last executing test programs:

27.693552239s ago: executing program 0 (id=194):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000879933000000000000000000000091f9b80f00000000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708374a150000000000007b8af8ff00000000b7080000000000007b8af0ff000000007f8100000000000007080000f8ffffffbf890000003a579a1584ae4d31d130fa1800000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x40}, 0x94)

27.533865464s ago: executing program 3 (id=196):
r0 = socket(0x8, 0x6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000440)=0x1848, 0x4)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @private0, 0x1}, 0x1c)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000300), 0x10)
sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="050000000000", @ANYRESOCT, @ANYRES64, @ANYRESDEC], 0x48}}, 0x4000)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)

27.532762895s ago: executing program 0 (id=197):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r1 = socket(0x14, 0x2, 0x4)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r2, &(0x7f0000000400), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61e3, 0x0)

27.344123962s ago: executing program 3 (id=199):
r0 = socket$inet(0x2, 0x2000000000003, 0x2)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x1}}}}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x8000}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xb}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x54}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
r12 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, r10, 0x1, 0x70bd28, 0x25dfcbff, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040004)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_int(r4, &(0x7f0000000100)='cpu.max\x00', 0x2, 0x0)

26.319442276s ago: executing program 3 (id=207):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r4 = gettid()
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r6 = getuid()
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={r4, r6, r11}, 0xc)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

25.744775161s ago: executing program 0 (id=209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') (rerun: 64)
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000f80)={{}, "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"}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0}) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000040)) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0xcea, 0x0, 0x3}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0x2}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a00)={'erspan0\x00', r6, 0x10, 0x40, 0x9, 0x6, {{0x29, 0x4, 0x1, 0x7, 0xa4, 0x66, 0x0, 0xf3, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x9b, 0x1, 0x4, [{@broadcast, 0x4}, {@broadcast, 0x6}, {@empty, 0x8}, {@multicast1, 0x6}, {@loopback, 0x8}, {@loopback, 0x1}, {@local, 0xff}, {@multicast2, 0x9}]}, @rr={0x7, 0x7, 0xc3, [@loopback]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xa5, [@multicast1, @empty]}, @timestamp_prespec={0x44, 0x34, 0xc1, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x7fffffff}, {@private=0xa010101, 0x9}, {@private=0xa010102, 0x1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5e}]}, @end]}}}}}) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500060100000a00e800080211000001856c2f3b00000000"], 0x30}}, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x2, 0x6, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x700, 0x1, 0xd}}) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={<r8=>0x0, @local, @remote}, &(0x7f00000003c0)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x4, 0x4, 0x0, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7800, 0x1, 0x26, 0x800}}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r11 = socket(0x1, 0x803, 0x0) (rerun: 32)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@empty, @multicast1, <r13=>0x0}, &(0x7f0000000500)=0xc) (rerun: 64)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={<r14=>0x0, @multicast2, @local}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gretap0\x00', &(0x7f00000005c0)={'syztnl1\x00', <r15=>0x0, 0x20, 0x92ae098d9395f447, 0x200, 0x58, {{0x1f, 0x4, 0x0, 0x8, 0x7c, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast1, {[@noop, @noop, @timestamp_prespec={0x44, 0x2c, 0x2f, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}, {@remote, 0x36}, {@local, 0xa}, {@remote, 0x3}, {@private=0xa010101, 0x2000000}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @local, @multicast1, @multicast2, @multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x42, [@multicast1, @broadcast, @remote]}]}}}}}) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r16=>0x0}) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r17=>0x0}}, 0x10) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000009c0)={'bond0\x00', {0x2, 0x4e22, @loopback}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x164, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)

25.65031229s ago: executing program 3 (id=211):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "8f00"}]}, 0x44}}, 0x8050)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x29, 0x2, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000005140)={r4})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x58, r7, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x1f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r7, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10)
close(r9)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000001000080", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

25.452397155s ago: executing program 0 (id=214):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x20004040) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ddffffffffff2b00000018000180140002007665746830"], 0x2c}}, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2e080001000078000000000011907800000000e000000100001b59006490780200000003000000000000000002000000753904030405a024f0dd00000000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb05e5d2a0057a62022a1564a329d3a14a1d8c69000600f0ffffff00"], 0x0) (async, rerun: 32)
r4 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r6)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2000c014) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000034005904f8ffffff0000000000000000d7906569a704daed60bd8bd60671f9de7ba6e0c5a310f5cfe2604d93fa8da86276716d5ddff42629901374320affddee740af4500dc894a40ff19479", @ANYRES32=0x0, @ANYBLOB="446f0000001002001c002961c7d97861fb61700d000c00028006007d004e240000"], 0x3c}}, 0x48000)

25.22160819s ago: executing program 0 (id=216):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002400010325bd7000fcffffff010000000400aa1f"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

25.041804315s ago: executing program 0 (id=217):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82b"], 0x7)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000006c0)=r5}, 0x20)
r6 = socket(0x2c, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x24, r8, 0x8d52e7128bb80e97, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080c0}, 0x50)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r11)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x38, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r14=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x78, r8, 0xc00, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r15 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10)
sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

24.871322015s ago: executing program 3 (id=219):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32], 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
r3 = socket(0x26, 0x5, 0xffffffff)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x24004044) (async)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x24004044)
r4 = socket(0x840000000002, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) (async)
setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000003c0)={0x41, 0x2, 0x1}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r6 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', <r7=>0x0})
ioctl$sock_SIOCADDRT(r5, 0x890b, 0x0)
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1)
accept$ax25(r4, &(0x7f0000000300)={{0x3, @netrom}, [@default, @remote, @bcast, @netrom, @bcast, @bcast, @default, @default]}, &(0x7f00000000c0)=0x48) (async)
r9 = accept$ax25(r4, &(0x7f0000000300)={{0x3, @netrom}, [@default, @remote, @bcast, @netrom, @bcast, @bcast, @default, @default]}, &(0x7f00000000c0)=0x48)
ioctl$SIOCAX25ADDFWD(r9, 0x89ea, &(0x7f0000000380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async)
ioctl$SIOCAX25ADDFWD(r9, 0x89ea, &(0x7f0000000380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4)

24.657746531s ago: executing program 3 (id=221):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
r3 = socket(0x22, 0x2, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000000100"})
ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000003c0))
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f0000001340), 0x0, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b307"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r8, @ANYRES8=r8, @ANYRES32, @ANYRESDEC=r8, @ANYRESOCT=r8, @ANYRESDEC=r8, @ANYBLOB="8aa0cb09c73751b4a3c0ba978603f175467a785f2ada3714"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9f7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_IE={0x5b, 0x2a, [@challenge={0x10, 0x1, 0x7b}, @random_vendor={0xdd, 0x4a, "0609afe27223a046edfa2bffa2e72220f762b7fbeb953ff4b72bd61b30f329a6430d00a4687e87d9c7dacef444b6caf7d94873383ee163c695789ff0fed2ab91896cb997fa9b2be58ab6"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000810)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x80)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a"], 0x50}}, 0x0)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)

19.653369423s ago: executing program 4 (id=263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r1, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="00000800a80affffffff800006004514001c000000000911907864bb9afcac14141400004e23e4089078"], 0x2a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_newvlan={0x30, 0x70, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x83fec195a6833484}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000014c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x81001000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf252700000008000300", @ANYRES32=r6, @ANYBLOB="0a00340001010101010100000006de3551b4e88eeb"], 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x40080)
socket$key(0xf, 0x3, 0x2)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000014c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x81001000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd7000fedbdf252700000008000300", @ANYRES32=r10, @ANYBLOB="0a00340001010101010100000a000600c68b14e8c80600000600360002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x40080)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0)
r11 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
sendfile(r11, r11, 0x0, 0x200)

19.314510003s ago: executing program 4 (id=268):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0xa0, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x80000000, 0x7, 0x4, 0x5, 0x9400000000000000, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x6}}]}}}]}, 0xa0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}}, 0x8004)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x0, 0x0}, &(0x7f00000001c0)=0x10)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
r6 = socket(0x10, 0x803, 0x2)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x0)

19.032989141s ago: executing program 4 (id=272):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40000041, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4000001c}]}}}]}, 0x44}}, 0x0) (async)

18.902039173s ago: executing program 2 (id=273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1)
r2 = socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x810)

18.784218591s ago: executing program 2 (id=275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44084}, 0x20004050)

18.783233037s ago: executing program 4 (id=276):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}, 0xfffe}], 0x1, 0x0) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

