last executing test programs:

16.511346791s ago: executing program 0 (id=111):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20040080)

16.420051042s ago: executing program 0 (id=112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="fef82e296cbc", @local, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xb08, 0x6, 0x20000000, 0x4, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="fef82e296cbc", @local, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xb08, 0x6, 0x20000000, 0x4, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async)

16.081200529s ago: executing program 0 (id=116):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a000006001700980a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000300)=@req3={0xf5, 0x7, 0x8001, 0x0, 0x5e, 0x7, 0x1fa}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000006000000000000000000b3be3af80000010000955ed3d7f1bacc5a24baef86847a4b0830be695916227ce411e8dba431ef618ed3006a257f7878f8635ac89f28644b073de87f46c5b4b1a414c10e56dbd1c5985a8e2d2aa34e24876c31b1d8e7a34ba7fe8a962beb5a3715de141b71f1c58ca9210ea183fe3499a14119078c2306497a4f207d7ff13e7350d0d0c485bd3b3ff7792ec88f911f0b6bcd8dcf4d0632acac21e251ae60d83a446c815f658c308a0000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x89, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

15.85411432s ago: executing program 0 (id=119):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x24000880) (async)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000740)={0x24, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x60}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x40000) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}}, 0x0)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f0000000080)=""/230, 0xe6}], 0x6}, 0x80000003}], 0x4, 0x10100, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)

15.566767601s ago: executing program 0 (id=122):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

4.11850287s ago: executing program 1 (id=229):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x48, 0x0, 0x5, 0x4, 0xb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x0, 0x3, 0x0, {0x7bcf, 0x4, 0x0, 0x3f9, 0x0, 0x1}, 0x800, 0x5, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@remote, @multicast1, 0x0, "7f59d8d0d4c0b6db4c09a764de3ed08f3a66f8a556cce7e8f914f3c6e9f4892f", 0x7, 0xe, 0x2, 0x101}, 0x3c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f0000000080))

4.002983004s ago: executing program 4 (id=230):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x1f, 0x0, 0x0)
syz_extract_tcp_res(0x0, 0x4, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14e6ffff0f00010000000000000000000000000a38000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000000a00074010c998226244000014001100010000000000000000000000003d100016fe8d1921b59f3e78c2fa8222a65f9c72907dc394bb7c15a8c8761b9df8f60eea802ee8e221b6ae55017b3f13929e037d4959"], 0x60}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095077fe3ff5c73e39404b1cb0dc961dc68b2af3a24d652ca8bc57b95aee100"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6215e3c3}]}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab10000000000000000000200000028000480240001880b0001006e756d67656e000014000280080002400000000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)

3.866424585s ago: executing program 4 (id=232):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x2, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="0a6639b933343da268f582735a0e35a7a8b386809931c66f40c217a2a1cf44a3862b10129b791ffa752620376bcd66624fb4b8d4b48289a510d9d92bda1e28b72e4f07f0802b1965c07c46d6eec3ca70a9d2154f94a0301414e9ef53ccf652e81bd60da959378e59bb5cef735c8009eb57ad5fd31d6543867b79ae85f5e0e47906afbe9068c02370880c8e45a6b2d134f08f6c304cea2c38f128cdebf0a73b4ed7dc1fa5640dcac0118d0a7a5a6d86e50933b194a08a8dd1a5812d66e8837bfe34c95c3c92f30eb3d73c83379cac2fee6e1edf974bb291aa7f7ca95850", 0xdd)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd2b}}]}, 0x3c}}, 0x800)

3.615126371s ago: executing program 4 (id=233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14009561da44dd000074d649050000000000870000d9"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005020a0101021800168014000300fc0000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e23, @multicast2}, {0x6, @remote}, 0x765baa54cdf2e5b, {0x2, 0x4e20, @private=0xa010100}, 'gretap0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ffff030000891089000000007da734a80095000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'nicvf0\x00', {0x2}, 0x7})
listen(r3, 0x0)
splice(r2, 0x0, r1, 0x0, 0x20007ffff041, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
getpid()
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/net\x00')
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x5})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r8=>0x0)
r9 = getpid()
r10 = getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r6, 0x1, 0x70bd2a, 0x255fdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000081}, 0x80)
write$cgroup_pid(r2, &(0x7f0000000040)=r10, 0x12)

