last executing test programs:

5.299373608s ago: executing program 1 (id=700):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0xfffb, 0x2)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@mpls_getnetconf={0x44, 0x52, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc2bc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x18}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xb2}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x40001)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000200)=""/225, &(0x7f0000000140)=0xe1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0c04014000000000200100"/30], 0x28)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) (async)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0xfffb, 0x2) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000001780)=0x3, 0x4) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@mpls_getnetconf={0x44, 0x52, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc2bc}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x18}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xb2}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x40001) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000200)=""/225, &(0x7f0000000140)=0xe1) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xa}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (async)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0c04014000000000200100"/30], 0x28) (async)

5.141575355s ago: executing program 1 (id=705):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$inet6(0xa, 0x80000, 0xa17a)
sendmmsg$inet6(r5, &(0x7f0000001200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x79e7, @local, 0x2}, 0x18, 0x0}}], 0x1, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x100, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004886}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
setsockopt(r9, 0x800000010d, 0x2, &(0x7f0000000000)="c94e2f1099", 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000eb000100811201000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)

4.334231696s ago: executing program 1 (id=715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0)
r1 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="0142943435f14642877b3d9200867224cc2cd06a2d3b00000008000300", @ANYRES32=r4, @ANYBLOB="8200330080800300ffffffffffff08021100000050505050505000001e000d01000000000000000064000805000602020202020201028cec0301ab06020200050308da022a01013c04010557022d1a004012fd07000000000000070000000b000000060000040000077206030303030303710701ff01faff8d6076060e39030002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x4, 0x3008803d, 0x4]}, &(0x7f0000000140)=0x44)
getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r5 = socket$kcm(0x2, 0x5, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4)
epoll_wait(r6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4)

3.834913233s ago: executing program 1 (id=719):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001)

2.914611367s ago: executing program 1 (id=733):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000280)={@private2, r1}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="328062a99b6290c2ca5c2a063e2260cf0fba734dce6fb02336e596626ef5e7701a2b3f57f6f836dbf85bfb2b1a1c0f8b010164f3048b301306d28b4440f2638f747aac7f7898b57cb63f6acba311999b5e07789256a8d2092f0f3e69de62ca8b287e9af8640b4701f1c668e1f445e31f1bf637b68b3f2aeeb0a3502fabbc7f5e771e80eccfd3534bb8889c6480eeec35678945198bea64b3abd8989db0b70ddd43e818ae4a33e04e220cf4ca6c9ba467ea18f7e8b23b47eafac81a0c74d403a1c4b82a2e79820454b34341d4bc", 0xcd, 0x20008045, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x6, 0x2}}}, 0x24}}, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'bond_slave_0\x00', {0x9}, 0x7ff})
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
socket(0xa, 0x3, 0x3a)

2.678822129s ago: executing program 1 (id=737):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006f537ea3c5b63ac2f764ded59ef5c06b27f1d1d6374cdd5656379272b7942dcb0b18a9539c1a8587985f1ac2f46f49cdc83cb026b313dc228c09f66b50f73ac54419bfdbf1630e86f449", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff}, 0xc)
sendmsg$nl_route(r2, 0x0, 0x40)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x8, 0x4}]}}]}, 0x38}, 0x1, 0x8100000018000000}, 0x1010)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

2.545596734s ago: executing program 4 (id=738):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e500000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc62, 0x12}}}}}, 0x28}}, 0x0) (rerun: 64)

2.326726491s ago: executing program 4 (id=740):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8})
r2 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0)

2.142867925s ago: executing program 3 (id=742):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000003c00000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

2.036779124s ago: executing program 4 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x51}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x707}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x24040000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x50000)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2de}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb1, 0xac, "6268726ae539fcd2fbf67f0eb8dcd6c3f02b694165bace62cdf9568bccf09d2ba9a511191dcd2ed301cecaf2e1e5181d89cf579f6152e5bc05f8aab55c9dfec57441f804fd4c717cbc6cc2b63e137c976ecf453058383104e149875848517568e5a43d47acda1f6a421c80c443a0592e00b760d94f8cedc727750eafb3e761e4dc33339db074acd7044a785655f3794aa57b16afb9c37b0e45181551077195075f8b7eadaa24d070feecaf6a53"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xdb, 0xac, "736089028deebca958b8df525ea66dd870583e1309ac7aad4ca3772c7cbef94903328fcbfa364cd33b0036ac46186b31dc0cc33573658c21ed6f906e3ad1ac3664f0ab70054abe896e778d95f6e6d7361ec3f07260dd909db4a32ce12b7415061ad70a2baea424c6ce1c0209d1fe0904e22643c548fca7744e7e94da542541b41c462a8b1efe22aaefd929146020080d53da792aa6bd696a649e998a7931d0f5124a7680e6df314114c5b4fcd2255a2a93b774362f60421c94549eaa26ba7513c7360d3d2de22810ac3f5198f452bcc8408962197e2b7e"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xc}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x2400c041}, 0x4000005)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
sendmsg$NFT_BATCH(r4, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xb}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e54afe2}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9d0}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xb7}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x9f, 0x6, "56adea5437a7bebb3a4f48871553e7feeef6a19d44ab8ba44fbf56c1b2c8eea2428b0ad366d0a4aebff8ca2ae2d8bd28b569f3c5ec1e64dc9e484109cb06896d99676c82f423c488874e85a3b913bee4ca07dc9f77c75ac778f16fe3d7247a83c50b92a0522eb869df9f9369aab1f89f6b620618af10bb7ac1fc1bd8c4ddcae891a31a4070e2b3f38c5479943b82cd9fd64c9c14e1a9a583551d1e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x354}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000009c0)=<r5=>0x0)
syz_open_procfs$namespace(r5, &(0x7f0000000a00)='ns/time_for_children\x00')
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000a40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x63, 0x1, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]})
r6 = accept(r4, &(0x7f0000000ac0)=@qipcrtr, &(0x7f0000000b40)=0x80)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000d80)={'gre0\x00', <r8=>0x0, 0x8000, 0x700, 0x1, 0x2, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x67, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @multicast2, {[@timestamp={0x44, 0x1c, 0x54, 0x0, 0x3, [0x200, 0x7f, 0x84, 0x4, 0x2, 0x10001]}, @timestamp_addr={0x44, 0x54, 0xbb, 0x1, 0x6, [{@private=0xa010101, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}, {@local, 0x2}, {@private=0xa010100, 0x4}, {@multicast2, 0x9}, {@empty, 0x3ff}, {@broadcast, 0x2}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xfffffff7}, {@loopback, 0x5}]}, @noop]}}}}})
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040041)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fffffff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc048810}, 0x4048040)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan4\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan3\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan3\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan0\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wpan1\x00', <r15=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, r10, 0xba, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x88}}, 0x4)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x85f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

1.809907661s ago: executing program 4 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@deltclass={0x480, 0x29, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xf, 0x2}, {0x0, 0x8}, {0x1, 0x10}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x448, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x4}, 0x10, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xd0, 0x0, 0x6, 0x6, 0x5adc, 0x1, 0x4, 0x4, 0x7f, 0x2, 0x0, 0x489, 0xffff, 0x2, 0x3, 0x80000000, 0xfcba, 0x5, 0x8256, 0x80, 0x6, 0x80f, 0x80000000, 0x0, 0x1, 0x2, 0x81, 0x10000, 0x49, 0xb14f, 0xb6, 0x9, 0x8, 0x8000, 0x26, 0x16, 0x4, 0xb, 0x6, 0x7, 0x9, 0x7, 0x401, 0x3, 0x7ee6, 0x3, 0x800, 0x9, 0x6, 0x1, 0xb7, 0x4, 0x1, 0xe, 0x6, 0x7, 0x36, 0xffffffff, 0x10, 0x40, 0x35, 0x8, 0x2, 0x4, 0x1, 0x280000, 0x1, 0xc85, 0x4, 0x401, 0x81, 0x3, 0x10000, 0x3ff, 0x4, 0x64, 0x6, 0x2, 0x7, 0x9, 0x8, 0x97, 0x4, 0x33, 0x3, 0x5, 0x7fff, 0x9, 0xc, 0x1ff, 0xd4, 0x6, 0x0, 0x0, 0x7f, 0x9, 0x3, 0x1, 0x2, 0x8, 0x1, 0x0, 0x5, 0x9, 0x2, 0x9, 0x3, 0xc468, 0xfffffffd, 0x62, 0x3, 0x2, 0x3, 0x5, 0x5, 0x6, 0x0, 0x7, 0x7b15, 0xb8c8, 0x100, 0xca4, 0xaffa, 0x3ff, 0x1ff, 0x3ff, 0x7, 0x4, 0x50, 0x1, 0x28f2, 0x7, 0x3, 0x800, 0x3, 0x7, 0xffffffff, 0x0, 0x5, 0x3, 0xe, 0x7f, 0x7f, 0x27, 0x9, 0x8, 0x3ff, 0x46906950, 0x4, 0x2, 0xc, 0x5, 0x4, 0x0, 0x7, 0x2, 0x9, 0xce0, 0x6ed, 0x0, 0x40, 0xfffffffb, 0x80, 0x4, 0xfffff2dd, 0x9, 0x21661418, 0x5, 0x5, 0x4e5, 0x2, 0x1, 0x8, 0x85e5, 0xfffffff9, 0x6, 0x9, 0x4, 0xd, 0x1, 0x1, 0x81, 0x8001, 0x2, 0x4, 0x9f900000, 0x200, 0x10, 0x6fd, 0x4, 0x0, 0x3, 0x6, 0x4, 0x1, 0x3, 0x3ff, 0x7, 0x8000, 0x8bb, 0x7, 0xfffffff1, 0x7, 0x1c0000, 0x0, 0xffffffff, 0x6, 0x4, 0x5, 0x6, 0x8, 0x40, 0x2, 0x5, 0x2, 0x80000000, 0x3, 0x1, 0x18, 0x9, 0x2, 0x301, 0x7f, 0x4, 0x1000, 0x0, 0x56, 0x1, 0x3ad9, 0x3, 0x81, 0xffff, 0x8, 0x2, 0x10001, 0x3, 0x6, 0x6106, 0x0, 0x4, 0xffff840c, 0x7fff, 0x8000, 0x3e6, 0x80000000, 0x8, 0xfffff7d0, 0x2, 0xb9, 0x2, 0xac0, 0x9, 0x6, 0x7fffffff, 0x3ff, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0x9}, 0x4, 0x400}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7f, 0x3, 0x4, 0x6, 0x7, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0xb}, 0x1000, 0xb}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)

