f4dd0ad49
[  270.074732][   T30] RDX: 00007ffff8dafd90 RSI: 0000000000008982 RDI: 0000000000000011
[  270.083702][   T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000
[  270.091868][   T30] R10: 00007ffff8dc0410 R11: 0000000000000246 R12: 00007ffff8dafd90
[  270.101212][   T30] R13: 00007ffff8dafe50 R14: 0000560822cf0820 R15: 0000560822cef820
[  270.109457][   T30]  </TASK>
[  270.112818][   T30] INFO: task kworker/1:3:5102 blocked for more than 143 seconds.
[  270.120682][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  270.128001][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  270.136758][   T30] task:kworker/1:3     state:D stack:22296 pid:5102  tgid:5102  ppid:2      flags:0x00004000
[  270.147071][   T30] Workqueue: events bpf_prog_free_deferred
[  270.152903][   T30] Call Trace:
[  270.156216][   T30]  <TASK>
[  270.159157][   T30]  __schedule+0x1800/0x4a60
[  270.163728][   T30]  ? __pfx___schedule+0x10/0x10
[  270.168592][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.174612][   T30]  ? __pfx_lock_release+0x10/0x10
[  270.181193][   T30]  ? kick_pool+0x45c/0x620
[  270.185778][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.191077][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  270.196670][   T30]  ? schedule+0x90/0x320
[  270.201113][   T30]  schedule+0x14b/0x320
[  270.205649][   T30]  schedule_preempt_disabled+0x13/0x30
[  270.211143][   T30]  __mutex_lock+0x6a4/0xd70
[  270.215710][   T30]  ? __mutex_lock+0x527/0xd70
[  270.220494][   T30]  ? bpf_prog_pack_free+0x27/0x410
[  270.225653][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  270.230695][   T30]  ? bpf_prog_free_deferred+0x375/0x710
[  270.236481][   T30]  ? rcu_is_watching+0x15/0xb0
[  270.241259][   T30]  ? bpf_prog_free_deferred+0x375/0x710
[  270.247033][   T30]  bpf_prog_pack_free+0x27/0x410
[  270.251989][   T30]  bpf_jit_binary_pack_free+0x3b/0x80
[  270.257410][   T30]  bpf_jit_free+0x119/0x1d0
[  270.262005][   T30]  ? process_scheduled_works+0x945/0x1830
[  270.267854][   T30]  process_scheduled_works+0xa2c/0x1830
[  270.273481][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  270.279659][   T30]  ? assign_work+0x364/0x3d0
[  270.285297][   T30]  worker_thread+0x86d/0xd40
[  270.289927][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  270.296480][   T30]  ? __kthread_parkme+0x169/0x1d0
[  270.301527][   T30]  ? __pfx_worker_thread+0x10/0x10
[  270.306701][   T30]  kthread+0x2f0/0x390
[  270.310786][   T30]  ? __pfx_worker_thread+0x10/0x10
[  270.315940][   T30]  ? __pfx_kthread+0x10/0x10
[  270.320544][   T30]  ret_from_fork+0x4b/0x80
[  270.325010][   T30]  ? __pfx_kthread+0x10/0x10
[  270.329615][   T30]  ret_from_fork_asm+0x1a/0x30
[  270.334911][   T30]  </TASK>
[  270.338006][   T30] INFO: task syz-executor:5105 blocked for more than 143 seconds.
