last executing test programs:

864.991483ms ago: executing program 0 (id=323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
unshare(0x26020480)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r2=>0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x60, 0x7, [@struct={0x85, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x4, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1}, 0x28)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="11030000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

795.86888ms ago: executing program 0 (id=325):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000084)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88f7", 0x12}, {&(0x7f0000000040)="dd7fb78fb52ae97c75f16d067e11415380270996f3f4b616b45322a4415fdf5d003b", 0x22}], 0x2)
r3 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)
recvfrom$unix(r3, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0)

618.551532ms ago: executing program 0 (id=329):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r7, 0x90d, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x80) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10c7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6ef}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x915}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x44000)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/1, 0x0, 0x2800, 0x4, 0x1}, 0x20) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x4, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xff}}, 0x18}}, 0x20040800)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

546.731523ms ago: executing program 0 (id=332):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940), 0x50)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x400000000000000)

495.955354ms ago: executing program 0 (id=334):
r0 = socket(0x10, 0x5, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x303, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x890}, 0x4001)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x3, 0x0, &(0x7f0000000300))
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)
clock_gettime(0x5, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000340), 0x10, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="02000000230800000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="000000d7e20000a453a70930eabe72a77c58fbb02dc5fb02cf4c9bf8530f169bb851"], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x24048011}, 0x2400c800) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x24048011}, 0x2400c800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00'}, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000100)=0x1) (async)
ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000100)=0x1)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000280)=@req3={0x200, 0x40004e3, 0x400, 0x4, 0x60000, 0x7, 0x8000}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r10=>0x0})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "2980ac5f53c84412dfee"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc0}}, 0x0)
close(0x3) (async)
close(0x3)
bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) (async)
sendmmsg$sock(r8, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010601010000000000009c93b06b8df3"], 0x14}, 0x1, 0x0, 0x0, 0x40019}, 0x4004)

306.878202ms ago: executing program 2 (id=340):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = getpid()
getsockopt(r0, 0x1, 0x5, &(0x7f00000000c0)=""/171, &(0x7f0000000180)=0xab)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid\x00')
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, &(0x7f00000001c0))
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff)

303.730915ms ago: executing program 1 (id=341):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4)
socket(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r2})
r4 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r3, 0x8916, &(0x7f0000000000))
ioctl(r4, 0x8936, &(0x7f0000000000))
r5 = socket(0xb, 0xa, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, [@TCA_MQPRIO_MODE={0xfffffffffffffd2c}]}}}]}, 0x90}}, 0x20000000)

303.269638ms ago: executing program 1 (id=342):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x39000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000004c08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket(0x10, 0x80003, 0x9)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000f00000100000e00"}}}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r5, @ANYRES16=r4, @ANYBLOB="0108000300", @ANYBLOB="390b54e431fa9e32702575e4c2de44cc1a4de5439a678415933ff0100ae43a33d97c48d173a0896bb193f990d7501b436c610a898c63c2051bece43916bc1bacdf89ee521346459a8a7eafc27b71b982c710687fa53c897ff8a3caa9ec9e3d661899b15cf519b1237e81863309600e6215a2eaa9870830177422f1abfd754a5ebb895b99dbd03960ffddd2b84d955443186a653b6da732598f3a0c7911e24b7ed34dac4c60c5b91f4b84f98b3d9105905e5bb8921a3a2c0084a2db0b458813b8c2dac414e2174aab275d54", @ANYBLOB="0600cd00000500005700330080200900ffffffffffff0802110000005050505050505f00ffffffffffffffff640000100006010101010101010003012c0602ff01050305970572060303030303037107ff000100fd0720760603002f00060000"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$rxrpc(0x21, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000700000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180002c282fdce2c5fc92c9e01002d020000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r9}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010)
close(0xffffffffffffffff)
r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r11], &(0x7f00000004c0)='GPL\x00', 0xffe00000, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

226.913683ms ago: executing program 2 (id=343):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="aba770"], 0x9)
r3 = socket(0x10, 0x3, 0x0)
recvmsg$can_j1939(r3, &(0x7f0000000440)={&(0x7f0000000480)=@tipc=@id, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000100)=""/51, 0xfffffffffffffd49}, {&(0x7f0000000300)=""/155, 0x9b}], 0x4, &(0x7f0000000500)=""/69, 0x45}, 0x100)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f668000000000000240012800800010067726500180002800400120006000e"], 0x44}}, 0x0)

219.345657ms ago: executing program 2 (id=344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000e0ffff030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)