18.577792408s ago: executing program 4 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x62}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x58000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2)
sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000000)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20080}, 0x20048800)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000580)={0x0, 0xffff}, 0x8)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40002002}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x77}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x840)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5)
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r7, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404a081}, 0x4000890)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x4000010)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000980)=@buf={0x7b, &(0x7f0000000900)="d751f0f887097518ee3ad7ceb481f9f7cac7ab7c6ebd2f80e79e8e6d24107e76b85276f1314a34a2b9ce5ccafde6f0cd413c6eef4c5be049550cc14a5d9fbef0611d31cbf1fdb6e8d0f4eb3f3d184dbd2cabfe7525dc2052deb79a672e0add79eecd9ceb61bff6c9236166366b078422db4b326f5008d625c8a0c3"})
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xd198903c80e81f18}, 0x80)
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x230200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r7, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0xb}}}}, ["", "", ""]}, 0x30}}, 0x4)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000c40))
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x4010, r0, 0x129d7000)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
connect$inet6(r9, &(0x7f0000000d00)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x1c)
r11 = socket(0x23, 0x5, 0x7ff)
sendmsg$NL80211_CMD_ABORT_SCAN(r11, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008004)

18.309748557s ago: executing program 4 (id=280):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="610609d002f70106034902fc"], 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

18.049956867s ago: executing program 2 (id=281):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x8, &(0x7f0000000100)=[{0x40, 0x5b, 0x7, 0x3}, {0x3a1, 0x9, 0xc0, 0x8}, {0x9, 0xe5, 0x3e, 0x6}, {0x6, 0x27, 0x5a, 0x4}, {0x4, 0x3, 0x3a, 0x1}, {0x1, 0x1, 0x4, 0x2}, {0x5, 0xb, 0x9, 0x400}, {0x6, 0x3, 0x9, 0x1f2e}]})
close(r0)

17.945308647s ago: executing program 2 (id=282):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x248, 0x65, 0x2, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0x17, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x13c, 0x1, [@m_ctinfo={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9fb, 0x1, 0x5, 0xd, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10001}]}, {0xea, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9b8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000dfcc0000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, <r7=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r7, &(0x7f0000000280)}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018010000202070250000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880)

17.7987791s ago: executing program 2 (id=283):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x5}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380))

17.663754526s ago: executing program 2 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"])
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000d668c43cdf0014b709ed00"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r2}, 0x20)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r3}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r1}, 0xc)

16.60617873s ago: executing program 1 (id=293):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

16.59502188s ago: executing program 1 (id=294):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
recvmsg(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001340)=""/179, 0xb3}, {&(0x7f0000000180)=""/62, 0x3e}], 0x5, &(0x7f0000001400)=""/162, 0xa2}, 0x40000000)

15.722924885s ago: executing program 1 (id=295):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x6f, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, 0x0, 0x2d, 0x0, 0x3}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x240400c0)

15.630060923s ago: executing program 1 (id=296):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xcc, r2, 0x914, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_REG_RULES={0x9c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x89}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x204, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x1e8, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x1e4, 0x1, {{}, [@ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private1, @local, @mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private0, @dev={0xfe, 0x80, '\x00', 0x40}]}}}, @NHA_BLACKHOLE={0x4}]}, 0x204}}, 0x0)

15.628919946s ago: executing program 1 (id=297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)

15.568114234s ago: executing program 1 (id=298):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'})
socket$inet(0x10, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05004000010000", 0x7)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7d4165c9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x99)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x1001, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d65efd5f2fdf98328de94410300"}, 0xd8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8)
listen(r7, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f00000007c0)="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", 0x1a1}], 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

9.546140573s ago: executing program 32 (id=217):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82b"], 0x7)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000006c0)=r5}, 0x20)
r6 = socket(0x2c, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x24, r8, 0x8d52e7128bb80e97, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080c0}, 0x50)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r11)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x38, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4004)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r14=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x78, r8, 0xc00, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r15 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r7}, 0x10)
sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

9.514231548s ago: executing program 33 (id=221):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
r3 = socket(0x22, 0x2, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="020000000100"})
ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000003c0))
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f0000001340), 0x0, 0x0)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b307"], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESDEC=r8, @ANYRES8=r8, @ANYRES32, @ANYRESDEC=r8, @ANYRESOCT=r8, @ANYRESDEC=r8, @ANYBLOB="8aa0cb09c73751b4a3c0ba978603f175467a785f2ada3714"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9f7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_IE={0x5b, 0x2a, [@challenge={0x10, 0x1, 0x7b}, @random_vendor={0xdd, 0x4a, "0609afe27223a046edfa2bffa2e72220f762b7fbeb953ff4b72bd61b30f329a6430d00a4687e87d9c7dacef444b6caf7d94873383ee163c695789ff0fed2ab91896cb997fa9b2be58ab6"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000810)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x80)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a"], 0x50}}, 0x0)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)

3.055409896s ago: executing program 34 (id=280):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="610609d002f70106034902fc"], 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

2.025400721s ago: executing program 35 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"])
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000d668c43cdf0014b709ed00"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r2}, 0x20)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r3}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2, r1}, 0xc)