3.413640162s ago: executing program 3 (id=235):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, 0x0}, 0x1fd)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfe86, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d00300000800800017f78a57c874df35235510010000000240005800a000400aaaaaaaaaabb0000080003000000d73500000a000400aaaaaaa9672d36bd79", @ANYBLOB="69e83f5e668acd6511ed712a0dcfc12f984eec0205fd346caca567004c24506fb34b864e40c70aaf88f891119cb6968d6e6ffaf7093c11d65d4f66d134e376fb9be6ff07dd564edbdc22125f6625aa5462ba1b464096386564eec976bf1b22ea966f646051628804e4cc47736447884bb9ccdf43b59ecd32", @ANYBLOB="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"], 0x68}}, 0x0)
r5 = accept$phonet_pipe(r3, &(0x7f00000004c0), &(0x7f00000000c0)=0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = accept(r6, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa0900, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r8}, 0x47)
recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0xc7a6f3c39b361112}, 0x7}], 0x1, 0x80002100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r5, 0x4596b000)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8060}, 0x4084)
openat$cgroup_int(r1, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

3.16706584s ago: executing program 4 (id=236):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000400), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x2, 0x0, 0x0}, &(0x7f0000005480)=0x108)
r5 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x5, 0x56, "d437d65e15dd9abaaaad9311ccbc4fdccb783ac243de4ae9bf9ee8b9d61e23bdc47f754f4a6e934c1a4f2f93bac1601614c00656adbddf52fff188cf9f59a931c1c7861f13c9441c7ecb3d1e4238756d718bf33b8062"}})
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0)

2.926105056s ago: executing program 1 (id=238):
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="044804c752bf0f30a7c59d079b300f2d42e8397169bf3159b604c216137d8e61cda7553cab236c6e6acaa5679db1cbd520f15c3b04335f9246701242e606d3ed0b3b27bb7b8ffb19989beb63cfc91df37335f3914f", 0x55}], 0x1}}], 0x1, 0x4040854)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
sendmsg$xdp(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="4b993ca7f8260b79454b7be94386cf818078a65885fb2aab0dee5e587ec5d6179a14018e528dbf558f863ae9d9e88ab1eee3ca952266b2b65d33bca226ae20d8f71dde8dc936ce36713d9f83f6ffcba408aefd2303d5cb6d2eaaf2bd631c03d80c43e2ce8dca6ca1a3c31852976929016ba9e6aab71f86c9760f0d95d117", 0x7e}, {&(0x7f0000000080)="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", 0x144}, {&(0x7f0000000400)="57f0b89fdb7f97a8e9a17b9890932e2b4386aa76c6bce29091f3eeebd5f6e02d5a206cf577fe64dc86712250d64a2242f5f60b1bd99e9d4e5dc8a5e3b062f1c3fa65476b899b78eece956bb459dff9c728200ab651e58a340498c5957fe36b279580cc5cfe3090c140893aa36a2a15d8eaa65eba8410dcb237031e6dd510dec686ceb6c9e3", 0x85}], 0x3, 0x0, 0x0, 0x8001}, 0x41)
sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)

2.89016041s ago: executing program 2 (id=239):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xf, 0xf}}}, 0x24}}, 0x20040010)

2.839302371s ago: executing program 4 (id=240):
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
epoll_create(0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf25460000000e00010000000064657673696d000a0000696d30000008008e00010000000000000000000000000009000c0090000100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000)

2.564473382s ago: executing program 2 (id=241):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
socket$nl_generic(0x10, 0x3, 0x10)

2.192762845s ago: executing program 0 (id=122):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.143845145s ago: executing program 2 (id=242):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(0xffffffffffffffff, 0x50, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0xfffffffb}, 0x8)
preadv(r4, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00{\t\x00\x00\x00', 0x8)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000006180)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r6, 0xb702, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)

2.087253626s ago: executing program 1 (id=243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000100"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a0000080002800400728014000700000100"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

