x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x92c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:54 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:54 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4f}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe003], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:54 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104ca0200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x92d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x60}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe402], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x0, 0x2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2464.678266] xt_check_target: 17 callbacks suppressed
[ 2464.678283] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2464.733327] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2464.766891] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:35:55 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104d90200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:55 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe600], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x92e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:55 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x0, 0x2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2465.110004] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2465.110197] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:35:56 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104e40200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x92f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2465.582017] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2465.594380] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2465.613696] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:35:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x930, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x214}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x0, 0x2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x68}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:56 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf001], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x931, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2466.009869] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2466.035496] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:35:56 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x218}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x932, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x13, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001040c0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:57 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x98}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf003], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 4:
syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0xd403, &(0x7f00000003c0))

04:35:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x933, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001041c0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:57 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x6, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x240}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x934, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa200000000000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:57 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001042c0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf803], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x935, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001045a0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:58 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x282}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa200000000000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xfe00], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa200000000000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x936, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xad}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001046c0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x937, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048c0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:59 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2a2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x938, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2468.597577] ieee802154 phy0 wpan0: encryption failed: -22
[ 2468.603226] ieee802154 phy1 wpan1: encryption failed: -22
04:35:59 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104b60300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:35:59 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)) (fail_nth: 1)

04:35:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x40000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2468.887070] FAULT_INJECTION: forcing a failure.
[ 2468.887070] name failslab, interval 1, probability 0, space 0, times 0
[ 2468.898383] CPU: 0 PID: 19543 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0
[ 2468.906305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2468.915658] Call Trace:
[ 2468.918254]  dump_stack+0x1fc/0x2ef
[ 2468.921902]  should_fail.cold+0xa/0xf
[ 2468.925723]  ? setup_fault_attr+0x200/0x200
[ 2468.930045]  ? __sigqueue_alloc+0x18a/0x4c0
[ 2468.934373]  __should_failslab+0x115/0x180
[ 2468.938613]  should_failslab+0x5/0x10
[ 2468.942432]  kmem_cache_alloc+0x3f/0x370
[ 2468.946589]  __sigqueue_alloc+0x246/0x4c0
[ 2468.950737]  __send_signal+0x3f9/0x15c0
[ 2468.954719]  group_send_sig_info+0x1cd/0x2d0
[ 2468.959126]  ? __se_sys_rt_tgsigqueueinfo+0x1b0/0x1b0
[ 2468.964315]  ? kill_pid_info+0x23/0x200
[ 2468.968290]  ? kill_pid_info+0x23/0x200
[ 2468.972272]  kill_pid_info+0xb6/0x200
[ 2468.976072]  kill_proc_info+0x8b/0x180
[ 2468.979960]  __se_sys_rt_sigqueueinfo+0xdb/0x170
[ 2468.984710]  ? kill_proc_info+0x180/0x180
[ 2468.988875]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 2468.993886]  ? do_syscall_64+0x21/0x620
[ 2468.997862]  do_syscall_64+0xf9/0x620
[ 2469.001667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2469.006851] RIP: 0033:0x7f8326b77ae9
[ 2469.010568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2469.029470] RSP: 002b:00007f8325aed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
04:35:59 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2ca}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2469.037177] RAX: ffffffffffffffda RBX: 00007f8326c8af60 RCX: 00007f8326b77ae9
[ 2469.044442] RDX: 0000000020000040 RSI: 000000000000003c RDI: 000000000000263c
[ 2469.051705] RBP: 00007f8325aed1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2469.058972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2469.066235] R13: 00007ffc4c627e1f R14: 00007f8325aed300 R15: 0000000000022000
04:35:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x939, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:35:59 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xb6}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2469.333247] x_tables: duplicate underflow at hook 3
04:36:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:00 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104cc0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2469.860357] xt_check_target: 20 callbacks suppressed
[ 2469.860374] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2469.878823] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2469.883944] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x8})

04:36:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x2000})

04:36:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x100000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2d9}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x200000})

04:36:01 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x1000000})

04:36:01 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104e00300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x8000000})

[ 2470.609534] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2470.625860] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2470.645749] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:01 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2e4}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x8})

[ 2471.029926] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x1fffff], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:01 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104f00300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:01 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe6}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2471.155256] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x2000})

04:36:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x93f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2471.284639] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x200000})

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x1000000})

04:36:02 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104f80300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x940, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2471.629349] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:02 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x300}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x8000000})

04:36:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x1000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x941, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:02 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xfe}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:02 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104fa0300000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x8})

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x2000})

04:36:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x2000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:02 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000500000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x200000})

04:36:03 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x30c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:03 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x1000000})

04:36:03 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000600000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x942, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:03 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x3000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:03 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x10a}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:03 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x8000000})