[  270.346037][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  270.353693][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  270.362451][   T30] task:syz-executor    state:D stack:19456 pid:5105  tgid:5105  ppid:1      flags:0x00004006
[  270.372664][   T30] Call Trace:
[  270.375974][   T30]  <TASK>
[  270.378923][   T30]  __schedule+0x1800/0x4a60
[  270.384880][   T30]  ? __pfx___schedule+0x10/0x10
[  270.389754][   T30]  ? __pfx_lock_release+0x10/0x10
[  270.395420][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  270.401000][   T30]  ? schedule+0x90/0x320
[  270.405303][   T30]  schedule+0x14b/0x320
[  270.409585][   T30]  schedule_preempt_disabled+0x13/0x30
[  270.415096][   T30]  __mutex_lock+0x6a4/0xd70
[  270.419614][   T30]  ? __mutex_lock+0x527/0xd70
[  270.424431][   T30]  ? hci_conn_hash_flush+0xa6/0x240
[  270.429642][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  270.434799][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  270.439846][   T30]  hci_conn_hash_flush+0xa6/0x240
[  270.444926][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  270.450061][   T30]  hci_unregister_dev+0x20b/0x510
[  270.456444][   T30]  vhci_release+0x83/0xd0
[  270.460806][   T30]  ? __pfx_vhci_release+0x10/0x10
[  270.465896][   T30]  __fput+0x24a/0x8a0
[  270.469906][   T30]  task_work_run+0x24f/0x310
[  270.476255][   T30]  ? __pfx_task_work_run+0x10/0x10
[  270.481447][   T30]  ? do_exit+0xa2a/0x27f0
[  270.489929][   T30]  ? kmem_cache_free+0x145/0x350
[  270.503525][   T30]  do_exit+0xa2f/0x27f0
[  270.507767][   T30]  ? __pfx_do_exit+0x10/0x10
[  270.512375][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  270.532895][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.539381][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  270.545824][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  270.551115][   T30]  do_group_exit+0x207/0x2c0
[  270.555953][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.561180][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  270.566453][   T30]  get_signal+0x16a1/0x1740
[  270.570990][   T30]  ? __pfx_get_signal+0x10/0x10
[  270.575895][   T30]  arch_do_signal_or_restart+0x96/0x860
[  270.581460][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  270.589038][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.595865][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  270.601611][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  270.607215][   T30]  do_syscall_64+0x100/0x230
[  270.611819][   T30]  ? clear_bhb_loop+0x35/0x90
[  270.616596][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.622504][   T30] RIP: 0033:0x7f6cfb76c217
[  270.626956][   T30] RSP: 002b:00007ffc51d56f10 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  270.635489][   T30] RAX: 0000000000000067 RBX: 0000000000000067 RCX: 00007f6cfb76c217
[  270.643500][   T30] RDX: 0000000040000000 RSI: 00007ffc51d56f8c RDI: 00000000ffffffff
[  270.651478][   T30] RBP: 00007ffc51d56f8c R08: 0000000000000000 R09: 7fffffffffffffff
[  270.659571][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffc51d57000
[  270.667577][   T30] R13: 000055558e7445eb R14: 000055558e744590 R15: 0000000000015e38
[  270.675600][   T30]  </TASK>
[  270.678704][   T30] INFO: task kworker/1:7:5150 blocked for more than 144 seconds.
[  270.686575][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  270.694782][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  270.704080][   T30] task:kworker/1:7     state:D stack:21840 pid:5150  tgid:5150  ppid:2      flags:0x00004000
[  270.714664][   T30] Workqueue: events_power_efficient crda_timeout_work
[  270.721541][   T30] Call Trace:
[  270.724858][   T30]  <TASK>
[  270.727900][   T30]  __schedule+0x1800/0x4a60
[  270.732491][   T30]  ? __pfx___schedule+0x10/0x10
[  270.737452][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.743479][   T30]  ? __pfx_lock_release+0x10/0x10
[  270.748520][   T30]  ? kick_pool+0x1bd/0x620
[  270.752956][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.758262][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  270.763554][   T30]  ? schedule+0x90/0x320
[  270.767822][   T30]  schedule+0x14b/0x320
[  270.772010][   T30]  schedule_preempt_disabled+0x13/0x30
[  270.777586][   T30]  __mutex_lock+0x6a4/0xd70
[  270.782217][   T30]  ? __mutex_lock+0x527/0xd70
[  270.787042][   T30]  ? crda_timeout_work+0x15/0x50
[  270.793963][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  270.799641][   T30]  ? process_scheduled_works+0x945/0x1830
[  270.805604][   T30]  crda_timeout_work+0x15/0x50
[  270.810381][   T30]  process_scheduled_works+0xa2c/0x1830
[  270.816006][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  270.822012][   T30]  ? assign_work+0x364/0x3d0
[  270.826645][   T30]  worker_thread+0x86d/0xd40
[  270.831256][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  270.837323][   T30]  ? __kthread_parkme+0x169/0x1d0
[  270.842376][   T30]  ? __pfx_worker_thread+0x10/0x10
[  270.847541][   T30]  kthread+0x2f0/0x390
[  270.851722][   T30]  ? __pfx_worker_thread+0x10/0x10
[  270.856880][   T30]  ? __pfx_kthread+0x10/0x10
[  270.861514][   T30]  ret_from_fork+0x4b/0x80
[  270.866044][   T30]  ? __pfx_kthread+0x10/0x10
[  270.870676][   T30]  ret_from_fork_asm+0x1a/0x30
[  270.875607][   T30]  </TASK>
[  270.878769][   T30] INFO: task kworker/0:7:5316 blocked for more than 144 seconds.