1.758920993s ago: executing program 0 (id=745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2b, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg$can_raw(r2, &(0x7f0000000700)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f0000000640)=""/191, 0xbf}], 0x6}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.542701835s ago: executing program 3 (id=748):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002bbd7079ffdbdf252370d2ee08000800ffffffff14000700fe8800000000000000000000018df5bfbf7ecda4330309293897cc9a971157f3044a936879291a53d4eb6bb727f0d4a741bf330b83b434839077092e280598a6d25a45d6141fb20ce09f637f00f22e73f21b8606000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000810)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40)

1.434886231s ago: executing program 2 (id=749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8, 0xffffffffffffffff, @void, @value}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES64=r4, @ANYBLOB="050037"], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000)
socket$xdp(0x2c, 0x3, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pB    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.329410276s ago: executing program 3 (id=750):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020e711800b000100697014746e6c00001000028004001300080014000100008009ceb596fb0932cc92d44f2b0cae1653f996ff0e5f2e4c8b7eb259124781bef110ea0c78c7c5f9993c6b55841f1b1af0a1cd6cea80bd540b058e79a10d58fc0093f81810b7dcd73e7886d170f94d88"], 0x40}}, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'\x00', 0x3})
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8})
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x6, 0x18}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x26, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0xa, 0xa, 0x100, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x49e3918f8df2897c, 0x2, 0x4, 0xffffffffffffffc0}]}, &(0x7f0000000280)='GPL\x00', 0x80000000, 0xf4, &(0x7f0000000680)=""/244, 0x41000, 0x1, '\x00', r7, 0x25, r10, 0x8, &(0x7f0000000340)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x6, 0xfffffffc, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r11], 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001700)=@newqdisc={0x6c, 0x24, 0xf0b, 0x80000000, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x4}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x5}}}]}, 0x6c}}, 0x44040)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000040)=0x400002, 0x4)
bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000080)=0x5, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x1d, r2})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x4000000000002b3, 0x0)

1.1812257s ago: executing program 2 (id=751):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5, 0x0, 0x3}, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)

1.034684914s ago: executing program 2 (id=752):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005", @ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
syz_emit_ethernet(0x3e, &(0x7f0000002180)=ANY=[], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}]}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x12, 0x9, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40010)

936.097021ms ago: executing program 4 (id=753):
socket$inet(0x2, 0x4, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
socket$inet(0x2, 0x4, 0x3) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async)

882.85006ms ago: executing program 0 (id=754):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000040)
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2fa}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x48}, 0x0)

658.820466ms ago: executing program 2 (id=755):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x80000000, 0xfffffe01, 0x2}, 0x10) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
sendmsg$rds(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/19, 0x13}], 0x2, &(0x7f0000000480)=[@mask_cswp={0x58, 0x114, 0x9, {{0xc76, 0x3}, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x7f, 0x100, 0xe, 0x8, 0xfff, 0x0, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffff8, 0x101}, &(0x7f00000002c0)=0xfff, &(0x7f0000000300)=0x4, 0x9, 0x5, 0x702d, 0x0, 0x20, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x800}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0xeb}, &(0x7f0000000380)=0x80000001, &(0x7f00000003c0)=0x401, 0x4, 0x6, 0x0, 0x4, 0xc, 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0xf9a4}, &(0x7f0000000400)=0x3, &(0x7f0000000440)=0x2, 0x5, 0x9, 0x3, 0x2, 0x20, 0x2}}], 0x190}, 0x48000) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)

657.70337ms ago: executing program 4 (id=756):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000009200000000000000000000000000000000fd3e9c53086a88ff8aaf87bdd4caedba857616a32bf52900cb5854faf99dfa9d0ae2a151a557207f99786fccbcad0934e0584ebedd19fec4d4678c06a1c6bfb5b10807"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000240)}, 0x20)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a00090000000000000000020000020900010073797a30000000000c00024000dfff000000000104000880140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
pwrite64(r2, &(0x7f0000000580)="1eada57b4fa51d12642d1e5d30596c536db22df252bafb929700a8a0dc5b3a4c09dfa629d1f97f6bc6e1af3402cfeb31f34344a536278171", 0x38, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x8910, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x800, 0xb, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000001c0)={0x4468, 0x7, 0x2, 0x9, 0x3, 0x3})
recvfrom(r4, &(0x7f0000000300)=""/85, 0x55, 0x40000000, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000180))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
ioctl(r6, 0x8b1b, &(0x7f0000000040))
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
socket$alg(0x26, 0x5, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000540)='cgroup.stat\x00', 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000006c0), &(0x7f0000000240)=ANY=[@ANYBLOB="18020000080211000000505050aa8e57e02d62ee42ac1a50ff317715740f565a115754c7e10fae7a87977ec81e58d128874eb1bf3af0178bdb9a1800000000000000000000000000439dfb21d878ee2b8a46a46fa8086f8d0370ee4d072ac18458910837f500144068769d3e9fce53069d87a238394af68e856fbcb51d10a016a73fcc935b08f9b0a77a155d72a329f4f2a86a596238ad9098b6b832fc1ba9fdebbb87850725c2"], 0x18)

607.224975ms ago: executing program 0 (id=757):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x65}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

522.379213ms ago: executing program 2 (id=758):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000004000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

338.828872ms ago: executing program 0 (id=759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x56}, {{0x0, 0x0, 0x0}, 0x9}], 0x7, 0x40000000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'wg2\x00', {0x2, 0x4e22, @rand_addr=0x64010100}})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x4015}, 0x8800)

313.050884ms ago: executing program 3 (id=760):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000000)="8e", 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4000)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33)
splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa)
r4 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa)

177.05283ms ago: executing program 3 (id=761):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r0=>0x0, 0x29, 0x11, 0xc, 0x0, 0x42, @local, @empty, 0x80, 0x8000, 0x6ea}})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=<r1=>r0, 0x15, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=@routing={0x2f, 0xe, 0x0, 0xb1, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, @remote, @remote, @loopback]}, 0x78) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='vegas\x00', 0x6) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) (async)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r6=>r1, 0x0, 0x1, 0xa, 0x90, 0x8, @empty, @loopback, 0x8, 0x7800, 0xff, 0x8001}}) (async)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r7, 0xf1c11b20e51ca3, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x83}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8014}, 0x4000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x8010, r2, 0xcfc3a000) (async)
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r3) (async, rerun: 32)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r8, 0x0, 0x1000, 0xb, &(0x7f0000000700)="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", &(0x7f0000001700)=""/11, 0xfffffff8, 0x0, 0x6a, 0x76, &(0x7f0000001740)="e2cf631be70db5631f985e1c662b36a0171b057bb60814b62b1e42b89b79ca9158577fdac2af9871d4f48a852de0ae05cb86534fabab710582fba5b49cd30e065810e0b9714858ae96459cdf539c762fdeed5174829acb9662020e5b8c8f705dbc79e4cf45ee52499e89", &(0x7f00000017c0)="cce26e64537395cb5fea22bd6d6cdce63e3ee1c1536fd84efc984a4820e8504d7146548da5405e81d819134dc1a75d6f19c172b5bdfa40bacdd55a21d4ea238d815fb2189aca441daeab80d5e56cc106fc20cd474f91b5674bbc6e89fff0e3d88126900f3c91832b3eb982cf8673973ec6f0613387f5", 0x2, 0x0, 0x6a7}, 0x50) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001940)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfea, 0x49}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001a80)="e6db8ce1710cf5ba5ce383d4e8c8d0819a6455a3398337773ce584325e41ea5cb4c47d0f7c415a99fb79e58be01004915f94dda3a4ba70287fa9d1a802595f58ea1a8f67a419018e985a0566adc2f5195d1e50fa213fb22a856a", 0x5a, 0x880, &(0x7f0000001b00)={0x2, 0x4e23, @multicast2}, 0x10) (async)
getsockopt$inet_tcp_buf(r12, 0x6, 0x1f, &(0x7f0000001b40)=""/172, &(0x7f0000001c00)=0xac) (async, rerun: 64)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001cc0)={<r14=>r2, 0x5, 0x80, 0x9})
bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@bloom_filter={0x1e, 0x47e, 0x81, 0x4, 0x10004, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x3, @void, @value, @value=r14}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001d00)={'wlan0\x00'})