04:36:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x943, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:03 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01003800000000000000feab1c9f2335e7386fb72ea9ff0000000000000c000000000000000000000c0000000000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="0f34d47c8fe207b9a9885dfd1b928ebe0090fca15b3fbe9827b244342f51967b326bf0d0969b0e2d17c9f13a4339857c6ca670d508e02a67451c704ce915697863c75ed9a96f6555d82f01dec3aa4f05368687aa1f66dc83461780a6e1c50f465208c95a6b21ee3e9ffe82573c3a5aa6d485f7ddbc2d4f1e50003571cd1afcbd89bb7fe827e4a3e75c", 0x89}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r1, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(r1, &(0x7f00000017c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x1508, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x20}, 0x0, 0x8, 0x100, 0x6, 0x1, 'syz0\x00', "ae5b42629fec83f71ab57d5ba7e8681385caf8bf92b2be12ed4d235994179080", "d3a0c70898fea53d5d51d21aac3f1ce5aa3f96c8278d3de945a07bd969b057b2", [{0x0, 0xffff, {0x2, 0x3f}}, {0x8, 0xfe00, {0x0, 0x80000000}}, {0x0, 0x5, {0x3, 0x9}}, {0x400, 0xc01, {0x0, 0xece6}}, {0x100, 0x0, {0x1, 0x800000}}, {0x9, 0x3}, {0x3, 0xe3, {0x1}}, {0x6, 0x7, {0x2, 0x7ff}}, {0x5, 0x0, {0x1, 0x8}}, {0xa02, 0x1, {0x1, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x1, 0x7b2, {0x1, 0x6}}, {0x809, 0x1, {0x3, 0x2}}, {0x4, 0x6, {0x0, 0x3}}, {0xe028, 0xd30, {0x0, 0xff}}, {0x7, 0x9, {0x2, 0x2}}, {0x2, 0x0, {0x1, 0x3ff}}, {0x7, 0x7, {0x0, 0x3b}}, {0x2, 0xa80, {0x3}}, {0x2, 0x400, {0x0, 0x1}}, {0x401, 0x2, {0x3, 0x3}}, {0x7, 0x5, {0x1, 0x1}}, {0x8, 0x2, {0x0, 0xffff}}, {0xfffb, 0x2, {0x1, 0x5}}, {0x101, 0x0, {0x0, 0x1f}}, {0x7, 0x5, {0x0, 0x5}}, {0x7e4, 0xfc01, {0x3, 0x7}}, {0x8000, 0x400, {0x1, 0x9}}, {0x7, 0x39, {0x1, 0xce5e}}, {0x5, 0x1, {0x2, 0x200}}, {0x0, 0x6, {0x2, 0x9}}, {0x49a1, 0x4, {0x2, 0x3}}, {0xfff, 0x3, {0x2, 0x8000}}, {0x9, 0x2, {0x0, 0x1ff}}, {0xfc00, 0x9, {0x3, 0x6}}, {0x18, 0x0, {0x1, 0x7ff}}, {0x0, 0x190, {0x1, 0x6}}, {0xc0, 0x5, {0x0, 0x1}}, {0x8, 0x7ff, {0x2}}, {0x6, 0xa225, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xf9, 0x4, 0x7, 0x7f, 0x3, 'syz1\x00', "ab19c7f8e4449d2cbc2e3bd1ef4738c8b910101a033305bcbf1f2224bcd3a6a5", "6cc479073a01244c6855c2f0568b6cc8ee88b8c3f91d463943498a87bd1e645c", [{0x9, 0x5, {0x0, 0x1000}}, {0xff, 0x200, {0x1, 0x4}}, {0x4, 0x14e9, {0x2, 0x81}}, {0x0, 0x9, {0x3, 0xcc}}, {0xf369, 0x400, {0x0, 0x200}}, {0x100, 0x4, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x401}}, {0x0, 0x1, {0x3, 0x5}}, {0x1000, 0x0, {0x0, 0xb6a}}, {0x200, 0x1, {0x1, 0xba}}, {0x1, 0x3, {0x1, 0x4}}, {0x3, 0x7fff, {0x2, 0x2}}, {0xa0f, 0x800, {0x3, 0x7fffffff}}, {0x1, 0x7, {0x2, 0xfff}}, {0x800, 0x0, {0x0, 0x81}}, {0xfffd, 0x5bdd, {0x0, 0x8}}, {0x101, 0x5, {0x3, 0x8001}}, {0xff, 0x400, {0x1, 0x2}}, {0x7, 0x7, {0x2, 0x5}}, {0x7f3d, 0x7a, {0x3, 0x3f}}, {0x6, 0x40, {0x0, 0x40}}, {0x101, 0xaa, {0x1, 0x4}}, {0x1, 0x3ff, {0x0, 0x7f}}, {0x9, 0x269, {0x1, 0x1e}}, {0xc0c, 0x800, {0x1, 0xffff0000}}, {0x8, 0x1000, {0x3, 0x3}}, {0x9, 0x8, {0x0, 0x6917c01f}}, {0x2, 0x9, {0x3, 0xad3}}, {0xd5f, 0x7ff, {0x2, 0x8}}, {0x1, 0x7, {0x3, 0x3}}, {0x4, 0x5, {0x3, 0x7317457}}, {0x4, 0xd5eb, {0x0, 0x1}}, {0x7, 0x0, {0x2, 0xfffffffc}}, {0x0, 0x3, {0x3, 0x80000001}}, {0x3f, 0x4, {0x1}}, {0xd4, 0x5, {0x0, 0x2}}, {0x400, 0xc83d, {0x2, 0x1000}}, {0x3ff, 0x20, {0x1, 0x7eb}}, {0x20, 0x200, {0x0, 0xffffffc1}}, {0x100, 0x200, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x1}, 0x3f, 0x2, 0x1f, 0x1, 0xf, 'syz0\x00', "bce3b725839fbb00a081e072b7b148fa2015734ba904eb8155ce5e40cd316a4b", "ad62b364cf56094566a1dcf834134dda158d7f75b613529aea0e83fb5306d672", [{0x0, 0x9f, {0x3, 0x401}}, {0x6, 0x1, {0x3, 0x8000}}, {0x1, 0x3f, {0x2, 0x1}}, {0x0, 0x32ae, {0x0, 0x2}}, {0x7f, 0x9, {0x1, 0x5}}, {0x3, 0x7, {0x1, 0x10000}}, {0x0, 0x1f, {0x3, 0xb8f}}, {0x97, 0x2, {0x3, 0x3}}, {0xe0b, 0x8, {0x3, 0x4c51}}, {0xa9, 0x7ff, {0x1}}, {0x3, 0x51, {0x2, 0x3}}, {0x81, 0x5, {0x1, 0xfffffffc}}, {0x6, 0x8, {0x3, 0x80}}, {0xff, 0x9, {0x3, 0xb0}}, {0xffff, 0xffff, {0x1}}, {0x401, 0x3000, {0xc64abf24e6e19f79, 0x1ff}}, {0x3, 0x7, {0x0, 0x1}}, {0x0, 0xff, {0x2, 0x2}}, {0x578e, 0x8, {0x3, 0x1}}, {0x5ecd, 0x0, {0x1, 0x6}}, {0x7, 0x1, {0x3, 0xff}}, {0x400, 0x10, {0x1, 0xffc00000}}, {0x2, 0x0, {0x1, 0x7}}, {0x8, 0x8000, {0x0, 0x738}}, {0x8bee, 0xee7e, {0x3, 0xfffffffd}}, {0x401, 0x6, {0x3, 0x4}}, {0x4ac, 0xba3, {0x3, 0x3}}, {0x81, 0x5, {0x2}}, {0x4, 0xc4, {0x1, 0x10000}}, {0x3, 0x8b, {0x1, 0xd6}}, {0x4, 0xfced, {0x0, 0x5}}, {0x2, 0x9, {0x3, 0x164c800}}, {0x6, 0x100, {0x6, 0xfffffffe}}, {0x3cd, 0x4, {0x3, 0xd7c}}, {0x2, 0x80, {0x1, 0xaa}}, {0x7, 0xfb, {0x1, 0x100}}, {0x6, 0x401, {0x3, 0x54}}, {0xe994, 0x6, {0x1, 0x24}}, {0xfff, 0x3f, {0x1, 0x400}}, {0xfffa, 0x8, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x200}, 0x7, 0xd9, 0x6, 0x5, 0xd, 'syz0\x00', "a776025fb0b05309f227ce33c7b2c6480335f21b8907d6108f18cbfd30761a8d", "86e63de708bd9a50bd50fe1b0e19392af91542e66d36e76a3e80c01a22636db9", [{0x2, 0x9, {0x0, 0xe4cd}}, {0x6, 0x5, {0x0, 0x9}}, {0xbe50, 0x0, {0x3, 0xd0000000}}, {0x8, 0x9, {0x2, 0x401}}, {0x1f, 0x1000, {0x0, 0x3}}, {0x0, 0x2, {0x3, 0x80a}}, {0xe8b, 0x81, {0x2, 0x12d5}}, {0x2, 0x0, {0x1, 0x2}}, {0x7f, 0x81, {0x1, 0x10001}}, {0x4, 0xba3, {0x1, 0x80000000}}, {0x9, 0x3f, {0x2, 0x10001}}, {0x1, 0x6, {0x3, 0x8}}, {0x139, 0x665, {0x2, 0x1}}, {0xf801, 0x2, {0x0, 0xb1}}, {0x7, 0x5, {0x1, 0x3}}, {0x8, 0x8, {0x0, 0x201}}, {0x8, 0x200, {0x0, 0x8244}}, {0x6, 0x1, {0x3, 0x1}}, {0x3, 0x40, {0x0, 0x20}}, {0x8001, 0x5, {0x3, 0x2}}, {0x20, 0xfff9, {0x1, 0xffffff8a}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x80, 0x4, {0x1, 0x6}}, {0x3, 0xab7, {0x2, 0x401}}, {0x4, 0x8de, {0x2}}, {0x7, 0x3ff, {0x1, 0x3}}, {0x7, 0x5, {0x2, 0x3}}, {0x1, 0x5, {0x3, 0x5}}, {0x81, 0x2, {0x1, 0x93}}, {0xfff, 0x3, {0x0, 0x6a}}, {0x3, 0x5, {0x3, 0x6}}, {0x20}, {0x5, 0x2, {0x2, 0x70c}}, {0xe33, 0x6, {0x1, 0x2}}, {0x8145, 0xffff, {0x0, 0x20}}, {0x6, 0x80, {0x2, 0x1}}, {0x4, 0x2, {0x0, 0x3}}, {0xa3, 0x8000, {0x1, 0x6}}, {0x7ff, 0x4, {0x0, 0x1}}, {0xb, 0x8001, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0xb0, 0xff, 0x1, 0x4, 0x8, 'syz1\x00', "488f313a9c6cb33de9c857e694f918278fcba6a80fe7cdb4a224081aaf659314", "b35292d1f028ef4f7acedff908135e58690d4ebe202bcc58b8845750086fd23d", [{0xfbca, 0x6549, {0x3, 0xb07e}}, {0xfbff, 0x81, {0x3, 0x3ff}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x2, 0x3, {0x0, 0x9}}, {0x200, 0x90, {0x2, 0x40}}, {0x401, 0xc0, {0x1, 0x80000001}}, {0x200, 0x9, {0x1, 0x81}}, {0x7, 0x9, {0x2, 0x800}}, {0x4, 0x1, {0x3, 0xfffffffb}}, {0x6e7e, 0x1ff, {0x0, 0x21f}}, {0xfff, 0x65, {0x2, 0x5}}, {0x2, 0xfff7, {0x2, 0x2}}, {0x200, 0xea8b, {0x3, 0x65f}}, {0x0, 0x7, {0x0, 0x5}}, {0x6, 0x6, {0x2}}, {0xf5dc, 0xc5e, {0x2, 0x200}}, {0x9e9, 0x0, {0x3, 0x3}}, {0x101, 0x400, {0x1, 0x7}}, {0x4, 0xe3, {0x2, 0xed3f}}, {0x8, 0x8, {0x1, 0x2}}, {0x1, 0x2, {0x1, 0x7f}}, {0x9, 0x400, {0x0, 0x7b3}}, {0x2, 0x4, {0x1, 0x7}}, {0x5, 0x8000, {0x1, 0x6}}, {0x7ff, 0x6, {0x1, 0xff}}, {0x8001, 0x80, {0x1, 0x7}}, {0x8, 0x2, {0x2, 0x7}}, {0x5, 0x7fff, {0x3, 0x9}}, {0x0, 0x9d92, {0x0, 0x42b}}, {0x9, 0x4, {0x2, 0x4}}, {0xfff7, 0x6, {0x3, 0x3}}, {0x8, 0x48c, {0x2, 0x7ff}}, {0xa53d, 0x1, {0x0, 0x4}}, {0x5, 0x8, {0x2, 0x18}}, {0x40, 0x1, {0x1, 0xffff}}, {0x80, 0xfffd, {0x1, 0x4}}, {0x9, 0x2, {0x1, 0x81}}, {0x101, 0x4c, {0x0, 0x35b}}, {0x5bb, 0x0, {0x0, 0x7}}, {0x4, 0x8, {0x3, 0xd2ad}}]}}}, {{0x254, 0x1, {{0x2, 0x3ff}, 0xd9, 0x1f, 0x8, 0x8, 0x1e, 'syz1\x00', "c30d582212e224499c2ca9d200368686756ab0c503483986b1fe573fff984df2", "d0ba0f1f2b2e9c729eab60475b2323064a6bd1876f9767886a91cdcd29eb905e", [{0x0, 0x800, {0x0, 0x4}}, {0x2}, {0x75a, 0xffff, {0x3, 0x1}}, {0x2, 0x8, {0x1, 0x3ff}}, {0x3, 0x0, {0x0, 0x4}}, {0x2, 0x6, {0x3, 0x4c}}, {0x4, 0x4f2, {0x0, 0xfd}}, {0xff, 0x1000, {0x2, 0x2dae}}, {0x5, 0xc11, {0x2, 0x1}}, {0x9, 0x7fff, {0x2, 0x44e3}}, {0x4, 0x6, {0x2, 0xfffffe00}}, {0x40, 0x0, {0x1, 0x75f3}}, {0x252, 0x7, {0x3, 0x6}}, {0x1, 0x2}, {0x1, 0x7, {0x2, 0x9}}, {0x4, 0x7, {0x1, 0x45}}, {0x7, 0x0, {0x1, 0x3}}, {0x2, 0x800, {0x0, 0x7fff}}, {0x0, 0x0, {0x3, 0x1}}, {0x1, 0x0, {0x2, 0x800}}, {0x0, 0xcf8, {0x0, 0xfffffff9}}, {0x400, 0x7ff}, {0x8, 0xf800, {0x3, 0xfffffffa}}, {0x7fff, 0x1, {0x1, 0x500000}}, {0x7, 0x3, {0x1, 0x200}}, {0xff80, 0x81, {0x1, 0x335b}}, {0x4, 0xca8, {0x0, 0x3}}, {0x80, 0x8, {0x0, 0x5}}, {0xfff, 0x0, {0x1, 0xff}}, {0x0, 0x3f, {0x2, 0x9}}, {0x6, 0x5, {0x1, 0x192}}, {0x200, 0x1ff, {0x3, 0x8001}}, {0x3, 0x988, {0x3, 0x4}}, {0xffff, 0x3, {0x2, 0x7fffffff}}, {0xf57, 0x4, {0x0, 0xfffffffe}}, {0x8, 0x3ff, {0x1, 0x6}}, {0x2, 0x1f, {0x1, 0x2}}, {0x401, 0x7, {0x0, 0x1}}, {0x5, 0x9, {0x2, 0x4}}, {0x1ff, 0x5af, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x6f}, 0x7, 0x1, 0x5, 0x5, 0x24, 'syz0\x00', "1622023e7145c7ae07cab34858a02286ca6ecc1258ba9946211b1f10e33e95da", "152a431ec33d13b90582846a07e8fbda0d2f110cd2e567198bd58b6a714a17c7", [{0x80, 0x1000, {0x1, 0x2}}, {0x2, 0x1, {0x1, 0x3}}, {0x6, 0x9, {0x3, 0x2}}, {0xff, 0x7, {0x0, 0xff}}, {0x7f, 0x8000, {0x0, 0x3}}, {0x80, 0x3, {0x3, 0xfffff47b}}, {0x5, 0xff, {0x0, 0x90}}, {0xb34, 0x4}, {0x8001, 0x400, {0x3, 0x9}}, {0x8, 0x7f, {0x1, 0x8000}}, {0x7, 0x0, {0x0, 0x7}}, {0x401, 0x7, {0x0, 0xfffffff9}}, {0x0, 0x200, {0x3, 0x1}}, {0xed8, 0x1f, {0x3, 0xe35}}, {0xbc11, 0x3, {0x3, 0x7}}, {0xa7a, 0x401, {0x1}}, {0x4, 0x16d, {0x1, 0x3f}}, {0x0, 0x3, {0x1, 0xadc}}, {0x3, 0x8, {0x0, 0x9bd}}, {0xe7f9, 0x8, {0x2, 0x80}}, {0x7, 0x80, {0x2, 0x7}}, {0x1, 0x7ff, {0x3, 0x8001}}, {0x400, 0x1d, {0x3, 0x9}}, {0x7f, 0x8001, {0x3, 0xfffffff7}}, {0x7f, 0x0, {0x3, 0x299}}, {0x9, 0x8001, {0x2, 0x6}}, {0x5d4d, 0x8001}, {0x0, 0x9, {0x1, 0x598f}}, {0xfff9, 0x3, {0x1, 0x100}}, {0x9, 0x401, {0x2, 0xfffffff8}}, {0x9, 0x2, {0x0, 0x1}}, {0x3, 0x5, {0x3, 0xffffff00}}, {0x0, 0x81, {0x0, 0x10000}}, {0x2, 0x2, {0x0, 0x33bc}}, {0x5, 0x7b7, {0x1, 0x2}}, {0x8, 0x1ff, {0x2, 0xeeb}}, {0x33, 0x3, {0x3, 0x1f}}, {0x1f, 0x6, {0x3, 0xfffffffe}}, {0xff, 0x5632, {0x1, 0xaeca}}, {0xb3, 0x1, {0x1, 0x8000}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x4, 0x6, 0x9a, 0x8, 0x11, 'syz1\x00', "8c0b1ccc839c8c61f490ecad7b3ea83a8fdabb3a4798ff3f8657f4c080465489", "e80d5a0277275b7f2d357c100247dd9912749a59373d469fdd5bd907e5034748", [{0x1, 0x1, {0x1, 0xffffffff}}, {0x1f, 0x7, {0x0, 0x7}}, {0xf81e, 0x1, {0x2, 0x33fc}}, {0x8000, 0x7fff, {0x3, 0x7}}, {0x4, 0x9, {0x3, 0x3d}}, {0x400, 0x4, {0x2, 0x4}}, {0x5, 0x3, {0x1, 0x2}}, {0x2, 0x2, {0x0, 0x1}}, {0x9, 0x200, {0x3, 0x8}}, {0x6, 0x4, {0x3}}, {0x1, 0x9, {0x3, 0x40}}, {0x1, 0x7f, {0x0, 0x7ff}}, {0x9, 0x81}, {0x3, 0x8, {0x0, 0x8b}}, {0x0, 0x8001, {0x0, 0xab}}, {0xffff, 0x5, {0x1}}, {0x2, 0x400, {0x2, 0x5}}, {0x7d11, 0x3, {0x3, 0x9}}, {0x8a59, 0x3}, {0x7fff, 0x80c6, {0x1, 0x503}}, {0x4, 0xea00, {0x0, 0x5}}, {0x200, 0x0, {0x1, 0x4}}, {0xfff9, 0x101, {0x9049f9a6bf8f3289, 0xffff}}, {0x9, 0x2, {0x0, 0x3}}, {0x2605, 0x101, {0x2}}, {0x40, 0x8, {0x0, 0x9}}, {0x9, 0x7, {0x1, 0x1}}, {0x6, 0x40, {0x1, 0x43}}, {0x0, 0x0, {0x7, 0xff}}, {0x4, 0x80, {0x0, 0x6}}, {0x7, 0x81, {0x0, 0x8001}}, {0x3, 0xb7c8, {0x0, 0x1}}, {0x4, 0x100, {0x1, 0x7}}, {0x101, 0x0, {0x2}}, {0x0, 0xffff, {0x3, 0x2}}, {0xffff, 0x1, {0x0, 0x8000}}, {0x80, 0x0, {0x0, 0x8}}, {0x40, 0x3, {0x0, 0x6}}, {0x6, 0x9e7, {0x2, 0x9}}, {0x6, 0x9, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{}, 0x3, 0x4, 0x1, 0xffff, 0xf, 'syz0\x00', "edb229beefef676a2be425cb81a3d00ed4a6ead696701518290ce314611585f3", "8cb938f2843f551a2b68e71e8ea4d6e3b756a67a82d3bd7877a72b090834b356", [{0x9, 0x2, {0x3}}, {0x3, 0xe079, {0x3, 0x7ff}}, {0x1, 0xff, {0x2, 0x3}}, {0xae0, 0x2, {0x2, 0x10001}}, {0x400, 0x100}, {0xf582, 0x72e, {0x1, 0x5}}, {0x44, 0x8000, {0x0, 0xfffffffb}}, {0x1, 0x9, {0x1, 0xfffffff8}}, {0x9, 0x5, {0x3, 0x1}}, {0x7fff, 0xf800, {0x2, 0x7}}, {0x7, 0x0, {0x2, 0x8001}}, {0x9, 0x1000, {0x0, 0xca61}}, {0x7ff, 0x4, {0x3, 0xde}}, {0x4, 0x6, {0x1, 0x4}}, {0x401, 0x1, {0x1, 0x5}}, {0x7a, 0x8713, {0x2, 0x100}}, {0x1, 0x4, {0x0, 0x10001}}, {0x6, 0x400, {0x3, 0xfffffff1}}, {0x101, 0x8001, {0x2, 0xffff}}, {0x8000, 0x7, {0x1, 0x3}}, {0x4, 0x6, {0x3, 0x2}}, {0x3, 0x1}, {0x8000, 0x0, {0x1, 0x3}}, {0x4, 0x1ff, {0x2, 0x1ff}}, {0x7ff, 0x1, {0x1, 0x8}}, {0x5, 0x4, {0x3, 0x1}}, {0x0, 0x9, {0x3, 0x7f}}, {0x2, 0x4, {0x2, 0x9}}, {0x4, 0x2, {0x7, 0x1}}, {0x7f, 0x8, {0x2, 0x7}}, {0x2dd, 0x40, {0x3, 0x5}}, {0x4, 0x8, {0x3, 0x5d}}, {0x6679, 0x734c, {0x2, 0x100}}, {0x30, 0xc9, {0x0, 0x80000001}}, {0x7, 0xd0f, {0x1, 0x2c}}, {0xbec9, 0x3f, {0x0, 0xf6f5}}, {0x8, 0x9, {0x0, 0x800}}, {0x80, 0xfffd, {0x3}}, {0x7, 0x3, {0x2}}, {0xfff, 0xff25, {0x1, 0x200}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001900)={&(0x7f0000001800)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001840), 0x0, &(0x7f0000001880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x70}, 0x40080)
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:03 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000700000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:03 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000c000000b799ba0cf23bb6c900"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r1, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
flock(r1, 0x4)
r2 = gettid()
clone(0x60000200, &(0x7f0000000200)="6be2d9a66fa704e01b20d4a50f443b38a3b2dbe9d8d25b0d8252fb92d561f57f474a0224e21196e333f2003badba50031506b20ad2f955a990ac1c1b61c6932068d150d9893bf55e952c77386835bd31", &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000380)="57669817162017a2010000000ac9363aa195c727577a8882647c68a48ce05a345d2d3e3edb7c78dddb055651a79841441aad1bb4e615b653475c2ec334b44fe75b4306000000d510277f9d36b3603f935300bb74758fe10a7a89e8df50")
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:03 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x11a}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2473.249409] IPVS: ftp: loaded support on port[0] = 21
04:36:04 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x310}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:04 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x4000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x944, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:04 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000900000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:04 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x40, 0x7f, 0x1f, 0x0, 0x1, 0x96020, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x400, 0xffffffffffff1dac, 0x1, 0x1, 0x100, 0x3be1, 0xc00, 0x0, 0x6, 0x0, 0x5}, r1, 0xf, 0xffffffffffffffff, 0xe)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:04 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(r0, &(0x7f0000000140), 0x4, &(0x7f00000001c0))
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:04 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x131}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:04 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
r0 = getpgid(0x0)
r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x0, 0x2, &(0x7f0000001880)=[{0x0, 0x0, 0x1}, {0x0}], 0x1080, &(0x7f00000018c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@gid={'gid', 0x3d, 0xee00}}]})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x7f, 0xd6, 0x8, 0x0, 0xfff, 0x2808, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffbff, 0x7fff}, 0x8060, 0x2, 0xfff, 0x0, 0x80000000, 0x4, 0x1, 0x0, 0x5, 0x0, 0x100000001}, r0, 0x5, r1, 0x0)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
chdir(&(0x7f00000003c0)='./file0\x00')
r2 = gettid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x6, [@datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x97, 0x9}, {0x4, 0x2, 0x2}], "969e"}, @var={0x7, 0x0, 0x0, 0xe, 0x4}, @datasec={0xb, 0x4, 0x0, 0xf, 0x2, [{0x5, 0x10001, 0xc3}, {0x2, 0x800, 0x1}, {0x1, 0x7f, 0xffffffff}, {0x1, 0x101, 0x2}], "c26f"}, @fwd={0x6}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x36, 0x2}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0x7, 0x2}, {0x7, 0x4}, {0x7, 0x2}, {0xa, 0x3}, {0x5, 0x2}]}]}, {0x0, [0x30, 0x61, 0x30, 0x61]}}, &(0x7f0000000340)=""/78, 0xea, 0x4e}, 0x20)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x945, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:04 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:05 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x31c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x5000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x946, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104010a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:05 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1bb}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x32c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2474.878633] xt_check_target: 26 callbacks suppressed
[ 2474.878673] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2474.905605] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x947, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018ff010000f6cf000c0000000d0000000c000000000000000000000c0000000000000004000000000d00000019"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=<r1=>0x0)
tkill(r1, 0x34)
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace(0x4207, r0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:05 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x6000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
dup3(r2, r3, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2475.143643] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2475.176976] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x948, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:05 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1c9}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:06 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104030c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:06 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x38c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x7000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:06 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104000e00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2475.775678] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2475.786611] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2475.787702] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:06 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000100000000000000c00"/48], 0x0, 0x40}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x800000401, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:06 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104001200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x949, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:06 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x210001, 0x0)
preadv(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000440)=""/165, 0xa5}], 0x5, 0xffffff7f, 0x7)
r2 = gettid()
rt_sigqueueinfo(r2, 0x1b, &(0x7f0000000580)={0x1d, 0x0, 0x10000})