18.20253ms ago: executing program 1 (id=345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000240)=""/55, &(0x7f0000000040)=0x37)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000001000000000c001800", @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x40008c1}, 0x40000)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x1000, &(0x7f0000000300)="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", 0xdf, 0x0, &(0x7f00000000c0)="001ff0a79d6ad53404b6419736f42c10793840ce472c7a06216ad78f1324e62ffcb3cb8faeb883b8506f734593e01d77b1fd413ba99c1b1cd2850fb2c2087df9a8f3b8600cce36ce1e624b40076efa548f30eab79d66c23f402d88e30c55df92f2643364baf6c1ab9c9984e6c37951b7b20837a81ee68c9a6539815629348a44f165f690db06947f9d5abccca18650f11c71189d03babc11a1eb8748005800d7fb027faf46adef055e1265e1e79451871d1acd9375777413a6a2fa65d4c2a2b89652bb0592b7fa2f3549d11fc6684437d9561f29b70bf755123eb978013da8"})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000bc0))
bind$unix(r2, &(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123300000000009500000000000000326403af62f27cb9eac5f9c1315dc328df8945328e9dad5cf6cf55c5ba7dd030dc395637020634d69244c76d25cd90d9c1f0e48ffd6a85b236db905deb4f1cd729c22901d95906b952947b7caea262c46940608f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xd}, 0x18)
bind$alg(r2, &(0x7f0000001300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc4309(authenc(sha3-384-generic,cbc-twofish-3way)))\x00'}, 0x58)

17.948207ms ago: executing program 1 (id=346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/102, 0x66}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000500)=""/181, 0xb5}], 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x0, 0x1, {0xa, 0x4e21, 0x7f, @loopback, 0x1}}}, 0x32)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async)
ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x6402}], 0x1, 0x0, 0x0, 0x0) (async)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8}, 0x18) (async)
sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={&(0x7f0000000340)="005a745dfa6db5b7fe6c15f8e1ead5f950e8f1b9a1b6466ec9d1b413470fd3ded55defcc93ac245fee4f11cd", 0x2c}}, 0x0)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000001ddc6754aead34ec64d5e0372e810000001800000018000000020000000c0000000000000b04000000"], 0x0, 0x32}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)

17.198009ms ago: executing program 1 (id=347):
r0 = socket(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x74, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x21, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)

16.95643ms ago: executing program 2 (id=348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getpeername(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x0)

5.013312ms ago: executing program 2 (id=349):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x2}, 0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
accept4(r2, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000400)=0x80, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000180)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x8, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
recvfrom$inet6(r0, &(0x7f0000000040)=""/173, 0xad, 0x10001, &(0x7f00000001c0)={0xa, 0x4e23, 0xe8, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c)

4.084912ms ago: executing program 1 (id=350):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r1, 0xcc}, 0x8)
r2 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r4 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000f00))
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
pipe(&(0x7f0000000600)={<r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000f40)={0x0, "de63dbabf798b9c84ccbd64082a689d3"})
close(r6)
splice(r5, 0x0, r6, 0x0, 0x1100000000f336, 0x0)
ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434)
writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xa3, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0xd, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000440)={@private=0xa010101, @remote, @multicast1}, 0xc)

3.978026ms ago: executing program 2 (id=351):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0}}], 0x58}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESOCT=r1], 0x1c}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESOCT=r1], 0x1c}}, 0x0)