0s ago: executing program 36 (id=298):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'})
socket$inet(0x10, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="05004000010000", 0x7)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x7d4165c9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x99)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x1001, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d65efd5f2fdf98328de94410300"}, 0xd8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8)
listen(r7, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f00000007c0)="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", 0x1a1}], 0x1)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts.
[   67.121905][ T5857] cgroup: Unknown subsys name 'net'
[   67.227369][ T5857] cgroup: Unknown subsys name 'cpuset'
[   67.235971][ T5857] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.656934][ T5857] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.010002][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.018334][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.027018][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.029927][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.044503][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.052579][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.075352][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.081572][ T5885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.090537][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.104026][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.104726][ T5888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.119314][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.123914][ T5888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.131179][ T5886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.140466][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.149402][ T5888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.151975][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.157904][ T5888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.164601][ T5886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.171323][ T5888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.177852][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.196553][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.196559][ T5888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.213850][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.223789][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.315267][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[   71.321663][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[   71.851419][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   71.970375][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   72.025574][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   72.047937][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   72.137833][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.146168][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.153570][ T5867] bridge_slave_0: entered allmulticast mode
[   72.160496][ T5867] bridge_slave_0: entered promiscuous mode
[   72.168922][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   72.210527][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.217778][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.225045][ T5867] bridge_slave_1: entered allmulticast mode
[   72.232056][ T5867] bridge_slave_1: entered promiscuous mode
[   72.367375][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.380194][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.401856][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.409175][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.417056][ T5870] bridge_slave_0: entered allmulticast mode
[   72.424414][ T5870] bridge_slave_0: entered promiscuous mode
[   72.431327][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.438711][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.445859][ T5880] bridge_slave_0: entered allmulticast mode
[   72.452685][ T5880] bridge_slave_0: entered promiscuous mode
[   72.492297][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.499498][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.506981][ T5870] bridge_slave_1: entered allmulticast mode
[   72.514089][ T5870] bridge_slave_1: entered promiscuous mode
[   72.521085][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.528294][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.535474][ T5880] bridge_slave_1: entered allmulticast mode
[   72.542357][ T5880] bridge_slave_1: entered promiscuous mode
[   72.575060][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.582201][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.589781][ T5877] bridge_slave_0: entered allmulticast mode
[   72.597034][ T5877] bridge_slave_0: entered promiscuous mode
[   72.642025][ T5867] team0: Port device team_slave_0 added
[   72.648300][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.655525][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.662638][ T5877] bridge_slave_1: entered allmulticast mode
[   72.670190][ T5877] bridge_slave_1: entered promiscuous mode
[   72.719821][ T5867] team0: Port device team_slave_1 added
[   72.740077][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.747250][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.754483][ T5869] bridge_slave_0: entered allmulticast mode
[   72.761370][ T5869] bridge_slave_0: entered promiscuous mode
[   72.770920][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.783269][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.795007][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.807719][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.840246][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.849136][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.856535][ T5869] bridge_slave_1: entered allmulticast mode
[   72.864109][ T5869] bridge_slave_1: entered promiscuous mode
[   72.924521][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.960451][ T5880] team0: Port device team_slave_0 added
[   72.967277][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.974713][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.001177][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.015340][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.054079][ T5870] team0: Port device team_slave_0 added
[   73.062496][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.073646][ T5880] team0: Port device team_slave_1 added
[   73.081849][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.092512][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.099489][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.126093][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.160260][ T5870] team0: Port device team_slave_1 added
[   73.207098][ T5869] team0: Port device team_slave_0 added
[   73.216573][ T5877] team0: Port device team_slave_0 added
[   73.224311][ T5879] Bluetooth: hci4: command tx timeout
[   73.227713][ T5888] Bluetooth: hci2: command tx timeout
[   73.230008][   T51] Bluetooth: hci0: command tx timeout
[   73.238881][ T5869] team0: Port device team_slave_1 added
[   73.271320][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.278530][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.304599][   T51] Bluetooth: hci3: command tx timeout
[   73.304606][ T5888] Bluetooth: hci1: command tx timeout
[   73.305274][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.328727][ T5877] team0: Port device team_slave_1 added
[   73.388727][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.396027][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.422050][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.457563][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.464603][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.491045][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.504379][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.511325][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.537223][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.567658][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.574666][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.600824][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.612319][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.622026][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.648285][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.660297][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.667292][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.693182][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.716348][ T5867] hsr_slave_0: entered promiscuous mode
[   73.722637][ T5867] hsr_slave_1: entered promiscuous mode
[   73.766909][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.774162][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.800509][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.921629][ T5880] hsr_slave_0: entered promiscuous mode
[   73.928810][ T5880] hsr_slave_1: entered promiscuous mode
[   73.935376][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   73.941177][ T5880] Cannot create hsr debugfs directory
[   73.987880][ T5869] hsr_slave_0: entered promiscuous mode
[   73.994694][ T5869] hsr_slave_1: entered promiscuous mode
[   74.000701][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   74.006536][ T5869] Cannot create hsr debugfs directory
[   74.032335][ T5877] hsr_slave_0: entered promiscuous mode
[   74.039459][ T5877] hsr_slave_1: entered promiscuous mode
[   74.046259][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   74.051985][ T5877] Cannot create hsr debugfs directory
[   74.063753][ T5870] hsr_slave_0: entered promiscuous mode
[   74.070326][ T5870] hsr_slave_1: entered promiscuous mode
[   74.076525][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   74.082243][ T5870] Cannot create hsr debugfs directory
[   74.589135][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.600833][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.617794][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.637314][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.687760][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.716693][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.737665][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.749800][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.799278][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.828678][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.839254][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.864585][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.967637][ T5880] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.981173][ T5880] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.009118][ T5880] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.029544][ T5880] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.112540][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.153661][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.167073][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.178787][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.191202][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.202983][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.233716][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   75.269413][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.276753][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.305409][   T51] Bluetooth: hci0: command tx timeout
[   75.305465][ T5888] Bluetooth: hci4: command tx timeout
[   75.311148][ T5879] Bluetooth: hci2: command tx timeout