04:36:07 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1da}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2476.345224] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2476.345280] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2476.366361] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x8000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:07 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={<r1=>0x0})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x1, r2, 0x401, 0x80000})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

[ 2476.605319] x_tables: duplicate underflow at hook 3
04:36:07 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(r0, 0x3b, &(0x7f00000001c0)={0x16, 0x9e, 0x1})
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:07 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104021400000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:07 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3cc}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:07 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000007f260000000c0000000c000000000000000000000c000000000000300490b14ac9761f0000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
wait4(r2, &(0x7f0000000140), 0x8, &(0x7f00000001c0))
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(r2, 0x0, 0x20000000, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
tkill(0x0, 0x2a)
ptrace$cont(0x7, 0x0, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x8, &(0x7f0000000280)={0x1, 0x0, 0x4f4f3ccd})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xa000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:07 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:07 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c00001d0c0000000c000000000000000000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:08 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104001500000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:08 executing program 4:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000300000000020000000200000020000000000000000000000000006100"], 0x0, 0x3c}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x0, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x439}}, {{0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, '\x00', 0x25}, 0x9}}}, 0x108)

04:36:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
wait4(r2, &(0x7f0000000140), 0x8, &(0x7f0000002200))

04:36:08 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xa010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x214}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3e0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xffffffff, 0x202541)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r2, 0x200, 0xfffffffffffffffe, 0x5})
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:08 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104021800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:08 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xc030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x30}, 0x20)
clock_gettime(0x0, &(0x7f0000007400)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000072c0)=[{{&(0x7f0000002380)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000002400)=""/95, 0x5f}], 0x1, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002640)=""/98, 0x62}, {&(0x7f00000026c0)=""/29, 0x1d}, {&(0x7f0000002700)}], 0x3}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000005b40)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/102, 0x66}, {&(0x7f0000003880)=""/223, 0xdf}, {&(0x7f0000003980)=""/34, 0x22}, {&(0x7f00000039c0)=""/36, 0x24}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/173, 0xad}, {&(0x7f0000005ac0)=""/82, 0x52}], 0x9, &(0x7f0000005c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000005d00)=""/122, 0x7a}, {&(0x7f0000005d80)=""/116, 0x74}, {&(0x7f0000005e00)=""/212, 0xd4}], 0x3, &(0x7f0000005f40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000005fc0)=""/233, 0xe9}, {&(0x7f00000060c0)=""/232, 0xe8}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/138, 0x8a}], 0x4}}], 0x5, 0x10001, &(0x7f0000007440)={r0, r1+10000000})
prctl$PR_SET_PTRACER(0x59616d61, r2)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
process_vm_writev(r3, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102400, 0x19000}, {&(0x7f00000022c0)=""/185, 0xb9}], 0x4, 0x0, 0x0, 0x0)
tkill(r3, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(r3, 0x3d, &(0x7f0000002200)={0x18, 0x400, 0x2})
r4 = gettid()
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
prctl$PR_SET_PTRACER(0x59616d61, r5)
rt_sigqueueinfo(r4, 0x3c, &(0x7f0000000040))

04:36:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x218}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104011a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2478.329140] ptrace attach of "/root/syz-executor.4 exec"[20906] was attempted by "/root/syz-executor.4 exec"[20908]
04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x3e9, 0x300, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x1, r1, 0x6, 0x3f, 0x3, 0xd37a, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000040)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:09 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x10030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c0000000000000000000000000000008c"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
getpid()

04:36:09 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x240}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000060371774881a0170c00000000000000c200000c00000000000000000000000000000000a786719763fd6c089a4c268ff2e6a9b2d99cc3e34ac500738997ba72c5f9ae5be422fd77747a9fcc65812f596fd752cf9c5465a4060b79bb94298e3821ef15d10213abc8cbd5e011db8825fff85be4692cc1d00f0b43921d52c310d5f62811c00518bcc099eb6c17ac21f0c24ac39c670cca2980f2decb051cd6"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:09 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104641b00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2478.902582] cgroup: fork rejected by pids controller in /system.slice/ssh.service
04:36:09 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f8}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x14020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
tkill(r0, 0x26)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3a, &(0x7f0000000040)={0x0, 0x4})

04:36:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000c0000000c0000000c000000000000090000ff000000000000000000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:09 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104031c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:09 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x282}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:10 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:10 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x15000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:10 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
wait4(r0, &(0x7f0000000140), 0x8, &(0x7f00000001c0))
wait4(r0, &(0x7f0000000280), 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4200, r0, 0x2, 0x10)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:10 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x18020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x950, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:10 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3fa}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2479.896553] xt_check_target: 23 callbacks suppressed
[ 2479.896571] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:10 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104001f00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2480.020471] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2480.022116] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:10 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2a2}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x951, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:11 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x700}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:11 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2ca}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2480.557653] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:11 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104002000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2480.659221] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2480.714168] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x1a010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x952, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2481.193707] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2481.330642] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2482.275100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2482.288851] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2482.298958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2482.307179] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2482.316890] device bridge_slave_1 left promiscuous mode
[ 2482.324031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2482.332562] device bridge_slave_0 left promiscuous mode
[ 2482.338073] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2482.350544] device veth1_macvtap left promiscuous mode
[ 2482.355858] device veth0_macvtap left promiscuous mode
[ 2482.362706] device veth1_vlan left promiscuous mode
[ 2482.367794] device veth0_vlan left promiscuous mode
[ 2482.467215] bond1 (unregistering): Released all slaves
[ 2482.525730] device hsr_slave_1 left promiscuous mode
[ 2482.535179] device hsr_slave_0 left promiscuous mode
[ 2482.562292] team0 (unregistering): Port device team_slave_1 removed
[ 2482.576445] team0 (unregistering): Port device team_slave_0 removed
[ 2482.588743] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2482.604625] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2482.654279] bond0 (unregistering): Released all slaves
[ 2484.239086] IPVS: ftp: loaded support on port[0] = 21
[ 2484.403622] chnl_net:caif_netlink_parms(): no params data found
[ 2484.497669] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2484.505467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2484.513137] device bridge_slave_0 entered promiscuous mode
[ 2484.521089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2484.529122] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2484.537068] device bridge_slave_1 entered promiscuous mode
[ 2484.563037] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2484.573574] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2484.600666] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2484.608368] team0: Port device team_slave_0 added
[ 2484.615009] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2484.623250] team0: Port device team_slave_1 added
[ 2484.647062] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2484.653786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2484.679439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2484.691786] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2484.698035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2484.723316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2484.736505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2484.744410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2484.771452] device hsr_slave_0 entered promiscuous mode
[ 2484.777609] device hsr_slave_1 entered promiscuous mode
[ 2484.784507] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2484.792064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2484.895968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2484.902397] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2484.909059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2484.915482] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2484.968877] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2484.975288] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2484.985487] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2484.996432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2485.004872] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2485.012584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2485.020534] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2485.033476] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2485.041541] 8021q: adding VLAN 0 to HW filter on device team0
[ 2485.054035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2485.062537] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2485.068896] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2485.091298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2485.101064] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2485.107426] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2485.125972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2485.134147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2485.152698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2485.163084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2485.175074] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2485.183133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2485.191680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2485.200673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2485.215808] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2485.224337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2485.239793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2485.248669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2485.261008] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2485.282389] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2485.294350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2485.360542] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2485.367904] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2485.378238] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2485.392817] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2485.399550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2485.407178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2485.420671] device veth0_vlan entered promiscuous mode
[ 2485.430189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2485.437321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2485.447289] device veth1_vlan entered promiscuous mode
[ 2485.455304] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2485.466510] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2485.481995] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2485.493474] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2485.500742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2485.508142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2485.516226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2485.524888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2485.536333] device veth0_macvtap entered promiscuous mode
[ 2485.544534] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2485.562540] device veth1_macvtap entered promiscuous mode
[ 2485.569035] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2485.579407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2485.590254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2485.600007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2485.610027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.619132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2485.628939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.638141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2485.647938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.657169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2485.667134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.676335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2485.686125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.696753] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2485.704091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2485.711245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2485.718847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2485.726649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2485.735023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2485.746060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2485.756957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.766812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2485.777413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.786891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2485.796938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.806391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2485.816481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.826817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2485.836880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2485.847880] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2485.855298] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2485.863400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2485.872583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2486.055245] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2486.072504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.097461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.113043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2486.125003] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2486.131661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2486.138777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2486.146247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
04:36:16 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:16 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2d9}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:16 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104002800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:16 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x953, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:16 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x1c030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2486.259808] Bluetooth: hci2: command 0x0409 tx timeout
04:36:17 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = getpgrp(r0)
ptrace$setregs(0xf, r1, 0x101, &(0x7f0000000200)="bbf6b9af9d56097562cb0715325aa201e4c80205d873462e6340ff489503524db82426b569e0bf04c05a9703e3b86ad1437122da2162c5df55e010824655adf34e640130cd16281d5417fae891f2489ae6aec754")
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0x9, r0, 0x0, &(0x7f00000001c0)="17251796a5c5dd97fe0bb5a79c06c12d081b16bfa68900607f8f34a752a1ce2bcb5f50fa0f782434aebea1deb7f6f6ebd5f2a9967babfdacb635f586e7bc4f")
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:17 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104032c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2486.380196] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2486.385632] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x954, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2486.449556] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:17 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9fab010018000000000000002000000000000000020000000000"], 0x0, 0x1a, 0xfffffffffffffed7}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(r0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
clone(0x2000000, &(0x7f00000001c0)="19d0bb18533296c2505722020553fdcc490b9b9a8df2350bd0d52781e40a9eecf469f864cdc2ea30910b2ba0282c19138bf7d3b04543dba7257eec3607e17d0cb1e4a67c3eeb446c5af464b8d02a2597036a1a56048d5603ca8c3ce7b78a180de664b02fcf25ba3927e10ba8d25094af3ca97d9ead4e1459d2ee680aac5e50b4", &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)="88fad753a122518aa0f15512778f0f9df2ba237465fc5719515aa4574fa88788e0ed9242c99767ff131c776179e3dc28006b596144c8b6f0ba6c5d824c462d572c38927e8687dfd42a94f39fdcfbe8d08b7723c97def07c81847ec119834ff34ca698ad39afab280d5020032cd50b43a54f0e14ac05fe2147cf246c08535e4029029e036712ab4c7a4744489ab7c888a2360c86faf0043df1d781563eed078328bfeebb36cdbe8afed26b4ab9af1f8c44c511fd7e48e3e646175d3779ba8b551")

[ 2486.574087] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:17 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x20000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:17 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2e4}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:17 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
r1 = fork()
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000240)="aa6f8c7a4c41ce6a98cb7e3169f2b11b565250aabd022b0965c801bd026b38bc0af79390eb2bc23708ed849a0f67140a89940e4ff4d1540f05b9df3100321987b81a64e5fa9a51e203ef2a873a36839ec040d06292d64a78282ef8baa3c9be07afb2cba400db149a009de23907a3cb68dfae40b1ecfffa753d61e0ead99837f8ccff8d94e1361de50b914a4a6190f1a379b305b8a1911231e6721e3bff87db802a180e1c5e83903385d48b")
tkill(r0, 0x40)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x40, 0x81, 0x60, 0x0, 0x40c9, 0x9002, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x1, 0xfff}, 0x917, 0xff, 0x8, 0x5, 0x100, 0x6, 0xffff, 0x0, 0x0, 0x0, 0xf9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x955, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:17 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104003000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:17 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xc03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2486.816962] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2486.854239] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:17 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9fd5010018000000000000000c00001000000000000000000000000000000000000000000000eb6451e395f33b7d4df2fd534819c90ee0e92eca20052d8e3aea622a34fd34bc23e130c62696d9a15784d86dd538cdc1984fcea21adcf7d9336bf0af761785fa21c47b2cceb675e43f78e339534d746504f825b3c18034e04e26b9a8f7c8594601830110d33375a6b0e92bcb0002f8c3713b0a64b713026908498fe00a65baea0ff5ad056250a05de34c7acdc93318cded35ba126162ffda194ee7c75d4d31094c"], 0x0, 0x26}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x84100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
ptrace$setregs(0x2, r1, 0x1, &(0x7f0000000140)="778122f6f4741346e3a7413d532de39c1adae29fe915f5a8640c98d292557406f30023eddf48195678da343f7a56286399dec3c660aad08629695899432ecafe1281550b1299f11bf513499fddb41e77af7b4fc8bf06e28cbbb8fcad417182209ec226d4358127dc9cf1ae225bfd97e8cfb94b5c1f3d153e3667005c8f1974b1127ccd6eeab84802b7b3aa10aeb785b76717204e77046c3e360c588b81aab5cbc57ebd8df8a3631fa069e7f21950949960d77cc59f730608d3bd184f49bf3b66ed0496aec769484b3baec54f6af8506d4e518cf6fae2c4f5d525927716bf17f0fac8547ae39526d397ee674c397b725bf3")
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x956, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:17 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
clone(0x25820000, &(0x7f00000001c0)="d827af7168e324f65b0db8f732542bf5401ea61eeba8dbf3dd9c07162291656e132511e02e9a287e8c6f3d5db98867f0724bcd56347eaa55a3dece7ca4bc66a092fbe2d407f5217c17cd93c8dc4cc89af52c18272c4a3eb6f53ef2048eeb81d275dcda3d91e477347fd5453ed201a2884b954fca97c1a30fd0f687b3c729ec3271f1e6bafec8fd3845ea6f7c32fb79216f82c07fdf71eea7af83b48f7d0576244255c8521d5631afa51fdf7b6adf3c3eaec7c560443688b17fc37c7edf2d8ab392ffa3b86db672477640b77b16a444fcde3a6fde195ef17dc9644e170acd83811a3246c37335cd2f6240b77dbf68ff988eb81dfbec30", &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="485998e8b78e855991e3bbeab72236fd0df906ce26dd9f85fca2722fef27248f8bb40c207791d956fb6e781bfbae5aea126427f43ba36481cdd875eb7176b7166292b05beabcf3ee6847abffcc4c9853e2c28863a7dde528c57021d0041b00e288704159616c88828c2d204a62a3d4860c5b07c5b511f033")
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = getpgrp(r0)
sched_setparam(r1, &(0x7f0000000380))
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