1.350773084s ago: executing program 1 (id=244):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe815}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x30, r0, 0xb6134000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc4, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfb5e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd48e}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ppoll(&(0x7f0000000480)=[{r0, 0x4000}, {r0, 0x1120}, {r0}], 0x3, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x8000000000000001]}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xb}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4068000}, 0x5)
r5 = gettid()
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = accept4$tipc(r0, 0x0, &(0x7f0000000a40), 0x80000)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, <r10=>0x0}, &(0x7f0000000ac0)=0xc)
r11 = getpid()
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000c00)=0xe8)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000c80)=0xc)
sendmsg$netlink(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)={0x1c4, 0x23, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="a62987c05b98eb79453a", @nested={0x14, 0xa9, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0x8, 0x125, 0x0, 0x0, @pid}, @nested={0x4, 0x14c}]}, @nested={0xa6, 0xb3, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @ipv4=@multicast1}, @generic="b285e17031a230f52820b4c9f5bf98f21e11c764a23f16369fbfada4e7fd9b87a850d4b5074353ff13bb6d15a2dc9a3f9d180fac14f23dca1b9cb0038a96d60f690f448e83bb8ce4f30ed46081e6f8803c753c5aee6915c34a191c6b61b75c0ff2468c94195acc775e56b6f601865b2eeb997aff0df7f0eebff1ad7653dd33fb2277321f90b43ce3a779edd07d97b659dac9938170828bceaf94"]}, @generic="628a8eca74c8bf512801989914d6d4f07bba92a463cedf6c5f6cdd3f41088a093256e9161280847f64f79c99ed2ba0c48b70cde7f37717cbb40435e4976232394ec2814ac312b4b443a59f3b80b8ac6b6c58992b6a642d1415fc3d8b53bf135b3c25ef8f3a1c0f615a963eb59fdd03", @nested={0x65, 0x6b, 0x0, 0x1, [@generic="9aaf8310bea9bdeabd63b6b18a852fd88e31f8cfc99c4a53ed49ba57c4e9f6260728440f02483726562e4f0d8805e86b9ceeb557b5f080689bff5cd45c06d1ce83ec20cc4e85c27e10898ffecdbffa0748d99b19b32517acbd", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x7}]}, 0x1c4}], 0x1, &(0x7f0000000cc0)=[@rights={{0x30, 0x1, 0x1, [r0, r3, r3, r0, r3, r6, r7, r0]}}, @rights={{0x2c, 0x1, 0x1, [r3, r8, r9, r3, r0, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0xa0, 0x200040c4}, 0x4008846)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x94, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x100}, 0x11)
r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f40), 0x2, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000f80)={[{0x2d, 'cpuacct'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}]}, 0x2a)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r15, &(0x7f0000001300)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001000)={0x298, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x936}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa4e}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001380)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000001340), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x0, 0x2, 0x3], 0x0, 0x3}, {0xffffffffffffffff, [0x2, 0x0, 0x3, 0x4, 0x2, 0x3]}}}}, {{@uncond, 0x0, 0x188, 0x1e8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@recent0={{0xf8}, {0x5, 0x40, 0x1, 0x0, 'syz0\x00', 0xf}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x7, 0x0, 0x3, 0x5, 0x4], 0x3, 0x1}, {0x0, [0x6, 0xd, 0x6, 0x3, 0x0, 0x6], 0x4}}}}, {{@ip={@remote, @empty, 0x0, 0xffffff00, 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x10}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x6, 0x2}, {0x3, 0x3, 0x1}, 0x9, 0x364e}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000001b00)={&(0x7f0000001800), 0xc, &(0x7f0000001ac0)={&(0x7f0000001840)={0x278, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f47}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2826, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48d}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x468}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x96}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd9, 0x3, "ba1afd177fc87c45318631cc498f775f2ddfb684f32313c4c279fc7d77ba61578d3b5db51a7d699a7c40509220af875578ca47bec72fa64480a6eea7c5e6329a73e079a31ac86baf26abaadaefd13d29190cc56c660d3785e7e0bc43ec04f2de9dc4c6ec82e0c1c613da39803104f6dc1a1dc14858a51f2f95c7815c0f1ab0b55f6e53133b217687d94d5bb5452ed3fa229b2a18abe27cdb7950b5e73535e6e52ae9e14d1dceada2b9f957293b4e88a61303dac4a8d5ec173a3fa1069dee5c72ee58efea0403e31eb4eaf7d9f9081cec9a0ca81d77"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "928f969454f8bf2ed38955a160c6cf593b84737c"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "54a7c3c238a5be012be382ecc4770d95653a28e885e8"}}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001b40))
connect$tipc(r8, &(0x7f0000001b80)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10)