[   75.330769][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.338080][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.349917][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   75.383710][   T51] Bluetooth: hci1: command tx timeout
[   75.389272][ T5879] Bluetooth: hci3: command tx timeout
[   75.394524][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.424953][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.432081][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.496651][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.503799][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.590972][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   75.618936][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.626110][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.669032][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.676210][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.757790][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.780593][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.837102][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   75.864864][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.872014][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.912869][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   75.948197][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.955387][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.000977][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.008152][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.027303][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.034486][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.118687][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.148368][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.280055][ T5877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.311798][ T5869] veth0_vlan: entered promiscuous mode
[   76.331724][ T5867] veth0_vlan: entered promiscuous mode
[   76.347184][ T5869] veth1_vlan: entered promiscuous mode
[   76.405958][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.419086][ T5867] veth1_vlan: entered promiscuous mode
[   76.528187][ T5869] veth0_macvtap: entered promiscuous mode
[   76.590883][ T5869] veth1_macvtap: entered promiscuous mode
[   76.619028][ T5867] veth0_macvtap: entered promiscuous mode
[   76.675907][ T5867] veth1_macvtap: entered promiscuous mode
[   76.690844][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.736927][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.761234][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.807398][ T3588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.845337][ T3588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.857620][ T3588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.869607][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.909744][ T3588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.951780][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.989721][ T5880] veth0_vlan: entered promiscuous mode
[   77.007333][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.033497][ T3560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.048688][ T5880] veth1_vlan: entered promiscuous mode
[   77.057695][ T3588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.088161][ T3588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.122878][ T3588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.170094][ T5870] veth0_vlan: entered promiscuous mode
[   77.195764][ T5880] veth0_macvtap: entered promiscuous mode
[   77.220548][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.226093][ T5870] veth1_vlan: entered promiscuous mode
[   77.251791][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.257131][ T5880] veth1_macvtap: entered promiscuous mode
[   77.319703][ T5877] veth0_vlan: entered promiscuous mode
[   77.358891][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.359726][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.378913][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.383543][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.386834][ T5879] Bluetooth: hci2: command tx timeout
[   77.396506][   T51] Bluetooth: hci0: command tx timeout
[   77.399923][ T5879] Bluetooth: hci4: command tx timeout
[   77.417824][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.429047][ T5877] veth1_vlan: entered promiscuous mode
[   77.464821][ T5879] Bluetooth: hci3: command tx timeout
[   77.464830][ T5888] Bluetooth: hci1: command tx timeout
[   77.469897][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.492037][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.499158][ T5870] veth0_macvtap: entered promiscuous mode
[   77.507888][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.522771][ T5870] veth1_macvtap: entered promiscuous mode
[   77.561304][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   77.591853][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.621820][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.679960][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.704394][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.713155][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.756471][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.780574][ T5877] veth0_macvtap: entered promiscuous mode
[   77.837545][ T5877] veth1_macvtap: entered promiscuous mode
[   77.849927][ T1138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.891050][ T1138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.948979][ T5997] netlink: 'syz.0.6': attribute type 10 has an invalid length.
[   77.972833][ T1138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.048323][ T5997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   78.069263][ T1138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.153294][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   78.189648][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.199712][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.208018][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.216557][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.391309][ T1332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.392205][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.401096][ T1332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.418234][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.421170][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.441200][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'.
[   78.473060][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   78.492544][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.501665][ T6010] bond0: entered promiscuous mode
[   78.510465][ T6010] bond_slave_0: entered promiscuous mode
[   78.517541][ T6010] bond_slave_1: entered promiscuous mode
[   78.524877][ T6010] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   78.532753][ T6010] bond0: entered allmulticast mode
[   78.539400][ T6010] bond_slave_0: entered allmulticast mode
[   78.549683][ T6010] bond_slave_1: entered allmulticast mode
[   78.555781][ T6010] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   78.611727][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.640040][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.751804][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.760907][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.772618][ T6018] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10'.
[   78.797940][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.798520][ T6017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10'.
[   78.966914][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   79.020753][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.039471][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.101131][ T6021] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.12'.
[   79.143718][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.152930][ T6021] vlan2: entered allmulticast mode
[   79.155226][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.158551][ T6021] bridge0: entered allmulticast mode
[   79.464560][ T5888] Bluetooth: hci0: command tx timeout
[   79.471988][   T51] Bluetooth: hci2: command tx timeout
[   79.478210][ T5879] Bluetooth: hci4: command tx timeout
[   79.544226][ T5879] Bluetooth: hci1: command tx timeout
[   79.550088][   T51] Bluetooth: hci3: command tx timeout
[   80.254488][ T6067] netlink: 'syz.2.19': attribute type 23 has an invalid length.
[   80.302114][ T6065] syz.2.19: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[   80.335860][ T6073] Zero length message leads to an empty skb
[   80.449216][ T6065] CPU: 1 UID: 0 PID: 6065 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) 
[   80.449270][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   80.449286][ T6065] Call Trace:
[   80.449293][ T6065]  <TASK>
[   80.449301][ T6065]  dump_stack_lvl+0x189/0x250
[   80.449332][ T6065]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.449351][ T6065]  ? __pfx__printk+0x10/0x10
[   80.449373][ T6065]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   80.449392][ T6065]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   80.449413][ T6065]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   80.449434][ T6065]  warn_alloc+0x214/0x310
[   80.449464][ T6065]  ? __pfx_warn_alloc+0x10/0x10
[   80.449494][ T6065]  ? __get_vm_area_node+0x28f/0x300
[   80.449516][ T6065]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[   80.449541][ T6065]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   80.449585][ T6065]  ? futex_unqueue+0x22/0x240
[   80.449602][ T6065]  ? futex_unqueue+0x22/0x240
[   80.449622][ T6065]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   80.449642][ T6065]  ? __futex_wait+0x1d1/0x3e0
[   80.449662][ T6065]  ? __futex_wait+0x34f/0x3e0
[   80.449689][ T6065]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[   80.449706][ T6065]  __vmalloc_noprof+0xb1/0xf0
[   80.449726][ T6065]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[   80.449748][ T6065]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[   80.449772][ T6065]  bpf_prog_alloc+0x3c/0x1a0
[   80.449795][ T6065]  bpf_prog_load+0x735/0x1930
[   80.449826][ T6065]  ? __pfx_bpf_prog_load+0x10/0x10
[   80.449866][ T6065]  ? bpf_lsm_bpf+0x9/0x20
[   80.449884][ T6065]  ? security_bpf+0x7e/0x300
[   80.449905][ T6065]  __sys_bpf+0x528/0x870
[   80.449923][ T6065]  ? __pfx___sys_bpf+0x10/0x10
[   80.449953][ T6065]  ? rcu_is_watching+0x15/0xb0
[   80.449971][ T6065]  __x64_sys_bpf+0x7c/0x90
[   80.449986][ T6065]  do_syscall_64+0xfa/0x3b0
[   80.450000][ T6065]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.450013][ T6065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.450025][ T6065]  ? clear_bhb_loop+0x60/0xb0
[   80.450041][ T6065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.450053][ T6065] RIP: 0033:0x7f7968d8eec9
[   80.450071][ T6065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.450082][ T6065] RSP: 002b:00007f7969cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   80.450096][ T6065] RAX: ffffffffffffffda RBX: 00007f7968fe5fa0 RCX: 00007f7968d8eec9
[   80.450106][ T6065] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[   80.450114][ T6065] RBP: 00007f7968e11f91 R08: 0000000000000000 R09: 0000000000000000
[   80.450122][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   80.450129][ T6065] R13: 00007f7968fe6038 R14: 00007f7968fe5fa0 R15: 00007fff1ea18ee8
[   80.450150][ T6065]  </TASK>
[   80.450163][ T6065] Mem-Info:
[   80.745835][ T6065] active_anon:5990 inactive_anon:0 isolated_anon:0
[   80.745835][ T6065]  active_file:2361 inactive_file:39870 isolated_file:0