[ 2487.120768] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2487.136296] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:17 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104013100000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:17 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
vmsplice(r0, &(0x7f0000001540)=[{&(0x7f0000000200)="3ee1391156b2551f6a7bc58096e135c441b7286fd4cd9296ee4424ba4db19c8860e424a9dfddae0ac208b236aa376b743482db5dd40c4af401b4bd86922617e7d7775961d9353c34f3b8c0939447ae06f97daafe320c77ad1d19c102cf2b619ef45f9ded9d3a846a0ab9b65e4bfa87c3ca54c85762d0f7fb1718ea08b225cb4f3996c86368f335876d705267fdc4137a1abddb65c9142468f692", 0x9a}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="245f07df2fa0e0a6ca3979563f0a8c5d87336e998ba366bde2b9a6a5b6e48cc041b9f3ccb725865995938e6e54459d37508ee0a22e4f22314469115e66f4676bf0cab17b4f04e9b7011bf62b3b64bac7c4748632c21251347158621515afa6577bd5fc615885ae9e9f3c44ae88fb020661f07d0d16f1fb21f8593b6fa8cc295f477776565d35ad8577b2ef3e1e5b421a2262a61744224f1072adfd2e1399847c4869b3f32f9d6d0dcd3ecdd789693a0d6f76df12516d853e1bfae3f42b", 0xbd}, {&(0x7f0000001380)="e5a851e1493dfea569e8ab55c1582148d39d5c349979f7c74bed70a614812bc4b0cfdd56146671b5167243fac8e14a0cd6b9222188f4b61736f75b3c18cf0d0f1d0bc2dafdba470c901788ec3d00b59cbb2e6ebfb07ed8455151fd797e78caf887a2ff824762680e65648b2843bace2da708fc83274cff98b2c46996b498a61c1cff94e9c38634ab8948664c6027878980a2a12be7e9bb1b3c2a2f61a94a4b5bf0e18c7f42c4da7466c0d18df3", 0xad}, {&(0x7f0000001440)="4cc5edaac2a8057bda3130eb1c2fb147cf99ade22516e58e51d9cd0c5959b8cf869c51b9325f96904664de7e8d4747c1b42c8f5cb673c0371363485fd1166d9f1de213cca9ef42609ecdb6bd1e1aee5f2e98f4c576895f9a3e45e76605b418b0dbef6962aec8224e9190531274a6832fd3da0df0fc822e2ce38d57b168b42732ea2586aa57ba88289fa6ce20595abc8fb4d2ade3223d2e0a34bac9f4357f13971ddc0e78f0d8604e51058f1268fd317527f16563dd67b2e01ba9d37454c083d4179e222ff97fe06217ddf7292cdced8d981322681ce09c0ab5191a96731150b737fcdb150983bb7868c8d3065992e5abe88882d0ccc8", 0xf6}], 0x5, 0x18)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x40, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:17 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x28000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x300}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c000c363a5f516f07a700000c0000000c000000000000000000000c00003346b3628f005e0f786de9751a436b51578ee29de37c3fb820204f4faba60bb771ab57f47ab48f332f145f285145c7985b4e990180ce716eb7c1a6927af151124b93a0"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
wait4(r0, &(0x7f0000000140), 0x1000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
tkill(r1, 0x37)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:18 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2487.454200] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:18 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1402}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x957, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000140)={0x80000000, 0x1})

[ 2487.630412] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:18 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x2c030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104003e00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:18 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/253, 0xfd})
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:18 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
wait4(r1, 0x0, 0x2, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x958, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x30c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r0, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x14, r2, 0xb03, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3ac, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfe6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x19da, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1, 0x1000}}}}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7aa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1f, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}}}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xae}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
tkill(0xffffffffffffffff, 0x2a)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
r4 = gettid()
rt_sigqueueinfo(r4, 0x3c, &(0x7f0000000040))

04:36:18 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1500}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104003f00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x959, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:18 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000090c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
tkill(r0, 0x1)
ptrace$cont(0x7, r0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x84, 0x1, 0x3f, 0x40, 0x0, 0x0, 0x80008, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x9}, 0x100, 0x81, 0x8, 0x3, 0x8, 0x3, 0x9, 0x0, 0x0, 0x0, 0x41}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x1f, 0x8, 0x5, 0x0, 0x5, 0x10, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x3f, 0x5, 0x7, 0x9, 0x6, 0x1, 0x0, 0xd4b, 0x0, 0x100000000}, r0, 0x8, r1, 0x3)
r2 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:18 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x31010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb04003800000000000000fdff00000c0000000c00000000000000000006000000dd0000000000000000d46900ca9f"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
clone(0x0, &(0x7f00000001c0)="79fe958d90cae2da116ba56346e80a92a9de483d52b7a14aaf61d6506067d7264aafa0d791898f39d3445d3530337a8ea12b30780ef9eecee1f0d4559dd2597a3ffbd279bfd76aaff6911d749640ce7ae30d1e035b15cea40605dfb2410726fc96b7309baaf4df0a8e2fb28e2f4423a6e1b048", &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)="ec9b606a507339482579f2d371726a9d27f4318eb11e70257c505a6b91f4b62271112b8809")
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, 0x0, 0x200, 0xfffffffffffffffc)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000002c0)="1451ac902fee313e921a01cfa43e748f38e1ea9d351060bec4533383b6b2134c5fa72eee8273caa61f36a6626abd9412845be4b248621699e1765785e5bbdd8b161b2184c8457822e5ee45246ecda43b01b3d6fb875f2530e34f59d502236279e8b81427cdc58fdc9b0826f99b8b38ee116f072b68b3ec14be51b772353b7e39e160d5bb085b1f8700c07ee7d77ab0e5fc99319911")
ptrace$setregs(0xd, r1, 0x655, &(0x7f0000000400)="da1630bc640289d04e8301fbee8c5cd16c652bd04ee632faada81033434003cceeb4e9016ea22f9459cab88f1cd94999795e6475660ee9954a4468cf54ff0092cea96dfd017989c690619c1a3ae47ca2c6946cdeb0d7507f0691921c5012fbd2c713f3daf9d6b2a3799d99944fe7ff9ea9091a42703e1146f06610aa0ca218b97170bd4c306bdbec24b5ab564c025c7cea4c35578fab3a03e1874d102c18ada0183430bb87ca5ff4c029812d71")
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

[ 2488.339278] Bluetooth: hci2: command 0x041b tx timeout
04:36:19 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x310}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040))

04:36:19 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104004600000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2488.506063] x_tables: duplicate underflow at hook 3
04:36:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1802}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104004800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x3e000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104004a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:19 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x31c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x3f000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:20 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1a01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2490.419290] Bluetooth: hci2: command 0x040f tx timeout
04:36:22 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c00000093b500000c000000000000000000000c0000000000000000000000e200000057"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
clone(0x40201100, &(0x7f0000000140)="6a9f892c122f123a97fad9afcda097549d4b2a4de52e1f601ffa9910c5d07246a4882fbd", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:22 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104004c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:22 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x32c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x40020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:22 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2491.685398] xt_check_target: 22 callbacks suppressed
[ 2491.685483] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2491.770272] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2491.771029] IPVS: ftp: loaded support on port[0] = 21
[ 2491.792504] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:22 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104004f00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:22 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800f29f830000000c0000000c0000000c000000000000000000000c0000000000000000c10f000000000000b850acdf3d5d8c8146263bb7fe2c8ec76f6f3a80068945a00273bbb17bbb3e53873bc78959d230f80e578bd60700000066e6fe69200741b5da5eddf03eb951d2e846a8226acf1a90fb3a6fb0af7b9c8a2e08bfbdde17fdba45961769a8f669be0a52a0c0f664d9d5faac79e118a7759d31aefc3ae30b9eb33177a36ead0c66a74dd469403495cca2b6ba0807da8b295a06f389de146bc605b1d73a7b834ad32e14a0e7"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0)
vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1, 0x1)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x95f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2492.124707] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x46000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:22 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
fadvise64(r0, 0x0, 0x1, 0x2)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))

[ 2492.204069] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
tkill(r0, 0x16)

04:36:23 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x38c}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2492.327281] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x960, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:23 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:23 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104655800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000000000000c00"/41], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2492.498624] Bluetooth: hci2: command 0x0419 tx timeout
[ 2492.509014] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000140))
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2492.798049] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2492.809139] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000ed0000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace$cont(0x7, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/57, 0x39}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002580)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/112, 0x70}], 0x2, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$setopts(0x4200, r1, 0xe4, 0x100024)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:23 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104035a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000040c0100000c0000000c000000000000000000008aed0c00000000000000000000000000005a55894c91e5d389bfaee4b8c7491d6a829579be872e6c797c27b342b22bba3eb30cb0d0fd8e5d85af66311cf83cbbbd079b418ba59af6505d2e06f9618aafa2b0c340cc14d05f537d83f773978f38b59ba6867b63ddb1b607c26e2646"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setregs(0xd, r0, 0x2, &(0x7f00000001c0)="70e0575f43c8c184d43649e5403f73ad9e9e75227f62798520c263e69ab137b04ebae66cb89da55c8cf10dcb30b71a3dfe5383f78e0d59ce767ff0079e78861bf9bf906d06e1fef4f3cb83a1e952844a101a3a657918a10cbe8b43e2419639ad5ed6c9c0d106b8871cb2302243497a7b0b2ea4666d4424506650b8afdd1024f9f68c411792964400771798537fc777f0031b4b02ca883ee6facd84829b5fe2b644358d0a873e46a480a7e9a187e4868c286f6f568ceeda3af70c0f79993499928460c1251240f5198a165d289bddcb57605fe95a84")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040))

[ 2493.103590] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:23 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x4f000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x961, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:24 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104006000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:24 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3cc}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:24 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:24 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104886000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000e2e3ba0f0c0000000c000000000000000000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x962, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x3, 0x34)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x0, 0x1f})

04:36:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = getpid()
ptrace$cont(0x1f, r1, 0xfffffffffffff8a9, 0x66fdd754)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:25 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3101}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x60000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x963, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001041b6400000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c00000000000000000000000000000000945b7d5c41d71c3537b3b7098d4d555a76d002a625572a51323742120c1183c42f0afb0ce185883d9c744f785d9cecc44038e860c5aa4d6af433b476285f221a0345905eeab37e8ac3a3f1399bfecdf839db9036c9843422d79fed9b0422813846ee6f58038d0c04b79320e6"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
wait4(0x0, 0x0, 0x8, &(0x7f0000000180))
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = getpgid(r0)
prlimit64(r1, 0xa, &(0x7f0000000140)={0x6, 0x5}, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:25 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3e0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040)={0x19, 0x0, 0x6})

04:36:25 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3e00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x964, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x68000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0x8000, 0x0, 0x0, 0xc, 0xfffffffd}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:25 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104586500000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
clone(0x40100, &(0x7f0000000140)="770ec28c317610bf5cb597d1e8c30e92d73399ef9e8df54672ef0db6102538c6c9f6fca72e4dc2e8cb", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="d7898ae53e897a5b041e5a45fc32")
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:26 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f0}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:26 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x80ffffff], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:26 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104006800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:26 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
tkill(r0, 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x965, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:26 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f8}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:26 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104006c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x82020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:27 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
tkill(0x0, 0x1)
ptrace$cont(0x7, 0x0, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x39, &(0x7f0000000280)={0x8, 0xc1})
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080))
r1 = getpgrp(r0)
move_pages(r1, 0xa, &(0x7f00000001c0)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x16f9bed8, 0x102, 0x69, 0x7fff, 0x20, 0x1], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
r2 = gettid()
rt_sigqueueinfo(r2, 0x36, &(0x7f0000000040)={0xfffffffc, 0xfffffffa, 0x9})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(r3, &(0x7f0000000180)='fd/3\x00')