[  270.886632][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  270.893956][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  270.903640][   T30] task:kworker/0:7     state:D stack:25712 pid:5316  tgid:5316  ppid:2      flags:0x00004000
[  270.914515][   T30] Workqueue: events linkwatch_event
[  270.919749][   T30] Call Trace:
[  270.923032][   T30]  <TASK>
[  270.926026][   T30]  __schedule+0x1800/0x4a60
[  270.930570][   T30]  ? __pfx___schedule+0x10/0x10
[  270.935563][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  270.942517][   T30]  ? __pfx_lock_release+0x10/0x10
[  270.947855][   T30]  ? kick_pool+0x45c/0x620
[  270.952337][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.957647][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  270.962873][   T30]  ? schedule+0x90/0x320
[  270.967183][   T30]  schedule+0x14b/0x320
[  270.971619][   T30]  schedule_preempt_disabled+0x13/0x30
[  270.977133][   T30]  __mutex_lock+0x6a4/0xd70
[  270.981658][   T30]  ? __mutex_lock+0x527/0xd70
[  270.986535][   T30]  ? linkwatch_event+0xe/0x60
[  270.991236][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  270.996325][   T30]  ? process_scheduled_works+0x945/0x1830
[  271.003656][   T30]  linkwatch_event+0xe/0x60
[  271.008180][   T30]  process_scheduled_works+0xa2c/0x1830
[  271.013811][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  271.019908][   T30]  ? assign_work+0x364/0x3d0
[  271.024557][   T30]  worker_thread+0x86d/0xd40
[  271.029180][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  271.035260][   T30]  ? __kthread_parkme+0x169/0x1d0
[  271.040353][   T30]  ? __pfx_worker_thread+0x10/0x10
[  271.045624][   T30]  kthread+0x2f0/0x390
[  271.049716][   T30]  ? __pfx_worker_thread+0x10/0x10
[  271.054877][   T30]  ? __pfx_kthread+0x10/0x10
[  271.059486][   T30]  ret_from_fork+0x4b/0x80
[  271.063949][   T30]  ? __pfx_kthread+0x10/0x10
[  271.069041][   T30]  ret_from_fork_asm+0x1a/0x30
[  271.073865][   T30]  </TASK>
[  271.077023][   T30] INFO: task syz.3.186:5761 blocked for more than 144 seconds.
[  271.084703][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  271.091984][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  271.101777][   T30] task:syz.3.186       state:D stack:21600 pid:5761  tgid:5758  ppid:5096   flags:0x00004002
[  271.112782][   T30] Call Trace:
[  271.116268][   T30]  <TASK>
[  271.119391][   T30]  __schedule+0x1800/0x4a60
[  271.124679][   T30]  ? __pfx___schedule+0x10/0x10
[  271.129633][   T30]  ? __pfx_lock_release+0x10/0x10
[  271.143460][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  271.148981][   T30]  ? schedule+0x90/0x320
[  271.153247][   T30]  schedule+0x14b/0x320
[  271.161640][   T30]  schedule_preempt_disabled+0x13/0x30
[  271.169604][   T30]  __mutex_lock+0x6a4/0xd70
[  271.183829][   T30]  ? __mutex_lock+0x527/0xd70
[  271.188576][   T30]  ? hci_conn_hash_flush+0xa6/0x240
[  271.196664][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  271.203335][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  271.208526][   T30]  hci_conn_hash_flush+0xa6/0x240
[  271.213609][   T30]  hci_dev_close_sync+0x9ef/0x11a0
[  271.218833][   T30]  hci_unregister_dev+0x20b/0x510
[  271.223894][   T30]  vhci_release+0x83/0xd0
[  271.228245][   T30]  ? __pfx_vhci_release+0x10/0x10
[  271.233310][   T30]  __fput+0x24a/0x8a0
[  271.237570][   T30]  task_work_run+0x24f/0x310
[  271.242175][   T30]  ? __pfx_task_work_run+0x10/0x10
[  271.247332][   T30]  ? do_exit+0xa2a/0x27f0
[  271.251672][   T30]  ? kmem_cache_free+0x145/0x350
[  271.256653][   T30]  do_exit+0xa2f/0x27f0
[  271.260841][   T30]  ? __pfx_do_exit+0x10/0x10
[  271.265478][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  271.270864][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.276899][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.283240][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  271.289148][   T30]  do_group_exit+0x207/0x2c0
[  271.293997][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.299224][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  271.305360][   T30]  get_signal+0x16a1/0x1740
[  271.309892][   T30]  ? __pfx_get_signal+0x10/0x10
[  271.315526][   T30]  ? __pfx_task_work_add+0x10/0x10
[  271.320674][   T30]  arch_do_signal_or_restart+0x96/0x860