[   80.745835][ T6065]  unevictable:768 dirty:1461 writeback:0
[   80.745835][ T6065]  slab_reclaimable:10664 slab_unreclaimable:94952
[   80.745835][ T6065]  mapped:29035 shmem:1373 pagetables:1194
[   80.745835][ T6065]  sec_pagetables:0 bounce:0
[   80.745835][ T6065]  kernel_misc_reclaimable:0
[   80.745835][ T6065]  free:1317850 free_pcp:26356 free_cma:0
[   80.800528][ T6088] syz.4.23 uses obsolete (PF_INET,SOCK_PACKET)
[   80.863800][ T6065] Node 0 active_anon:25792kB inactive_anon:0kB active_file:9468kB inactive_file:159280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:5856kB writeback:0kB shmem:5788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12112kB pagetables:4388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   80.961883][ T6065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.029403][ T6065] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.073103][ T6065] lowmem_reserve[]: 0 2497 2499 2499 2499
[   81.079468][ T6065] Node 0 DMA32 free:1378156kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28848kB inactive_anon:0kB active_file:9468kB inactive_file:157700kB unevictable:1536kB writepending:5848kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:76784kB local_pcp:58296kB free_cma:0kB
[   81.124218][ T6065] lowmem_reserve[]: 0 0 1 1 1
[   81.129065][ T6065] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[   81.192866][ T6065] lowmem_reserve[]: 0 0 0 0 0
[   81.202695][ T6065] Node 1 Normal free:3876220kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24556kB local_pcp:10712kB free_cma:0kB
[   81.327256][ T6065] lowmem_reserve[]: 0 0 0 0 0
[   81.341933][ T6065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.388075][ T6065] Node 0 DMA32: 445*4kB (UM) 77*8kB (UM) 1*16kB (E) 2*32kB (ME) 3*64kB (UM) 2*128kB (ME) 1*256kB (M) 0*512kB 2*1024kB (ME) 0*2048kB 335*4096kB (M) = 1377388kB
[   81.405642][ T6108] C: renamed from team_slave_0 (while UP)
[   81.420915][ T6065] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 
[   81.421084][ T6108] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   81.421269][ T6108] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   81.441318][ T6065] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[   81.510776][ T6065] Node 1 Normal: 89*4kB (UME) 43*8kB (UME) 36*16kB (UME) 40*32kB (UME) 22*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3876220kB
[   81.558856][ T6065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.596794][ T6065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.621597][ T6065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   81.658136][ T6065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.688475][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.713170][ T6065] 46494 total pagecache pages
[   81.730490][ T6065] 0 pages in swap cache
[   81.738488][ T6065] Free swap  = 124996kB
[   81.742718][ T6065] Total swap = 124996kB
[   81.782557][ T6065] 2097051 pages RAM
[   81.792350][ T6065] 0 pages HighMem/MovableOnly
[   81.794203][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[   81.807907][ T6065] 425672 pages reserved
[   81.822267][ T6065] 0 pages cma reserved
[   82.125330][ T6125] pim6reg: entered allmulticast mode
[   82.404362][ T6135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.438806][ T6137] trusted_key: syz.2.37 sent an empty control message without MSG_MORE.
[   82.540897][ T6142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.42'.
[   82.832705][ T6160] netlink: 'syz.3.47': attribute type 1 has an invalid length.
[   83.026232][ T6166] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.48'.
[   83.047431][ T6166] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   83.227707][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'.
[   83.291894][ T6180] netlink: 'syz.0.52': attribute type 21 has an invalid length.
[   83.325380][ T6176] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.50'.
[   83.425148][ T6176] vlan2: entered allmulticast mode
[   83.439342][ T6176] bridge0: entered allmulticast mode
[   83.461698][ T6189] tc_dump_action: action bad kind
[   83.589887][ T6194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.880712][ T6214] Bluetooth: MGMT ver 1.23
[   83.899321][   T43] IPVS: starting estimator thread 0...
[   83.905800][ T6211] netlink: 84 bytes leftover after parsing attributes in process `syz.0.59'.
[   84.013100][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'.
[   84.024360][ T6218] IPVS: using max 38 ests per chain, 91200 per kthread
[   84.220562][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   84.296535][ T6227] vlan2: entered allmulticast mode
[   84.301779][ T6227] bond0: entered allmulticast mode
[   84.310626][ T6227] bond_slave_0: entered allmulticast mode
[   84.337743][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'.
[   84.366947][ T6227] bond_slave_1: entered allmulticast mode
[   84.400485][ T6226] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   84.434443][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'.
[   84.450080][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   84.454119][ T6240] netlink: 'syz.0.68': attribute type 6 has an invalid length.
[   84.589103][ T6242] sctp: [Deprecated]: syz.1.70 (pid 6242) Use of int in maxseg socket option.
[   84.589103][ T6242] Use struct sctp_assoc_value instead
[   84.739596][ T6248] warning: `syz.4.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   84.757262][ T6247] netlink: 'syz.2.71': attribute type 21 has an invalid length.
[   84.772805][ T6247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.71'.
[   84.975402][ T6261] netlink: 256 bytes leftover after parsing attributes in process `syz.2.75'.
[   85.501971][ T6277] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   85.510767][ T6277] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.537304][ T6287] bridge_slave_1: left allmulticast mode
[   85.553428][ T6287] bridge_slave_1: left promiscuous mode
[   85.560124][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.670516][ T6287] bridge_slave_0: left allmulticast mode
[   85.688698][ T6287] bridge_slave_0: left promiscuous mode
[   85.704522][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.979087][ T6303] vlan3: entered allmulticast mode
[   85.993282][ T6303] bridge0: entered allmulticast mode
[   86.095907][ T6308] gretap0: entered promiscuous mode
[   86.306922][ T6321] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   86.701966][ T1213] cfg80211: failed to load regulatory.db
[   87.575947][ T6400] netlink: 'syz.0.113': attribute type 2 has an invalid length.
[   87.807279][ T6414] netlink: 'syz.0.116': attribute type 2 has an invalid length.
[   88.008607][ T6419] vlan2: entered allmulticast mode
[   88.016086][ T6419] bridge0: entered allmulticast mode
[   88.508017][ T6433] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   88.599873][ T6432] delete_channel: no stack
[   88.821746][ T6447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.873305][ T6447] __nla_validate_parse: 19 callbacks suppressed
[   88.920187][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'.
[   89.226241][ T6462] netlink: 'syz.4.130': attribute type 1 has an invalid length.
[   89.279726][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'.
[   89.814241][ T6482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.135'.
[   90.080266][ T6441] infiniband syz0: set active
[   90.103632][ T6441] infiniband syz0: added bond_slave_0
[   90.125158][ T6441] syz0: rxe_create_cq: returned err = -12
[   90.125921][ T6491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.139'.
[   90.156116][ T6441] infiniband syz0: Couldn't create ib_mad CQ
[   90.174316][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'.
[   90.180344][ T6441] infiniband syz0: Couldn't open port 1
[   90.237645][ T6499] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[   90.263214][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.139'.
[   90.320581][ T6491] netlink: 'syz.0.139': attribute type 2 has an invalid length.
[   90.346588][ T6441] RDS/IB: syz0: added
[   90.351097][ T6441] smc: adding ib device syz0 with port count 1
[   90.365779][ T6441] smc:    ib device syz0 port 1 has pnetid 
[   90.372228][ T6491] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   90.547427][ T6509] netlink: 56 bytes leftover after parsing attributes in process `syz.1.143'.
[   90.750413][ T6516] netlink: 248 bytes leftover after parsing attributes in process `syz.4.146'.
[   92.146878][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'.
[   92.178038][ T6575] netlink: 'syz.0.161': attribute type 9 has an invalid length.
[   92.186239][ T6575] netlink: 'syz.0.161': attribute type 6 has an invalid length.
[   92.197198][ T6572] veth0_macvtap: left promiscuous mode
[   92.223633][ T6575] netlink: 'syz.0.161': attribute type 7 has an invalid length.
[   92.243770][ T6575] netlink: 'syz.0.161': attribute type 8 has an invalid length.
[   92.379877][ T6582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.162'.
[   93.461213][ T6626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.496742][ T6630] ksmbd: Unknown IPC event: 3, ignore.
[   94.836586][ T6669] tipc: Started in network mode
[   94.841567][ T6669] tipc: Node identity fafd30184e12, cluster identity 4711
[   94.863792][ T6669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.876563][ T6673] __nla_validate_parse: 3 callbacks suppressed
[   94.876577][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.184'.
[   94.966574][ T6673] syzkaller0: entered promiscuous mode
[   94.972072][ T6673] syzkaller0: entered allmulticast mode
[   95.005516][ T6681] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   95.012088][ T6681] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   95.091335][ T6679] tipc: Resetting bearer <eth:syzkaller0>
[   95.152573][ T6693] ieee802154 phy0 wpan0: encryption failed: -22
[   95.177836][ T6679] tipc: Disabling bearer <eth:syzkaller0>
[   95.220391][ T6691] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   95.247756][ T6691] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   95.320035][ T6701] netlink: 'syz.3.192': attribute type 15 has an invalid length.
[   95.328773][ T6702] netlink: 'syz.2.191': attribute type 2 has an invalid length.
[   95.350923][ T6683] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   95.529022][ T6710] netem: unknown loss type 0
[   95.535516][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'.
[   95.549062][ T6710] netem: change failed
[   96.464146][ T6714] lec:lec_atm_close: lec0: Shut down!
[   96.921679][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'.
[   97.062586][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'.
[   97.969447][ T6811] team0 (unregistering): Port device team_slave_0 removed
[   98.003117][ T6811] team0 (unregistering): Port device team_slave_1 removed
[   98.100204][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.301104][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   98.361160][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.433027][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.656711][  T886] lec:lec_start_xmit: lec0:No lecd attached
[   99.243617][ T6888] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   99.244943][ T6882] syzkaller0: entered promiscuous mode
[   99.255728][ T6888] netlink: 'syz.4.226': attribute type 33 has an invalid length.
[   99.284634][ T6882] syzkaller0: entered allmulticast mode
[   99.291930][ T6888] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   99.323010][ T6891] netlink: 'syz.1.227': attribute type 6 has an invalid length.
[   99.489505][ T6861] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   99.582256][ T6861] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   99.730242][ T6912] netlink: 348 bytes leftover after parsing attributes in process `syz.4.230'.