04:36:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x966, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2496.697379] xt_check_target: 16 callbacks suppressed
[ 2496.697397] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2496.933546] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4002}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x967, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2497.206757] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2497.218875] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x8c030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x968, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:28 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2497.737566] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2497.748392] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2497.758894] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2497.776783] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x969, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2498.032089] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2498.062376] x_tables: duplicate underflow at hook 3
[ 2498.215343] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2501.305389] IPVS: ftp: loaded support on port[0] = 21
[ 2501.795685] chnl_net:caif_netlink_parms(): no params data found
[ 2501.835906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2501.846551] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2501.856233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2501.863076] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2501.872293] device bridge_slave_1 left promiscuous mode
[ 2501.877890] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2501.885363] device bridge_slave_0 left promiscuous mode
[ 2501.891016] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2501.902201] device veth1_macvtap left promiscuous mode
[ 2501.907517] device veth0_macvtap left promiscuous mode
[ 2501.913069] device veth1_vlan left promiscuous mode
[ 2501.918241] device veth0_vlan left promiscuous mode
[ 2503.217492] Bluetooth: hci3: command 0x0409 tx timeout
[ 2505.297295] Bluetooth: hci3: command 0x041b tx timeout
[ 2507.377089] Bluetooth: hci3: command 0x040f tx timeout
[ 2509.456901] Bluetooth: hci3: command 0x0419 tx timeout
[ 2510.292522] device hsr_slave_1 left promiscuous mode
[ 2510.302101] device hsr_slave_0 left promiscuous mode
[ 2510.323362] team0 (unregistering): Port device team_slave_1 removed
[ 2510.336585] team0 (unregistering): Port device team_slave_0 removed
[ 2510.350082] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 2510.365493] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 2510.413135] bond0 (unregistering): Released all slaves
[ 2510.486589] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2510.493854] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2510.503942] device bridge_slave_0 entered promiscuous mode
[ 2510.513233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2510.521442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2510.529800] device bridge_slave_1 entered promiscuous mode
[ 2510.590210] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 2510.609024] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 2510.652069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 2510.677982] team0: Port device team_slave_0 added
[ 2510.683887] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 2510.707862] team0: Port device team_slave_1 added
[ 2510.730731] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2510.737654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2510.764291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2510.789073] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2510.795332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2510.846873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2510.859062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 2510.867685] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 2510.900147] device hsr_slave_0 entered promiscuous mode
[ 2510.917603] device hsr_slave_1 entered promiscuous mode
[ 2510.937186] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 2510.946858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 2511.154013] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2511.160466] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2511.167204] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2511.173583] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2511.239291] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 2511.245389] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2511.258311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 2511.279618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 2511.286029] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2511.297295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2511.327247] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 2511.347681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2511.356436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2511.380836] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 2511.396699] 8021q: adding VLAN 0 to HW filter on device team0
[ 2511.438123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2511.445877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2511.452300] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2511.465814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 2511.473974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2511.482940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2511.492255] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2511.498682] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2511.510294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 2511.517772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2511.530874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 2511.547663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2511.566676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 2511.573634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2511.587614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2511.610049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 2511.617652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2511.625297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2511.635188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2511.647809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 2511.661900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 2511.668992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2511.678458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2511.686072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2511.695672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2511.706771] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 2511.712869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2511.733403] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[ 2511.742651] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 2511.751262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2511.759661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2511.774726] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2511.831708] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[ 2511.842693] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready
[ 2511.851741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2511.877493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2512.028702] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[ 2512.045945] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[ 2512.053123] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[ 2512.064919] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready
[ 2512.075572] device veth0_vlan entered promiscuous mode
[ 2512.082565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2512.090393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2512.101151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2512.109334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2512.121457] device veth1_vlan entered promiscuous mode
[ 2512.128196] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[ 2512.140665] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[ 2512.155493] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[ 2512.167627] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready
[ 2512.176392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2512.185190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2512.207464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2512.215356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2512.226113] device veth0_macvtap entered promiscuous mode
[ 2512.233216] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[ 2512.243662] device veth1_macvtap entered promiscuous mode
[ 2512.250487] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
[ 2512.261946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[ 2512.276084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[ 2512.286405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2512.297111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.306221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2512.316329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.326253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2512.336299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.346627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2512.356930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.366042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2512.377588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.388536] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready
[ 2512.395646] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2512.403520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2512.412219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2512.420547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2512.429579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2512.440797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2512.452174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.462636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2512.473729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.486790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2512.496722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.505852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2512.515691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.525036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2512.534897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2512.545585] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[ 2512.552682] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2512.559882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2512.569357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2512.743007] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 2512.773345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2512.787354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2512.811431] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[ 2512.819365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2512.837932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2512.845197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2512.854231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2512.936861] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:43 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3fa}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x98000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:43 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104036c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:43 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4f00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:43 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
r6 = dup2(r2, r0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f000034b000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000be000000000c0000000c0000000c000000000000000000000c000000000000000000000000fff100"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r7, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r7, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080))

[ 2512.986148] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:43 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xa0000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2513.250374] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2513.288863] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:44 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104007400000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:44 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104007a00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2513.480900] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:44 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x6800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2513.737382] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2513.754364] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:44 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x500}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:44 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104008100000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:44 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xa1030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2513.894457] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:44 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104028200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2514.347032] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2514.354466] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:46 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104038c00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:46 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x8202}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:46 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xa2000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:46 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:46 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r1, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000140))
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xf, r0, 0x102, &(0x7f0000000140))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x96f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104009400000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xad000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x700}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x8c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x970, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400a000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:47 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400a200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:47 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xb6000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:47 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x971, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:49 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x2, 0x11)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:49 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xc03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:49 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010402a200000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:49 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xbb010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x972, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:49 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x9800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:49 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000edffffff0c0000000c0000000000000000a2000000000000000000490002000040000000a41bf4bf17aa5b175a667da2491c6955384a89f27f999ca0935b251c71fa651886d4589455d7a8b31d1d29eacdc81c108fe663d955b2c4ec"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x27)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
clone(0x202080, &(0x7f0000000280)="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", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000380)="481f5f3efff3a6b6bc06898fc843787d348f2d368ca0c3c283bdd4c8e57b9b42e21f0bab9705c2d297252fd525607d9ad184388419ad05313358b0b87d885577084ea75355463f6dd5fb240da1114928ac136e51829f1f8ecbd4ca8575c82c53667a703897ab01a2a23f6760dff3d27d597f6e9802aadc26ea971c8364784e44a932ff36b7205dc65f5ec825f5f84493af8f1860d4d2e78b52956c95771f1b15cfecb5ed2649df8c16d2c0d46f37b1469f0e77a04644aebe3da9f6dcabe88b57ec39d1c8bd775719ee2dedb0078dc02a4b1ffdfb729cce9f3f525f3afd76dd402e70784565c99c3bdbea5155f026ef1493929f5ee87a3cb9071e9c")

[ 2519.244376] xt_check_target: 18 callbacks suppressed
[ 2519.244443] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2519.322203] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2519.334293] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x973, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:50 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000c0000000c7d000000000000b86e9799ee2e78620000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x238d00, 0x0)
pwritev2(r2, &(0x7f0000002740)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="af1f590ffe5d004e46e537ce4104e469f9713c5a4afd70b604dcb627129cebe82b368b85a40c0f0014affc03b80e30bd17b2ef0cf259801e33c8370a9bd004c3fcacd63b7907c2ed7299482074dd0bb6fd432a4eb946c79891dfda5bb43e23244ac87eab5cc66f3d004d39cd3bbb4757bb86d12a02074b2bb9ed25f633e4fcdaa31290cdbd84dbc806445999a6a2b7854cb1f5fcf617da995864817c", 0x9c}, {&(0x7f0000001280)="e2c519fa25fa8c4c2fb239c46c59a4938da9b0c7d848c4b11e41c1cdc1c3465f8ea688e88a5f196a8d7dba9de66d2b5d6ba67c02934a02918d387ef995ab7d269be91c2213ccec0cf56df28ca566dcf10bcc35bf97be8a1b65268dae1b21ed26bf3b1b0a58caa4a0b23920537d3eb4", 0x6f}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="949b3a1ade72381525ac93a8c37ac76d97e5f07418e6e8aef0fa4579eec490c544b1831363ad3f80e1679e27933d911aa61112708f699892910440a76b6fb2dfdf6bea3875adcb4637f20902fa967212b57223ce8ce64eca2be83617fbb618197088f7009f7402cdb059b7d49efbc88566bee558d9da3402d8fdffa7e9e47f2f783fe0692bdb977c48a093c3465240440284315cd803dfea2acb3fd9adfed6656fe6891fb361912257315d22f7101face7e18255225a6f36e07c154fbc9a0cda1df8453ba6ca9d84b4eec5c30813a10c20928ba61a89bd194a8c5b2f2822af6a9e7de688719e01983f3f8a8d03a288ad474d76afd8ccb8c802", 0xf9}, {&(0x7f0000002400)="c9370870be27aae42d29c6c819935dd5f7f9cb73ad9096820330b0f6f683e20f1b84877cc9561ec503d24247ce84b2a7d33b0a41020aefee5ea718f12b06e3e971816e330f146e5a7f7e37d19f18e54d8291e60269b6577f739d49929116fc544f6c357f182c3a2fb768c7ab9ff7ccb5da490807814c6c146dd6eecb52f77c0fe6d746adcf41e52b7397f353791403c001d6c29ce06e746fa3b7d41b3b37aa10795c975d4a7d6bab0738db2b4bace4205a1f8fc2287e7e2719342a45e021412d2145478a6897f4a5adedb81fc94a743d9ec22a93559a3d68392eaf101c8b29a7c0b4cfb3627a72ff4f", 0xe9}, {&(0x7f0000002500)="72b7a0c36814dbecb094d5268770e3fe3bb8751cc40253d5219c9263a7a4563d83968a59cfb7f5faf9fb2e847923204830bc2d8ab695cd393fe7bb9fe9a3706f3cf3a29581431ec9ded160bf8c51d670038ccdd6017c463c61f96293099504e263484881bb8c27cd318f99579ab7e621725342e7ed9b8b7b9ea4d036f1abb26f3f25bfc0ce17dacc6508a05216", 0x8d}, {&(0x7f00000025c0)="a6e570ba796b0e4db80460cfc1ac56cf33f11f0f4d77f2edbee1b274940b298458babc6f2fb4b5a107caa6ea1d6ffd0c0e443aa5a6eb6e4dd06e4bf8925603061482c4dfd77339004a207f1d9c1b01da9e97f6e028e9caad484defcd80e2ef911cc9f25d211df2a3d335046843d0aaf7b0b04f70fa01f8d13794d64b032ee6e359b1914ec13f794bd23ab4898818933a2f98da6c2de3ae3ab6a3f2b4bd17da37ba99e546f3dc9113f23f36d44e17a7d437f580359e57a1ee", 0xb8}, {&(0x7f0000002680)="d629a7bcbbfc9723cab731adbd46c55ad25d8eea16b08d1ad0788a298d89d8a93a5fc15d0781ff3212b9c3fce6f5db73c681617fffb5cf283ae1b90f390c3426d466a2a2a9f22134da445594a32383cea42558e7e53c588d44f684ac1157a8f3be77d99e82d616db9090bbaa01012d3c32f3cbddc99c3d083e0116b61e585f4a1a8766018e230a988911dc6b8679", 0x8e}], 0x9, 0x10000, 0x7, 0x5)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
tkill(0x0, 0x1)
ptrace$cont(0x7, 0x0, 0x0, 0x800000000000000)
ptrace$cont(0x20, 0x0, 0x6, 0x8)

04:36:50 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400ad00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:50 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
r1 = socket(0x28, 0x1, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@dellinkprop={0x40, 0x6d, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x41328}, [@IFLA_CARRIER_CHANGES={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfffff001}]}, 0x40}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x3, 0x0, <r4=>0x0, 0x0, &(0x7f0000000380)={0x4, 0x4}, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x10, 0x101, 0xfffffffc}, &(0x7f0000000400)=0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x2}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x9, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @generic={0x5, 0xb, 0x7, 0x9, 0x962}, @generic={0x9, 0xb, 0x6, 0x5, 0xe0}, @map={0x18, 0xb}, @jmp={0x5, 0x1, 0xa, 0x0, 0x8, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0x0, 0x5d, &(0x7f0000000240)=""/93, 0x0, 0x0, '\x00', r2, 0x1e, r0, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0x120, 0x36a0}, 0x10, r4}, 0x78)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r5, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
r6 = gettid()
rt_sigqueueinfo(r6, 0x3c, &(0x7f0000000040))

[ 2519.645840] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:50 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xc9010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:50 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:50 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x974, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2519.822441] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:50 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400b600000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2519.863388] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:50 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000800000000000000c0000000000000000000000000000670165ff052b25fc477e3115c95d042044fd4dd12a6ecad4ee3da9de0d23a2d7074b5f630a5ba2632547ad619a462eb20ebe1560598dc7e802a8ee881db7091b7deda375829c2d6845550eac836cdff497836eaae3307460b448af54f5e65b2bf5ccbad8345fab567077f76ad0c730fa4ad69e87ff2fbba73f56a52aa9debc0dcbe73495c86d28890000000000000000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
clone(0x240000, &(0x7f00000001c0)="bb0e8ae4ba0ad7cfd34315c1e9ec7645f6cb82d74febc2ff21276c1356da6c8dc9ace4a058700ce7b86d576c8b41d257710bc67dfd054c5760b08d749ee5c39a240986115db7956633739b3197182ca0adfbf5acc92c7a3f5752c88c1080d6182c805007e6a7fb80f6b450251bccc1bcd2458c685e959745b980d8346808411bbea69524d6fe1d9a7f0432e0ed460d322bd9e91d6dda54bc4ed8a84dfe2533a98ca6a38a366987f46fff861dcea1e47db40daced6933926a91a901e4c535", &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)="f7df7a8234fb4af8f9e281ff19ee4a604bbf36ed65d7e8a299693bb3db0a2735fe0abe40656d68dd5d9eb76a2e8d5ccc94d21efcaa33ed3c9b7526c93a677557f64facd0b5dac55af59cfa15f1db06d4b69b9cd95242b786551cdb121cdef90ef800cab917c613ce2bff0bef00d5f3ec7a47181392bdf2a871d54eb212371adf4ee505bcd16104304fe5a7917e12d0b65abd972f1dd426e2ed9e179b8786e75876630e413085698f923daa38ac83df03aa")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000440)=""/134, 0x86}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000200000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100f4ff00001b00", @ANYRES32, @ANYRES32, @ANYRESHEX=r0, @ANYRES16], 0xe8}, 0x40)
r2 = gettid()
ptrace$setopts(0x4200, r2, 0x0, 0x0)
tkill(r2, 0x40)
tkill(r2, 0x1)
ptrace$cont(0x7, r2, 0x0, 0x0)
wait4(r2, 0x0, 0x2, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x35, &(0x7f0000000040))

04:36:50 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:51 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:51 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000079000000790000000c0000000d0000000900000f010000000100000002000000bf0d00000100e0b96db7ac8ad4c1933d8f840000ff0100000500000001000000ffffff7f060000000200000004000000060000000500000040000000220f00000300000000000000320c00000400000007000000fdffffff040000000080000007000000030000010004000041f1000012000000"], 0x0, 0xa0}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x975, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:51 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403b600000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2520.437547] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2520.448542] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:51 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xca020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:51 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000c00f8ffffff0000000000d90001000c2053e20c0059db000000001d0000001e0000000000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x20000000000, 0x100006)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000080003005a083f0022e2acbbed298f4baf06a3a8d226f8441e3ae1f6846eed68490ca6bf360933930434a7fe4ee68518cada721b1d1cf8898ea826187279d9e3536d50a6ed64c777fb61c09bca0eec6727664e19cabca5f2623afea2481421c8f8c713011fabdabb5cc0bb95341d44ac89502d714a2929c3f831341c143fa264", @ANYRES32=r5, @ANYBLOB="04000a0004000b000a0006000802110000010000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x900, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xc7, 0x48}}}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x4)