0s ago: executing program 0 (id=352):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f000068f000/0x6000)=nil, 0x6000, 0x2000006, 0x12, r0, 0x913e2000) (async)
mmap(&(0x7f000068f000/0x6000)=nil, 0x6000, 0x2000006, 0x12, r0, 0x913e2000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0x2000000, 0x14, 0x0, &(0x7f0000000280)="3a1d5bd9fcc2425a55dbb08744f4f493ef6821ae", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan1\x00'})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newnexthop={0xa0, 0x68, 0x800, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x3}, [@NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ID={0x8}, @NHA_ID={0x8}, @NHA_GROUP={0x24, 0x2, [{0x1, 0x8}, {0x1, 0xd}, {0x2, 0x40}, {0x0, 0xe5}]}, @NHA_ENCAP={0x1c, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0xffffd}, {0x2}, {0x2}, {0x3, 0x0, 0x1}, {0xa308}]}}, @NHA_ENCAP_TYPE={0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10862' (ED25519) to the list of known hosts.
syzkaller login: [   48.735522][ T5774] cgroup: Unknown subsys name 'net'
[   48.807000][ T5774] cgroup: Unknown subsys name 'cpuset'
[   48.810798][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.201502][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.082295][ T5204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.085354][ T5204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.087913][ T5204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.090610][ T5204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.093291][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.109754][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.113257][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.116525][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.119695][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.123929][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.151960][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.154965][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.157685][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.162203][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.164823][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.424437][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   54.485411][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   54.536121][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   54.564140][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.566726][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.569266][ T5810] bridge_slave_0: entered allmulticast mode
[   54.572944][ T5810] bridge_slave_0: entered promiscuous mode
[   54.577302][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.579792][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.582849][ T5810] bridge_slave_1: entered allmulticast mode
[   54.585674][ T5810] bridge_slave_1: entered promiscuous mode
[   54.620708][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.624350][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.627332][ T5818] bridge_slave_0: entered allmulticast mode
[   54.631218][ T5818] bridge_slave_0: entered promiscuous mode
[   54.636301][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.639156][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.642273][ T5818] bridge_slave_1: entered allmulticast mode
[   54.644994][ T5818] bridge_slave_1: entered promiscuous mode
[   54.675534][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.700593][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.705779][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.737719][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.741579][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.744565][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.747490][ T5814] bridge_slave_0: entered allmulticast mode
[   54.750911][ T5814] bridge_slave_0: entered promiscuous mode
[   54.787504][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.789877][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.792576][ T5814] bridge_slave_1: entered allmulticast mode
[   54.795468][ T5814] bridge_slave_1: entered promiscuous mode
[   54.809848][ T5810] team0: Port device team_slave_0 added
[   54.814811][ T5818] team0: Port device team_slave_0 added
[   54.832673][ T5810] team0: Port device team_slave_1 added
[   54.837026][ T5818] team0: Port device team_slave_1 added
[   54.842643][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.881500][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.898529][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.901369][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.912419][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.930385][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.934867][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.943305][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.956382][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.959259][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.968143][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.973797][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.976412][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.984730][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.989591][ T5814] team0: Port device team_slave_0 added
[   54.995153][ T5814] team0: Port device team_slave_1 added
[   55.050695][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.054423][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.062978][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.082488][ T5818] hsr_slave_0: entered promiscuous mode
[   55.084907][ T5818] hsr_slave_1: entered promiscuous mode
[   55.089308][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.092808][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.102349][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.109606][ T5810] hsr_slave_0: entered promiscuous mode
[   55.112539][ T5810] hsr_slave_1: entered promiscuous mode
[   55.115484][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.118126][ T5810] Cannot create hsr debugfs directory