165.178525ms ago: executing program 0 (id=762):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020eb0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100001e, 0x13, r0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000040bc001000800000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba40ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f0000000340)=0x4)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020eb0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100001e, 0x13, r0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000040bc001000800000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba40ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f0000000340)=0x4) (async)

54.91612ms ago: executing program 2 (id=763):
r0 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20)
getsockname$llc(r0, 0x0, &(0x7f00000002c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd28}, 0x1c}}, 0x0)

10.378174ms ago: executing program 0 (id=764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408241, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000001880)="02454305", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x7, 0x6, @random="ae28d5c18c7c"}, 0x14)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=@deltclass={0x87c, 0x29, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xb}, {0x10, 0xb}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x10}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_htb={{0x8}, {0x830, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x800}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_RTAB={0x404, 0x4, [0x6636ae82, 0x8, 0xffffffb0, 0x7, 0x7, 0x7, 0x80000001, 0x0, 0xe46, 0x9, 0x7, 0x2, 0x6, 0x8000, 0x9, 0x9, 0x76, 0xb6e, 0x2ce, 0x5f2, 0x8, 0x2, 0xfffffffc, 0x0, 0x7, 0x6, 0x9, 0x100, 0x2, 0xfffff4e0, 0xffffffff, 0x20, 0x3, 0xf4, 0x75, 0x80000000, 0x7, 0x7, 0x8, 0x7, 0x10001, 0x8, 0x6, 0x0, 0x0, 0xa98, 0x10, 0xefe, 0x6, 0x7, 0x9, 0x58313f18, 0xa9, 0x400, 0x401, 0x2, 0x4, 0x40, 0xadd, 0xfffffffa, 0x8, 0x0, 0x8090000, 0xdb6a, 0x3, 0xfffffff9, 0x401, 0x0, 0xb9, 0x9, 0x5, 0x8001, 0xd, 0x2, 0x8, 0xffff, 0x40, 0xc, 0x9, 0x6, 0x82c0, 0xfffffffb, 0x9, 0x5, 0x3ac2, 0x7, 0x5, 0x6a9f, 0x0, 0x6, 0xf9, 0x8001, 0x3, 0x80000000, 0x178b862a, 0xc20, 0x1, 0x2, 0xfffffff7, 0xd1, 0x6, 0x3, 0x400, 0x9, 0x3, 0x8, 0x3, 0x1, 0xfffffff9, 0xbd53, 0x0, 0x8000, 0x4, 0x0, 0x9, 0x9, 0x2, 0xb, 0x1, 0x10001, 0xde, 0x8, 0x9, 0x7, 0x2, 0x8, 0x9, 0x9, 0x9, 0x1, 0xe000, 0x2, 0x9, 0x41fb, 0x7, 0x7, 0x4cb98b8b, 0x1, 0x9, 0x7, 0xffff7420, 0x2, 0x9, 0x3a8e, 0x4, 0x100, 0x83, 0x4, 0x1, 0x0, 0x0, 0x3c60, 0x8, 0xc9, 0xc, 0x3, 0xfffffff9, 0xe37d, 0x10, 0x5, 0x3, 0x7, 0x7fffffff, 0xe, 0x4, 0x1, 0xffffffff, 0xfffffb43, 0x9, 0x9, 0x401, 0xffffffc0, 0x6, 0x800, 0x4, 0xf91a, 0x9, 0x1, 0x1, 0xfff, 0x6, 0x6, 0x7ff, 0x5, 0x149, 0x4, 0x80000000, 0x2, 0xd35, 0x9, 0x5, 0x3, 0x2, 0x200, 0x80000000, 0x2, 0xd, 0x8001, 0x9, 0x90c1, 0x2, 0x8001, 0xd685, 0xcb, 0x2, 0x3, 0x2, 0x6, 0x1ff, 0x76, 0x2, 0x4, 0x7, 0x6, 0x40, 0x8, 0x1, 0xfffffff6, 0x5, 0x8a, 0xe, 0x7, 0x7fffffff, 0x9, 0x8, 0x0, 0x7fffffff, 0x2, 0x7, 0xfffffffe, 0x6, 0x1, 0xaed, 0x5, 0x5, 0x4, 0x2, 0x10001, 0x401, 0x1, 0x1, 0xfffffffd, 0x7, 0xffffffff, 0x7, 0x1, 0xa, 0x10001, 0x34, 0xfffff95c, 0x5, 0x40, 0x2, 0xfffffffb, 0x9, 0x8]}, @TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x5, 0x3f4eedf6, 0xf, 0x6, 0xffff, 0x3, 0x3, 0x9, 0x2, 0x4, 0x40, 0x9, 0x4, 0xb, 0x2, 0x5, 0xfff, 0x7fffffff, 0x1, 0x0, 0x2, 0x2, 0x4, 0x7, 0xffffc80e, 0x1, 0x4, 0x0, 0x5, 0xa, 0x5, 0x57b6, 0xfffffffe, 0xfff, 0x689a9573, 0x0, 0x6, 0x8, 0x4, 0x3ff, 0x7, 0x6, 0x4, 0x401, 0x1, 0x7, 0x2af9, 0x4, 0x6fac, 0x2, 0x0, 0x32000000, 0xe, 0x4, 0x7, 0x8, 0x8001, 0x6, 0x3, 0x40, 0x1, 0x0, 0x6, 0x80, 0x7, 0x3, 0x10000, 0xfffffff9, 0x2, 0x2d, 0x1, 0x4, 0x100, 0xfff, 0x5, 0x80880000, 0x8, 0x8, 0x7, 0x7, 0x53, 0x10, 0x1, 0x9, 0x7, 0x800, 0x7ff, 0x2, 0xfffffffe, 0xfe3c3d2, 0x9, 0x2, 0x0, 0xce, 0x6, 0x4, 0xffff569c, 0x6, 0x8, 0x200, 0x6, 0xb, 0xef, 0x9, 0x55, 0x5, 0x0, 0x0, 0x1, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0xc, 0x4, 0xb597, 0xfec, 0xa, 0xa90b, 0x5, 0xb7ab, 0x1, 0xffffff0e, 0x6, 0xee3, 0x6, 0x6, 0x100, 0x391, 0x6df, 0x5, 0x1318c8ee, 0x7, 0x6, 0x9, 0x4527, 0xd3fe, 0xc01, 0x2, 0x66d1, 0xb, 0xf7d, 0x401, 0xff, 0x80000000, 0x0, 0x9, 0x2, 0xd, 0x3, 0x9, 0x1, 0x5, 0x401, 0x1, 0xb, 0x40, 0x800, 0x2, 0x7fffffff, 0xe3, 0x2b, 0x5, 0x5, 0x5, 0x7, 0x0, 0x9, 0x5, 0x7fffffff, 0x647, 0x307e, 0x40, 0x8, 0x2, 0x5, 0x95a, 0x10001, 0x0, 0x6, 0x5, 0x3, 0x7, 0xfffffff4, 0x0, 0x2800, 0x24000, 0x3, 0x5, 0x9, 0x3, 0xf, 0x4, 0x4, 0x5, 0x6, 0x1, 0x2b, 0x5, 0x2648, 0x0, 0x5, 0x7, 0x8001, 0x8, 0x7ff, 0xfffffff7, 0xfffffff4, 0x40c9, 0x41c, 0x3, 0xffffffff, 0xffffffff, 0x8, 0x6, 0x6, 0xb8c2d61, 0x200, 0x3, 0x7, 0xfffffffc, 0xa8, 0x2, 0xe, 0xf9, 0x8, 0xb4, 0x0, 0x4, 0x4, 0x2, 0xd, 0x95c3, 0x8, 0x1, 0xa, 0x8, 0x40, 0x6, 0x9, 0xfff, 0x79, 0xfffffff7, 0x7, 0x3, 0x1000000, 0x1d91, 0x7, 0x1, 0xfffffff8, 0x7, 0x7f, 0xf, 0x7]}, @TCA_HTB_RATE64={0xc, 0x6, 0x81}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000000)
getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f0000000340))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @remote, @mcast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x1b}}}, 0x34)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'gre0\x00', @link_local})