04:36:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x976, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2520.737283] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:51 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1402}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:51 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01e39ba257ac1c63a6ed4b0a99ad349f0018000000000000000c0000000c0000000c000000000000000000000c6f964038000000000000000000000000acb71affefecfdb6fda30a34c2a4b149301f3ca05454784692337a4228b5ff7649232a0473ebc2d4e317dffd54f52a01637c32ec0f6bd730a0e70148c14e5f59faabeef3543b47f880008b7c3c066e2fedecb3ee0b19ec6e52030088bfe14bc64b287fea5bfac3f6371d"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r3, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
waitid$P_PIDFD(0x3, r3, &(0x7f0000000140), 0x2, &(0x7f0000000300))

04:36:51 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010401bb00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2520.834472] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x977, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:51 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01ceb52407000014735906d8df96589948056910df670c48000000a0d40f0a475fe01bcb8c704800004006000000"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
gettid()
wait4(r1, 0x0, 0x8, &(0x7f00000001c0))
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x61)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:52 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa200}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r0, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=""/243, 0xf3}}, 0x10)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x978, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400c000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:52 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xcc030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/68, 0x44}], 0x8, 0x3, 0x6)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:52 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1500}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x979, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = getpgrp(0x0)
process_vm_writev(r1, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:52 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x10}]}}, 0x0, 0x26}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
wait4(r0, &(0x7f0000000140), 0x0, &(0x7f00000001c0))
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, r1, 0xd4, &(0x7f0000000380)="e45fb7148b6f271cbe5c541ead99e131046540e96202dcb9421680f639cc0fd2b51d6f70fdb8d7e03694c411b258bc03b53d9ed8140b187a25b05626804db0724e11325e015ec0de76c00021ff05a0ea8df83c987dcdf92195c267b854d78f4a6aa9a79d2c9363d7e2b43bf8abba5f75b6b467a623f2b5c7579c28edaf98103412e984ad2dd4b681b3fb0537ab885b87062ec85295814db774c220ded05e1003c9c94bb2d5e300f1bc0aa7a0dc86bd494074d516dc2ea69fa775ac820300000070a0fb2673e79aaa")
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0x8})
wait4(r0, &(0x7f0000000280), 0x1, &(0x7f00000002c0))

04:36:52 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010401c900000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2521.987130] x_tables: duplicate underflow at hook 3
04:36:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa202}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:52 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(r0, &(0x7f0000000140), 0x2, &(0x7f00000001c0))
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010402ca00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:53 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xd9020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:53 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1802}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000007f9fe6d66a0000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x24}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/91, 0x5b}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/48, 0x30}, {&(0x7f0000001500)=""/32, 0x20}, {&(0x7f0000001540)=""/196, 0xc4}], 0xa, 0xa5, 0x101)
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:53 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403cc00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:53 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xad00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xda010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb090000000100000000000c0000000c0000000c000000000000000000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
clone(0x40000, &(0x7f00000001c0)="525dd21462e9659b71e5f1f46abe8b5e7315c272f9171f95e7ef9ef694db9a78f79a7caaee0b562e5896fcd9006747b52cd82d949e614c630993baca2f3b2f3d1e33bb0557cc06b84f578f574eee463e6df2ef93691a2cbc60c51048e4b7bd2f1f0cd4d8fa46763cd82e5d2cd7b307b3c6d64c45cc91834301dd6baff71534bb9dbebe8f71591cb76b32024aec8eb606189a080b0948e745a73420b9d4c4df6e8831bbdbbc8a36eef6adab4281439e6d212945c600dc2a1f96a7b39e0be4", &(0x7f0000000140), 0xfffffffffffffffd, &(0x7f0000000280)="1bf915a5bbd9b0d58d64532de00557e418081b11045858babaaf00798609d6e77eef734e36413020152c579e9586e0861f1a05bc84c322adda82215a15943469dc3d31fb867d06e434e6fd129cf8c8f7697c8bde2de89ea09116c3889220065da6cb002d3f45c3ef036b8d893492ea70baf98087db83adb84dd702d6ad69ec60337213cde2ad307ddbb912bf240cc0062ab3a9fa3289fc65b1f6600d09a02a89c0087643390e87fc")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:53 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1a01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010402d900000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:54 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$pvfs2(&(0x7f0000000200), 0x0, 0x3ff, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000400)="a7aa045395bf3ac6c05a474ae6cdf398d0a62ede5ff9851ce78ce01a5f54dc16101f7adcdf875c5059bb651dac00daa829cbdac0", 0x34, 0x4}, {&(0x7f0000000340)="fbf3dbaf507b91b1255f350b78f5fe2abcf25c5f22f762ee75bf7fcd", 0x1c, 0xe92e}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}], 0x2, &(0x7f0000000740)={[{':,%'}, {'check=relaxed'}], [{@permit_directio}, {@dont_appraise}]})
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0)
mremap(&(0x7f0000a78000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f00009a2000/0x1000)=nil)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil)
mremap(&(0x7f0000c75000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000b27000/0x2000)=nil)
sched_setattr(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$fuse(0x0, 0x0, &(0x7f0000000280), 0x201808, &(0x7f0000000900)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@blksize}, {@blksize}, {@max_read={'max_read', 0x3d, 0x461e}}, {@blksize}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, 'check=relaxed'}}, {@obj_user={'obj_user', 0x3d, 'pvfs2\x00'}}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, '(,\f'}}, {@fsname={'fsname', 0x3d, 'check=relaxed'}}]}})

04:36:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xb600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010401da00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x97f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe0000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:54 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400db00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x980, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2524.332086] xt_check_target: 23 callbacks suppressed
[ 2524.332102] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2524.358170] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:55 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xbb01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2524.422507] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:36:55 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400e000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:55 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2524.658632] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2524.778503] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2524.838979] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2524.841652] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace(0x4207, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe0030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x981, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:57 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403e000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:57 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xc901}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:57 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xf, 0x0, 0x0, &(0x7f00000001c0)="3b3a92a288eaea6ae5d5a5fe2f30159bd5b4f43a9a16ba9f4b2454ef706b59a1f5984d0e2ef58a093de32d18b53981c31c55e54f5d8b28b5cb04142ea0419f5ead826e75d1c57abfdafc000020000000004f8f3caceeabf38fa7e360a7b9aefb39dbb224b8c9ba53da678ca39b6b861d3a08e4bb5dc6d6a3a1a2c0ed")
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r0, 0x30)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
tkill(r1, 0x3c)
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

[ 2526.642100] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2526.694443] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
clone(0x1400, &(0x7f00000001c0)="4cf4f9e142e015c097ce260cfd3d659939d8791563af16e1100eb01131e1b1e91bd0f58421520a0c23158fec2fc6ca1dffc3648fc7b79674ac63c6325de08b8ea9a9dd3f2c4f8cb695c0febb57fda584e8d4cb63ec3275861f1f99688d61e3123286ef8e1ec49a0d2cfefa486078584b78b4531b69451d64b1ce", &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)="331d788d6b7e6b43816f298344007bb411b76bcca63d514a161754243d476257c4fb590d504626be39f7e7ebf983e653daf66d38286e74f71cea73af411fd50a61a48a7efbec5f86334899625982b61a55f84693c3e6cc43a0e7ca7da81d3a3fb3b66bf3e48381c11e341f7de04f234e6484e7ca908b5092aae5f8d0c05fc47d6e5a77cdff62fabd83f95331f14433e2a383be794a5b9bb6c1ce37e138ae399ba1765e39a1344831713fd0e02c6ed64a41069fe6f6484df948e6bb765f212695919e409b9e")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001800)=""/224, 0xe0}, {&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/247, 0xf7}, {&(0x7f0000000380)=""/129, 0x81}], 0x9, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x39, &(0x7f0000000040)={0x1})

04:36:57 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010402e400000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:57 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe4020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2526.904707] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c00000000000000de00000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
ptrace$setopts(0x4206, r0, 0xc45, 0x26)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="8183", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = gettid()
ptrace$cont(0x20, r1, 0x3, 0x3ff)
tkill(r2, 0x40)
tkill(r2, 0x1)
ptrace$cont(0x7, r2, 0x0, 0x0)
wait4(r2, &(0x7f0000000140), 0x8, &(0x7f00000001c0))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c57f2000c0000000c000000000000000000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0xfffffffffffffffd, 0x4)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$setregs(0xf, r1, 0x567, &(0x7f00000001c0)="9824db7f750fc29f0eecd0a4c0a33246f561061261b2dfef6c44761e8b95757cc244f2acfbc519107ce06b3700fcbc1201850324b683c318f96afadadb29ad66e064ae39a5450a738986ab73b6a4551873b230abd097aa85e814fe71ef3b1d59afd81d70d00236ab9c021716eaca22c9e7e38f9384b98a20f973df946e33a78b0963726e580674bf653ea5123be545b7bc87e5201f6a5280")
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
ptrace$setregs(0xd, 0x0, 0xffffffffffffff85, &(0x7f0000000280)="158cdf6f7df8bba6c350076abf8adb791aeacc5f251eb3a68b882173fe1d8f9aaaf9ebafbafe00a9106f84d5fb3880588b72460e33b65fce47248309340190cf14e502a928d2ac1677f315236c917acb4a8df016612d8b2a6861413c84c4c8f043525a63b4b9")
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:57 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0x0, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x61, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/174, 0xae}, {&(0x7f00000006c0)=""/184, 0xb8}, {&(0x7f0000000a80)=""/12, 0xc}, {&(0x7f00000007c0)=""/141, 0x8d}], 0xa, &(0x7f0000000940)=""/48, 0x30}, 0x10)
tkill(r0, 0x40)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000640)={0x980000, 0x7ff, 0x83, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x9e0903, 0xec, '\x00', @ptr=0x5}})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
preadv(r2, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/22, 0x16}], 0x1, 0x8000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000009c0)=0xffff)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:36:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x982, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
tkill(r2, 0x1)
ptrace$cont(0x7, r2, 0x0, 0x0)
tkill(r2, 0x2)

04:36:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400e600000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:58 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xca02}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30, 0x0, 0x1}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
wait4(r1, &(0x7f0000000140), 0x40000000, &(0x7f00000001c0))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:36:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x983, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xe6000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb020018000000000000000c0000000c0000000c000000000000000000000c00f22900"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
process_vm_writev(r1, &(0x7f0000000080)=[{0x0}, {0x0, 0xfd59}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xd4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004804}, 0x40040c0)

04:36:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400f000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x984, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40)
tkill(r1, 0x1)
ptrace$cont(0x7, r1, 0x0, 0x0)
ptrace$cont(0x1f, r1, 0x2, 0xb5)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:36:58 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xcc03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3101}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:58 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002e5f0e00"/28], 0x0, 0x33}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
clone(0xa108480, &(0x7f00000001c0)="2c7e4d17c2654537cdb07b93ba85b28e5cb401797a2411833f83b8df268f00bab19ef00facd8b29e5b390cd69a338d1e2e8fb8fe923f82afe3c146353fc2ddfc301a6a93af3c250d22107bc7ff793f9f4fc2b81ed228d5ab5094525e06ed65a9904b2aee42c6c406f72b477605998499b83294c1011e82fdc6dfe77d857cd962582bc98e13c6d476a4268c01e3599f7221", &(0x7f0000000280), &(0x7f0000000180), &(0x7f0000000300)="2fc8093ab9f7245016a617f1aebe1b9486110566acd6ecd72dc13b450923774a8c25dd283dd24ffc3968ed")
clone(0x40000000, &(0x7f0000000340)="ad01bfe852099cda5927029c7deef39f4babb3657d5e4625f7e90cfd8fb84de7b7f1e5107801314effeb9d863c43f64a020f4e943bd355389bd73616f8d5d49d37b94c3e98aa09beaef82da528d4682cb32e1729c7a30ca02404f9b31d497f", &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="67e559ecb9ab8e36b2b48107cec64ae1bfd761a3f1d3bdf2b903c07aefff8ad6a23626cd262859da")
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r1=>0x0})
ptrace$setopts(0x4200, r1, 0xffffffffffffffff, 0x1a)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000002c0))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)={0xffffffff})

04:36:58 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010401f000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x985, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf0010000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r0, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0x10, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x85}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @ldst={0x3, 0x3, 0x6, 0x2, 0x7, 0x40, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x4, 0x7, 0x3, 0x10}, @alu={0x4, 0x0, 0x7, 0x7, 0x1, 0x18, 0xfffffffffffffff0}], &(0x7f00000001c0)='GPL\x00', 0xac4, 0xdd, &(0x7f0000000200)=""/221, 0x41100, 0x1d, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0x100, 0x7ff}, 0x10}, 0x78)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

[ 2528.436545] IPVS: ftp: loaded support on port[0] = 21
04:36:59 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xd902}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 4:
perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3\xe2i\x1d5\x17\xa4\x00\xd8\x02\x9f\x11\xfa\t\x13]\f\xcbo\xc4X\x00\x94/\x96h\xef~Ms\"\x00\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
sendfile(r0, r0, &(0x7f00000001c0), 0xfeff)
fork()
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x200448d0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x264, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x15}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000040000000000000000c00"/48], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)

04:36:59 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3e00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x986, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403f000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:36:59 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xda01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x987, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf0030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:36:59 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403f800000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x988, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:00 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2529.640836] xt_check_target: 15 callbacks suppressed
[ 2529.640852] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2529.665498] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r1, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140))
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r2 = gettid()
rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040))

04:37:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000c0000000a00000000000001000000002d001f00"/52], 0x0, 0x34}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2529.887747] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2529.888167] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:00 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010403fa00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:00 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xf8030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2530.016842] ieee802154 phy0 wpan0: encryption failed: -22
[ 2530.022476] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.041707] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:00 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40)
tkill(r2, 0x10000033)
ptrace$cont(0x7, r2, 0x0, 0x0)
tkill(r2, 0x7)
wait4(r1, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r3 = gettid()
rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040))