[   99.838420][ T6861] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   99.858453][ T6861] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  100.046066][ T6861] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  100.113572][ T6861] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  100.241987][ T6861] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  100.274617][ T6861] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  100.455178][ T6861] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  100.503673][ T6861] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  101.500220][ T6972] tipc: Started in network mode
[  101.513028][ T6972] tipc: Node identity 080211000001, cluster identity 4711
[  101.533106][ T6972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.016565][ T6991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.248'.
[  102.646438][  T886] tipc: Node number set to 134418688
[  102.738812][ T7027] bridge_slave_0: left allmulticast mode
[  102.750810][ T7027] bridge_slave_0: left promiscuous mode
[  102.762630][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.779167][ T7027] bridge_slave_1: left allmulticast mode
[  102.807267][ T7027] bridge_slave_1: left promiscuous mode
[  102.823187][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.863908][ T7027] bond0: (slave bond_slave_0): Releasing backup interface
[  102.879595][ T7027] bond0: (slave bond_slave_1): Releasing backup interface
[  102.921708][ T7027] team0: Port device team_slave_0 removed
[  102.951052][ T7027] team0: Port device team_slave_1 removed
[  102.959354][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.967233][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.549774][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.263'.
[  103.856521][ T7073] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.268'.
[  103.953350][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms
[  103.961693][    C0] lec:lec_tx_timeout: lec0
[  103.967428][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  104.608074][ T7108] sctp: [Deprecated]: syz.4.278 (pid 7108) Use of int in max_burst socket option.
[  104.608074][ T7108] Use struct sctp_assoc_value instead
[  105.684915][ T7146] netlink: 'syz.1.286': attribute type 1 has an invalid length.
[  105.920293][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'.
[  105.948283][ T6771] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.957408][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'.
[  105.970869][ T6771] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.988245][ T6771] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.997113][ T6771] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.070029][ T7156] netlink: 56 bytes leftover after parsing attributes in process `syz.1.290'.
[  106.400718][ T6858] Set syz1 is full, maxelem 65536 reached
[  107.466617][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[  107.475710][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'.
[  108.993515][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  109.001526][    C0] lec:lec_tx_timeout: lec0
[  109.006032][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  114.823366][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  114.831357][    C0] lec:lec_tx_timeout: lec0
[  114.836193][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  119.843386][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  119.851423][    C0] lec:lec_tx_timeout: lec0
[  119.856008][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  124.863489][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  124.871503][    C1] lec:lec_tx_timeout: lec0
[  124.876155][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  129.883386][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  129.891418][    C0] lec:lec_tx_timeout: lec0
[  129.896083][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  132.746421][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  134.903553][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  134.911574][    C1] lec:lec_tx_timeout: lec0
[  134.916192][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  139.923468][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  139.931496][    C0] lec:lec_tx_timeout: lec0
[  139.936012][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  144.943423][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  144.951451][    C0] lec:lec_tx_timeout: lec0
[  144.955957][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  149.963520][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  149.971520][    C0] lec:lec_tx_timeout: lec0
[  149.976428][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  154.983633][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  154.991680][    C1] lec:lec_tx_timeout: lec0
[  154.996308][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  160.903373][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5910 ms
[  160.911397][    C0] lec:lec_tx_timeout: lec0
[  160.916024][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  165.923501][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  165.931529][    C0] lec:lec_tx_timeout: lec0
[  165.936057][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  170.943434][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  170.951459][    C0] lec:lec_tx_timeout: lec0
[  170.956107][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  175.963392][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  175.971407][    C0] lec:lec_tx_timeout: lec0
[  175.976160][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  180.983582][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  180.991606][    C0] lec:lec_tx_timeout: lec0
[  180.999419][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  186.823457][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  186.831456][    C0] lec:lec_tx_timeout: lec0
[  186.836070][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  191.843464][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  191.851501][    C0] lec:lec_tx_timeout: lec0
[  191.856421][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  194.189792][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  196.863387][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  196.871387][    C0] lec:lec_tx_timeout: lec0
[  196.876076][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  201.883396][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  201.891419][    C0] lec:lec_tx_timeout: lec0
[  201.896033][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  206.903384][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  206.911419][    C0] lec:lec_tx_timeout: lec0
[  206.916110][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  211.923397][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  211.931403][    C0] lec:lec_tx_timeout: lec0
[  211.936463][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  216.943446][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  216.951467][    C0] lec:lec_tx_timeout: lec0
[  216.956183][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  221.963480][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  221.971565][    C0] lec:lec_tx_timeout: lec0
[  221.976105][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  226.983530][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  226.991553][    C1] lec:lec_tx_timeout: lec0
[  226.996561][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  233.223455][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6230 ms
[  233.231499][    C0] lec:lec_tx_timeout: lec0
[  233.236066][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  238.983377][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  238.991417][    C0] lec:lec_tx_timeout: lec0
[  238.996670][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  244.823484][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  244.831523][    C0] lec:lec_tx_timeout: lec0
[  244.836217][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  249.843358][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  249.851352][    C0] lec:lec_tx_timeout: lec0
[  251.147017][   T31] INFO: task kworker/0:5:5981 blocked for more than 143 seconds.
[  251.154907][   T31]       Not tainted syzkaller #0
[  251.159846][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  251.168625][   T31] task:kworker/0:5     state:D stack:25912 pid:5981  tgid:5981  ppid:2      task_flags:0x4208060 flags:0x00004000
[  251.180883][   T31] Workqueue: events rfkill_global_led_trigger_worker
[  251.187873][   T31] Call Trace:
[  251.191159][   T31]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  251.194169][   T31]  __schedule+0x1798/0x4cc0
[  251.198681][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  251.204268][   T31]  ? __pfx___schedule+0x10/0x10
[  251.209144][   T31]  ? schedule+0x91/0x360
[  251.213461][   T31]  schedule+0x165/0x360
[  251.217627][   T31]  schedule_preempt_disabled+0x13/0x30
[  251.223091][   T31]  __mutex_lock+0x7e6/0x1350
[  251.233382][   T31]  ? __mutex_lock+0x5bb/0x1350
[  251.238185][   T31]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  251.283381][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  251.288455][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  251.297725][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  251.303970][   T31]  rfkill_global_led_trigger_worker+0x27/0xd0
[  251.310186][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  251.316288][   T31]  process_scheduled_works+0xae1/0x17b0
[  251.321877][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  251.328268][   T31]  worker_thread+0x8a0/0xda0
[  251.332979][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.340432][   T31]  ? __kthread_parkme+0x7b/0x200
[  251.345441][   T31]  kthread+0x70e/0x8a0
[  251.349513][   T31]  ? __pfx_worker_thread+0x10/0x10
[  251.354690][   T31]  ? __pfx_kthread+0x10/0x10
[  251.359285][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  251.364542][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.369744][   T31]  ? __pfx_kthread+0x10/0x10
[  251.374428][   T31]  ret_from_fork+0x439/0x7d0
[  251.379020][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  251.385931][   T31]  ? __switch_to_asm+0x39/0x70
[  251.390711][   T31]  ? __switch_to_asm+0x33/0x70
[  251.395546][   T31]  ? __pfx_kthread+0x10/0x10
[  251.400140][   T31]  ret_from_fork_asm+0x1a/0x30
[  251.404991][   T31]  </TASK>
[  251.408105][   T31] INFO: task syz.0.217:6834 blocked for more than 143 seconds.
[  251.415733][   T31]       Not tainted syzkaller #0
[  251.420660][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  251.429539][   T31] task:syz.0.217       state:D stack:25096 pid:6834  tgid:6834  ppid:5867   task_flags:0x400040 flags:0x00004004
[  251.441609][   T31] Call Trace:
[  251.444971][   T31]  <TASK>
[  251.447904][   T31]  __schedule+0x1798/0x4cc0
[  251.452422][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.458446][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.463464][   T31]  ? __pfx___schedule+0x10/0x10
[  251.468322][   T31]  ? schedule+0x91/0x360
[  251.472544][   T31]  schedule+0x165/0x360
[  251.476739][   T31]  schedule_preempt_disabled+0x13/0x30
[  251.482194][   T31]  __mutex_lock+0x7e6/0x1350
[  251.486890][   T31]  ? __mutex_lock+0x5bb/0x1350
[  251.491658][   T31]  ? rfkill_unregister+0xc8/0x220
[  251.496774][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  251.501811][   T31]  ? __pfx_device_del+0x10/0x10
[  251.506810][   T31]  rfkill_unregister+0xc8/0x220
[  251.511667][   T31]  nfc_unregister_device+0x96/0x2a0