[  271.326278][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  271.332466][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.338620][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  271.344389][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  271.349949][   T30]  do_syscall_64+0x100/0x230
[  271.354594][   T30]  ? clear_bhb_loop+0x35/0x90
[  271.359372][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.365333][   T30] RIP: 0033:0x7ff0b1b75f19
[  271.369756][   T30] RSP: 002b:00007ff0b2924048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  271.378226][   T30] RAX: 0000000000000039 RBX: 00007ff0b1d06110 RCX: 00007ff0b1b75f19
[  271.386508][   T30] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000006
[  271.394529][   T30] RBP: 00007ff0b1be4e68 R08: 0000000000000000 R09: 0000000000000000
[  271.402515][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.411577][   T30] R13: 000000000000006e R14: 00007ff0b1d06110 R15: 00007ffef4c31cf8
[  271.420203][   T30]  </TASK>
[  271.423318][   T30] INFO: task syz-executor:5768 blocked for more than 145 seconds.
[  271.431180][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  271.438907][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  271.447881][   T30] task:syz-executor    state:D stack:24992 pid:5768  tgid:5768  ppid:5765   flags:0x00000000
[  271.458194][   T30] Call Trace:
[  271.461534][   T30]  <TASK>
[  271.464528][   T30]  __schedule+0x1800/0x4a60
[  271.469081][   T30]  ? __pfx___schedule+0x10/0x10
[  271.473986][   T30]  ? __pfx_lock_release+0x10/0x10
[  271.479029][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  271.484658][   T30]  ? schedule+0x90/0x320
[  271.488922][   T30]  schedule+0x14b/0x320
[  271.493107][   T30]  schedule_preempt_disabled+0x13/0x30
[  271.498623][   T30]  __mutex_lock+0x6a4/0xd70
[  271.503143][   T30]  ? __mutex_lock+0x527/0xd70
[  271.507953][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  271.514128][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  271.519390][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  271.525542][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  271.530792][   T30]  ? __lock_acquire+0x137a/0x2040
[  271.536528][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.542040][   T30]  netlink_rcv_skb+0x1e3/0x430
[  271.546875][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.552380][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.557873][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.563175][   T30]  netlink_unicast+0x7f0/0x990
[  271.568010][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  271.573305][   T30]  ? __virt_addr_valid+0x183/0x530
[  271.578531][   T30]  ? __check_object_size+0x49c/0x900
[  271.584123][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  271.589263][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  271.594203][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.599618][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  271.604604][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  271.609901][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  271.616367][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.621756][   T30]  __sock_sendmsg+0x221/0x270
[  271.627234][   T30]  __sys_sendto+0x3a4/0x4f0
[  271.631774][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  271.637029][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.643027][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.649422][   T30]  ? exc_page_fault+0x590/0x8c0
[  271.654314][   T30]  __x64_sys_sendto+0xde/0x100
[  271.659095][   T30]  do_syscall_64+0xf3/0x230
[  271.663642][   T30]  ? clear_bhb_loop+0x35/0x90
[  271.668338][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.674288][   T30] RIP: 0033:0x7f595a177cac
[  271.678719][   T30] RSP: 002b:00007ffc5357cb20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  271.687449][   T30] RAX: ffffffffffffffda RBX: 00007f595ae34620 RCX: 00007f595a177cac
[  271.695735][   T30] RDX: 0000000000000028 RSI: 00007f595ae34670 RDI: 0000000000000003
[  271.703749][   T30] RBP: 0000000000000000 R08: 00007ffc5357cb74 R09: 000000000000000c
[  271.711734][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  271.720752][   T30] R13: 0000000000000000 R14: 00007f595ae34670 R15: 0000000000000000
[  271.729437][   T30]  </TASK>
[  271.732481][   T30] INFO: task syz-executor:5769 blocked for more than 145 seconds.
