last executing test programs:

2.3997163s ago: executing program 1 (id=2):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, 0x0, &(0x7f0000000080))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x2, 0x4, 0x800, 0x0, 0x0, 0x75, 0x0, 0x5}, {0x1ff, 0xfffffffff, 0xff, 0x24}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0x2, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r8 = syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000680)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x818082)
ioctl$SG_SET_FORCE_PACK_ID(r9, 0x227b, &(0x7f00000001c0)=0x2001)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r10, 0x0)
r11 = fcntl$dupfd(r9, 0x0, r9)
read$FUSE(r11, &(0x7f0000003800)={0x2020}, 0x2020)
syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, &(0x7f00000001c0)={0x14, &(0x7f0000000300)={0x0, 0x23, 0xe8, {0xe8, 0xb, "041a516e8961582293e7dd3a17ccb4dc0a818bee99227c0226b4877914141a14570d5c1d904320e00a8591a6dac77bcdd7bf543a69d561505ab3250484e898b74b6363071109f5ff4eb4365e572b8673e75143fcd138e7ad41c948c15844fe7e5869941ce871090f8fcfab5f0a09c147e84b13e71882848082af49ee3b005d65b05d09bc86c9ce4535733bbde59facb208ced45845b30b7623a810d45060b677184effdeebcb334e5fee5751b8f34753b7ada7cfa5149c5781c0c0de05c46ca9702ac6e164a7db9bd8b1539c9794db0ed69e9d68a99f1dfb82a12486883b897851bb8085d169"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="003c7a23d14ea3000000000000000000"]}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xe, 0xf5, "4147d3559a2bcb640155585b8c9622ee14f35407bdf8c5e204333a1ad40f97c5ce1249cee1c788ef12c7ea0167faba09e8f5c41ec872ac259f7b5ba816f50075926c603f5e8d7c986b4842b34bdbf1902a3fc61078a9f1698c72e5349d599d257553e4548bb14b0e0696c172a3b3b60480efa27ab6faab99f22de885d698bdec40ef6a0e93a78228342bd6f85c4272135567a257fa1cc06a8d11bf51ca40148f000bd5fafb15cbc4a5b01e334fb1305cbbb91230f1483f94b5da04599160eabede9720f7e521178e8fc2f4734a68ff74117eaea91499b5e107674fe400cf33c81b5fffd0ed72813f0a03da4df70e20eab4b1dbd715"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000004c0)={0x20, 0x81, 0x1, 'W'}, &(0x7f0000000240)=ANY=[@ANYBLOB="96b54feaeb7a0f6801d79ab6d439a000058071d451138b1987d0c2beec8c09c75e99"], &(0x7f00000006c0)={0x20, 0x83, 0x1, "ac"}, &(0x7f0000000700)={0x20, 0x84, 0x4, '#`(A'}, &(0x7f0000000740)={0x20, 0x85, 0x3, '<Iq'}})
syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x46, "0311849eae4cdddc3e7a8f5ecbc9891377e47b66962cda05cf013dc47d9cd8d1ccab65520d4aa128e93d23ba1267457dfbc875e774d22b947cdcf892ff488a215213801d2438"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.140306132s ago: executing program 3 (id=4):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a80a578020000000404840009000100ac1414bb0542d6401051a2d708f3fac8da1a297e0099c5ac0000c5b068d0bf46d3234565a0416466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c17399270714c778cfb11e9e0b390", 0x90, 0x20000040, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100))
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b27, &(0x7f0000000040))
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
r4 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x305306)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, 'wg1\x00'})
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @remote}, 0x0, 0x0, 0x0, 0x0, 0xfffd, &(0x7f0000000000)='bridge_slave_1\x00', 0x3d, 0x49, 0xfff8})

1.924868602s ago: executing program 0 (id=1):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40020}, 0x4814)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000080))
unshare(0x10000200)

1.700364206s ago: executing program 0 (id=5):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, <r1=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x70bd26, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