[   55.172507][ T5814] hsr_slave_0: entered promiscuous mode
[   55.174894][ T5814] hsr_slave_1: entered promiscuous mode
[   55.177059][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.179504][ T5814] Cannot create hsr debugfs directory
[   55.365730][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.371856][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.376503][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.388878][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.422894][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.428905][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.450191][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.456410][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.497988][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.506262][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.520146][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.529733][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.568774][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.597482][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   55.614218][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.617201][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.632706][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.635085][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.672987][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.681329][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.689804][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.707948][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   55.725129][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.727657][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.743544][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   55.749265][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.752385][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.786817][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.789814][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.810162][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.813016][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.866060][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.928885][ T5810] veth0_vlan: entered promiscuous mode
[   55.951844][ T5810] veth1_vlan: entered promiscuous mode
[   55.979309][ T5810] veth0_macvtap: entered promiscuous mode
[   55.987000][ T5810] veth1_macvtap: entered promiscuous mode
[   56.001069][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.010668][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.018656][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.024019][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.026901][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.030234][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.068795][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.098457][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.102516][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.115970][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.150564][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.154477][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.155240][ T5813] Bluetooth: hci0: command tx timeout
[   56.159766][   T55] Bluetooth: hci1: command tx timeout
[   56.187035][ T5818] veth0_vlan: entered promiscuous mode
[   56.200339][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.210351][ T5818] veth1_vlan: entered promiscuous mode
[   56.233274][   T55] Bluetooth: hci2: command tx timeout
[   56.252143][ T5814] veth0_vlan: entered promiscuous mode
[   56.278982][ T5814] veth1_vlan: entered promiscuous mode
[   56.287893][ T5818] veth0_macvtap: entered promiscuous mode
[   56.304222][ T5818] veth1_macvtap: entered promiscuous mode
[   56.309835][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.318687][ T5878] erspan0: entered promiscuous mode
[   56.320926][ T5878] erspan0: entered allmulticast mode
[   56.338427][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.344777][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.354916][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.361373][ T5878] erspan0: left promiscuous mode
[   56.366260][ T5878] erspan0: left allmulticast mode
[   56.376078][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.379751][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.383508][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.386239][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.398643][ T5814] veth0_macvtap: entered promiscuous mode
[   56.406597][ T5814] veth1_macvtap: entered promiscuous mode
[   56.464606][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.479199][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.505338][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.508572][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.513647][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.517521][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.573083][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.576443][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.594634][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.597707][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.618340][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.622181][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.653441][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.657264][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.730817][ T5890] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.750743][ T5891] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   56.844705][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.848362][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.857746][ T5899] ip6tnl1: entered promiscuous mode
[   56.866263][ T5899] ip6tnl1: entered allmulticast mode