04:37:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x989, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2530.458379] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:01 executing program 4:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000010000000000211675959d1d", @ANYRES32=r5, @ANYBLOB="040000000000000008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100004000000000020"], 0x3c, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003ac0)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003840)=[{&(0x7f0000000380)={0x172, 0x1c, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@generic="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", @typed={0x8, 0x47, 0x0, 0x0, @pid}, @nested={0x17d, 0x78, 0x0, 0x1, [@generic="bce64edfd9cf576e827705e2716ee84d3b1a012b957eb6573c9d4728692d9c2cf2f629684f4b41373f08926f153dd157bcb30f1a09f84c5e884228b806064c81bfd77f0763ebb4c65eb9b3f073e475dbaa00e4fed5aa807ca0f4f50da3fbd094c2ab75cd7466194100802f2d43792e2946e7d5836c48ce8aa78e813dd7d0ef207928c1937279f6cfbf739ee24a669aaa1be044f2402a900257e3ecedcd73163ed2c1b35f734a71684e2efbbdd9eb3df825c5f8f7", @generic="f6e1ffe471b265cd0ec175e8474913a8cb6f0e6533df4345400a5a14ac3f4b6338c050fe3400bb492f28c88903b520529d8bd386d9cee49b2f23a0a6a2dfd3ae05b995de5def9dab5fd9af328cc7d5c577bff0", @generic="abd0c7d429c61f6cf247a5bffdae698235927546c624df390445090a2438cd41e9b72c66a9f08b9ade760884c236f477146d44f1452389bb2536f3746b7b0f6c44b392ff7443a80085ce3d1f5a7f7eb79344b1d8041e2ae79ebb1b55b480698f0add007c73cc6c8dfddebe200f80828f6a5b"]}, @typed={0x8, 0x18, 0x0, 0x0, @pid}, @typed={0x8, 0x4c, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r0}, @generic="23e4a3657e247db32a67b7094037d2d14c7be80f1a7e827e01627c20f44e8e70b9"]}, 0x2d0}, {&(0x7f00000006c0)={0x157c, 0x1d, 0x400, 0x70bd27, 0x25dfdbfd, "", [@nested={0x38, 0x1b, 0x0, 0x1, [@generic="4124e5db00c8070da8c9daee1181", @generic="4432fe3f0d6aed881e9946b7b49c26ff03a80342d35bb99e2b1252f1bdb46d1a0fafedcdc42e"]}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}, @nested={0x12d4, 0x78, 0x0, 0x1, [@typed={0xff, 0x8a, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x22, 0x0, 0x0, @pid=r1}, @generic="9d44f3e0e0c71dd8aad7ec0ee06c4bdb1dddbab3ee601dd59880900e316909502dea3b982c52a1d389b396dc84e8222a6980544a2ff3648625b8adb70e7e16c6ed8ecfcae841c58e90c0b0088df49ed258fb912dff69aafb8fdd67d78b21b3ecf2b783b5", @generic="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", @generic="8420db93d8f17a2ecc158b54f37a93139a5fa1f12aa59a09b1c7171aef0e10a166471671ba57b860a2b4204103b106ada3ab3385b5065108829e6e92449131d6cdda699374461e67b39c0d", @generic="108dc5ae54cb74f386a1f85e49ec93c25d6933afc0c39b9a4c9b628c99e1770d68", @typed={0x8, 0x3e, 0x0, 0x0, @fd}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@remote}, @generic="ab2010f6d2e793e92fbc82cd565abbba274630472d58a3cf84017b5fd6d469f9e569861a405edd306296f29e125035a6d42d03656789815ca5a90a170407b37a29afc8bc889b9030147ebf509f4559f88986b8546a1b75429cdd7c18b1aef72df9a14695935499882476d59c720efce0ed6f99639efe529a1886995defcd80f7590525c205810418d84c0425bac09c80f9ec67e9e9a453b97541d0e32c7060fbdbd7c10189a5b9376a734cb0c2a59d0d6103bf8cd0191f24ea99d236e7a5b05eb92c4bb8221b0f9ca5708b401b5a773b6fc4b3faf1e859b098279e20", @typed={0xc, 0x65, 0x0, 0x0, @u64=0xab}]}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@empty}, @nested={0x7c, 0x56, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @u32=0x9}, @typed={0x65, 0x4b, 0x0, 0x0, @binary="d0758ea427ef5f9454505002360e71be7994d371789003881d43ad59e66dec47f273782ae8a3bb1bc46fbd67562f4af1cc6e8f4833dc48037456f14edc96f819fce69bf1421c0671f05ed015abca072d3eb6a4e15f377941498ff8aff43f375c2c"}, @typed={0x8, 0x51, 0x0, 0x0, @uid=0xee00}]}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x84, 0x0, 0x0, @fd}, @generic="acc6b13c67a454d56f85aaad26f8c2d7b36c1125a3a7e0648f0448c4b977bd00e572f8519db046cea6914db71016861e2fcd05a5861a61f671efd568c2a4a49c55bb98ebf86d5e5bf46f31cc90da1c9131fcbf1fd71471174d7a2b3355f0f72077fad59e88c4882758e06c56840db1f4f264f0b0d10faad5d81d15bf4ff490790d26a564586e4213ce8d2e1ac1529cd9b6005b53f74c", @nested={0x11e, 0x1c, 0x0, 0x1, [@generic="ab59db99de76031c85bb430e8f73047c681bef31a39308b7fa0954ee9f506fbf61fde0880145fd73815c44a4cf7f880b080f1feb134cacd31ed4ce3666c96e8adf3056b9bd70d2260cdb7444e2eeeea96a5fcf2308f2f9ca6a102d3ea4144a730cf38cdd379dde55379d98e2ce1ffb5e0750f09021b48c64fe31deb3e80b5cc2e0913be832049283b6e46e42c79408efd3ad995ac558b3", @generic="8dc525ac55a609e8b38d0a61719ddcd83367267f2163832bd2811fac0d1ea735517bfe703fd715b3ccba3e42ba869ba8ef9fe24179c7d190eb471f6689789d8d86003549efad1ba94fbc10093ddbdb88a0f09c6e789e40194bddfd997901507abf96f8c2a194011eed0fa07c2e4a7c6611fe05e0f91ac86eb908da96d08b705b65a74e"]}]}, 0x157c}, {&(0x7f0000003b00)={0x11ac, 0x21, 0x105, 0x70bd2c, 0x25dfdbfb, "", [@generic="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", @nested={0x7e, 0x73, 0x0, 0x1, [@generic="7d2a0b0fff15b4726e9c491ed13d55e5ba9f219ad3cfb28feceec99897ae28109b12e7a08335aaba8d6a88ba5978d90cfbb8501bd0218fe0b52eca74a9542a0838c034a75d55405ebc850dce8126d747544b2b3059c77bc1f440b0cdcb9f64ad262f3342ceb676794d27747d39d58022f818a80275fe322c3265"]}, @generic="df8b3f71c58b59a9faceccb3955704187c03252952cc70023d0d3276bd75b195d3d1f75b944a3a1f1b5bdeadc30dc7af5f80a2a95ec6cd0c1f8dbc5a7d402573033226f5ecaa5fc4b47c34cd19584375e876068d361cb7e2ef9ba98ef0b7ff4d3bb25d064dfe554ec68033be0cdfc0de2b751b90df5c6ff1955a581c2a9658932de48170260f17bbb0a15249d0aa2cf04aa83b18afadd7adfca5f7e569c0c658824749274cda74a75e9634a1dd0dba948ce28b8ba72dd2c12adeb3782bc4f513c7e0510ee7882172c4e48191b05362ebd81fa5c13b9a"]}, 0x11ac}, {&(0x7f0000002e80)={0x8c, 0x39, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@generic="1a21f63c33868ff86899a1ec83e6eb8c20ac79566c9c2fb7ff7b10fca3281bb31b895c3f449ed2be5633127d27a5c11d94c118e453ec207121eae4fb90bee7f8871fe7c7deba9efbd569ca2c9e07c96bf66b458b0d4e9575836bf9a7a52c9cb6e8f822e2641a86cc29897a4fce49cf994a50e1f87add66761951c6"]}, 0x8c}, {&(0x7f0000002f40)={0x814, 0x14, 0x20, 0x70bd27, 0x25dfdbfe, "", [@nested={0x186, 0x7, 0x0, 0x1, [@generic="20b6e8670eeaf45a38988cca3ee3498a46a6f5397b1ba19d075cb29fe850c91ef5095dbfece06cc315da6908e4fb2659395d5af5abf0202eae86e6caca89d3cedf15e32ea5d7ef0dce60c93241903e587d637b598af21bb1ac476de551c6935e658ab23cd811c584d150fd", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast1}, @generic="ca", @generic="a45d635f5cd1515b5fad28829cb0338698eafeeeaffa8e3f1be671eb60617d91791c53b3f0a05b75dde65c76c1f567ead6d247fe4a68fd58d16c616f6e290561ecd9d4e749f65351a0fa68697d5026fbe11eabf67c55ea510c57021008c693", @generic="5ed1ad9b00ecb84547afabd8772e1abe39953e7e2ffee0a201a4c0d4753c7d3aeaac859338e2c82e15df553d15345496bd759e2aa2d649d4411abaf5e296c6f903fc877a70ef63879070abc711a7496a24ee9f48505d59703385327a53b9861edfcb1cbb07dbdf4fd9309a74b5c3188750fcde53ae9c0a7458ae9c025796dbc5ada3a56467c20f427b0fc35e8028ea48163ee405e487afb0047561388ee20f0f90eefbc1dca3911c9547b11d628f37"]}, @nested={0x20, 0x8a, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @u32=0x401}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x145, 0x1, 0x0, 0x1, [@typed={0xd, 0x8b, 0x0, 0x0, @str=']*\\\xb5#.$\\\x00'}, @generic="0e8e243a00f40435214aa1f92894d7b3a3fa442dafcb8d24da9739997784154b25a67d939c0273c0e9121e08a52f278e5cfe5d8d031514de0b5dc3eea428bb0796f0acce9da6da074bf97fd95fe7e7945e2832834e6617", @generic="400542a8f327599041be6f5a0fc0f0c33fd0a19e151a3396599c0c77cc885b8090ea06a548739b4a37729667ea3e5adc1c97e8d1d0e0fd188d356c37768e8989a9f7bb76b2f88c747c539740cd85a32f3665f6af328d2b7033c7e05636a84c6eae236b959dea63c34118e51f3522f6e6f8cfd903a882d5874704caf518d1fcab260f74ce524262624043b608ff578f7b3594a8a960124fd012f7d9964c364e261bed65955cefada41e5568bc49de35787397408e420f75711d5cfe03199f2d535f7c6c471042c316f2258550ede5f7947e1d02170e6bf9509bda"]}, @generic="530860a7ac938c85edd85d3ef6b416f741084c3136a5cc2b933d7376f7d34de574eb2d76d9ad51f3edff22c34620361a6b532f2e6c1b137310f07e40a3c5691b8313816e05ac8deac826b2a01b2cf279b757369f1233be7d0e086554bc906b93419b15ffdfd1179f4848562c7e657c83754fdada09aeabfc347890a99490d8bb8b8dcb660a52b8adbf71fd2a34873a55d252c61e5c73e5581fbe569de7d95cc5a0b4c064c3abdbb65dc204ba53ffa4a9925ba6b365e427ef007d14b432be9e90ea53568a0dc09ecd464440e2996a", @generic="7d061e7ecd77406c5ec06df827fa25029d0f28ee139460b3c278f1ac16293153", @typed={0x6, 0xf, 0x0, 0x0, @str='(\x00'}, @generic="085e5506e11be8fa5574d6b983e5eeee1cc3cfd2dd193340b292841b1b3903aa894433f166933278ac191defde9d8004297ca795209dcbb0e820b870b3e2d7447991c29106acf3f1018cd888242943a8fd", @typed={0xc, 0xb, 0x0, 0x0, @u64}, @nested={0x3b3, 0x74, 0x0, 0x1, [@generic="933dfa4a2297af6d691b3fbd89b8f7cd01623fedbba4d39f698454188b2c2ce0813ee91149cce9c9b29007ca3fd9f70f91f7bd1ccab52640db41b5795d88869045c0c369ebc9fa7a48dd884da04ed258acf158a34297bde139d5eed4f6e10389183831d194279b778ae5d9353a8b12a308e191b859527ef590ee0ef2f5dca1b7aac49adc647eb890c3a8c14f40c8a573540a7e2b6ebe56818e0b7d8c0fa257cf64572f68febbb23430a49af1a7e97b4bdeca68ed2845d67c1ee80af8b25cc745bafeb6514e64964b17d96c7d6c4be59046ec9399bba6eeb895dfb4378db6f9e6b072e25d6bafb926337c5a2c9085d0f03b8ae798c4d50a317a951fcbbe", @typed={0xf1, 0x5d, 0x0, 0x0, @binary="fed699165dabe531e849455af68ea035ab10b8e664e914d54fde39e47765d3a0d72c0c9a328d0f29b137fc6d04f6a409bf2275780a425075cb253009e3d147d5f615728766625c600cb241f678e0c560fe9c7b28db0758ee8c1cd341527112907962c1480ddbd0e6f0439151cfffc43bac8701aa6e16ed3ab077aff065cfecb4aea7b5416462867af79e69380b90675154abe77c0a587cf97fa8827388402d9c68e0652d6490022476ac3f9d4c9fb7bcba6fad07f918550ad54ce8b3cea4190d0c95c185b6594f5e6a14c6564262400bc0538d5d8cac31189be73ddd6ab9ed5aafe4fc0701440679c47954a90f"}, @generic="74ecb30a5cc4b2f716bcc4ffb03a05c15e16fbcb653b4ada38cdc03099cc9c569d40d9537b518515f642164710e98de8fd60f6aba6dcfcd12be6033d5cc50070b4989338faa27d73c2ec2c815b701aa2671fb366bbc277d57066ec5b324197986f1ba45ca782a461af60942082e9b69448293d4645a930f073abd6c52b1ca5", @generic, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}, @generic="05659ef0cca784661136", @generic="2426ef65c198e480e919b4f2a27d3f28fcb0203c166564ad5e2f019249e3ee459dc1d4b89d47b6273279ecf646825110dba90e6327cbde43bdb20c03e836792f7af32bc3e8cc5719eb24904c89f901b2962a5c865a3dbf6c75377a69523bcc6b59746e777f2c89dab334fbdec88cca52b61cf8840a887434a4cef76397cd071914b21cb3a0e1", @generic="2dad051781e7e42c6ded36f874cd8c22cb7e9e9f86ceaed3d808128bb6f75e635e6aed4ad060f0227bd0be7887a53d814b4d1923a859fe93881d6482997b8410d95a09dbaef51b00d544f1c8fe583d00c9cb93a29df8313e139523e31567d87f779d582940c02fd874761a2c2a3152a868c6b1f0fe89548cdca030356f81c2147d7b7b84be94a8e38432a1a7b711c5464917506dcb594680ea3d3d0f58b7d6c0efa8635392f0ca"]}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x1000}]}, 0x814}], 0x5, &(0x7f0000003a00)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r6}}}], 0x98, 0x20000000}, 0x20000000)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r1, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
wait4(r1, &(0x7f00000001c0), 0x6, &(0x7f0000000200))
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r7 = gettid()
rt_sigqueueinfo(r7, 0x3c, &(0x7f0000000040))