1.350258658s ago: executing program 2 (id=245):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="1400"/18], 0x18}}], 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x7d, &(0x7f0000000700)={0x0, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100020000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000068000000060a010400000000005bc83731c82c597fcc0000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4ed0ab85cc7c0a308000240000000000c000100706b7474797065000920010073797a300000000014000000110001000000000000000000000a75a3799c82a107edf43564c55573cd37db6bfa4b3b8e23cd02a60456139c540ce4b08ae290751c9c42c8869a37749b8552972837ff9aadebf0b2d42d53f22a69e1395ff3ec870f0fa82d456813d8d2d4226c667c865a7d9867143c4a01bf75e11eb049faa197f87b0c5228558b11f6b86e"], 0xf0}}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r2, &(0x7f0000000040)="a9ce14513d63426067f47b18e7c37037a58f3d42bfb3c1", 0x17)

1.349414827s ago: executing program 3 (id=246):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
pread64(r5, &(0x7f0000000040)=""/80, 0x50, 0x575)

1.016226325s ago: executing program 3 (id=247):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x90001, 0x0)

787.122599ms ago: executing program 4 (id=248):
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x2, 0xa, 0x4, 0x0, @mcast2, @local, 0x700, 0x1, 0x18000000, 0x6}})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x290, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r11}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x44050)
r12 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in=@local}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

755.835555ms ago: executing program 2 (id=249):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a3ff200140600fe800000000000000000000000001abbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000009078fff8"], 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000080)=0xe6, 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @broadcast}}, 0x4, 0x3}, 0x90)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="1ab09af447111d9c44540d423fefccb99d8bb2f41149c7ec2f3c3ae2559eb813863557da7367aee171e36f941485c65050c4dc5199f411cc83db14cbd6a95adb6fca27250db84cbfc258ab905378bba5a34ece37874be9b279cc62686a676f639889884806f0440592f53fd0fce00005d1cae40902b9b48b912be7f1a22cad991b6a047a550d6a36cfa32b63bd57e808b47c8f3f38194bb938dee1ad734066", 0x9f)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x541b, &(0x7f0000000100))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60)

599.56779ms ago: executing program 3 (id=250):
socket$nl_generic(0x10, 0x3, 0x10)

479.242977ms ago: executing program 2 (id=251):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xf, 0xf}}}, 0x24}}, 0x20040010)

352.230711ms ago: executing program 1 (id=252):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000400)={r3, 0x3, "d0577b"}, &(0x7f0000000040)=0xb)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff01, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc079446aa19f95438c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6"]}]}, 0x114}], 0x1}, 0x0)

333.356336ms ago: executing program 3 (id=253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40840}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000040)=0xb, 0x12) (async)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x1)

63.363829ms ago: executing program 3 (id=254):
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'ip6tnl0\x00', 'ip_vti0\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488)