0s ago: executing program 3 (id=765):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x7, 0x7fff, {{0x1a, 0x4, 0x0, 0x15, 0x68, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x66, 0x0, 0x6, [0x7, 0xffff9358]}, @timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x0, [{@loopback, 0x6}, {@multicast1, 0xa1e1}]}, @timestamp_prespec={0x44, 0x34, 0x5a, 0x3, 0xb, [{@local, 0x20000000}, {@rand_addr=0x64010101, 0x8}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x2}, {@loopback, 0x4}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r1=>0x0, 0x7, 0x700, 0x7, 0x7fff, {{0x1a, 0x4, 0x0, 0x15, 0x68, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x66, 0x0, 0x6, [0x7, 0xffff9358]}, @timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x0, [{@loopback, 0x6}, {@multicast1, 0xa1e1}]}, @timestamp_prespec={0x44, 0x34, 0x5a, 0x3, 0xb, [{@local, 0x20000000}, {@rand_addr=0x64010101, 0x8}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x2}, {@loopback, 0x4}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x28, 0x26, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x5, 0x5}, {0xfffa, 0x4}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts.
[   82.586837][ T5835] cgroup: Unknown subsys name 'net'
[   82.723345][ T5835] cgroup: Unknown subsys name 'cpuset'
[   82.733402][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.402361][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.017900][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.026362][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.037129][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.045367][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.053027][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.061535][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.079992][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.099088][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.107105][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.116702][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.124965][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.132581][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.140161][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.149118][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.156848][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.159201][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.184334][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.198205][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.206939][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.215177][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.227327][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.237189][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.244843][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.253053][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.260500][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.875248][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   88.167717][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   88.186417][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   88.290231][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   88.302911][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   88.325866][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.333167][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.341261][ T5846] bridge_slave_0: entered allmulticast mode
[   88.349227][ T5846] bridge_slave_0: entered promiscuous mode
[   88.407426][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.415143][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.422671][ T5846] bridge_slave_1: entered allmulticast mode
[   88.430374][ T5846] bridge_slave_1: entered promiscuous mode
[   88.565427][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.573101][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.581216][ T5854] bridge_slave_0: entered allmulticast mode
[   88.589257][ T5854] bridge_slave_0: entered promiscuous mode
[   88.600306][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.633942][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.641534][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.649389][ T5854] bridge_slave_1: entered allmulticast mode
[   88.656618][ T5854] bridge_slave_1: entered promiscuous mode
[   88.666943][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.735487][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.743661][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.751065][ T5849] bridge_slave_0: entered allmulticast mode
[   88.758808][ T5849] bridge_slave_0: entered promiscuous mode
[   88.814598][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.822304][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.830284][ T5849] bridge_slave_1: entered allmulticast mode
[   88.837571][ T5849] bridge_slave_1: entered promiscuous mode
[   88.870816][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.877983][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.885469][ T5861] bridge_slave_0: entered allmulticast mode
[   88.893120][ T5861] bridge_slave_0: entered promiscuous mode
[   88.903353][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.910675][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.917877][ T5861] bridge_slave_1: entered allmulticast mode
[   88.926026][ T5861] bridge_slave_1: entered promiscuous mode
[   88.935369][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.947868][ T5846] team0: Port device team_slave_0 added
[   88.972380][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.015471][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.040242][ T5846] team0: Port device team_slave_1 added
[   89.048915][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.058223][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.065973][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.073797][ T5845] bridge_slave_0: entered allmulticast mode
[   89.081213][ T5845] bridge_slave_0: entered promiscuous mode
[   89.090056][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.097211][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.104824][ T5845] bridge_slave_1: entered allmulticast mode
[   89.112389][ T5845] bridge_slave_1: entered promiscuous mode
[   89.202132][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.212841][ T5856] Bluetooth: hci0: command tx timeout
[   89.223174][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.235558][ T5854] team0: Port device team_slave_0 added
[   89.244399][ T5854] team0: Port device team_slave_1 added
[   89.266705][ T5849] team0: Port device team_slave_0 added
[   89.288885][ T5856] Bluetooth: hci3: command tx timeout
[   89.288908][ T5848] Bluetooth: hci2: command tx timeout
[   89.288958][ T5852] Bluetooth: hci1: command tx timeout
[   89.339504][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.346490][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.372897][ T5852] Bluetooth: hci4: command tx timeout
[   89.379560][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.393424][ T5849] team0: Port device team_slave_1 added
[   89.402874][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.415572][ T5861] team0: Port device team_slave_0 added
[   89.436301][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.443456][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.472518][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.514443][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.541391][ T5861] team0: Port device team_slave_1 added
[   89.562334][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.571458][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.599095][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.617615][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.624770][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.651327][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.677891][ T5845] team0: Port device team_slave_0 added
[   89.687588][ T5845] team0: Port device team_slave_1 added
[   89.694408][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.701572][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.728175][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.765725][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.773007][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.799978][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.870793][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.877788][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.904014][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.917664][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.924784][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.952072][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.997043][ T5846] hsr_slave_0: entered promiscuous mode
[   90.003671][ T5846] hsr_slave_1: entered promiscuous mode
[   90.019900][ T5854] hsr_slave_0: entered promiscuous mode
[   90.026290][ T5854] hsr_slave_1: entered promiscuous mode
[   90.033243][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.041497][ T5854] Cannot create hsr debugfs directory
[   90.073646][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.080663][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.107034][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.173154][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.180426][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.206981][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.268256][ T5861] hsr_slave_0: entered promiscuous mode
[   90.274921][ T5861] hsr_slave_1: entered promiscuous mode
[   90.281756][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.289798][ T5861] Cannot create hsr debugfs directory
[   90.321840][ T5849] hsr_slave_0: entered promiscuous mode
[   90.328295][ T5849] hsr_slave_1: entered promiscuous mode
[   90.334779][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.342988][ T5849] Cannot create hsr debugfs directory
[   90.434839][ T5845] hsr_slave_0: entered promiscuous mode
[   90.443563][ T5845] hsr_slave_1: entered promiscuous mode
[   90.450118][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.459036][ T5845] Cannot create hsr debugfs directory
[   90.973015][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.991473][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.004501][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.014597][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.113161][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.127289][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.140446][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.153428][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.207119][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.221455][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.234879][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.265506][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.294750][ T5852] Bluetooth: hci0: command tx timeout
[   91.368708][ T5852] Bluetooth: hci2: command tx timeout
[   91.369174][ T5856] Bluetooth: hci1: command tx timeout
[   91.374243][ T5848] Bluetooth: hci3: command tx timeout
[   91.391326][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.406178][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.418090][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.448721][ T5848] Bluetooth: hci4: command tx timeout
[   91.456585][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.587404][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.612874][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.631962][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.644524][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.663668][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.692882][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.732602][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   91.768205][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   91.796219][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.803534][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.840017][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.847200][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.857530][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.864690][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.879205][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.886355][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.908904][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.029131][   T10] cfg80211: failed to load regulatory.db