[  271.740410][   T30]       Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  271.747743][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  271.756460][   T30] task:syz-executor    state:D stack:24992 pid:5769  tgid:5769  ppid:5764   flags:0x00000000
[  271.766761][   T30] Call Trace:
[  271.770043][   T30]  <TASK>
[  271.772982][   T30]  __schedule+0x1800/0x4a60
[  271.777572][   T30]  ? __pfx___schedule+0x10/0x10
[  271.782438][   T30]  ? __pfx_lock_release+0x10/0x10
[  271.787594][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  271.793084][   T30]  ? schedule+0x90/0x320
[  271.797367][   T30]  schedule+0x14b/0x320
[  271.801544][   T30]  schedule_preempt_disabled+0x13/0x30
[  271.807057][   T30]  __mutex_lock+0x6a4/0xd70
[  271.811571][   T30]  ? __mutex_lock+0x527/0xd70
[  271.817214][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  271.822342][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  271.828007][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  271.832958][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  271.838184][   T30]  ? __lock_acquire+0x137a/0x2040
[  271.843316][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.848932][   T30]  netlink_rcv_skb+0x1e3/0x430
[  271.853750][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.859221][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.864566][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.869776][   T30]  netlink_unicast+0x7f0/0x990
[  271.874593][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  271.879893][   T30]  ? __virt_addr_valid+0x183/0x530
[  271.885156][   T30]  ? __check_object_size+0x49c/0x900
[  271.890464][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  271.895622][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  271.900413][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.905745][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  271.910701][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  271.919596][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  271.925761][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.931074][   T30]  __sock_sendmsg+0x221/0x270
[  271.935899][   T30]  __sys_sendto+0x3a4/0x4f0
[  271.940426][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  271.945525][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  271.951521][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.957894][   T30]  ? exc_page_fault+0x590/0x8c0
[  271.962759][   T30]  __x64_sys_sendto+0xde/0x100
[  271.967579][   T30]  do_syscall_64+0xf3/0x230
[  271.972093][   T30]  ? clear_bhb_loop+0x35/0x90
[  271.976821][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.982733][   T30] RIP: 0033:0x7f70f4f77cac
[  271.987321][   T30] RSP: 002b:00007ffc00785690 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  271.995780][   T30] RAX: ffffffffffffffda RBX: 00007f70f5c34620 RCX: 00007f70f4f77cac
[  272.003897][   T30] RDX: 0000000000000028 RSI: 00007f70f5c34670 RDI: 0000000000000003
[  272.011880][   T30] RBP: 0000000000000000 R08: 00007ffc007856e4 R09: 000000000000000c
[  272.020190][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  272.029167][   T30] R13: 0000000000000000 R14: 00007f70f5c34670 R15: 0000000000000000
[  272.038003][   T30]  </TASK>
[  272.041058][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  272.050320][   T30] 
[  272.050320][   T30] Showing all locks held in the system:
[  272.058158][   T30] 5 locks held by kworker/u8:0/11:
[  272.063277][   T30] 3 locks held by kworker/u8:1/12:
[  272.068429][   T30]  #0: ffff888029ee5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.080404][   T30]  #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.094225][   T30]  #2: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  272.103799][   T30] 4 locks held by kworker/1:0/25:
[  272.108829][   T30] 1 lock held by khungtaskd/30:
[  272.113802][   T30]  #0: ffffffff8e336e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  272.124931][   T30] 5 locks held by kworker/u8:2/35:
[  272.130136][   T30]  #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.142482][   T30]  #1: ffffc90000ab7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.155412][   T30]  #2: ffffffff8e1d1410 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20
[  272.165335][   T30]  #3: ffffffff8e3e6008 (jump_label_mutex){+.+.}-{3:3}, at: static_key_disable_cpuslocked+0x9b/0x1c0
[  272.176323][   T30]  #4: ffffffff8e1e6588 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_queue+0x5d/0x100
[  272.186925][   T30] 3 locks held by kworker/1:1/46:
[  272.191948][   T30]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.203326][   T30]  #1: ffffc90000b67d00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.215279][   T30]  #2: ffffffff8e3a9cc8 (pack_mutex){+.+.}-{3:3}, at: bpf_prog_pack_free+0x27/0x410
[  272.224750][   T30] 5 locks held by kworker/u9:0/54:
[  272.231686][   T30]  #0: ffff888029aab948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.242580][   T30]  #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.255272][   T30]  #2: ffff888021df4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  272.265367][   T30]  #3: ffff888021df4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  272.275099][   T30]  #4: ffffffff8f769ee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340
[  272.284924][   T30] 3 locks held by kworker/1:2/59:
[  272.289948][   T30]  #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.302369][   T30]  #1: ffffc9000134fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.313498][   T30]  #2: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  272.323116][   T30] 4 locks held by kworker/u8:6/1101:
[  272.329453][   T30]  #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.341014][   T30]  #1: ffffc900041e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.351724][   T30]  #2: ffffffff8f5f1b90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  272.361199][   T30]  #3: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  272.370154][   T30] 3 locks held by kworker/u8:7/1111:
[  272.375559][   T30]  #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.387294][   T30]  #1: ffffc90004177d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.399803][   T30]  #2: ffff8880444b8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490
[  272.409911][   T30] 3 locks held by kworker/u8:8/3851:
[  272.415246][   T30]  #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.427273][   T30]  #1: ffffc9000bc77d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.440546][   T30]  #2: ffff888045120768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490
[  272.451320][   T30] 3 locks held by kworker/u9:1/4498:
[  272.456652][   T30] 2 locks held by dhcpcd/4766:
[  272.461589][   T30]  #0: ffffffff8f5e3348 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0
[  272.471501][   T30]  #1: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0
[  272.481236][   T30] 2 locks held by getty/4852:
[  272.485999][   T30]  #0: ffff88802ab940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  272.495855][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  272.506064][   T30] 3 locks held by kworker/u9:2/5100:
[  272.511371][   T30] 3 locks held by kworker/1:3/5102:
[  272.516616][   T30]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.527736][   T30]  #1: ffffc900036bfd00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.540389][   T30]  #2: ffffffff8e3a9cc8 (pack_mutex){+.+.}-{3:3}, at: bpf_prog_pack_free+0x27/0x410
[  272.550599][   T30] 3 locks held by kworker/u9:3/5104:
[  272.555960][   T30] 3 locks held by syz-executor/5105:
[  272.561256][   T30]  #0: ffff88807fb3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  272.571309][   T30]  #1: ffff88807fb3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  272.581186][   T30]  #2: ffffffff8f769ee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  272.591269][   T30] 3 locks held by kworker/u9:6/5112:
[  272.596609][   T30] 3 locks held by kworker/1:5/5148:
[  272.601810][   T30] 3 locks held by kworker/1:7/5150:
[  272.607035][   T30]  #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.619628][   T30]  #1: ffffc90003f27d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.630707][   T30]  #2: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50
[  272.641027][   T30] 3 locks held by kworker/0:4/5202:
[  272.646870][   T30] 3 locks held by kworker/0:7/5316:
[  272.652072][   T30]  #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  272.663217][   T30]  #1: ffffc90004187d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  272.674295][   T30]  #2: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  272.683638][   T30] 2 locks held by syz-executor/5648:
[  272.689030][   T30]  #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  272.698511][   T30]  #1: ffffffff8e33c1f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  272.709469][   T30] 3 locks held by syz.2.170/5730:
[  272.714592][   T30]  #0: ffff888021d28d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  272.724740][   T30]  #1: ffff888021d28078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  272.734527][   T30]  #2: ffffffff8f769ee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  272.745649][   T30] 4 locks held by syz.4.177/5734:
[  272.750679][   T30]  #0: ffff888021d2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  272.761264][   T30]  #1: ffff888021d2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  272.771006][   T30]  #2: ffffffff8f769ee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  272.781085][   T30]  #3: ffffffff8e33c1f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  272.792114][   T30] 3 locks held by syz.3.186/5761:
[  272.797165][   T30]  #0: ffff888021f20d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  272.807231][   T30]  #1: ffff888021f20078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  272.816951][   T30]  #2: ffffffff8f769ee8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  272.827027][   T30] 1 lock held by syz-executor/5768:
[  272.832226][   T30]  #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  272.842702][   T30] 1 lock held by syz-executor/5769:
[  272.848643][   T30]  #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  272.858124][   T30] 1 lock held by syz-executor/5779:
[  272.863320][   T30]  #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  272.872793][   T30] 2 locks held by syz-executor/5782:
[  272.878119][   T30]  #0: ffff88802f41a420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  272.887433][   T30]  #1: ffff88807defddb0 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540
[  272.898151][   T30] 2 locks held by syz-executor/5785:
[  272.903474][   T30]  #0: ffff88802f41a420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  272.912661][   T30]  #1: ffff88807defddb0 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540
[  272.923360][   T30] 
[  272.925716][   T30] =============================================
[  272.925716][   T30] 
[  272.934239][   T30] NMI backtrace for cpu 0
[  272.938568][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  272.948110][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  272.958167][   T30] Call Trace:
[  272.961453][   T30]  <TASK>
[  272.964394][   T30]  dump_stack_lvl+0x241/0x360
[  272.969088][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.974379][   T30]  ? __pfx__printk+0x10/0x10
[  272.978968][   T30]  ? vprintk_emit+0x631/0x770
[  272.983656][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  272.988698][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  272.993647][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  272.999115][   T30]  ? _printk+0xd5/0x120
[  273.003282][   T30]  ? __pfx__printk+0x10/0x10
[  273.007875][   T30]  ? __wake_up_klogd+0xcc/0x110
[  273.012907][   T30]  ? __pfx__printk+0x10/0x10
[  273.017503][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  273.022534][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  273.028536][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  273.034616][   T30]  watchdog+0xfde/0x1020
[  273.038868][   T30]  ? watchdog+0x1ea/0x1020
[  273.043298][   T30]  ? __pfx_watchdog+0x10/0x10
[  273.047984][   T30]  kthread+0x2f0/0x390
[  273.052155][   T30]  ? __pfx_watchdog+0x10/0x10
[  273.056842][   T30]  ? __pfx_kthread+0x10/0x10
[  273.061448][   T30]  ret_from_fork+0x4b/0x80
[  273.065895][   T30]  ? __pfx_kthread+0x10/0x10
[  273.070494][   T30]  ret_from_fork_asm+0x1a/0x30
[  273.075282][   T30]  </TASK>
[  273.079256][   T30] Sending NMI from CPU 0 to CPUs 1:
[  273.085229][    C1] NMI backtrace for cpu 1
[  273.085241][    C1] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  273.085258][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  273.085270][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  273.085299][    C1] RIP: 0010:debug_object_deactivate+0xa6/0x390
[  273.085320][    C1] Code: 37 0d f3 f3 43 c6 44 37 0f f3 48 8d 5c 24 50 ba 10 00 00 00 4c 89 e7 31 f6 e8 a6 80 42 fd 48 89 d8 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 29 02 00 00 c7 44 24 50 05 00 00 00 49 8d 7c 24 14 48
[  273.085333][    C1] RSP: 0018:ffffc90000a18c40 EFLAGS: 00000802
[  273.085346][    C1] RAX: 0000000000000000 RBX: ffffc90000a18c90 RCX: 0000000000000000
[  273.085357][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a18c90
[  273.085367][    C1] RBP: ffffc90000a18d30 R08: ffffc90000a18c8f R09: 0000000000000000
[  273.085378][    C1] R10: ffffc90000a18c80 R11: fffff52000143192 R12: ffffc90000a18c80
[  273.085390][    C1] R13: ffff88802ae68340 R14: dffffc0000000000 R15: 1ffff9200014318c
[  273.085401][    C1] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  273.085415][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  273.085426][    C1] CR2: 00007f878c102060 CR3: 000000007a6e6000 CR4: 00000000003506f0
[  273.085440][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  273.085449][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  273.085459][    C1] Call Trace:
[  273.085466][    C1]  <NMI>
[  273.085474][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  273.085497][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  273.085519][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  273.085541][    C1]  ? nmi_handle+0x2a/0x5a0
[  273.085565][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  273.085584][    C1]  ? nmi_handle+0x14f/0x5a0
[  273.085599][    C1]  ? nmi_handle+0x2a/0x5a0
[  273.085614][    C1]  ? debug_object_deactivate+0xa6/0x390
[  273.085631][    C1]  ? default_do_nmi+0x63/0x160
[  273.085654][    C1]  ? exc_nmi+0x123/0x1f0