1.699781762s ago: executing program 2 (id=3):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x341, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x12, 0x80, 0xff, 0x20, 0x3195, 0xf280, 0xf791, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32f, 0x1, 0x3, 0xf5, 0x40, 0x4, [{{0x9, 0x4, 0x42, 0x2, 0x7, 0x9d, 0x47, 0x76, 0xc7, [], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x7, 0x7, 0x2, [@generic={0x8d, 0x33, "0760aa6f84e96c8d331a1e0295135d23f4545a8fb66defeda49eacb48ac41027a0d0fbf1920caffea814607e83a6bf96fc5d0be0f1eeec0a988cd3ee8f723e9931667ad55b02d409925625b928c9cacec141b9ffccb4fe1ebcd2f5dd08e68ebf31176967cb26c238dbe702f62d826395e315a4e4116a5b94e5919970d49e240ea4cf65b64f08023a972890"}, @generic={0xa6, 0x23, "ac31d1b64b539b9a0cdd5dbd476f47236bc63f607cd22f9ccd1094c8bb7957882964209ecb0a8ed234eb6017db4aa068b57001463a473f420f0bc3bb3ef0250f669efb8ca4233fd1a5e77947f1950a5bd8c8633ac1d0add6dd38e441dd864cbcdf7295fc8a69f07be8b779615de0fea507fd83ada731e07e61260e65a056730e070d94329f693ad8b0d46ead956a66d8896db79b35760b26910393f5b2541987f02aa8fb"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x4, 0x0, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xfe, 0x8, 0x5, [@generic={0x3a, 0xa, "abc13ed674f8d5d83007be021a96c670cf23f9bc23c26ed6cca87ff2852df21cab3487d0952f46f44ac66869b452bbc4d9a88093cf2506c1"}, @generic={0x1c, 0x11, "b8922baa2141a920441eba8aab6eddaff818970d024221a5f10c"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x9, 0x6, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x2d, 0xb9, 0x3, [@generic={0xb7, 0x21, "15ccdc53ff5e3c9499bb7606ce3dd56540a59d039d18de569184eee0f8d61fb0f0f245139208ef51a9138bbb75189b3ca8e3b5e39ca24b14b49cb25a4be4925ac07cc8efcdb954a8a6ceb71a988312b7ca73962617f1f245f95dad39264c22a3c06181f18d22d126060b40c17d348fd2363be8aff107a05ffca312882f625c9f3c467edaf459378572d0edb09a5ffd083504c5341db2707797cf8588795de537d94d9fac81ab9bb404bb89582c85d68d36e903cbf4"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x7, 0xb, 0x41, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x23, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x5, 0xb1, 0x5, [@generic={0x89, 0x2, "337b4e8b0260d36b615e7f162e6b6f9b7e6666d7daaf04686126c43ab4a5fdadd1b8a98e93584224fb4334d7767c3b4deab367494a7df532fdd868b185e8cecf84d683ff58bde37f7f8b8845197d1ea3fc03deb326685120eeb1cc1bfe76bd4752ac9989b73de9b72886889900eda99940355fb9fd10e7ebea13e282c22ef9a729cba169e5e63a"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x33}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x6, 0x41, 0x1, 0x20, 0x5}, 0x26, &(0x7f0000000440)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xbc, "ea5537332e240626525281faf9beb3f8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x5b, 0x6}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x422}}, {0x3e, &(0x7f0000000540)=@string={0x3e, 0x3, "4030113f40b429a52e89f14e4f47ce8879c016ba20e2d8fad00d52a1c33ddfe9051de08ccffc1edc9b28256202c04df8439ab5ab228335c093f2795a"}}, {0x8f, &(0x7f0000000580)=@string={0x8f, 0x3, "5922bba69a1cbd09b8ed3f00e788ecccef69035be4b488da605174729e9f24d6a9d05f7cddd7aaceb1ac994636f874dd83abc196f784f5128cb5f111ee98b215a189a5cbc6b92c04067e1c7f570ea5200dac49295c355126a352b6030e31e0d494427ca4dc25021a7576fac37d0f8aba3963ecce3fa14e555a10bcd50cbfc5fbb921d180f94b6b938e536fddb1"}}, {0xe, &(0x7f0000000640)=@string={0xe, 0x3, "f2ff02a69573b7b32d0921b7"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x280a}}]})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)="3f16", 0x2, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
wait4(r2, 0x0, 0x8, 0x0)

1.662956153s ago: executing program 1 (id=6):
r0 = fsopen(&(0x7f0000000200)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x1e0300, 0x127)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)='W', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r4, 0x2}, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x20000002}, 0x1)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x6, @local, 0x5}}}, &(0x7f0000000100)=0xffffffffffffff0b)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r5, 0x3}, &(0x7f0000000180)=0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r2, 0xfffff000)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000240), 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = dup(r8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r8, &(0x7f0000000800)={&(0x7f0000000300)={0xa, 0x4e23, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r10 = dup(r8)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x7ff, 0x200, 0xfffffffc, 0x10000, 0x25, 0xbb, 0x5}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
write$P9_RMKNOD(r10, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x2, 0x2, 0x4}}, 0x14)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)