[   92.047736][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   92.093487][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.100981][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.126346][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.133522][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.185327][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.318117][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   92.376078][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.383334][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.405104][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.412289][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.443550][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.594686][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.614790][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   92.653780][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.691023][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.698178][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.722027][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.729313][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.936180][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.957883][ T5845] veth0_vlan: entered promiscuous mode
[   93.021092][ T5845] veth1_vlan: entered promiscuous mode
[   93.195801][ T5845] veth0_macvtap: entered promiscuous mode
[   93.208778][ T5845] veth1_macvtap: entered promiscuous mode
[   93.215951][ T5854] veth0_vlan: entered promiscuous mode
[   93.267237][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.284150][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.300290][ T5854] veth1_vlan: entered promiscuous mode
[   93.341748][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.355119][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.367458][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.377122][ T5848] Bluetooth: hci0: command tx timeout
[   93.387165][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.396021][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.438048][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.449746][ T5848] Bluetooth: hci1: command tx timeout
[   93.455300][ T5848] Bluetooth: hci2: command tx timeout
[   93.456724][ T5846] veth0_vlan: entered promiscuous mode
[   93.466440][ T5856] Bluetooth: hci3: command tx timeout
[   93.511122][ T5846] veth1_vlan: entered promiscuous mode
[   93.529214][ T5848] Bluetooth: hci4: command tx timeout
[   93.543342][ T5854] veth0_macvtap: entered promiscuous mode
[   93.584832][ T5849] veth0_vlan: entered promiscuous mode
[   93.617550][ T5854] veth1_macvtap: entered promiscuous mode
[   93.661649][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.673179][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.685755][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.719927][ T5849] veth1_vlan: entered promiscuous mode
[   93.735596][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.747397][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.763483][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.775845][ T5846] veth0_macvtap: entered promiscuous mode
[   93.821091][ T5861] veth0_vlan: entered promiscuous mode
[   93.832653][ T5846] veth1_macvtap: entered promiscuous mode
[   93.845605][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.857359][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.866800][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.876065][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.896300][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.911134][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.979071][ T5861] veth1_vlan: entered promiscuous mode
[   94.010939][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.022600][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.033348][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.043948][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.055592][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.076070][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.084870][ T5849] veth0_macvtap: entered promiscuous mode
[   94.084925][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.122823][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.133913][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.143880][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.155229][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.166449][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.176643][ T5849] veth1_macvtap: entered promiscuous mode
[   94.217803][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.228145][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.236380][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.237293][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.254484][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.263360][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.281061][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.296777][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.306761][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.317673][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.327702][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.338638][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.350898][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.382718][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.393469][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.415747][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.425822][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.436686][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.447182][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.458121][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.470353][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.515184][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.532408][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.542202][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.549714][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.562203][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.572672][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.600181][ T5861] veth0_macvtap: entered promiscuous mode
[   94.642300][ T5861] veth1_macvtap: entered promiscuous mode
[   94.747973][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.766229][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.778185][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.788874][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.798819][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.809875][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.821141][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.834074][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.845971][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.897868][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.914796][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.925132][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.944955][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.957518][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.970930][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.981236][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.991843][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.003602][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.014590][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.029248][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.040152][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   95.047080][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.059107][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.068007][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.076917][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.095357][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.108166][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.220254][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.247499][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.273553][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.310086][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.351638][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.454392][ T5848] Bluetooth: hci0: command tx timeout
[   95.497369][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.498838][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'.
[   95.529675][ T5848] Bluetooth: hci2: command tx timeout
[   95.535188][ T5856] Bluetooth: hci3: command tx timeout
[   95.537129][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.540699][ T5852] Bluetooth: hci1: command tx timeout
[   95.608593][ T5848] Bluetooth: hci4: command tx timeout
[   95.707683][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.731748][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.808519][ T5957] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[   95.836060][ T5954] Zero length message leads to an empty skb
[   96.639230][ T5991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15'.
[   97.014803][ T6006] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.113391][ T6010] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   97.135096][ T6006] mac80211_hwsim hwsim7 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   97.362953][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26'.
[   97.395598][ T6021] netlink: 'syz.1.27': attribute type 32 has an invalid length.
[   97.421577][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   97.475654][ T6021] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[   97.499194][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.752431][ T6035] sock: sock_timestamping_bind_phc: sock not bind to device
[   98.168317][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37'.
[   98.217508][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.37'.
[   99.150499][   T47] IPVS: starting estimator thread 0...
[   99.278885][ T6098] IPVS: using max 27 ests per chain, 64800 per kthread
[   99.327990][ T6102] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[   99.473329][ T6111] x_tables: duplicate underflow at hook 1
[   99.487898][ T6105] x_tables: duplicate underflow at hook 3
[   99.931067][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'.
[  100.014104][ T6127] openvswitch: netlink: Actions may not be safe on all matching packets
[  100.954249][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'.
[  100.964496][ T6167] netlink: 'syz.2.75': attribute type 5 has an invalid length.
[  101.052103][ T4441] wlan0: Trigger new scan to find an IBSS to join
[  101.254656][ T6176] netlink: 13 bytes leftover after parsing attributes in process `syz.2.77'.
[  101.429816][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'.
[  101.507959][ T6189] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  101.537002][ T6192] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  101.911587][ T6209] netlink: 'syz.0.86': attribute type 4 has an invalid length.
[  102.002325][ T6217] netlink: 'syz.0.86': attribute type 4 has an invalid length.
[  102.017083][ T6207] netlink: 'syz.4.87': attribute type 21 has an invalid length.
[  102.098780][ T6207] netlink: 'syz.4.87': attribute type 6 has an invalid length.
[  102.106402][ T6207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.87'.
[  102.165892][ T6209] netlink: 'syz.0.86': attribute type 12 has an invalid length.
[  102.225112][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[  102.468099][ T6235] Bluetooth: MGMT ver 1.23
[  102.612533][ T6235] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.91'.
[  102.922732][ T6251] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[  102.990925][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'.
[  104.041615][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.114'.
[  105.458491][ T6334] netlink: 11 bytes leftover after parsing attributes in process `syz.2.124'.