[  273.085676][    C1]  ? end_repeat_nmi+0xf/0x53
[  273.085705][    C1]  ? debug_object_deactivate+0xa6/0x390
[  273.085723][    C1]  ? debug_object_deactivate+0xa6/0x390
[  273.085741][    C1]  ? debug_object_deactivate+0xa6/0x390
[  273.085759][    C1]  </NMI>
[  273.085764][    C1]  <IRQ>
[  273.085769][    C1]  ? __pfx_debug_object_activate+0x10/0x10
[  273.085786][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  273.085806][    C1]  ? timerqueue_add+0x260/0x290
[  273.085826][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  273.085852][    C1]  debug_deactivate+0x1b/0x220
[  273.085870][    C1]  __hrtimer_run_queues+0x305/0xd50
[  273.085886][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  273.085916][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  273.085938][    C1]  hrtimer_interrupt+0x396/0x990
[  273.085967][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  273.085993][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  273.086011][    C1]  </IRQ>
[  273.086016][    C1]  <TASK>
[  273.086022][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  273.086044][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[  273.086067][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 be 90 60 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> a3 bb c9 f5 65 8b 05 f4 df 6a 74 85 c0 74 43 48 c7 04 24 0e 36
[  273.086079][    C1] RSP: 0018:ffffc900001078a0 EFLAGS: 00000206
[  273.086091][    C1] RAX: b550434c1de3bf00 RBX: 1ffff92000020f18 RCX: ffffffff816fef2a
[  273.086103][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: 0000000000000001
[  273.086114][    C1] RBP: ffffc90000107930 R08: ffffffff92ff066f R09: 1ffffffff25fe0cd
[  273.086126][    C1] R10: dffffc0000000000 R11: fffffbfff25fe0ce R12: dffffc0000000000
[  273.086137][    C1] R13: 1ffff92000020f14 R14: ffffc900001078c0 R15: 0000000000000246
[  273.086154][    C1]  ? mark_lock+0x9a/0x350
[  273.086183][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  273.086207][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  273.086230][    C1]  debug_check_no_obj_freed+0x561/0x580
[  273.086255][    C1]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  273.086283][    C1]  ? ieee80211_iface_work+0x272/0xf20
[  273.086301][    C1]  kmem_cache_free+0x10f/0x350
[  273.086324][    C1]  ieee80211_iface_work+0x272/0xf20
[  273.086347][    C1]  cfg80211_wiphy_work+0x2db/0x490
[  273.086373][    C1]  ? process_scheduled_works+0x945/0x1830
[  273.086392][    C1]  process_scheduled_works+0xa2c/0x1830
[  273.086427][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  273.086451][    C1]  ? assign_work+0x364/0x3d0
[  273.086472][    C1]  worker_thread+0x86d/0xd40
[  273.086500][    C1]  ? __kthread_parkme+0x169/0x1d0
[  273.086522][    C1]  ? __pfx_worker_thread+0x10/0x10
[  273.086541][    C1]  kthread+0x2f0/0x390
[  273.086562][    C1]  ? __pfx_worker_thread+0x10/0x10
[  273.086581][    C1]  ? __pfx_kthread+0x10/0x10
[  273.086602][    C1]  ret_from_fork+0x4b/0x80
[  273.086623][    C1]  ? __pfx_kthread+0x10/0x10
[  273.086644][    C1]  ret_from_fork_asm+0x1a/0x30
[  273.086674][    C1]  </TASK>
[  273.087228][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  273.577257][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09704-gcc73bbab4b1f #0
[  273.586804][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  273.596859][   T30] Call Trace:
[  273.600141][   T30]  <TASK>
[  273.603074][   T30]  dump_stack_lvl+0x241/0x360
[  273.607771][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.612974][   T30]  ? __pfx__printk+0x10/0x10
[  273.617654][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  273.623659][   T30]  ? vscnprintf+0x5d/0x90
[  273.627996][   T30]  panic+0x349/0x860
[  273.631900][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  273.638061][   T30]  ? __pfx_panic+0x10/0x10
[  273.642483][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  273.647858][   T30]  ? __irq_work_queue_local+0x137/0x410
[  273.653411][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  273.658785][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  273.665029][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  273.671192][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  273.677440][   T30]  watchdog+0x101d/0x1020
[  273.681779][   T30]  ? watchdog+0x1ea/0x1020
[  273.686209][   T30]  ? __pfx_watchdog+0x10/0x10
[  273.690894][   T30]  kthread+0x2f0/0x390
[  273.694970][   T30]  ? __pfx_watchdog+0x10/0x10
[  273.699668][   T30]  ? __pfx_kthread+0x10/0x10
[  273.704282][   T30]  ret_from_fork+0x4b/0x80
[  273.708725][   T30]  ? __pfx_kthread+0x10/0x10
[  273.713355][   T30]  ret_from_fork_asm+0x1a/0x30
[  273.718145][   T30]  </TASK>
[  274.837464][   T30] Shutting down cpus with NMI
[  274.842424][   T30] Kernel Offset: disabled
[  274.846765][   T30] Rebooting in 86400 seconds..