1.584205117s ago: executing program 0 (id=7):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad4300000000fb97b1a7613c6dcd9ae862df893eddf6dbdf82aa7d9a5900395306846913879748c7c5c2416157c95e4116e3c237bbd66e28748019dfed30fd8dd91df5473b58b950e32d77613650cd48ade1d28de541ddbec1f350763dad3600"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010012c500000800034000000001140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000001c0))
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x244)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$inet6(r7, 0x0, &(0x7f0000000040))
chmod(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x8, 0x6, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x40, 0x29, 0x0, @broadcast, @private=0xa010102, {[@noop, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "6d067f13c986675fa5"}]}, @timestamp={0x44, 0x14, 0x35, 0x0, 0xf, [0x2, 0x1, 0x7, 0x7]}]}}}}})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r9, 0x82000000)
connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xfffffffe, 0x4}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000004c0))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xbf, 0x5, 0x19, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x20, 0x1, 0x23bd2ab4}})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000140)={0x0, &(0x7f0000000040)})

1.271577379s ago: executing program 0 (id=8):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af"], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1000, 0x3, 0x9, 0x1a, "b0bf000400"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r3)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x3}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @empty, 0x3}}}, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = accept(r7, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000005280))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmsg(r5, &(0x7f00000001c0)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="feb6027ecd29150c7e2a7c7c3646b5532bbada9d86bf71fd09c6cf1bd3efbb09d1e79541228947353b356e621c94014fe7c113c1a64645ead725fdb36a5f57943a3e1308c4d7fcfda2e39b9824ba57aece805f34522e37a24c17c6836a714df2851c260d23c6a4f4ce71", 0x6a}, {&(0x7f0000000300)="09df6c74528c309d240e8598b942957de0d5f49d85c1008ba51e37c5a26443bf434a0a58db6924cd3e5b270b4a6ae541c3c635c87e35cb169bb2067148d71db64dd3f69b6d5709aa25e36b513b5d3a5cacaa58bb8b9423fde17e85c8b8d35f97eb547fec6beb04bdff0646f7390e4e37129a56b6ccb4d069dde3781068a09dedc025e82c1c253e458c3fbd813349aa06c1089e760fa7452c6de3bbed123f4681b3658e13b5d7877e03424a09ac74bab3d2d4533b686963578f21cd5b25df12aea95cde40", 0xc4}], 0x2, &(0x7f0000000440)=[{0xb0, 0x10e, 0x1495, "f211f7e3fb61f8367555859a07da6642011b0a7de765fffc03427b3f5bc52b326587f392cd0fabbb23bbf57991f22550e33471387f941ec6292d76afad40d1a890de78a37764c533e33d4e1692692947fe10d71d5a4722f63188f70f8d0fc34cdf5879761d3495c2d3788acdcd040e3038b86705e7434952bd609e5a4acfe59874bf7c1e8ccfd7bc7efddeb8640153b320ab2d1b4122670129111aa349cb979f"}], 0xb0}, 0x40001)

693.81977ms ago: executing program 1 (id=9):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @loopback}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
preadv2(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

343.002449ms ago: executing program 1 (id=10):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0)
socketpair$tipc(0x1e, 0xc0, 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff00000006030000002300000000ac1414aa339f7bf77ab948a6132c3919fe3925981eb1f723fc672fb620ecfb6dced52f3ebf1dca4a154aee4efcc321746ddbb96bc85b86bf52c42c3dd63a938168d62c11ae3d27c64ba3716ede6c816df72c2c7e8c39a6709b5f89588a8d735525be5cebc491dc40613593ec017eb82abd36aa9fc27ef286b6117c75e005c2582cccef694a7e845970dfcc12f22f73a42f6c702bb7801ad60dfaf2c0330574df9b7f2861c7d482dfdf3127cc8c7f7c3558a8cd5e03f97ce5b20be50ffea3ec7ec8d3250ae15588a476"], 0xfdef)
r3 = accept$packet(r2, 0x0, &(0x7f0000000000))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x480faf50, 0xe37, 0x5, 0xbd77, 0xed6a, 0x4}, {0x8, 0x10, 0x9, 0x3677, 0x8, 0x951b}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffbf)

0s ago: executing program 0 (id=11):
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) (async)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0xac}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts.