[  251.516890][   T31]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  251.522648][   T31]  virtual_ncidev_close+0x56/0x90
[  251.527770][   T31]  __fput+0x44c/0xa70
[  251.531776][   T31]  task_work_run+0x1d1/0x260
[  251.536445][   T31]  ? __pfx_task_work_run+0x10/0x10
[  251.541565][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  251.547141][   T31]  exit_to_user_mode_loop+0xec/0x110
[  251.552431][   T31]  do_syscall_64+0x2bd/0x3b0
[  251.557044][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.563109][   T31]  ? asm_sysvec_call_function_single+0x1a/0x20
[  251.569377][   T31]  ? clear_bhb_loop+0x60/0xb0
[  251.574594][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.580493][   T31] RIP: 0033:0x7faca7d8eec9
[  251.585028][   T31] RSP: 002b:00007ffcba3eede8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  251.593491][   T31] RAX: 0000000000000000 RBX: 00007faca7fe7da0 RCX: 00007faca7d8eec9
[  251.601464][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  251.609542][   T31] RBP: 00007faca7fe7da0 R08: 0000000000000210 R09: 0000001eba3ef0df
[  251.617548][   T31] R10: 00000000003ffbcc R11: 0000000000000246 R12: 0000000000018229
[  251.625862][   T31] R13: 00007ffcba3eeee0 R14: ffffffffffffffff R15: 00007ffcba3eef00
[  251.633911][   T31]  </TASK>
[  251.636937][   T31] INFO: task syz.3.221:6861 blocked for more than 143 seconds.
[  251.645603][   T31]       Not tainted syzkaller #0
[  251.650535][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  251.659392][   T31] task:syz.3.221       state:D stack:24952 pid:6861  tgid:6856  ppid:5877   task_flags:0x400140 flags:0x00004006
[  251.671339][   T31] Call Trace:
[  251.674675][   T31]  <TASK>
[  251.677611][   T31]  __schedule+0x1798/0x4cc0
[  251.682121][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.687025][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.691882][   T31]  ? __pfx___schedule+0x10/0x10
[  251.696795][   T31]  ? schedule+0x91/0x360
[  251.701043][   T31]  schedule+0x165/0x360
[  251.705366][   T31]  schedule_preempt_disabled+0x13/0x30
[  251.710829][   T31]  __mutex_lock+0x7e6/0x1350
[  251.715464][   T31]  ? __mutex_lock+0x5bb/0x1350
[  251.720231][   T31]  ? nfc_rfkill_set_block+0x50/0x2e0
[  251.725592][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  251.730620][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.735851][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  251.741740][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  251.748083][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  251.753841][   T31]  nfc_rfkill_set_block+0x50/0x2e0
[  251.758967][   T31]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  251.764907][   T31]  rfkill_set_block+0x1d2/0x440
[  251.769763][   T31]  rfkill_fop_write+0x44b/0x570
[  251.774660][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  251.780123][   T31]  ? security_kernfs_init_security+0x250/0x290
[  251.787042][   T31]  ? rw_verify_area+0x255/0x4d0
[  251.792163][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.797213][   T31]  ? __pfx_rfkill_fop_write+0x10/0x10
[  251.802690][   T31]  vfs_write+0x27b/0xb30
[  251.807124][   T31]  ? __pfx_vfs_write+0x10/0x10
[  251.811890][   T31]  ? __fget_files+0x2a/0x420
[  251.816548][   T31]  ? __fget_files+0x2a/0x420
[  251.821155][   T31]  ? __fget_files+0x3a0/0x420
[  251.825889][   T31]  ? __fget_files+0x2a/0x420
[  251.830491][   T31]  ksys_write+0x145/0x250
[  251.834872][   T31]  ? __pfx_ksys_write+0x10/0x10
[  251.839728][   T31]  ? rcu_is_watching+0x15/0xb0
[  251.844544][   T31]  ? do_syscall_64+0xbe/0x3b0
[  251.849231][   T31]  do_syscall_64+0xfa/0x3b0
[  251.853843][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.859045][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.865159][   T31]  ? clear_bhb_loop+0x60/0xb0
[  251.869866][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.875997][   T31] RIP: 0033:0x7fbb5978eec9
[  251.880442][   T31] RSP: 002b:00007fbb5a61b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  251.888879][   T31] RAX: ffffffffffffffda RBX: 00007fbb599e6090 RCX: 00007fbb5978eec9
[  251.896897][   T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a
[  251.904943][   T31] RBP: 00007fbb59811f91 R08: 0000000000000000 R09: 0000000000000000
[  251.912918][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.920935][   T31] R13: 00007fbb599e6128 R14: 00007fbb599e6090 R15: 00007ffff1f86928
[  251.928945][   T31]  </TASK>
[  251.931961][   T31] INFO: task syz.4.280:7121 blocked for more than 144 seconds.
[  251.944944][   T31]       Not tainted syzkaller #0
[  251.949896][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  251.958703][   T31] task:syz.4.280       state:D stack:25864 pid:7121  tgid:7120  ppid:5870   task_flags:0x400140 flags:0x00004004
[  251.970743][   T31] Call Trace:
[  251.974132][   T31]  <TASK>
[  251.977076][   T31]  __schedule+0x1798/0x4cc0
[  251.981594][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.986554][   T31]  ? __lock_acquire+0xab9/0xd20
[  251.991400][   T31]  ? __pfx___schedule+0x10/0x10
[  251.996345][   T31]  ? schedule+0x91/0x360
[  252.000588][   T31]  schedule+0x165/0x360
[  252.004810][   T31]  schedule_preempt_disabled+0x13/0x30
[  252.010272][   T31]  __mutex_lock+0x7e6/0x1350
[  252.014971][   T31]  ? __mutex_lock+0x5bb/0x1350
[  252.019737][   T31]  ? rfkill_register+0x37/0x8e0
[  252.024631][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  252.029659][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  252.035257][   T31]  ? device_initialize+0x24b/0x440
[  252.040513][   T31]  rfkill_register+0x37/0x8e0
[  252.045362][   T31]  nfc_register_device+0x14a/0x320
[  252.050484][   T31]  nci_register_device+0x87f/0x9d0
[  252.055691][   T31]  ? __pfx_nci_register_device+0x10/0x10
[  252.061330][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  252.066660][   T31]  ? __init_waitqueue_head+0xa9/0x150
[  252.072056][   T31]  virtual_ncidev_open+0x129/0x1a0
[  252.077232][   T31]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  252.082865][   T31]  misc_open+0x2b9/0x330
[  252.087145][   T31]  chrdev_open+0x4c9/0x5e0
[  252.091558][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.096584][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  252.102933][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.107971][   T31]  do_dentry_open+0x950/0x13f0
[  252.112755][   T31]  vfs_open+0x3b/0x340
[  252.116970][   T31]  ? path_openat+0x2ecd/0x3830
[  252.121738][   T31]  path_openat+0x2ee5/0x3830
[  252.126362][   T31]  ? arch_stack_walk+0xfc/0x150
[  252.131223][   T31]  ? stack_depot_save_flags+0x40/0x860
[  252.136770][   T31]  ? __pfx_path_openat+0x10/0x10
[  252.141706][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.147828][   T31]  do_filp_open+0x1fa/0x410
[  252.152328][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.157250][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  252.162286][   T31]  ? _raw_spin_unlock+0x28/0x50
[  252.167186][   T31]  ? alloc_fd+0x64c/0x6c0
[  252.171525][   T31]  do_sys_openat2+0x121/0x1c0
[  252.176267][   T31]  ? __se_sys_futex+0x36f/0x400
[  252.181118][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  252.186372][   T31]  ? rcu_is_watching+0x15/0xb0
[  252.191171][   T31]  __x64_sys_openat+0x138/0x170
[  252.196144][   T31]  do_syscall_64+0xfa/0x3b0
[  252.200648][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.205898][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.211964][   T31]  ? clear_bhb_loop+0x60/0xb0
[  252.216717][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.222607][   T31] RIP: 0033:0x7f843af8eec9
[  252.227082][   T31] RSP: 002b:00007f843be63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  252.235607][   T31] RAX: ffffffffffffffda RBX: 00007f843b1e5fa0 RCX: 00007f843af8eec9
[  252.243921][   T31] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  252.251899][   T31] RBP: 00007f843b011f91 R08: 0000000000000000 R09: 0000000000000000
[  252.261269][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.271544][   T31] R13: 00007f843b1e6038 R14: 00007f843b1e5fa0 R15: 00007ffe3ee149b8
[  252.279662][   T31]  </TASK>
[  252.282819][   T31] INFO: task syz.2.284:7136 blocked for more than 144 seconds.
[  252.290401][   T31]       Not tainted syzkaller #0
[  252.295350][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.304077][   T31] task:syz.2.284       state:D stack:26856 pid:7136  tgid:7135  ppid:5880   task_flags:0x400040 flags:0x00004004
[  252.316048][   T31] Call Trace:
[  252.319323][   T31]  <TASK>
[  252.322238][   T31]  __schedule+0x1798/0x4cc0
[  252.326789][   T31]  ? kasan_save_free_info+0x46/0x50
[  252.331989][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.337042][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.341887][   T31]  ? __pfx___schedule+0x10/0x10
[  252.348174][   T31]  ? schedule+0x91/0x360
[  252.352425][   T31]  schedule+0x165/0x360
[  252.356989][   T31]  schedule_preempt_disabled+0x13/0x30
[  252.362453][   T31]  __mutex_lock+0x7e6/0x1350
[  252.367104][   T31]  ? __mutex_lock+0x5bb/0x1350
[  252.371875][   T31]  ? misc_open+0x51/0x330
[  252.376296][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  252.381379][   T31]  misc_open+0x51/0x330
[  252.385617][   T31]  chrdev_open+0x4c9/0x5e0
[  252.390035][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.394983][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  252.401317][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.406288][   T31]  do_dentry_open+0x950/0x13f0
[  252.411064][   T31]  vfs_open+0x3b/0x340
[  252.415155][   T31]  ? path_openat+0x2ecd/0x3830
[  252.419920][   T31]  path_openat+0x2ee5/0x3830
[  252.424613][   T31]  ? arch_stack_walk+0xfc/0x150
[  252.429477][   T31]  ? stack_depot_save_flags+0x40/0x860
[  252.435012][   T31]  ? __pfx_path_openat+0x10/0x10
[  252.439952][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.446187][   T31]  do_filp_open+0x1fa/0x410
[  252.450711][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.455679][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  252.460717][   T31]  ? _raw_spin_unlock+0x28/0x50
[  252.465629][   T31]  ? alloc_fd+0x64c/0x6c0
[  252.469968][   T31]  do_sys_openat2+0x121/0x1c0
[  252.474683][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  252.479882][   T31]  ? exc_page_fault+0x76/0xf0
[  252.484615][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  252.489920][   T31]  __x64_sys_openat+0x138/0x170
[  252.495879][   T31]  do_syscall_64+0xfa/0x3b0
[  252.500391][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.505703][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.511770][   T31]  ? clear_bhb_loop+0x60/0xb0
[  252.516494][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.522385][   T31] RIP: 0033:0x7f7968d8eec9
[  252.526876][   T31] RSP: 002b:00007f7969cad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  252.535331][   T31] RAX: ffffffffffffffda RBX: 00007f7968fe5fa0 RCX: 00007f7968d8eec9
[  252.543336][   T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  252.551303][   T31] RBP: 00007f7968e11f91 R08: 0000000000000000 R09: 0000000000000000
[  252.559356][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.567458][   T31] R13: 00007f7968fe6038 R14: 00007f7968fe5fa0 R15: 00007fff1ea18ee8
[  252.575472][   T31]  </TASK>
[  252.578496][   T31] INFO: task syz.1.298:7173 blocked for more than 144 seconds.
[  252.586303][   T31]       Not tainted syzkaller #0
[  252.591253][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  252.599932][   T31] task:syz.1.298       state:D stack:25864 pid:7173  tgid:7172  ppid:5869   task_flags:0x400140 flags:0x00004004
[  252.612043][   T31] Call Trace:
[  252.615386][   T31]  <TASK>
[  252.618318][   T31]  __schedule+0x1798/0x4cc0