0s ago: executing program 1 (id=255):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800) (async)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES16=r2, @ANYRES64=r2, @ANYRES16=r2], 0x4c}}, 0x4000804) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r6], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0xe) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) (rerun: 32)
r11 = accept$alg(r10, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c000}], 0x1, 0x4004094) (async)
recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/11, 0xb}], 0x1}}], 0x1, 0x42, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x98, 0xff, 0x2, 0xfd, 0x1, 0x1600}, [@RTA_TABLE={0x8, 0xf, 0x7fffffff}]}, 0x24}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts.
[   81.303545][ T5820] cgroup: Unknown subsys name 'net'
[   81.457919][ T5820] cgroup: Unknown subsys name 'cpuset'
[   81.467320][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.115358][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.549713][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.558752][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.566757][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.594546][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.602215][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.710433][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.734533][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.744440][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.756812][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.770201][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.821546][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.836225][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.844640][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.852378][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.859738][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.867124][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.876810][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.884155][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.942375][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.952237][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.960128][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.971452][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.979328][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.006280][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.015864][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.157503][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   86.353412][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.360963][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.368401][ T5830] bridge_slave_0: entered allmulticast mode
[   86.376108][ T5830] bridge_slave_0: entered promiscuous mode
[   86.394123][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.401490][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.409128][ T5830] bridge_slave_1: entered allmulticast mode
[   86.416590][ T5830] bridge_slave_1: entered promiscuous mode
[   86.503410][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.587876][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.667834][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   86.718363][ T5830] team0: Port device team_slave_0 added
[   86.741532][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   86.758212][ T5830] team0: Port device team_slave_1 added
[   87.033000][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.041350][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.068153][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.081400][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.088587][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.114794][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.190767][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.198319][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.206224][ T5837] bridge_slave_0: entered allmulticast mode
[   87.213277][ T5837] bridge_slave_0: entered promiscuous mode
[   87.232242][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.239672][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.247179][ T5835] bridge_slave_0: entered allmulticast mode
[   87.255056][ T5835] bridge_slave_0: entered promiscuous mode
[   87.262831][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   87.277883][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   87.291357][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.298962][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.306411][ T5837] bridge_slave_1: entered allmulticast mode
[   87.314120][ T5837] bridge_slave_1: entered promiscuous mode
[   87.339988][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.349324][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.356849][ T5835] bridge_slave_1: entered allmulticast mode
[   87.363927][ T5835] bridge_slave_1: entered promiscuous mode
[   87.463979][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.488840][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.530961][ T5830] hsr_slave_0: entered promiscuous mode
[   87.537958][ T5830] hsr_slave_1: entered promiscuous mode
[   87.546908][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.585322][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.646493][ T5848] Bluetooth: hci0: command tx timeout
[   87.679564][ T5837] team0: Port device team_slave_0 added
[   87.700729][ T5835] team0: Port device team_slave_0 added
[   87.742116][ T5837] team0: Port device team_slave_1 added
[   87.765360][ T5835] team0: Port device team_slave_1 added
[   87.817228][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.824596][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.831832][ T5844] bridge_slave_0: entered allmulticast mode
[   87.840172][ T5844] bridge_slave_0: entered promiscuous mode
[   87.860124][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.867282][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.875006][ T5848] Bluetooth: hci1: command tx timeout
[   87.879258][ T5838] bridge_slave_0: entered allmulticast mode
[   87.887567][ T5838] bridge_slave_0: entered promiscuous mode
[   87.896147][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.903276][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.911337][ T5838] bridge_slave_1: entered allmulticast mode
[   87.918525][ T5838] bridge_slave_1: entered promiscuous mode
[   87.931913][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.939176][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.965487][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.979356][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.986610][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.993902][ T5844] bridge_slave_1: entered allmulticast mode
[   88.001107][ T5844] bridge_slave_1: entered promiscuous mode
[   88.034501][ T5848] Bluetooth: hci2: command tx timeout
[   88.044670][ T5848] Bluetooth: hci4: command tx timeout
[   88.044678][   T51] Bluetooth: hci3: command tx timeout
[   88.052020][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.062705][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.089544][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.113350][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.120896][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.147326][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.202649][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.210100][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.236842][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.250201][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.263042][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.312326][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.325609][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.409857][ T5837] hsr_slave_0: entered promiscuous mode