[ 2530.524018] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2530.539513] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:01 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4002}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:01 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c0000001000010400fe00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c00000000000000000000000000000000f089d212644713267ec1"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
wait4(r0, 0x0, 0x4, &(0x7f0000000280))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2530.732280] x_tables: duplicate underflow at hook 3
[ 2530.756295] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:01 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:01 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xfe000000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2530.878553] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:01 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104fffe00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c00000000000000000000000000000000f089d212644713267ec1"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
wait4(r0, 0x0, 0x4, &(0x7f0000000280))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:01 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:01 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c00000000000000000000000000000000f089d212644713267ec1"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
wait4(r0, 0x0, 0x4, &(0x7f0000000280))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xfeffffff], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c000000000000000000000c00000000000000000000000000000000f089d212644713267ec1"], 0x0, 0x30}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
wait4(r0, 0x0, 0x4, &(0x7f0000000280))
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:02 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001040fff00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:02 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe402}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x82020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4f00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xffff1f00], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047fff00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:02 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x82020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x6000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xffffff7f], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:03 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104feff00000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:03 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x82020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:03 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001046e5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x98f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:03 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x40020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:03 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001046f5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:04 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xffffff80], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x990, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf001}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x6800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104705802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x991, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x40020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xfffffffe], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104715802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:04 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x992, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:04 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x40020000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x8202}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104725802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x993, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2534.710221] xt_check_target: 28 callbacks suppressed
[ 2534.710347] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2534.710434] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2534.716993] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:05 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x2c030000], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x994, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2535.081260] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:05 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104735802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:05 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf803}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:05 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x2], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2535.291287] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2535.291503] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:06 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x8c03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x995, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:06 executing program 4:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104003000000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2535.519218] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2535.559019] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2535.622789] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:06 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104745802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:06 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x9800}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x996, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x94f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2535.939669] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:06 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x3], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:06 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
dup3(r2, r3, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:06 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104755802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:07 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xfa03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x997, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104765802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x4], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x998, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xfe00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
dup3(r2, r3, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:07 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x999, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:07 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104775802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:07 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x5], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa200}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2537.386138] x_tables: duplicate underflow at hook 3
04:37:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99a, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x40000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104785802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:08 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x6], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa202}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
dup3(r2, r3, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:08 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104795802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99b, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xad00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:08 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x100000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99c, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x7], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047a5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:09 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1fffff}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99d, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xb600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047b5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:09 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:09 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x8], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99e, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xbb01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:09 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:10 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047c5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x99f, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a0, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:10 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047d5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:10 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
preadv(r2, &(0x7f00000017c0), 0x1d4, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:10 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2539.920639] xt_check_target: 27 callbacks suppressed
[ 2539.920730] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2539.937373] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2539.954228] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a1, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:11 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xc901}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2540.512585] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xa], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:11 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047e5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2540.558936] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a2, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:11 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xca02}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2540.758140] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:11 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:11 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:11 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001047f5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a3, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2541.103814] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2541.124975] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x15], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2541.221661] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a4, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104805802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2541.337290] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a5, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xcc03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x28], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x7000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104815802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:12 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a6, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x3e], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104825802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:12 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xd902}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:12 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x8000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a7, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x46], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104835802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:13 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xda01}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040))

04:37:13 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104845802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xa010000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x4f], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:13 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:14 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104855802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:14 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xc030000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:14 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104865802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9a9, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:14 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x60], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2544.105138] x_tables: duplicate underflow at hook 3
04:37:14 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104875802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:16 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040))

04:37:16 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x10030000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9aa, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:16 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:16 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x68], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:16 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104885802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2546.075786] xt_check_target: 23 callbacks suppressed
[ 2546.075803] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2546.147061] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2546.156382] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9ab, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:16 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104895802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9ac, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2546.737005] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2546.748011] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:17 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048a5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:17 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x14020000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9ad, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2547.148899] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2547.447133] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:19 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
rt_sigqueueinfo(0x0, 0x3c, &(0x7f0000000040))

04:37:19 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x98], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:19 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe402}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:19 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048b5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9ae, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:19 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x15000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:19 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048c5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2549.065275] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2549.095604] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9af, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2549.325971] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:20 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xa0], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b0, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:20 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048d5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:20 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x18020000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:22 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xe600}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b1, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048e5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:22 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1a010000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xa2], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b2, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:22 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2552.115930] xt_check_target: 6 callbacks suppressed
[ 2552.115946] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2552.150108] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:22 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001048f5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2552.235338] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:23 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf001}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2552.472056] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:23 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xad], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2552.605613] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b3, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2552.678106] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:23 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104905802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:23 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2553.233602] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2553.339380] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:24 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1c030000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf003}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:24 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104915802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b4, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xb6], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:24 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x28000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b5, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2553.692126] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2553.733838] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:24 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104925802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:24 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xf803}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xe0], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:24 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2c030000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b6, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104935802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b7, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xfa03}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xe6], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:25 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x31010000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104945802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:25 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0xfe00}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0xfe], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3e000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:25 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104955802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:25 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9b9, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:26 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104965802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x10a], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2555.574792] x_tables: duplicate underflow at hook 3
04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x40000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3f000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9ba, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104975802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:26 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
r0 = gettid()
rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040))

04:37:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9bb, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
r0 = gettid()
rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040))

04:37:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x11a], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x100000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
r0 = gettid()
rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040))

04:37:27 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104985802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x40020000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9bc, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:27 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c00000010000104995802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:27 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x131], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2557.027730] ptrace attach of "/root/syz-executor.4 exec"[30099] was attempted by "/root/syz-executor.4 exec"[30103]
04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:27 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1fffff}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x46000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:27 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049a5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9bd, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2557.129630] xt_check_target: 26 callbacks suppressed
[ 2557.129699] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[ 2557.187809] ptrace attach of "/root/syz-executor.4 exec"[30125] was attempted by "/root/syz-executor.4 exec"[30135]
04:37:27 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2557.296065] ptrace attach of "/root/syz-executor.4 exec"[30156] was attempted by "/root/syz-executor.4 exec"[30159]
04:37:28 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049b5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9be, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2557.442628] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2557.471714] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2557.482883] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:28 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x1bb], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:28 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x1000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:28 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4f000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:28 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9bf, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:28 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049c5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

[ 2557.996220] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[ 2557.996330] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:28 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2558.111442] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:28 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:28 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049d5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:28 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x1c9], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2558.313215] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
04:37:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9c0, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x2000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2558.464430] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:29 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x68000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x3000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x3c, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:29 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x1da], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049e5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x3c, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:29 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x80ffffff}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x4000000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9c1, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x3c, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

[ 2559.137348] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
04:37:29 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func={0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x48, 0x0, 0x40000000}, 0x20)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = gettid()
rt_sigqueueinfo(r1, 0x3c, &(0x7f0000000040))

04:37:30 executing program 0:
r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
socket$packet(0x11, 0x0, 0x300)
r1 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006600)=ANY=[@ANYBLOB="9c000000100001049f5802000400000800000000", @ANYRES32=0x0, @ANYBLOB="21200200082a0500580012800b0001006261746164760000480002800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c0001004241544d414e5f560c0001004241544d414e5f560c0001004241544d414e5f5608000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="14001400626174616476300000000000000000005481"], 0x9c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

04:37:30 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x721, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback={0x82020000}, @mcast2, [], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
socket$inet6_tcp(0xa, 0x1, 0x0)

04:37:30 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
syz_open_dev$audion(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x248100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x101)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x4c8, 0x3, 0x3e0, 0x240, 0x268, 0x300, 0x240, 0x268, 0x310, 0x460, 0x460, 0x310, 0x460, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0x0, 0x1f0], [], 'dummy0\x00', 'batadv_slave_0\x00'}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xa, 0x0, 0x0, 0x0, 0x5, 0x1009}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'team_slave_1\x00'}}}, {{@ipv6={@remote, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 2559.632791] ------------[ cut here ]------------
[ 2559.637796] ODEBUG: assert_init not available (active state 0) object type: timer_list hint:           (null)
[ 2559.648169] WARNING: CPU: 0 PID: 18570 at lib/debugobjects.c:325 debug_print_object+0x160/0x250
[ 2559.657018] Kernel panic - not syncing: panic_on_warn set ...
[ 2559.657018] 
[ 2559.664392] CPU: 0 PID: 18570 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0
[ 2559.672297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2559.681647] Call Trace:
[ 2559.684239]  dump_stack+0x1fc/0x2ef
[ 2559.687904]  panic+0x26a/0x50e
[ 2559.691086]  ? __warn_printk+0xf3/0xf3
[ 2559.694966]  ? debug_print_object+0x160/0x250
[ 2559.699450]  ? __probe_kernel_read+0x130/0x1b0
[ 2559.704017]  ? __warn.cold+0x5/0x5a
[ 2559.707640]  ? __warn+0xe4/0x200
[ 2559.710992]  ? debug_print_object+0x160/0x250
[ 2559.715476]  __warn.cold+0x20/0x5a
[ 2559.719611]  ? ___preempt_schedule_notrace+0x16/0x2e
[ 2559.724702]  ? debug_print_object+0x160/0x250
[ 2559.729189]  report_bug+0x262/0x2b0
[ 2559.732806]  do_error_trap+0x1d7/0x310
[ 2559.736688]  ? math_error+0x310/0x310
[ 2559.740475]  ? wake_up_klogd.part.0+0x8c/0xc0
[ 2559.744956]  ? wake_up_klogd.part.0+0x9f/0xc0
[ 2559.749439]  ? error_entry+0x72/0xd0
[ 2559.753155]  ? trace_hardirqs_off_caller+0x2c/0x210
[ 2559.758178]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2559.763023]  invalid_op+0x14/0x20
[ 2559.766470] RIP: 0010:debug_print_object+0x160/0x250
[ 2559.771575] Code: dd 20 f1 b3 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd 20 f1 b3 88 48 c7 c7 40 e5 b3 88 e8 65 92 7b 04 <0f> 0b 83 05 73 e6 af 07 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89
[ 2559.790477] RSP: 0018:ffff88805bca7590 EFLAGS: 00010082
[ 2559.795840] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000
[ 2559.803098] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed100b794ea4
[ 2559.810363] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[ 2559.817630] R10: 0000000000000005 R11: ffffffff8c66501b R12: ffffffff89f90a40
[ 2559.824913] R13: ffffffff815313f0 R14: ffff8880b37d9028 R15: 1ffff1100b794ebd
[ 2559.832246]  ? calc_wheel_index+0x230/0x230
[ 2559.836739]  ? vprintk_func+0x81/0x180
[ 2559.840625]  debug_object_assert_init+0x1f0/0x2e0
[ 2559.845460]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 2559.850565]  ? debug_object_free+0x380/0x380
[ 2559.855403]  ? __queue_work+0x5f1/0x1100
[ 2559.859463]  del_timer+0x6d/0x100
[ 2559.862917]  ? run_timer_softirq+0x670/0x670
[ 2559.867313]  ? _raw_spin_unlock+0x3b/0x40
[ 2559.871466]  ? trace_hardirqs_off+0x64/0x200
[ 2559.875863]  try_to_grab_pending+0x2b6/0x6f0
[ 2559.880260]  cancel_delayed_work+0x76/0x2c0
[ 2559.884574]  ? cancel_delayed_work_sync+0x20/0x20
[ 2559.889405]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2559.893977]  ? queue_delayed_work_on+0x122/0x200
[ 2559.898724]  l2cap_chan_del+0x5b4/0xa50
[ 2559.902689]  l2cap_conn_del+0x3a6/0x6e0
[ 2559.906658]  ? l2cap_conn_del+0x6e0/0x6e0
[ 2559.910797]  l2cap_disconn_cfm+0x98/0xd0
[ 2559.914913]  hci_conn_hash_flush+0x127/0x260
[ 2559.919345]  ? vhci_close_dev+0x50/0x50
[ 2559.923308]  hci_dev_do_close+0x6bc/0x1020
[ 2559.927533]  ? hci_dev_open+0x250/0x250
[ 2559.931490]  ? hci_unregister_dev+0x35/0x460
[ 2559.935888]  ? fsnotify_first_mark+0x200/0x200
[ 2559.940461]  ? vhci_close_dev+0x50/0x50
[ 2559.944434]  hci_unregister_dev+0x14f/0x460
[ 2559.948747]  vhci_release+0x70/0xe0
[ 2559.952367]  __fput+0x2ce/0x890
[ 2559.955643]  task_work_run+0x148/0x1c0
[ 2559.959535]  do_exit+0xbf3/0x2be0
[ 2559.962979]  ? futex_wake+0x159/0x480
[ 2559.966784]  ? mm_update_next_owner+0x650/0x650
[ 2559.971440]  ? get_signal+0x388/0x1f70
[ 2559.975320]  ? lock_downgrade+0x720/0x720
[ 2559.979454]  ? lock_acquire+0x170/0x3c0
[ 2559.983421]  do_group_exit+0x125/0x310
[ 2559.987308]  get_signal+0x3f2/0x1f70
[ 2559.991013]  ? mark_held_locks+0xf0/0xf0
[ 2559.995086]  do_signal+0x8f/0x1670
[ 2559.998617]  ? poll_select_set_timeout+0xd4/0x130
[ 2560.003453]  ? setup_sigcontext+0x820/0x820
[ 2560.007874]  ? poll_select_set_timeout+0xd4/0x130
[ 2560.012703]  ? timespec64_add_safe+0x189/0x210
[ 2560.017285]  ? nsec_to_clock_t+0x30/0x30
[ 2560.021334]  ? ktime_get_ts64+0x2c3/0x3e0
[ 2560.025534]  ? __se_sys_futex+0x28f/0x3b0
[ 2560.029667]  ? __se_sys_futex+0x298/0x3b0
[ 2560.033806]  ? do_futex+0x1880/0x1880
[ 2560.037620]  ? __se_sys_poll+0xac/0x3f0
[ 2560.041605]  ? exit_to_usermode_loop+0x36/0x2a0
[ 2560.046272]  exit_to_usermode_loop+0x204/0x2a0
[ 2560.050850]  do_syscall_64+0x538/0x620
[ 2560.055101]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2560.060297] RIP: 0033:0x7f7175257ae9
[ 2560.064005] Code: Bad RIP value.
[ 2560.067357] RSP: 002b:00007f71741cd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2560.075055] RAX: fffffffffffffe00 RBX: 00007f717536af68 RCX: 00007f7175257ae9
[ 2560.082314] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f717536af68
[ 2560.089569] RBP: 00007f717536af60 R08: 0000000000000000 R09: 0000000000000000
[ 2560.096828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f717536af6c
[ 2560.104093] R13: 00007ffce3ef06bf R14: 00007f71741cd300 R15: 0000000000022000
[ 2560.111716] Kernel Offset: disabled
[ 2560.115452] Rebooting in 86400 seconds..