[   82.656303][ T5811] cgroup: Unknown subsys name 'net'
[   82.803047][ T5811] cgroup: Unknown subsys name 'cpuset'
[   82.812673][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.498106][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.081186][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.088703][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.099686][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.107244][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.113091][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.115039][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.122724][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.130853][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.145392][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.149697][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.157727][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.161316][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.167812][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.181549][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.182694][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.189685][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.202479][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.203218][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.231694][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.240291][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.819251][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   88.889394][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   88.951984][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   89.019869][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   89.119081][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.127348][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.135475][ T5822] bridge_slave_0: entered allmulticast mode
[   89.142962][ T5822] bridge_slave_0: entered promiscuous mode
[   89.183498][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.190750][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.197905][ T5822] bridge_slave_1: entered allmulticast mode
[   89.205699][ T5822] bridge_slave_1: entered promiscuous mode
[   89.274848][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.282258][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.290395][ T5820] bridge_slave_0: entered allmulticast mode
[   89.297766][ T5820] bridge_slave_0: entered promiscuous mode
[   89.335297][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.342740][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.350065][ T5820] bridge_slave_1: entered allmulticast mode
[   89.357398][ T5820] bridge_slave_1: entered promiscuous mode
[   89.368578][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.378328][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.385798][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.393215][ T5830] bridge_slave_0: entered allmulticast mode
[   89.400682][ T5830] bridge_slave_0: entered promiscuous mode
[   89.436137][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.460821][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.468516][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.476033][ T5830] bridge_slave_1: entered allmulticast mode
[   89.483470][ T5830] bridge_slave_1: entered promiscuous mode
[   89.541752][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.548968][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.556450][ T5826] bridge_slave_0: entered allmulticast mode
[   89.564320][ T5826] bridge_slave_0: entered promiscuous mode
[   89.575626][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.587512][ T5822] team0: Port device team_slave_0 added
[   89.606901][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.614368][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.622047][ T5826] bridge_slave_1: entered allmulticast mode
[   89.629814][ T5826] bridge_slave_1: entered promiscuous mode
[   89.639714][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.651604][ T5822] team0: Port device team_slave_1 added
[   89.660340][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.711053][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.779950][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.791633][ T5820] team0: Port device team_slave_0 added
[   89.798388][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.806282][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.832698][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.859847][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.871587][ T5820] team0: Port device team_slave_1 added
[   89.878025][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.885213][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.911587][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.924754][ T5830] team0: Port device team_slave_0 added
[   89.965655][ T5830] team0: Port device team_slave_1 added
[   89.999480][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.006442][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.033145][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.075629][ T5826] team0: Port device team_slave_0 added
[   90.083109][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.090893][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.117138][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.129103][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.136125][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.162303][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.189020][ T5826] team0: Port device team_slave_1 added
[   90.202905][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.210071][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.236234][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.249898][ T5835] Bluetooth: hci2: command tx timeout
[   90.249903][ T5836] Bluetooth: hci1: command tx timeout
[   90.261241][ T5824] Bluetooth: hci0: command tx timeout
[   90.302416][ T5822] hsr_slave_0: entered promiscuous mode
[   90.308947][ T5822] hsr_slave_1: entered promiscuous mode
[   90.329860][ T5835] Bluetooth: hci3: command tx timeout