[   88.416303][ T5837] hsr_slave_1: entered promiscuous mode
[   88.422326][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.430146][ T5837] Cannot create hsr debugfs directory
[   88.458251][ T5838] team0: Port device team_slave_0 added
[   88.483022][ T5844] team0: Port device team_slave_0 added
[   88.491120][ T5844] team0: Port device team_slave_1 added
[   88.505803][ T5838] team0: Port device team_slave_1 added
[   88.538331][ T5835] hsr_slave_0: entered promiscuous mode
[   88.544934][ T5835] hsr_slave_1: entered promiscuous mode
[   88.550982][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.559103][ T5835] Cannot create hsr debugfs directory
[   88.642261][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.649582][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.675768][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.689608][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.696746][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.722838][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.780946][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.788169][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.814680][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.832395][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.839619][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.865854][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.023091][ T5844] hsr_slave_0: entered promiscuous mode
[   89.029440][ T5844] hsr_slave_1: entered promiscuous mode
[   89.035865][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.043521][ T5844] Cannot create hsr debugfs directory
[   89.083354][ T5838] hsr_slave_0: entered promiscuous mode
[   89.089805][ T5838] hsr_slave_1: entered promiscuous mode
[   89.098160][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.106535][ T5838] Cannot create hsr debugfs directory
[   89.118312][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.149747][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.201503][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.242090][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.468608][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.481068][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.518651][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.532624][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.662932][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.681539][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.701730][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.715158][ T5848] Bluetooth: hci0: command tx timeout
[   89.728180][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.799725][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.827834][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.841049][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.859458][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.871506][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.919841][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   89.955487][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.962701][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.971278][ T5848] Bluetooth: hci1: command tx timeout
[   89.993229][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.029496][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.036751][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.050873][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.061543][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.072406][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.114845][ T5848] Bluetooth: hci3: command tx timeout
[   90.115110][ T5833] Bluetooth: hci2: command tx timeout
[   90.124637][   T51] Bluetooth: hci4: command tx timeout
[   90.153269][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.238430][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   90.268180][  T775] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.275370][  T775] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.330161][  T775] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.337375][  T775] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.378314][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.420785][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.432764][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.457310][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.496136][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   90.556493][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.563939][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.586203][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.593333][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.627700][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   90.682333][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.705222][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.712403][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.732249][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.786662][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.800603][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.807777][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.893954][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   90.934070][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.982258][ T5830] veth0_vlan: entered promiscuous mode
[   90.997295][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.004492][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.052130][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.059278][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.147246][ T5830] veth1_vlan: entered promiscuous mode
[   91.226369][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.244974][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.276317][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.291118][ T5837] veth0_vlan: entered promiscuous mode
[   91.319921][ T5830] veth0_macvtap: entered promiscuous mode
[   91.388799][ T5830] veth1_macvtap: entered promiscuous mode
[   91.414833][ T5837] veth1_vlan: entered promiscuous mode
[   91.450070][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.471881][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.527442][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.553059][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.563954][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.572862][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.581652][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.621764][ T5837] veth0_macvtap: entered promiscuous mode
[   91.702472][ T5837] veth1_macvtap: entered promiscuous mode
[   91.722012][ T5844] veth0_vlan: entered promiscuous mode
[   91.783566][ T5844] veth1_vlan: entered promiscuous mode
[   91.804804][   T51] Bluetooth: hci0: command tx timeout
[   91.816690][  T978] cfg80211: failed to load regulatory.db
[   91.892160][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.900398][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.911884][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.923236][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.979798][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.983310][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.995827][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.009217][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.018793][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.027653][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.037085][   T51] Bluetooth: hci1: command tx timeout
[   92.042807][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.087363][ T5835] veth0_vlan: entered promiscuous mode
[   92.104136][ T5844] veth0_macvtap: entered promiscuous mode
[   92.142210][ T5844] veth1_macvtap: entered promiscuous mode
[   92.163724][ T5835] veth1_vlan: entered promiscuous mode