[  105.470682][ T6334] netlink: 11 bytes leftover after parsing attributes in process `syz.2.124'.
[  106.013126][ T1102] wlan0: Trigger new scan to find an IBSS to join
[  106.493169][ T6375] netlink: 'syz.0.138': attribute type 21 has an invalid length.
[  106.506559][ T6378] __nla_validate_parse: 1 callbacks suppressed
[  106.506581][ T6378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'.
[  106.539968][ T6375] netlink: 128 bytes leftover after parsing attributes in process `syz.0.138'.
[  106.549735][ T6383] netlink: 'syz.0.138': attribute type 21 has an invalid length.
[  106.563621][ T6383] netlink: 128 bytes leftover after parsing attributes in process `syz.0.138'.
[  106.655263][ T6375] netlink: 'syz.0.138': attribute type 4 has an invalid length.
[  106.725580][ T6375] netlink: 'syz.0.138': attribute type 5 has an invalid length.
[  106.729053][ T6382] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.139'.
[  106.798448][ T6375] netlink: 3 bytes leftover after parsing attributes in process `syz.0.138'.
[  106.814199][ T6383] netlink: 'syz.0.138': attribute type 4 has an invalid length.
[  106.833737][ T6383] netlink: 'syz.0.138': attribute type 5 has an invalid length.
[  106.842375][ T6383] netlink: 3 bytes leftover after parsing attributes in process `syz.0.138'.
[  106.997851][ T1102] wlan0: Creating new IBSS network, BSSID 46:58:ec:0c:0f:80
[  107.112973][ T6408] xt_TCPMSS: Only works on TCP SYN packets
[  107.123366][ T6403] netlink: 212392 bytes leftover after parsing attributes in process `syz.0.146'.
[  107.137803][ T6403] openvswitch: netlink: Message has 4 unknown bytes.
[  107.437977][ T6422] syzkaller1: entered promiscuous mode
[  107.451027][ T6422] syzkaller1: entered allmulticast mode
[  107.461561][ T6422] lo: entered allmulticast mode
[  107.469199][ T6422] lo: left allmulticast mode
[  107.650512][ T6430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.153'.
[  107.688884][ T6430] netlink: 7 bytes leftover after parsing attributes in process `syz.0.153'.
[  107.711096][ T6430] netlink: 'syz.0.153': attribute type 6 has an invalid length.
[  107.752041][ T6430] netlink: 'syz.0.153': attribute type 5 has an invalid length.
[  107.789184][   T30] audit: type=1107 audit(1745496464.227:2): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  107.807302][ T6430] netlink: 'syz.0.153': attribute type 4 has an invalid length.
[  107.820655][ T6430] netlink: 7 bytes leftover after parsing attributes in process `syz.0.153'.
[  108.148094][ T6458] netlink: zone id is out of range
[  109.027887][ T6449] validate_nla: 1 callbacks suppressed
[  109.027907][ T6449] netlink: 'syz.1.160': attribute type 1 has an invalid length.
[  109.045216][ T6449] netlink: 'syz.1.160': attribute type 2 has an invalid length.
[  109.053445][ T6449] netlink: 'syz.1.160': attribute type 1 has an invalid length.
[  109.063505][ T6458] bridge_slave_1: left allmulticast mode
[  109.078647][ T6458] bridge_slave_1: left promiscuous mode
[  109.098825][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.156678][ T6458] bridge_slave_0: left allmulticast mode
[  109.167833][ T6458] bridge_slave_0: left promiscuous mode
[  109.185834][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.576704][ T6479] delete_channel: no stack
[  109.977702][ T6486] netlink: 'syz.0.170': attribute type 5 has an invalid length.
[  110.263132][ T6506] : entered promiscuous mode
[  111.239206][ T6557] netlink: 'syz.4.196': attribute type 3 has an invalid length.
[  111.743859][ T6585] __nla_validate_parse: 8 callbacks suppressed
[  111.743885][ T6585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.205'.
[  111.774511][ T6582] can: request_module (can-proto-4) failed.
[  112.177718][ T6609] netlink: 'syz.4.210': attribute type 13 has an invalid length.
[  112.202085][ T6609] netlink: 'syz.4.210': attribute type 58 has an invalid length.
[  112.211730][ T6609] netlink: 152 bytes leftover after parsing attributes in process `syz.4.210'.
[  112.599726][ T6625] x_tables: duplicate underflow at hook 1
[  112.646142][ T6629] pimreg3: entered allmulticast mode
[  112.652260][ T6633] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  113.200310][ T6661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.328019][ T6664] openvswitch: netlink: IPv6 tunnel dst address is zero
[  113.393488][ T6661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.552986][ T6661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.563318][ T6683] netlink: 104 bytes leftover after parsing attributes in process `syz.1.231'.
[  113.699251][ T6661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.861410][ T6661] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.893932][ T6661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.976779][ T6661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.996608][ T6661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.083793][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.236'.
[  114.117175][ T6714] netlink: 'syz.0.238': attribute type 13 has an invalid length.
[  114.153477][ T6714] veth0_macvtap: left promiscuous mode
[  114.159502][ T6714] macvtap0: entered allmulticast mode
[  114.168121][ T6714] macvtap0: refused to change device tx_queue_len
[  114.328204][ T6717] netlink: 'syz.1.240': attribute type 1 has an invalid length.
[  114.397504][ T6720] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  114.427610][ T6717] netlink: 'syz.1.240': attribute type 5 has an invalid length.
[  114.447163][ T6720] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  114.677251][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.084413][ T6759] dvmrp0: entered allmulticast mode
[  115.247626][ T6764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.253'.
[  115.271273][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'.
[  115.303173][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'.
[  115.348503][ T6763] bridge_slave_1: left allmulticast mode
[  115.359067][ T6763] bridge_slave_1: left promiscuous mode
[  115.381983][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.439870][ T6763] bridge_slave_0: left allmulticast mode
[  115.455436][ T6763] bridge_slave_0: left promiscuous mode
[  115.469412][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.481449][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'.
[  115.490485][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'.
[  115.571767][ T6772] trusted_key: syz.1.258 sent an empty control message without MSG_MORE.
[  115.736157][ T6784] IPv6: sit1: Disabled Multicast RS
[  115.769841][ T6790] openvswitch: netlink: IP tunnel dst address not specified
[  115.951310][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.038638][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  116.086243][ T6804] ieee802154 phy0 wpan0: encryption failed: -22
[  116.329039][ T5856] Bluetooth: hci0: command 0x0401 tx timeout
[  116.337209][ T5848] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  116.559463][ T6828] dvmrp0: entered allmulticast mode
[  116.774045][ T6834] syz_tun: entered promiscuous mode
[  116.785501][ T6834] syz_tun: left promiscuous mode
[  117.001288][ T6850] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  117.347450][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.933506][ T6900] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.432374][ T6926] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20001
[  118.637561][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.680055][ T6897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.852462][ T6897] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.865654][ T6897] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.878916][ T6897] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.889605][ T6897] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.050257][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.055160][ T6897] syz.4.296 (6897) used greatest stack depth: 19256 bytes left
[  119.061897][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.083405][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.095589][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.109993][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.123770][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.137168][ T6901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.150976][ T6901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.397672][ T6961] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[  119.433840][ T6961] __nla_validate_parse: 3 callbacks suppressed
[  119.433862][ T6961] netlink: 244 bytes leftover after parsing attributes in process `syz.0.305'.
[  119.488147][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.306'.
[  119.503751][ T6967] netlink: 76 bytes leftover after parsing attributes in process `syz.0.305'.
[  119.915826][ T6985] netlink: 'syz.0.312': attribute type 2 has an invalid length.
[  119.989459][ T6989] netlink: 1364 bytes leftover after parsing attributes in process `syz.3.313'.
[  120.280654][ T7001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.316'.
[  120.331682][ T7001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.467024][ T7001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.734981][ T7025] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  120.985776][ T7035] netlink: 'syz.1.325': attribute type 3 has an invalid length.
[  121.009505][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.325'.
[  121.374969][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'.
[  121.532680][ T7065] netlink: 'syz.1.333': attribute type 10 has an invalid length.
[  121.570555][ T7068] FAULT_INJECTION: forcing a failure.
[  121.570555][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  121.588957][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.597534][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.630242][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.0.334 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) 
[  121.630273][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  121.630291][ T7068] Call Trace:
[  121.630311][ T7068]  <TASK>
[  121.630320][ T7068]  dump_stack_lvl+0x241/0x360
[  121.630370][ T7068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.630400][ T7068]  ? __pfx__printk+0x10/0x10
[  121.630442][ T7068]  should_fail_ex+0x424/0x570
[  121.630479][ T7068]  _copy_from_user+0x2d/0xb0
[  121.630508][ T7068]  move_addr_to_kernel+0x7f/0x170
[  121.630534][ T7068]  copy_msghdr_from_user+0x477/0x580
[  121.630566][ T7068]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  121.630589][ T7068]  ? __fget_files+0x2a/0x420
[  121.630612][ T7068]  ? __fget_files+0x2a/0x420
[  121.630641][ T7068]  __sys_sendmsg+0x20a/0x360
[  121.630667][ T7068]  ? __pfx___sys_sendmsg+0x10/0x10
[  121.630744][ T7068]  ? do_syscall_64+0xb6/0x210
[  121.630770][ T7068]  do_syscall_64+0xf3/0x210
[  121.630792][ T7068]  ? clear_bhb_loop+0x45/0xa0
[  121.630817][ T7068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.630837][ T7068] RIP: 0033:0x7fd55818e969
[  121.630859][ T7068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.630874][ T7068] RSP: 002b:00007fd555ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.630899][ T7068] RAX: ffffffffffffffda RBX: 00007fd5583b5fa0 RCX: 00007fd55818e969
[  121.630915][ T7068] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  121.630928][ T7068] RBP: 00007fd555ff6090 R08: 0000000000000000 R09: 0000000000000000
[  121.630940][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.630952][ T7068] R13: 0000000000000000 R14: 00007fd5583b5fa0 R15: 00007ffc24edd378
[  121.630983][ T7068]  </TASK>
[  121.673510][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.828784][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.836522][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.843811][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.958162][ T7065] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  122.049431][ T7079] netlink: 2 bytes leftover after parsing attributes in process `syz.4.336'.
[  122.291998][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.517631][ T7105] netlink: 'syz.1.346': attribute type 1 has an invalid length.
[  122.537893][ T7105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.346'.
[  122.780067][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[  123.006184][ T5896] IPVS: starting estimator thread 0...