[   90.348371][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.355615][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.381588][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.432169][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.439348][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.465399][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.482004][ T5820] hsr_slave_0: entered promiscuous mode
[   90.488615][ T5820] hsr_slave_1: entered promiscuous mode
[   90.495347][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   90.501696][ T5820] Cannot create hsr debugfs directory
[   90.541083][ T5830] hsr_slave_0: entered promiscuous mode
[   90.547531][ T5830] hsr_slave_1: entered promiscuous mode
[   90.554027][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   90.559841][ T5830] Cannot create hsr debugfs directory
[   90.676380][ T5826] hsr_slave_0: entered promiscuous mode
[   90.683319][ T5826] hsr_slave_1: entered promiscuous mode
[   90.690014][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   90.695749][ T5826] Cannot create hsr debugfs directory
[   91.127889][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.148490][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.180231][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.208950][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.279558][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.294135][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.305312][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.316573][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.447099][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.462562][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.474373][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.498569][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.642857][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.661463][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.673457][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.684815][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.741814][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.814554][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   91.834955][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.863543][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.870832][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.894456][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.901782][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.941334][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   91.958990][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.987272][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.994453][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.031755][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.038903][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.066014][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   92.088355][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.095516][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.127736][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.134950][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.155380][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.314167][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   92.330852][ T5824] Bluetooth: hci2: command tx timeout
[   92.331246][ T5836] Bluetooth: hci0: command tx timeout
[   92.336355][ T5835] Bluetooth: hci1: command tx timeout
[   92.369785][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.377014][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.414412][ T5835] Bluetooth: hci3: command tx timeout
[   92.422467][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.429693][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.595383][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.812425][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.901785][ T5822] veth0_vlan: entered promiscuous mode
[   92.915823][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.951749][ T5822] veth1_vlan: entered promiscuous mode
[   93.008128][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.023511][ T5826] veth0_vlan: entered promiscuous mode
[   93.068788][ T5826] veth1_vlan: entered promiscuous mode
[   93.086143][ T5822] veth0_macvtap: entered promiscuous mode
[   93.115024][ T5822] veth1_macvtap: entered promiscuous mode
[   93.126131][ T5820] veth0_vlan: entered promiscuous mode
[   93.162736][ T5820] veth1_vlan: entered promiscuous mode
[   93.184269][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.208979][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.229122][ T5826] veth0_macvtap: entered promiscuous mode
[   93.243829][ T5826] veth1_macvtap: entered promiscuous mode
[   93.256424][ T5830] veth0_vlan: entered promiscuous mode
[   93.264917][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.275904][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.289087][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.309314][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.337598][ T5830] veth1_vlan: entered promiscuous mode
[   93.366647][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.396525][ T5820] veth0_macvtap: entered promiscuous mode
[   93.410886][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.441505][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.454579][   T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.464431][ T5820] veth1_macvtap: entered promiscuous mode
[   93.488319][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.514075][   T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.539505][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.547734][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.584148][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.610595][ T5830] veth0_macvtap: entered promiscuous mode
[   93.627230][ T5830] veth1_macvtap: entered promiscuous mode