[   92.191075][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.198675][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.220335][   T51] Bluetooth: hci4: command tx timeout
[   92.220384][ T5833] Bluetooth: hci3: command tx timeout
[   92.225965][   T51] Bluetooth: hci2: command tx timeout
[   92.268760][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.339764][ T5835] veth0_macvtap: entered promiscuous mode
[   92.360252][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.371146][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.380507][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.384589][ T5950] Bluetooth: MGMT ver 1.23
[   92.389453][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.453627][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.463683][ T5835] veth1_macvtap: entered promiscuous mode
[   92.489121][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.511787][ T5838] veth0_vlan: entered promiscuous mode
[   92.569781][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.581362][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.582033][ T5950] vlan0: entered promiscuous mode
[   92.602503][ T5950] team0: Port device vlan0 added
[   92.625713][ T5838] veth1_vlan: entered promiscuous mode
[   92.658491][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.710024][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.829566][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.831005][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.849485][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.859432][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.870054][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.874986][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.981290][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.991913][ T5961] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.995757][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.008106][ T5838] veth0_macvtap: entered promiscuous mode
[   93.048930][ T5838] veth1_macvtap: entered promiscuous mode
[   93.101872][ T5963] x_tables: duplicate entry at hook 3
[   93.133718][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.207593][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.223797][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.242240][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.288444][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.308731][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.332310][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.344549][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   93.353864][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.360534][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   93.530087][  T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.559564][  T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.568122][ T5976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.683876][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.710178][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.768502][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.797761][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.889553][ T5833] Bluetooth: hci0: command tx timeout
[   93.933538][ T5985] sctp: [Deprecated]: syz.4.5 (pid 5985) Use of int in max_burst socket option deprecated.
[   93.933538][ T5985] Use struct sctp_assoc_value instead
[   94.126292][ T5833] Bluetooth: hci1: command tx timeout
[   94.274550][ T5833] Bluetooth: hci2: command tx timeout
[   94.274565][ T5848] Bluetooth: hci3: command tx timeout
[   94.274597][ T5848] Bluetooth: hci4: command tx timeout
[   94.350401][ T5997] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   94.732634][ T6009] xt_hashlimit: size too large, truncated to 1048576
[   95.249183][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'.
[   95.606170][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28'.
[   95.989631][ T6063] netlink: 80 bytes leftover after parsing attributes in process `syz.0.31'.
[   97.097044][ T6101] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET)
[   98.135961][ T6152] netlink: 68 bytes leftover after parsing attributes in process `syz.1.53'.
[   98.233584][ T6159] netlink: 'syz.3.54': attribute type 1 has an invalid length.
[   98.261668][ T6159] netlink: 56 bytes leftover after parsing attributes in process `syz.3.54'.
[   98.537782][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'.
[   98.556619][ T6175] netlink: 'syz.2.59': attribute type 10 has an invalid length.
[   98.633519][ T6175] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   98.808542][ T6189] netlink: 52 bytes leftover after parsing attributes in process `syz.3.62'.
[   98.867319][ T6192] Zero length message leads to an empty skb
[   98.987035][ T6201] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   99.439248][ T6243] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   99.566971][ T6251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.74'.
[   99.700582][ T6256] vlan1: entered allmulticast mode
[   99.721170][ T6256] veth0_vlan: entered allmulticast mode
[   99.759321][ T6256] vlan1: left allmulticast mode
[   99.792324][ T6264] xt_policy: neither incoming nor outgoing policy selected
[   99.798467][ T6256] veth0_vlan: left allmulticast mode
[   99.833891][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.79'.
[   99.957017][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'.
[  100.002225][ T6275] Unsupported ieee802154 address type: 0
[  100.010363][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'.
[  100.142489][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'.
[  100.164846][ T6280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'.
[  100.355460][ T6248] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  100.523841][ T6300] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  100.567943][ T6300] Bluetooth: MGMT ver 1.23
[  100.585262][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[  100.994715][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'.
[  101.568066][ T5848] Bluetooth: hci0: command 0x0c20 tx timeout
[  102.083049][ T6364] sctp: [Deprecated]: syz.3.110 (pid 6364) Use of int in max_burst socket option.
[  102.083049][ T6364] Use struct sctp_assoc_value instead
[  102.249383][ T6371] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.477468][ T6409] netlink: 'syz.1.125': attribute type 5 has an invalid length.
[  103.609144][ T6414] __nla_validate_parse: 5 callbacks suppressed
[  103.609162][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'.
[  103.750232][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'.
[  103.940381][ T6241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.030658][ T6422] macvtap1: entered promiscuous mode
[  104.053303][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[  104.054998][ T6422] vlan0: entered promiscuous mode
[  104.076283][ T6422] macvtap1: entered allmulticast mode
[  104.081981][ T6422] vlan0: entered allmulticast mode
[  104.091121][ T6422] veth0_vlan: entered allmulticast mode
[  104.100323][ T6424] warning: `syz.4.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.139188][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.148913][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.156690][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.164989][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.172731][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.221034][ T6241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.280666][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.139'.
[  104.338514][ T6441] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  104.402934][ T6241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.622842][ T6241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.976151][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'.