[  123.108476][ T7133] IPVS: using max 29 ests per chain, 69600 per kthread
[  123.269266][ T7145] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  123.270877][ T7146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.682903][ T7169] nbd: must specify an index to disconnect
[  123.746774][ T7169] team0: entered promiscuous mode
[  123.762398][ T7169] team_slave_0: entered promiscuous mode
[  123.780257][ T7169] team_slave_1: entered promiscuous mode
[  123.810432][ T7169] batadv_slave_1: entered promiscuous mode
[  123.852616][ T7176] bond1: entered promiscuous mode
[  123.857857][ T7176] bond1: entered allmulticast mode
[  123.863780][ T7176] 8021q: adding VLAN 0 to HW filter on device bond1
[  124.095465][ T7176] bond1 (unregistering): Released all slaves
[  124.908969][ T7222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.575942][ T7264] __nla_validate_parse: 7 callbacks suppressed
[  125.575964][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.391'.
[  125.800435][ T7273] batadv0: entered promiscuous mode
[  125.807761][ T7273] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  125.823586][ T7273] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  126.085548][ T7292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  126.252668][ T7301] x_tables: unsorted underflow at hook 2
[  126.307398][ T7303] nbd: device at index 4 is going down
[  126.327725][ T7301] bridge1: entered promiscuous mode
[  126.351246][ T7301] bridge1: entered allmulticast mode
[  126.401071][ T7301] x_tables: unsorted underflow at hook 2
[  126.562356][ T7311] ip6gre1: entered allmulticast mode
[  126.834228][ T7329] netlink: 'syz.1.414': attribute type 7 has an invalid length.
[  126.843126][ T7333] netlink: 'syz.3.413': attribute type 29 has an invalid length.
[  126.873772][ T7333] netlink: 'syz.3.413': attribute type 29 has an invalid length.
[  126.956323][ T7329] : entered promiscuous mode
[  126.959296][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'.
[  126.969961][ T7333] netlink: 'syz.3.413': attribute type 29 has an invalid length.
[  127.083976][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.419'.
[  127.239231][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.421'.
[  127.300033][   T24] IPVS: starting estimator thread 0...
[  127.300242][ T7358] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  127.398619][ T7363] IPVS: using max 33 ests per chain, 79200 per kthread
[  127.506871][ T7371] xt_CT: You must specify a L4 protocol and not use inversions on it
[  127.948054][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[  128.032985][ T7399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.433'.
[  128.143936][ T7405] netlink: 'syz.0.438': attribute type 1 has an invalid length.
[  128.156729][ T7405] netlink: 232 bytes leftover after parsing attributes in process `syz.0.438'.
[  128.175087][ T7406] netlink: 'syz.4.439': attribute type 4 has an invalid length.
[  128.189899][ T7406] ieee802154 phy0 wpan0: encryption failed: -22
[  128.645948][ T7437] mac80211_hwsim hwsim11 �
: renamed from wlan1 (while UP)
[  128.675815][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.448'.
[  128.707689][ T7439] vlan2: entered allmulticast mode
[  128.758026][ T7439] bond0: entered allmulticast mode
[  128.767072][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.450'.
[  128.787313][ T7439] bond_slave_0: entered allmulticast mode
[  128.807114][ T7439] bond_slave_1: entered allmulticast mode
[  129.274124][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[  129.625988][ T7484] netlink: 'syz.1.462': attribute type 4 has an invalid length.
[  129.689042][ T7491] netlink: 'syz.1.462': attribute type 4 has an invalid length.
[  129.917888][ T7499] netlink: 'syz.0.466': attribute type 1 has an invalid length.
[  130.334637][ T7519] xt_CT: No such helper "pptp"
[  130.401058][ T7531] netlink: 'syz.4.475': attribute type 1 has an invalid length.
[  130.409195][ T7531] NCSI netlink: No device for ifindex 0
[  130.630709][ T7538] veth1_to_batadv: entered promiscuous mode
[  130.763516][ T7542] __nla_validate_parse: 5 callbacks suppressed
[  130.763540][ T7542] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'.
[  130.867265][ T7549] netlink: 248 bytes leftover after parsing attributes in process `syz.4.481'.
[  131.006829][ T7558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.260746][ T7564] FAULT_INJECTION: forcing a failure.
[  131.260746][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.320404][ T7570] raw_sendmsg: syz.2.486 forgot to set AF_INET. Fix it!
[  131.332612][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.4.485 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) 
[  131.332651][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.332664][ T7564] Call Trace:
[  131.332672][ T7564]  <TASK>
[  131.332681][ T7564]  dump_stack_lvl+0x241/0x360
[  131.332721][ T7564]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.332750][ T7564]  ? __pfx__printk+0x10/0x10
[  131.332792][ T7564]  should_fail_ex+0x424/0x570
[  131.332829][ T7564]  _copy_to_user+0x31/0xb0
[  131.332859][ T7564]  simple_read_from_buffer+0xc4/0x170
[  131.332896][ T7564]  proc_fail_nth_read+0x1ef/0x260
[  131.332921][ T7564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.332945][ T7564]  ? rw_verify_area+0x246/0x630
[  131.332972][ T7564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  131.332995][ T7564]  vfs_read+0x21f/0xb90
[  131.333029][ T7564]  ? __pfx___mutex_lock+0x10/0x10
[  131.333052][ T7564]  ? __pfx_vfs_read+0x10/0x10
[  131.333083][ T7564]  ? __fget_files+0x2a/0x420
[  131.333105][ T7564]  ? __fget_files+0x39d/0x420
[  131.333123][ T7564]  ? __fget_files+0x2a/0x420
[  131.333153][ T7564]  ksys_read+0x19d/0x2d0
[  131.333184][ T7564]  ? __pfx_ksys_read+0x10/0x10
[  131.333218][ T7564]  ? do_syscall_64+0xb6/0x210
[  131.333244][ T7564]  do_syscall_64+0xf3/0x210
[  131.333266][ T7564]  ? clear_bhb_loop+0x45/0xa0
[  131.333291][ T7564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.333311][ T7564] RIP: 0033:0x7f3c1c18d37c
[  131.333329][ T7564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  131.333345][ T7564] RSP: 002b:00007f3c1d035030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  131.333368][ T7564] RAX: ffffffffffffffda RBX: 00007f3c1c3b5fa0 RCX: 00007f3c1c18d37c
[  131.333382][ T7564] RDX: 000000000000000f RSI: 00007f3c1d0350a0 RDI: 0000000000000005
[  131.333395][ T7564] RBP: 00007f3c1d035090 R08: 0000000000000000 R09: 0000000000000000
[  131.333407][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.333418][ T7564] R13: 0000000000000000 R14: 00007f3c1c3b5fa0 R15: 00007ffd846270b8
[  131.333450][ T7564]  </TASK>
[  131.826636][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'.
[  132.117365][ T7607] validate_nla: 2 callbacks suppressed
[  132.117389][ T7607] netlink: 'syz.0.493': attribute type 19 has an invalid length.
[  132.221334][ T7597] xt_CT: No such helper "syz1"
[  132.922235][ T7644] veth0: entered promiscuous mode
[  132.982870][ T7644] veth0: left promiscuous mode
[  133.393820][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.479755][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.512497][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.547804][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.608156][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.660303][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.697410][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.773922][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  133.800652][ T7671] netlink: 'syz.4.512': attribute type 13 has an invalid length.
[  134.138135][ T7698] xt_CT: No such helper "snmp"
[  134.471962][ T7725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.525'.
[  134.889741][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[  135.088272][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.530'.
[  135.202699][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.211435][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.240429][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[  135.330330][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.534'.
[  135.339504][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'.
[  135.590332][ T5848] block nbd2: Receive control failed (result -32)
[  135.862824][ T7790] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  135.939447][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  136.120864][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'.
[  136.168679][ T7799] xt_l2tp: unknown flags: 18
[  136.364759][ T7813] tipc: Started in network mode
[  136.383318][ T7813] tipc: Node identity 7ee94f91bd4b, cluster identity 4711
[  136.427782][ T7813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.595073][ T7821] syzkaller0: entered promiscuous mode
[  136.603400][ T7821] syzkaller0: entered allmulticast mode
[  136.613223][ T7821] tipc: Resetting bearer <eth:syzkaller0>
[  136.643063][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'.
[  136.735377][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[  136.756853][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[  137.168507][ T7864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.350297][ T7868] validate_nla: 57 callbacks suppressed
[  137.350319][ T7868] netlink: 'syz.1.556': attribute type 21 has an invalid length.
[  137.446078][ T6946] tipc: Node number set to 3282194321
[  138.102453][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  138.370007][ T7807] tipc: Disabling bearer <eth:syzkaller0>
[  138.381675][ T7848] netlink: 'syz.2.551': attribute type 3 has an invalid length.
[  138.619152][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[  138.648718][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'.
[  138.681368][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'.
[  138.735195][ T7879] netlink: 'syz.4.560': attribute type 11 has an invalid length.
[  138.743567][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'.
[  138.771667][ T7879] netlink: 'syz.4.560': attribute type 11 has an invalid length.
[  138.778280][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'.
[  138.789314][ T7879] netlink: 224 bytes leftover after parsing attributes in process `syz.4.560'.
[  138.811584][ T7881] netlink: 'syz.0.561': attribute type 14 has an invalid length.
[  139.055057][ T7888] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.836235][ T7937] netlink: 'syz.3.576': attribute type 12 has an invalid length.
[  140.103991][ T7949] vlan2: entered allmulticast mode
[  140.144464][ T7949] batadv0: entered allmulticast mode
[  140.220872][ T7957] netlink: 'syz.0.580': attribute type 3 has an invalid length.
[  140.511779][ T7972] netlink: 'syz.0.585': attribute type 4 has an invalid length.
[  140.608533][ T7977] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  141.489535][ T8016] __nla_validate_parse: 10 callbacks suppressed
[  141.489560][ T8016] netlink: 56 bytes leftover after parsing attributes in process `syz.3.598'.
[  141.536778][ T8020] netlink: 'syz.2.599': attribute type 23 has an invalid length.
[  141.898098][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'.
[  141.948157][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.603'.
[  141.974729][ T8038] netlink: 'syz.1.604': attribute type 10 has an invalid length.
[  142.017481][ T8038] bridge0: port 3(team0) entered blocking state
[  142.046851][ T8041] No such timeout policy "syz0"
[  142.055752][ T8043] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.606'.
[  142.089794][ T8038] bridge0: port 3(team0) entered disabled state
[  142.108702][ T8038] team0: entered allmulticast mode
[  142.126701][ T8038] team_slave_0: entered allmulticast mode
[  142.163436][ T8038] team_slave_1: entered allmulticast mode
[  142.189481][ T8038] team0: left allmulticast mode
[  142.194657][ T8038] team_slave_0: left allmulticast mode
[  142.205381][ T8038] team_slave_1: left allmulticast mode
[  142.407280][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'.
[  142.591592][ T8072] x_tables: duplicate underflow at hook 1
[  142.608950][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'.
[  142.837332][ T8082] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  143.347606][ T8107] dvmrp0: entered allmulticast mode
[  143.688996][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'.