[   56.869254][ T5898] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   56.986065][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   56.990061][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   57.059316][ T5920] xt_TCPMSS: Only works on TCP SYN packets
[   57.098621][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.426366][ T5949] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   57.555368][ T5957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.566567][ T5957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18'.
[   57.747701][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   57.846768][ T5983] Illegal XDP return value 4294967262 on prog  (id 16) dev N/A, expect packet loss!
[   57.932201][ T5991] netlink: 'syz.0.30': attribute type 2 has an invalid length.
[   57.936918][ T5991] netlink: 'syz.0.30': attribute type 4 has an invalid length.
[   58.116875][ T5998] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.153547][ T5998] macvtap1: entered promiscuous mode
[   58.155870][ T5998] ip6gretap1: entered promiscuous mode
[   58.159452][ T5998] macvtap1: entered allmulticast mode
[   58.172480][ T5998] ip6gretap1: entered allmulticast mode
[   58.203640][ T5998] vlan2: entered promiscuous mode
[   58.208038][ T5998] bridge0: entered promiscuous mode
[   58.209929][ T5998] vlan2: entered allmulticast mode
[   58.211930][ T5998] bridge0: entered allmulticast mode
[   58.214531][ T6002] netlink: 'syz.2.35': attribute type 12 has an invalid length.
[   58.219564][ T6002] netlink: 'syz.2.35': attribute type 29 has an invalid length.
[   58.232348][   T55] Bluetooth: hci1: command tx timeout
[   58.234635][ T5813] Bluetooth: hci0: command tx timeout
[   58.311774][ T5813] Bluetooth: hci2: command tx timeout
[   58.314310][ T6006] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET)
[   58.403407][ T6009] can: request_module (can-proto-5) failed.
[   58.861838][ T6025] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   58.946844][ T6030] netlink: 'syz.0.46': attribute type 12 has an invalid length.
[   58.950055][ T6030] netlink: 'syz.0.46': attribute type 29 has an invalid length.
[   59.124684][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801e43c400: rx timeout, send abort
[   59.405075][ T6055] netlink: 'syz.2.54': attribute type 11 has an invalid length.
[   59.628770][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801e43c400: abort rx timeout. Force session deactivation
[   59.675990][ T6067] xt_limit: Overflow, try lower: 262144/524288
[   59.679728][ T6067] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   59.840700][ T6081] netlink: 'syz.1.63': attribute type 11 has an invalid length.
[   60.086838][ T6108] netlink: 'syz.1.72': attribute type 12 has an invalid length.
[   60.169001][ T6114] bridge1: port 1(veth0_to_bond) entered blocking state
[   60.174899][ T6114] bridge1: port 1(veth0_to_bond) entered disabled state
[   60.177247][ T6114] veth0_to_bond: entered allmulticast mode
[   60.179966][ T6114] veth0_to_bond: entered promiscuous mode
[   60.188666][ T6116] Zero length message leads to an empty skb
[   60.312038][ T5813] Bluetooth: hci0: command tx timeout
[   60.314299][   T55] Bluetooth: hci1: command tx timeout
[   60.375446][ T6065] syz.2.57 (6065) used greatest stack depth: 20456 bytes left
[   60.393998][ T5813] Bluetooth: hci2: command tx timeout
[   60.627936][ T6152] netlink: 'syz.2.91': attribute type 11 has an invalid length.
[   60.929054][ T6175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.180552][ T6183] sctp: [Deprecated]: syz.1.102 (pid 6183) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.180552][ T6183] Use struct sctp_sack_info instead
[   61.547438][ T6191] netlink: 'syz.0.105': attribute type 11 has an invalid length.
[   61.748488][ T6203] __nla_validate_parse: 27 callbacks suppressed
[   61.748498][ T6203] netlink: 148 bytes leftover after parsing attributes in process `syz.0.110'.
[   61.756283][ T6203] netlink: 59 bytes leftover after parsing attributes in process `syz.0.110'.
[   61.787069][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   61.814666][ T6211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.869552][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[   61.907694][ T6215] netlink: 128 bytes leftover after parsing attributes in process `syz.0.115'.
[   61.994860][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   62.011346][ T6218] bond0: (slave bond_slave_1): Releasing backup interface
[   62.183832][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'.
[   62.344754][   T56] block nbd0: Receive control failed (result -32)
[   62.398423][ T6226] validate_nla: 12 callbacks suppressed
[   62.398432][ T6226] netlink: 'syz.1.119': attribute type 12 has an invalid length.
[   62.402970][ T5813] Bluetooth: hci0: command tx timeout
[   62.403873][ T6226] netlink: 'syz.1.119': attribute type 29 has an invalid length.
[   62.405931][ T5813] Bluetooth: hci1: command tx timeout
[   62.408206][ T6226] netlink: 148 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.408224][ T6226] netlink: 59 bytes leftover after parsing attributes in process `syz.1.119'.
[   62.447517][ T6228] netlink: 'syz.1.121': attribute type 11 has an invalid length.
[   62.450068][ T6230] @: renamed from bond_slave_0 (while UP)
[   62.482187][ T5813] Bluetooth: hci2: command tx timeout
[   62.783015][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.130'.
[   62.801275][ T6254] bridge1: port 1(veth0_to_bond) entered blocking state
[   62.804442][ T6254] bridge1: port 1(veth0_to_bond) entered disabled state
[   62.806756][ T6254] veth0_to_bond: entered allmulticast mode
[   62.809420][ T6254] veth0_to_bond: entered promiscuous mode
[   62.820655][ T6258] netlink: 'syz.2.132': attribute type 12 has an invalid length.
[   62.823600][ T6258] netlink: 'syz.2.132': attribute type 29 has an invalid length.
[   62.874347][ T6261] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   62.876823][ T6262] netlink: 'syz.0.134': attribute type 11 has an invalid length.