[  252.622831][   T31]  ? kasan_save_free_info+0x46/0x50
[  252.628167][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.633023][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.637901][   T31]  ? __pfx___schedule+0x10/0x10
[  252.642753][   T31]  ? schedule+0x91/0x360
[  252.647025][   T31]  schedule+0x165/0x360
[  252.651176][   T31]  schedule_preempt_disabled+0x13/0x30
[  252.656662][   T31]  __mutex_lock+0x7e6/0x1350
[  252.661421][   T31]  ? __mutex_lock+0x5bb/0x1350
[  252.666485][   T31]  ? misc_open+0x51/0x330
[  252.670831][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  252.676283][   T31]  misc_open+0x51/0x330
[  252.680453][   T31]  chrdev_open+0x4c9/0x5e0
[  252.685070][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.690007][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  252.696371][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  252.701299][   T31]  do_dentry_open+0x950/0x13f0
[  252.706120][   T31]  vfs_open+0x3b/0x340
[  252.710186][   T31]  ? path_openat+0x2ecd/0x3830
[  252.715034][   T31]  path_openat+0x2ee5/0x3830
[  252.719635][   T31]  ? arch_stack_walk+0xfc/0x150
[  252.724545][   T31]  ? stack_depot_save_flags+0x40/0x860
[  252.730017][   T31]  ? __pfx_path_openat+0x10/0x10
[  252.734983][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.741074][   T31]  do_filp_open+0x1fa/0x410
[  252.745810][   T31]  ? __lock_acquire+0xab9/0xd20
[  252.750676][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  252.755773][   T31]  ? _raw_spin_unlock+0x28/0x50
[  252.760625][   T31]  ? alloc_fd+0x64c/0x6c0
[  252.765082][   T31]  do_sys_openat2+0x121/0x1c0
[  252.769776][   T31]  ? __se_sys_futex+0x36f/0x400
[  252.774682][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  252.779902][   T31]  ? __pfx___se_sys_futex+0x10/0x10
[  252.785184][   T31]  ? fd_install+0x30d/0x540
[  252.789701][   T31]  __x64_sys_openat+0x138/0x170
[  252.794775][   T31]  do_syscall_64+0xfa/0x3b0
[  252.799280][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.804509][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.810573][   T31]  ? clear_bhb_loop+0x60/0xb0
[  252.815285][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.821175][   T31] RIP: 0033:0x7fec0a38eec9
[  252.825834][   T31] RSP: 002b:00007fec0b2e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  252.834289][   T31] RAX: ffffffffffffffda RBX: 00007fec0a5e5fa0 RCX: 00007fec0a38eec9
[  252.842256][   T31] RDX: 0000000000000302 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  252.850262][   T31] RBP: 00007fec0a411f91 R08: 0000000000000000 R09: 0000000000000000
[  252.858263][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.866329][   T31] R13: 00007fec0a5e6038 R14: 00007fec0a5e5fa0 R15: 00007ffdbedad2e8
[  252.874367][   T31]  </TASK>
[  252.877428][   T31] 
[  252.877428][   T31] Showing all locks held in the system:
[  252.885384][   T31] 2 locks held by kworker/u8:1/13:
[  252.890489][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  252.900458][   T31]  #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  252.909559][   T31] 1 lock held by khungtaskd/31:
[  252.914426][   T31]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  252.924359][   T31] 2 locks held by getty/5626:
[  252.929028][   T31]  #0: ffff88814d8690a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  252.938796][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  252.948930][   T31] 3 locks held by kworker/0:5/5981:
[  252.954138][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  252.965156][   T31]  #1: ffffc900046cfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  252.978710][   T31]  #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  252.990067][   T31] 2 locks held by syz.0.217/6834:
[  252.995128][   T31]  #0: ffff88805c392100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  253.004907][   T31]  #1: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  253.015224][   T31] 2 locks held by syz.3.221/6861:
[  253.020241][   T31]  #0: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  253.030360][   T31]  #1: ffff88805c392100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  253.040068][   T31] 3 locks held by syz.4.280/7121:
[  253.045127][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.053623][   T31]  #1: ffff88805b960100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320
[  253.063211][   T31]  #2: ffffffff8f813e28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  253.073845][   T31] 1 lock held by syz.2.284/7136:
[  253.078786][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.087298][   T31] 1 lock held by syz.1.298/7173:
[  253.092222][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.100677][   T31] 1 lock held by syz-executor/7178:
[  253.105907][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.114418][   T31] 1 lock held by syz-executor/7179:
[  253.119612][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.128285][   T31] 1 lock held by syz-executor/7183:
[  253.133520][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.141984][   T31] 1 lock held by syz-executor/7185:
[  253.147377][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.155893][   T31] 1 lock held by syz-executor/7187:
[  253.161082][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.169569][   T31] 1 lock held by syz-executor/7190:
[  253.174791][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.183243][   T31] 1 lock held by syz-executor/7191:
[  253.188475][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.196949][   T31] 1 lock held by syz-executor/7193:
[  253.202120][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.210600][   T31] 1 lock held by syz-executor/7195:
[  253.215807][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.224480][   T31] 1 lock held by syz-executor/7197:
[  253.229670][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.238307][   T31] 1 lock held by syz-executor/7200:
[  253.243524][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.251985][   T31] 1 lock held by syz-executor/7201:
[  253.257190][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.265700][   T31] 1 lock held by syz-executor/7203:
[  253.270897][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.279413][   T31] 1 lock held by syz-executor/7205:
[  253.284634][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.293094][   T31] 1 lock held by syz-executor/7207:
[  253.298315][   T31]  #0: ffffffff8e9c25c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330
[  253.306842][   T31] 
[  253.309159][   T31] =============================================
[  253.309159][   T31] 
[  253.317611][   T31] NMI backtrace for cpu 1
[  253.317624][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  253.317639][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  253.317646][   T31] Call Trace:
[  253.317653][   T31]  <TASK>
[  253.317660][   T31]  dump_stack_lvl+0x189/0x250
[  253.317684][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.317701][   T31]  ? __pfx__printk+0x10/0x10
[  253.317731][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  253.317754][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  253.317774][   T31]  ? __pfx__printk+0x10/0x10
[  253.317798][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  253.317823][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  253.317847][   T31]  watchdog+0xf93/0xfe0
[  253.317873][   T31]  ? watchdog+0x1de/0xfe0
[  253.317899][   T31]  kthread+0x70e/0x8a0
[  253.317921][   T31]  ? __pfx_watchdog+0x10/0x10
[  253.317941][   T31]  ? __pfx_kthread+0x10/0x10
[  253.317961][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.317977][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.317992][   T31]  ? __pfx_kthread+0x10/0x10
[  253.318011][   T31]  ret_from_fork+0x439/0x7d0
[  253.318031][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  253.318054][   T31]  ? __switch_to_asm+0x39/0x70
[  253.318073][   T31]  ? __switch_to_asm+0x33/0x70
[  253.318091][   T31]  ? __pfx_kthread+0x10/0x10
[  253.318111][   T31]  ret_from_fork_asm+0x1a/0x30
[  253.318146][   T31]  </TASK>
[  253.318153][   T31] Sending NMI from CPU 1 to CPUs 0:
[  253.462687][    C0] NMI backtrace for cpu 0
[  253.462701][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  253.462718][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  253.462727][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  253.462747][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  253.462759][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  253.462772][    C0] RAX: 0cc2ca825c4a6c00 RBX: ffffffff819683f8 RCX: 0cc2ca825c4a6c00
[  253.462784][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba42d RDI: ffffffff8be33f00
[  253.462794][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  253.462805][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a630
[  253.462816][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  253.462826][    C0] FS:  0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000
[  253.462838][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.462849][    C0] CR2: 00007f46e5c1299a CR3: 000000000df36000 CR4: 00000000003526f0
[  253.462862][    C0] Call Trace:
[  253.462869][    C0]  <TASK>
[  253.462875][    C0]  default_idle+0x13/0x20
[  253.462891][    C0]  default_idle_call+0x74/0xb0
[  253.462908][    C0]  do_idle+0x1e8/0x510
[  253.462926][    C0]  ? __pfx_do_idle+0x10/0x10
[  253.462938][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  253.462955][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  253.462969][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  253.462993][    C0]  cpu_startup_entry+0x44/0x60
[  253.463007][    C0]  rest_init+0x2de/0x300
[  253.463026][    C0]  start_kernel+0x3a9/0x410
[  253.463044][    C0]  x86_64_start_reservations+0x24/0x30
[  253.463062][    C0]  x86_64_start_kernel+0x143/0x1c0
[  253.463080][    C0]  common_startup_64+0x13e/0x147
[  253.463105][    C0]  </TASK>
[  253.468985][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  253.469000][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  253.469020][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  253.469029][   T31] Call Trace:
[  253.469037][   T31]  <TASK>
[  253.469046][   T31]  dump_stack_lvl+0x99/0x250
[  253.469068][   T31]  ? __asan_memcpy+0x40/0x70
[  253.469088][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.469107][   T31]  ? __pfx__printk+0x10/0x10
[  253.469141][   T31]  vpanic+0x281/0x750
[  253.469162][   T31]  ? __pfx_vpanic+0x10/0x10
[  253.469180][   T31]  ? preempt_schedule+0xae/0xc0
[  253.469199][   T31]  ? preempt_schedule_common+0x83/0xd0
[  253.469221][   T31]  panic+0xb9/0xc0
[  253.469239][   T31]  ? __pfx_panic+0x10/0x10
[  253.469258][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  253.469287][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  253.469312][   T31]  watchdog+0xfd2/0xfe0
[  253.469338][   T31]  ? watchdog+0x1de/0xfe0
[  253.469364][   T31]  kthread+0x70e/0x8a0
[  253.469387][   T31]  ? __pfx_watchdog+0x10/0x10
[  253.469407][   T31]  ? __pfx_kthread+0x10/0x10
[  253.469434][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.469449][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.469465][   T31]  ? __pfx_kthread+0x10/0x10
[  253.469485][   T31]  ret_from_fork+0x439/0x7d0
[  253.469506][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  253.469528][   T31]  ? __switch_to_asm+0x39/0x70
[  253.469546][   T31]  ? __switch_to_asm+0x33/0x70
[  253.469565][   T31]  ? __pfx_kthread+0x10/0x10
[  253.469585][   T31]  ret_from_fork_asm+0x1a/0x30
[  253.469619][   T31]  </TASK>
[  253.811466][   T31] Kernel Offset: disabled
[  253.815766][   T31] Rebooting in 86400 seconds..