[  143.970008][ T8140] xt_l2tp: missing protocol rule (udp|l2tpip)
[  144.046115][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'.
[  144.169305][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'.
[  144.252458][ T8154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.282482][ T8154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.308520][ T8154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.332045][ T8154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.360465][ T8154] geneve2: entered promiscuous mode
[  144.395985][ T8154] geneve2: entered allmulticast mode
[  144.665244][ T8175] Driver unsupported XDP return value 0 on prog  (id 127) dev N/A, expect packet loss!
[  144.807389][ T8183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.643'.
[  145.183267][ T8197] SET target dimension over the limit!
[  145.373880][ T8209] xt_TPROXY: Can be used only with -p tcp or -p udp
[  145.432160][ T8209] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[  145.505311][ T8216] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002
[  145.682611][ T8224] xt_cluster: node mask cannot exceed total number of nodes
[  145.769753][ T8228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.777347][ T8228] IPv6: NLM_F_CREATE should be set when creating new route
[  145.851100][ T8232] bridge0: port 1(gretap0) entered blocking state
[  145.891780][ T8232] bridge0: port 1(gretap0) entered disabled state
[  145.903159][ T8232] gretap0: entered allmulticast mode
[  145.911135][ T8232] gretap0: entered promiscuous mode
[  146.545398][ T8266] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32)
[  146.584616][ T8266] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32)
[  146.626930][ T8276] __nla_validate_parse: 1 callbacks suppressed
[  146.626953][ T8276] netlink: 516 bytes leftover after parsing attributes in process `syz.3.673'.
[  146.753838][ T8281] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  146.810655][ T8281] netlink: 224 bytes leftover after parsing attributes in process `syz.2.675'.
[  146.839705][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'.
[  146.885211][ T8294] dvmrp0: left allmulticast mode
[  147.686999][ T8345] netlink: 2 bytes leftover after parsing attributes in process `syz.2.693'.
[  147.705974][ T8348] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[  148.178568][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.702'.
[  148.249036][ T5856] Bluetooth: hci4: command 0x0405 tx timeout
[  148.269564][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'.
[  148.375379][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.707'.
[  149.301480][ T8423] netlink: 140 bytes leftover after parsing attributes in process `syz.1.715'.
[  149.658842][ T8438] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.721'.
[  149.688853][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  149.694102][ T8438] netlink: zone id is out of range
[  149.706531][ T8438] netlink: zone id is out of range
[  149.718808][ T8441] netlink: 'syz.2.722': attribute type 15 has an invalid length.
[  149.726645][ T8438] netlink: get zone limit has 8 unknown bytes
[  149.744075][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.753366][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.762576][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.771804][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.781073][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.790257][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  149.799456][ T8437] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  150.561696][ T8478] netlink: 'syz.1.733': attribute type 2 has an invalid length.
[  151.123916][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807c45c000: rx timeout, send abort
[  151.133919][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c45c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  151.478255][ T8516] unsupported nlmsg_type 40
[  151.783113][ T8535] netlink: 'syz.4.744': attribute type 1 has an invalid length.
[  151.954018][ T8535] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.987675][ T8540] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.003081][ T8547] __nla_validate_parse: 6 callbacks suppressed
[  152.003101][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  152.003384][ T8540] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  152.031749][ T8540] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  152.103720][ T8550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.750'.
[  152.924551][ T8575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.133116][ T8581] netlink: 'syz.3.760': attribute type 12 has an invalid length.
[  153.141479][ T8581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.760'.
[  153.451166][ T4436] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  153.475050][ T4436] ------------[ cut here ]------------
[  153.480787][ T4436] WARNING: CPU: 1 PID: 4436 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x735/0x7c0
[  153.491336][ T4436] Modules linked in:
[  153.495536][ T4436] CPU: 1 UID: 0 PID: 4436 Comm: kworker/u8:8 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) 
[  153.508487][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  153.519004][ T4436] Workqueue: events_unbound cfg80211_wiphy_work
[  153.525310][ T4436] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0
[  153.532023][ T4436] Code: e8 00 6d 2b f6 eb 05 e8 f9 6c 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea 6c 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc 6c 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 14 60 90 80 e1 07 80 c1 03 38 c1 0f 8c
[  153.551728][ T4436] RSP: 0018:ffffc9000dbf7880 EFLAGS: 00010293
[  153.557851][ T4436] RAX: ffffffff8b974de4 RBX: 0000000000000000 RCX: ffff8880347a9e00
[  153.566028][ T4436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  153.574455][ T4436] RBP: ffffc9000dbf7ac0 R08: ffffffff8b974bfe R09: 1ffff92001b7eec0
[  153.582577][ T4436] R10: dffffc0000000000 R11: fffff52001b7eec1 R12: 0000000000000006
[  153.590666][ T4436] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888029d58e80
[  153.598975][ T4436] FS:  0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000
[  153.608680][ T4436] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.615318][ T4436] CR2: 000000110c28e4fd CR3: 000000007e522000 CR4: 00000000003526f0
[  153.623734][ T4436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  153.631831][ T4436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  153.639907][ T4436] Call Trace:
[  153.643228][ T4436]  <TASK>
[  153.646225][ T4436]  ieee80211_ibss_work+0xe2b/0x14e0
[  153.651547][ T4436]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  153.657491][ T4436]  ? lockdep_hardirqs_on+0x9d/0x150
[  153.662821][ T4436]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.669265][ T4436]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  153.674970][ T4436]  ? skb_dequeue+0x113/0x150
[  153.679669][ T4436]  ? ieee80211_iface_work+0xdeb/0x1100
[  153.685173][ T4436]  ? ieee80211_iface_work+0x1050/0x1100
[  153.690912][ T4436]  ? rcu_is_watching+0x15/0xb0
[  153.695733][ T4436]  cfg80211_wiphy_work+0x2f0/0x490
[  153.700982][ T4436]  ? process_scheduled_works+0x9cb/0x18e0
[  153.707345][ T4436]  process_scheduled_works+0xac3/0x18e0
[  153.713152][ T4436]  ? __pfx_process_scheduled_works+0x10/0x10
[  153.719259][ T4436]  ? assign_work+0x367/0x3d0
[  153.723917][ T4436]  worker_thread+0x870/0xd50
[  153.728620][ T4436]  ? __kthread_parkme+0x1a8/0x200
[  153.733697][ T4436]  ? __pfx_worker_thread+0x10/0x10
[  153.738934][ T4436]  kthread+0x7b7/0x940
[  153.743052][ T4436]  ? __pfx_worker_thread+0x10/0x10
[  153.748207][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.752914][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.757561][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.762374][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.767044][ T4436]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.772469][ T4436]  ? lockdep_hardirqs_on+0x9d/0x150
[  153.777712][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.782435][ T4436]  ret_from_fork+0x4b/0x80
[  153.786896][ T4436]  ? __pfx_kthread+0x10/0x10
[  153.791603][ T4436]  ret_from_fork_asm+0x1a/0x30
[  153.796429][ T4436]  </TASK>
[  153.799546][ T4436] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  153.806857][ T4436] CPU: 1 UID: 0 PID: 4436 Comm: kworker/u8:8 Not tainted 6.15.0-rc2-syzkaller-00282-gd861a5dbb960 #0 PREEMPT(full) 
[  153.819047][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  153.829139][ T4436] Workqueue: events_unbound cfg80211_wiphy_work
[  153.835435][ T4436] Call Trace:
[  153.838740][ T4436]  <TASK>
[  153.841693][ T4436]  dump_stack_lvl+0x241/0x360
[  153.846415][ T4436]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.851658][ T4436]  ? __pfx__printk+0x10/0x10
[  153.856295][ T4436]  ? vscnprintf+0x5d/0x90
[  153.860671][ T4436]  panic+0x349/0x880
[  153.864608][ T4436]  ? __warn+0x174/0x4d0
[  153.868803][ T4436]  ? __pfx_panic+0x10/0x10
[  153.873273][ T4436]  ? ret_from_fork_asm+0x1a/0x30
[  153.878247][ T4436]  __warn+0x344/0x4d0
[  153.882263][ T4436]  ? ieee80211_request_ibss_scan+0x735/0x7c0
[  153.888279][ T4436]  report_bug+0x2b3/0x500
[  153.892640][ T4436]  ? ieee80211_request_ibss_scan+0x735/0x7c0
[  153.898664][ T4436]  ? ieee80211_request_ibss_scan+0x735/0x7c0
[  153.904682][ T4436]  ? ieee80211_request_ibss_scan+0x737/0x7c0
[  153.910694][ T4436]  handle_bug+0x89/0x170
[  153.915056][ T4436]  exc_invalid_op+0x1a/0x50
[  153.919576][ T4436]  asm_exc_invalid_op+0x1a/0x20
[  153.924443][ T4436] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0
[  153.931041][ T4436] Code: e8 00 6d 2b f6 eb 05 e8 f9 6c 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea 6c 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc 6c 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 14 60 90 80 e1 07 80 c1 03 38 c1 0f 8c
[  153.950650][ T4436] RSP: 0018:ffffc9000dbf7880 EFLAGS: 00010293
[  153.956726][ T4436] RAX: ffffffff8b974de4 RBX: 0000000000000000 RCX: ffff8880347a9e00
[  153.964705][ T4436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  153.972680][ T4436] RBP: ffffc9000dbf7ac0 R08: ffffffff8b974bfe R09: 1ffff92001b7eec0
[  153.980659][ T4436] R10: dffffc0000000000 R11: fffff52001b7eec1 R12: 0000000000000006
[  153.988647][ T4436] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888029d58e80
[  153.996629][ T4436]  ? ieee80211_request_ibss_scan+0x54e/0x7c0
[  154.002617][ T4436]  ? ieee80211_request_ibss_scan+0x734/0x7c0
[  154.008649][ T4436]  ieee80211_ibss_work+0xe2b/0x14e0
[  154.013882][ T4436]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  154.019798][ T4436]  ? lockdep_hardirqs_on+0x9d/0x150
[  154.025010][ T4436]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  154.031360][ T4436]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  154.037014][ T4436]  ? skb_dequeue+0x113/0x150
[  154.041613][ T4436]  ? ieee80211_iface_work+0xdeb/0x1100
[  154.047082][ T4436]  ? ieee80211_iface_work+0x1050/0x1100
[  154.052639][ T4436]  ? rcu_is_watching+0x15/0xb0
[  154.057414][ T4436]  cfg80211_wiphy_work+0x2f0/0x490
[  154.062579][ T4436]  ? process_scheduled_works+0x9cb/0x18e0
[  154.068322][ T4436]  process_scheduled_works+0xac3/0x18e0
[  154.073938][ T4436]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.079947][ T4436]  ? assign_work+0x367/0x3d0
[  154.084561][ T4436]  worker_thread+0x870/0xd50
[  154.089176][ T4436]  ? __kthread_parkme+0x1a8/0x200
[  154.094214][ T4436]  ? __pfx_worker_thread+0x10/0x10
[  154.099343][ T4436]  kthread+0x7b7/0x940
[  154.103427][ T4436]  ? __pfx_worker_thread+0x10/0x10
[  154.108554][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.113172][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.117786][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.122395][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.127018][ T4436]  ? _raw_spin_unlock_irq+0x23/0x50
[  154.132253][ T4436]  ? lockdep_hardirqs_on+0x9d/0x150
[  154.137472][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.142091][ T4436]  ret_from_fork+0x4b/0x80
[  154.146520][ T4436]  ? __pfx_kthread+0x10/0x10
[  154.151127][ T4436]  ret_from_fork_asm+0x1a/0x30
[  154.155912][ T4436]  </TASK>
[  154.159252][ T4436] Kernel Offset: disabled
[  154.163584][ T4436] Rebooting in 86400 seconds..