[   62.878302][ T6261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   62.979036][ T6270] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   63.010348][ T6272] @: renamed from bond_slave_0 (while UP)
[   63.055041][ T6277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.064273][ T6270] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.069058][ T6270] bond1: (slave bond2): making interface the new active one
[   63.073854][ T6270] bond1: (slave bond2): Enslaving as an active interface with an up link
[   63.088746][ T6270] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   63.098875][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.344183][ T6291] netlink: 'syz.1.145': attribute type 7 has an invalid length.
[   63.367155][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.371599][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.477039][ T6294] veth0_to_bond: left allmulticast mode
[   63.479630][ T6294] veth0_to_bond: left promiscuous mode
[   63.484806][ T6294] bridge1: port 1(veth0_to_bond) entered disabled state
[   63.493534][ T6294] bridge2: port 1(veth0_to_bond) entered blocking state
[   63.496526][ T6294] bridge2: port 1(veth0_to_bond) entered disabled state
[   63.499545][ T6294] veth0_to_bond: entered allmulticast mode
[   63.507607][ T6294] veth0_to_bond: entered promiscuous mode
[   63.556606][ T6296] netlink: 'syz.1.147': attribute type 11 has an invalid length.
[   63.681719][   T56] block nbd1: Receive control failed (result -32)
[   63.689398][ T6304] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   63.827466][ T6314] bridge1: port 1(veth0_to_bond) entered blocking state
[   63.830719][ T6314] bridge1: port 1(veth0_to_bond) entered disabled state
[   63.840920][ T6314] veth0_to_bond: entered allmulticast mode
[   63.845442][ T6314] veth0_to_bond: entered promiscuous mode
[   64.045150][ T6337] veth0_to_bond: left allmulticast mode
[   64.047199][ T6337] veth0_to_bond: left promiscuous mode
[   64.049115][ T6337] bridge1: port 1(veth0_to_bond) entered disabled state
[   64.058704][ T6337] bridge2: port 1(veth0_to_bond) entered blocking state
[   64.064351][ T6337] bridge2: port 1(veth0_to_bond) entered disabled state
[   64.067495][ T6337] veth0_to_bond: entered allmulticast mode
[   64.072739][ T6337] veth0_to_bond: entered promiscuous mode
[   64.426124][ T6375] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   64.483755][ T6379] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   64.585670][   T33] audit: type=1107 audit(1751596451.981:2): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='SlFJY1O6TIsjfkDD\p;7XYQ3GAGro:HH1OoKz'
[   64.646144][ T6394] netlink: 'syz.0.177': attribute type 1 has an invalid length.
[   64.673928][ T6394] bond2: entered promiscuous mode
[   64.676345][ T6394] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.688931][ T6396] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.692209][ T6396] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   64.696367][ T6396] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   64.703186][ T6396] bond2: (slave ip6gre1): making interface the new active one
[   64.706568][ T6396] ip6gre1: entered promiscuous mode
[   64.709804][ T6396] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[   64.804762][ T6402] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   64.841192][ T6403] veth3: entered promiscuous mode
[   64.848585][ T6406] 8021q: VLANs not supported on caif0
[   64.931482][ T6411] ip6tnl1: entered promiscuous mode
[   64.933982][ T6411] ip6tnl1: entered allmulticast mode
[   64.937570][ T6411] team0: Device ip6tnl1 is of different type
[   64.985922][ T6416] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   65.079471][ T6420] veth0_to_bond: left allmulticast mode
[   65.083731][ T6420] veth0_to_bond: left promiscuous mode
[   65.086402][ T6420] bridge2: port 1(veth0_to_bond) entered disabled state
[   65.096872][ T6420] bridge3: port 1(veth0_to_bond) entered blocking state
[   65.105457][ T6420] bridge3: port 1(veth0_to_bond) entered disabled state
[   65.112929][ T6420] veth0_to_bond: entered allmulticast mode
[   65.116951][ T6420] veth0_to_bond: entered promiscuous mode
[   65.136606][ T6423] vlan3: entered allmulticast mode
[   65.138500][ T6423] veth1: entered allmulticast mode
[   65.149535][ T6423] bridge3: port 2(vlan3) entered blocking state
[   65.152266][ T6423] bridge3: port 2(vlan3) entered disabled state
[   65.155292][ T6423] vlan3: entered promiscuous mode
[   65.157077][ T6423] veth1: entered promiscuous mode
[   65.250681][ T6430] syzkaller1: entered promiscuous mode
[   65.252744][ T6430] syzkaller1: entered allmulticast mode
[   65.352030][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   65.388984][ T6444] netlink: 'syz.2.192': attribute type 11 has an invalid length.
[   65.435972][ T6448] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   65.439255][ T6448] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   65.457520][ T6448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   65.711927][ T6465] block nbd2: server does not support multiple connections per device.
[   65.718279][ T6465] block nbd2: shutting down sockets
[   66.197435][ T6508] netlink: 'syz.0.210': attribute type 11 has an invalid length.
[   66.427809][ T6542] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.479684][ T6547] Bluetooth: MGMT ver 1.23
[   66.559001][ T6550] netlink: 'syz.1.221': attribute type 11 has an invalid length.
[   66.650322][ T6547] ip6gretap0: entered promiscuous mode
[   66.657796][ T6547] ip6gretap0: left promiscuous mode
[   66.676440][ T6557] netlink: zone id is out of range
[   66.678435][ T6557] netlink: zone id is out of range
[   66.680259][ T6557] netlink: zone id is out of range
[   66.682178][ T6557] netlink: zone id is out of range
[   66.683953][ T6557] netlink: zone id is out of range
[   66.685855][ T6557] netlink: zone id is out of range
[   66.687626][ T6557] netlink: zone id is out of range
[   66.938910][   T47] IPVS: starting estimator thread 0...
[   66.944827][ T6574] __nla_validate_parse: 55 callbacks suppressed