[   93.643298][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.669832][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.678292][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.715295][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.741439][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.755701][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.771534][   T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.789115][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.796433][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.803293][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.824563][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.845666][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.898208][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.931219][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.969021][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.982732][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.026950][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.039637][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.107305][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.123343][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.237784][ T5918] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4'.
[   94.247473][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.259123][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.291695][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.313125][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.368085][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.387503][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.410239][ T5835] Bluetooth: hci0: command tx timeout
[   94.410259][ T5836] Bluetooth: hci1: command tx timeout
[   94.410286][ T5836] Bluetooth: hci2: command tx timeout
[   94.489291][ T5836] Bluetooth: hci3: command tx timeout
[   94.530011][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.702114][ T5916] usb 4-1: device descriptor read/64, error -71
[   94.950270][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.089329][ T5916] usb 4-1: device descriptor read/64, error -71
[   95.199714][ T5916] usb usb4-port1: attempt power cycle
[   95.539311][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.590987][ T5916] usb 4-1: device descriptor read/8, error -71
[   95.829545][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   95.861263][ T5916] usb 4-1: device descriptor read/8, error -71
[   95.970525][ T5916] usb usb4-port1: unable to enumerate USB device
[   96.316592][ T5952] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[   96.328900][ T5952] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[   96.337368][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT(full) 
[   96.346517][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   96.356608][ T5952] RIP: 0010:__fput+0x1b5/0xa70
[   96.361421][ T5952] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 b4 0d ee ff 4d 8b 34 24 49 8d 6e 28 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 8d 0d ee ff 41 bc 60 06 00 00 4c 03
[   96.381068][ T5952] RSP: 0018:ffffc9000474fd30 EFLAGS: 00010206
[   96.387179][ T5952] RAX: 0000000000000005 RBX: ffff888032412700 RCX: dffffc0000000000
[   96.395186][ T5952] RDX: ffff888027e73d00 RSI: 0000000004000000 RDI: 0000000002000000
[   96.403185][ T5952] RBP: 0000000000000028 R08: ffffffff8fc2d477 R09: 1ffffffff1f85a8e
[   96.411278][ T5952] R10: dffffc0000000000 R11: ffffffff823a4220 R12: ffff88807ce10ab0
[   96.419286][ T5952] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888144ad9b40
[   96.427291][ T5952] FS:  0000555593f2a500(0000) GS:ffff888125b03000(0000) knlGS:0000000000000000
[   96.436254][ T5952] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.442869][ T5952] CR2: 0000200000001100 CR3: 0000000034b02000 CR4: 00000000003526f0
[   96.450880][ T5952] Call Trace:
[   96.454299][ T5952]  <TASK>
[   96.457283][ T5952]  task_work_run+0x1d4/0x260
[   96.461922][ T5952]  ? __pfx_task_work_run+0x10/0x10
[   96.467086][ T5952]  ? __se_sys_close_range+0x4ed/0x650
[   96.472579][ T5952]  ? exit_to_user_mode_loop+0x55/0x4f0
[   96.478078][ T5952]  exit_to_user_mode_loop+0xff/0x4f0
[   96.483411][ T5952]  ? rcu_is_watching+0x15/0xb0
[   96.488217][ T5952]  do_syscall_64+0x2e3/0xf80
[   96.492860][ T5952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.498962][ T5952]  ? clear_bhb_loop+0x60/0xb0
[   96.503686][ T5952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.509609][ T5952] RIP: 0033:0x7f5587d8f749
[   96.514082][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.533723][ T5952] RSP: 002b:00007ffe63458138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   96.542179][ T5952] RAX: 0000000000000000 RBX: 00000000000177f7 RCX: 00007f5587d8f749
[   96.550167][ T5952] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   96.558147][ T5952] RBP: 00007f5587fe7da0 R08: 0000000000000001 R09: 000000096345842f
[   96.566122][ T5952] R10: 0000001b2f820000 R11: 0000000000000246 R12: 00007f5587fe5fac
[   96.574099][ T5952] R13: 00007f5587fe5fa0 R14: ffffffffffffffff R15: 00007ffe63458250
[   96.582089][ T5952]  </TASK>
[   96.585125][ T5952] Modules linked in:
[   96.590322][ T5952] ---[ end trace 0000000000000000 ]---
[   96.599318][ T5836] Bluetooth: hci0: command tx timeout
[   96.604740][ T5836] Bluetooth: hci1: command tx timeout
[   96.608482][ T5824] Bluetooth: hci3: command tx timeout
[   96.615562][ T5835] Bluetooth: hci2: command tx timeout
[   96.615831][ T5952] RIP: 0010:__fput+0x1b5/0xa70
[   96.637772][ T5952] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 b4 0d ee ff 4d 8b 34 24 49 8d 6e 28 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 8d 0d ee ff 41 bc 60 06 00 00 4c 03
[   96.658778][ T5952] RSP: 0018:ffffc9000474fd30 EFLAGS: 00010206
[   96.665716][ T5952] RAX: 0000000000000005 RBX: ffff888032412700 RCX: dffffc0000000000
[   96.673830][ T5952] RDX: ffff888027e73d00 RSI: 0000000004000000 RDI: 0000000002000000
[   96.682727][ T5952] RBP: 0000000000000028 R08: ffffffff8fc2d477 R09: 1ffffffff1f85a8e
[   96.691048][ T5952] R10: dffffc0000000000 R11: ffffffff823a4220 R12: ffff88807ce10ab0
[   96.699057][ T5952] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888144ad9b40
[   96.707458][ T5952] FS:  0000555593f2a500(0000) GS:ffff888125b03000(0000) knlGS:0000000000000000
[   96.716708][ T5952] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.723656][ T5952] CR2: 0000200000001100 CR3: 0000000034b02000 CR4: 00000000003526f0
[   96.732650][ T5952] Kernel panic - not syncing: Fatal exception
[   96.739249][ T5952] Kernel Offset: disabled
[   96.743601][ T5952] Rebooting in 86400 seconds..