[   66.944835][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'.
[   66.955680][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'.
[   67.041872][ T6575] IPVS: using max 47 ests per chain, 112800 per kthread
[   67.149794][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'.
[   67.380296][ T6597] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001
[   67.626809][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'.
[   67.814576][ T6637] : entered promiscuous mode
[   67.890029][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'.
[   68.277954][ T6669] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.281180][ T6669] bond0: (slave bond4): Enslaving as an active interface with an up link
[   68.547194][ T6697] netlink: 'syz.1.271': attribute type 11 has an invalid length.
[   68.561437][ T6695] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   68.574993][ T6695] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   68.607545][ T6699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.677743][ T6699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.709430][ T6709] validate_nla: 1 callbacks suppressed
[   68.709444][ T6709] netlink: 'syz.1.272': attribute type 33 has an invalid length.
[   68.717416][ T6709] netlink: 152 bytes leftover after parsing attributes in process `syz.1.272'.
[   68.755659][ T6699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.774862][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'.
[   68.824742][ T6699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.880137][ T6726] netlink: 'syz.0.279': attribute type 11 has an invalid length.
[   68.934995][ T6699] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.949561][ T6699] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.963679][ T6699] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.972946][ T6699] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.060921][ T6735] xt_l2tp: v2 sid > 0xffff: 4294901760
[   69.784575][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'.
[   69.932735][ T6752] syzkaller1: entered promiscuous mode
[   69.935667][ T6752] syzkaller1: entered allmulticast mode
[   70.089878][ T6767] netlink: 'syz.1.295': attribute type 4 has an invalid length.
[   70.253903][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'.
[   70.283199][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.303'.
[   70.291066][ T6788] macsec1: entered promiscuous mode
[   70.297447][ T6788] macsec1: entered allmulticast mode
[   70.526030][ T6809] sch_tbf: burst 5 is lower than device bridge4 mtu (1514) !
[   70.600254][ T6806] netlink: 'syz.0.311': attribute type 8 has an invalid length.
[   70.769664][ T6828] net_ratelimit: 4 callbacks suppressed
[   70.769674][ T6828] openvswitch: netlink: Actions may not be safe on all matching packets
[   70.809501][ T6831] netlink: 'syz.0.321': attribute type 11 has an invalid length.
[   70.878342][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.881401][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.054351][ T6847] netlink: 'syz.1.328': attribute type 7 has an invalid length.
[   71.115575][ T6851] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[   71.263467][   T47] hid-generic 0005:04F3:000E.0001: collection stack underflow
[   71.266120][   T47] hid-generic 0005:04F3:000E.0001: item 0 0 0 12 parsing failed
[   71.270262][   T47] hid-generic 0005:04F3:000E.0001: probe with driver hid-generic failed with error -22
[   71.525130][ T6889] netlink: 'syz.2.344': attribute type 11 has an invalid length.
[   71.547654][ T6893] netlink: 'syz.1.346': attribute type 7 has an invalid length.
[   71.550166][ T6893] netlink: 'syz.1.346': attribute type 3 has an invalid length.
[   71.739411][ T1090] 
[   71.740285][ T1090] ======================================================
[   71.742537][ T1090] WARNING: possible circular locking dependency detected
[   71.744860][ T1090] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   71.748231][ T1090] ------------------------------------------------------
[   71.750536][ T1090] kworker/u10:8/1090 is trying to acquire lock:
[   71.752593][ T1090] ffff888106553358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   71.755669][ T1090] 
[   71.755669][ T1090] but task is already holding lock:
[   71.758154][ T1090] ffff888118350188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   71.761340][ T1090] 
[   71.761340][ T1090] which lock already depends on the new lock.
[   71.761340][ T1090] 
[   71.764812][ T1090] 
[   71.764812][ T1090] the existing dependency chain (in reverse order) is:
[   71.767805][ T1090] 
[   71.767805][ T1090] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   71.770588][ T1090]        lock_acquire+0x120/0x360
[   71.772410][ T1090]        down_write+0x96/0x1f0
[   71.774399][ T1090]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   71.776508][ T1090]        nbd_start_device+0x16c/0xac0
[   71.778311][ T1090]        nbd_genl_connect+0x1250/0x1930
[   71.780187][ T1090]        genl_family_rcv_msg_doit+0x215/0x300
[   71.782181][ T1090]        genl_rcv_msg+0x60e/0x790
[   71.783866][ T1090]        netlink_rcv_skb+0x208/0x470
[   71.785578][ T1090]        genl_rcv+0x28/0x40
[   71.787113][ T1090]        netlink_unicast+0x75b/0x8d0
[   71.788856][ T1090]        netlink_sendmsg+0x805/0xb30
[   71.790678][ T1090]        __sock_sendmsg+0x21c/0x270
[   71.792535][ T1090]        ____sys_sendmsg+0x505/0x830
[   71.794292][ T1090]        ___sys_sendmsg+0x21f/0x2a0
[   71.796061][ T1090]        __x64_sys_sendmsg+0x19b/0x260
[   71.797874][ T1090]        do_syscall_64+0xfa/0x3b0
[   71.799602][ T1090]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.801732][ T1090] 
[   71.801732][ T1090] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   71.804353][ T1090]        lock_acquire+0x120/0x360
[   71.806056][ T1090]        __mutex_lock+0x182/0xe80
[   71.807753][ T1090]        refcount_dec_and_mutex_lock+0x30/0xa0
[   71.809773][ T1090]        nbd_config_put+0x2c/0x790
[   71.811459][ T1090]        nbd_release+0xfe/0x140
[   71.813062][ T1090]        bdev_release+0x536/0x650
[   71.814711][ T1090]        blkdev_release+0x15/0x20
[   71.816379][ T1090]        __fput+0x44c/0xa70
[   71.817857][ T1090]        fput_close_sync+0x119/0x200
[   71.819627][ T1090]        __x64_sys_close+0x7f/0x110
[   71.821332][ T1090]        do_syscall_64+0xfa/0x3b0
[   71.822967][ T1090]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.825067][ T1090] 
[   71.825067][ T1090] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   71.827616][ T1090]        validate_chain+0xb9b/0x2140
[   71.829386][ T1090]        __lock_acquire+0xab9/0xd20
[   71.831085][ T1090]        lock_acquire+0x120/0x360
[   71.832958][ T1090]        __mutex_lock+0x182/0xe80
[   71.834859][ T1090]        __del_gendisk+0x129/0x9e0
[   71.836561][ T1090]        del_gendisk+0xe8/0x160
[   71.838110][ T1090]        nbd_dev_remove_work+0x47/0xe0
[   71.839838][ T1090]        process_scheduled_works+0xae1/0x17b0
[   71.841829][ T1090]        worker_thread+0x8a0/0xda0
[   71.843646][ T1090]        kthread+0x711/0x8a0
[   71.845186][ T1090]        ret_from_fork+0x3fc/0x770
[   71.846863][ T1090]        ret_from_fork_asm+0x1a/0x30
[   71.848706][ T1090] 
[   71.848706][ T1090] other info that might help us debug this:
[   71.848706][ T1090] 
[   71.852432][ T1090] Chain exists of:
[   71.852432][ T1090]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   71.852432][ T1090] 
[   71.857367][ T1090]  Possible unsafe locking scenario:
[   71.857367][ T1090] 
[   71.859909][ T1090]        CPU0                    CPU1
[   71.861894][ T1090]        ----                    ----
[   71.863852][ T1090]   rlock(&set->update_nr_hwq_lock);
[   71.865708][ T1090]                                lock(&nbd->config_lock);
[   71.868314][ T1090]                                lock(&set->update_nr_hwq_lock);
[   71.870875][ T1090]   lock(&disk->open_mutex);
[   71.872576][ T1090] 
[   71.872576][ T1090]  *** DEADLOCK ***
[   71.872576][ T1090] 
[   71.875108][ T1090] 3 locks held by kworker/u10:8/1090:
[   71.876792][ T1090]  #0: ffff8880222e3948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   71.880187][ T1090]  #1: ffffc9000695fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   71.884034][ T1090]  #2: ffff888118350188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   71.887271][ T1090] 
[   71.887271][ T1090] stack backtrace:
[   71.889163][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:8 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   71.889173][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.889180][ T1090] Workqueue: nbd-del nbd_dev_remove_work
[   71.889194][ T1090] Call Trace:
[   71.889198][ T1090]  <TASK>
[   71.889202][ T1090]  dump_stack_lvl+0x189/0x250
[   71.889215][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.889225][ T1090]  ? __pfx__printk+0x10/0x10
[   71.889233][ T1090]  ? print_lock_name+0xde/0x100
[   71.889240][ T1090]  print_circular_bug+0x2ee/0x310
[   71.889248][ T1090]  check_noncircular+0x134/0x160
[   71.889255][ T1090]  validate_chain+0xb9b/0x2140
[   71.889262][ T1090]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   71.889274][ T1090]  ? look_up_lock_class+0x74/0x170
[   71.889289][ T1090]  ? register_lock_class+0x51/0x320
[   71.889304][ T1090]  __lock_acquire+0xab9/0xd20
[   71.889320][ T1090]  ? __del_gendisk+0x129/0x9e0
[   71.889336][ T1090]  lock_acquire+0x120/0x360
[   71.889349][ T1090]  ? __del_gendisk+0x129/0x9e0
[   71.889366][ T1090]  ? check_path+0x21/0x40
[   71.889377][ T1090]  __mutex_lock+0x182/0xe80
[   71.889396][ T1090]  ? __del_gendisk+0x129/0x9e0
[   71.889410][ T1090]  ? __del_gendisk+0x129/0x9e0
[   71.889420][ T1090]  ? __pfx___mutex_lock+0x10/0x10
[   71.889429][ T1090]  ? __pfx___might_resched+0x10/0x10
[   71.889441][ T1090]  ? __lock_acquire+0xab9/0xd20
[   71.889450][ T1090]  ? disk_del_events+0xb5/0x210
[   71.889456][ T1090]  ? __del_gendisk+0xc1/0x9e0
[   71.889465][ T1090]  __del_gendisk+0x129/0x9e0
[   71.889475][ T1090]  ? del_gendisk+0xe0/0x160
[   71.889485][ T1090]  ? __pfx___del_gendisk+0x10/0x10
[   71.889495][ T1090]  ? down_read+0x1ad/0x2e0
[   71.889501][ T1090]  del_gendisk+0xe8/0x160
[   71.889511][ T1090]  nbd_dev_remove_work+0x47/0xe0
[   71.889521][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   71.889531][ T1090]  process_scheduled_works+0xae1/0x17b0
[   71.889544][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[   71.889556][ T1090]  worker_thread+0x8a0/0xda0
[   71.889567][ T1090]  ? __kthread_parkme+0x7b/0x200
[   71.889575][ T1090]  kthread+0x711/0x8a0
[   71.889582][ T1090]  ? __pfx_worker_thread+0x10/0x10
[   71.889592][ T1090]  ? __pfx_kthread+0x10/0x10
[   71.889599][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   71.889608][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.889617][ T1090]  ? __pfx_kthread+0x10/0x10
[   71.889624][ T1090]  ret_from_fork+0x3fc/0x770
[   71.889633][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[   71.889643][ T1090]  ? __switch_to_asm+0x39/0x70
[   71.889650][ T1090]  ? __switch_to_asm+0x33/0x70
[   71.889656][ T1090]  ? __pfx_kthread+0x10/0x10
[   71.889663][ T1090]  ret_from_fork_asm+0x1a/0x30
[   71.889672][ T1090]  </TASK>
[   81.113737][   T10] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
02:34:19  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=ffff888027238000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000363f6c0 RSP=ffffc9000363f560
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555c01f500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56a16e56c0 CR3=0000000028d88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f56a0a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000695ee10
R8 =ffff888021628237 R9 =1ffff110042c5046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fa R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56a0b7e2d8 CR3=0000000108c12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f62e9411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