[  105.046426][ T6473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.147'.
[  105.117237][ T6475] netlink: 'syz.3.149': attribute type 21 has an invalid length.
[  105.260833][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'.
[  105.509947][ T6241] bridge_slave_1: left allmulticast mode
[  105.536405][ T6241] bridge_slave_1: left promiscuous mode
[  105.552898][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.638352][ T6241] bridge_slave_0: left allmulticast mode
[  105.674499][ T6241] bridge_slave_0: left promiscuous mode
[  105.683631][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.802013][ T6516] netlink: 512 bytes leftover after parsing attributes in process `syz.2.156'.
[  106.029816][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.048437][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.058768][ T6241] bond0 (unregistering): Released all slaves
[  106.104585][ T6436] chnl_net:caif_netlink_parms(): no params data found
[  106.197244][ T5848] Bluetooth: hci0: command tx timeout
[  106.481600][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'.
[  106.902781][ T6241] hsr_slave_0: left promiscuous mode
[  106.914888][ T6241] hsr_slave_1: left promiscuous mode
[  106.921253][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.939512][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.948742][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.956612][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.977963][ T6241] veth1_macvtap: left promiscuous mode
[  106.983681][ T6241] veth0_macvtap: left promiscuous mode
[  106.992355][ T6241] veth1_vlan: left promiscuous mode
[  107.247354][ T6241] team0 (unregistering): Port device vlan0 removed
[  107.549590][ T6241] team0 (unregistering): Port device team_slave_1 removed
[  107.581733][ T6241] team0 (unregistering): Port device team_slave_0 removed
[  108.019507][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.037531][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.051207][ T6436] bridge_slave_0: entered allmulticast mode
[  108.063510][ T6563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.163'.
[  108.066256][ T6436] bridge_slave_0: entered promiscuous mode
[  108.145815][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.161700][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.169192][ T6436] bridge_slave_1: entered allmulticast mode
[  108.177563][ T6436] bridge_slave_1: entered promiscuous mode
[  108.207255][ T6566] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.247688][ T6566] block nbd0: Unsupported socket: shutdown callout must be supported.
[  108.282028][ T5848] Bluetooth: hci0: command tx timeout
[  108.359312][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.408983][ T6571] netlink: 'syz.3.167': attribute type 39 has an invalid length.
[  108.412037][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.633327][ T6436] team0: Port device team_slave_0 added
[  108.692271][ T6436] team0: Port device team_slave_1 added
[  108.938370][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.997023][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.049448][ T6604] __nla_validate_parse: 3 callbacks suppressed
[  109.049465][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'.
[  109.077348][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.115550][ T6604] netlink: 'syz.4.173': attribute type 1 has an invalid length.
[  109.143664][ T6597] xt_CT: No such helper "snmp"
[  109.161344][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.173431][ T6609] x_tables: duplicate underflow at hook 1
[  109.180801][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.243999][ T6610] x_tables: unsorted underflow at hook 1
[  109.272922][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.555260][    C0] Illegal XDP return value 16128 on prog  (id 84) dev lo, expect packet loss!
[  109.623806][ T6620] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  109.672046][ T6436] hsr_slave_0: entered promiscuous mode
[  109.700437][ T6436] hsr_slave_1: entered promiscuous mode
[  110.182252][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[  110.196472][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'.
[  110.209642][ T6647] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  110.293460][ T6651] syzkaller1: entered promiscuous mode
[  110.302606][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[  110.312462][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'.
[  110.324980][ T6651] syzkaller1: entered allmulticast mode
[  110.355172][ T5848] Bluetooth: hci0: command tx timeout
[  110.506262][ T6669] netlink: 260 bytes leftover after parsing attributes in process `syz.3.191'.
[  110.682980][ T6674] netlink: 'syz.4.192': attribute type 1 has an invalid length.
[  111.364182][ T6705] dvmrp0: entered allmulticast mode
[  111.378956][ T6709] dvmrp0: left allmulticast mode
[  111.566789][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[  111.779662][ T6721] unknown channel width for channel at 909000KHz?
[  111.786340][ T6721] unknown channel width for channel at 909000KHz?
[  111.800748][ T6721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.811908][ T6436] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.836803][ T6436] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.894565][ T6436] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.922345][ T6436] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  112.188812][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.292647][ T6436] 8021q: adding VLAN 0 to HW filter on device team0
[  112.353232][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.360406][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.425513][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.432813][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.442659][ T5848] Bluetooth: hci0: command tx timeout
[  112.566433][ T6749] syzkaller1: entered promiscuous mode
[  112.598225][ T6749] syzkaller1: entered allmulticast mode
[  112.780867][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'.
[  112.860194][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'.
[  112.890434][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'.
[  113.096740][ T6785] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.141144][ T6785] netlink: 'syz.4.217': attribute type 1 has an invalid length.
[  113.655341][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.730952][ T6818] Bluetooth: MGMT ver 1.23
[  113.739038][ T6814] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  113.791567][ T6436] veth0_vlan: entered promiscuous mode
[  113.813663][ T6436] veth1_vlan: entered promiscuous mode
[  113.859644][ T6436] veth0_macvtap: entered promiscuous mode
[  113.902342][ T6436] veth1_macvtap: entered promiscuous mode
[  113.967839][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.007613][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.028104][ T6436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.059348][ T6436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.092473][ T6436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.109909][ T6436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.326919][ T6834] __nla_validate_parse: 2 callbacks suppressed
[  114.326938][ T6834] netlink: 284 bytes leftover after parsing attributes in process `syz.2.228'.
[  114.581236][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.609955][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.670194][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'.
[  114.695396][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.740490][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.797569][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  115.853165][ T6877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.240'.
[  116.009531][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'.
[  116.063313][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'.
[  116.437584][ T6888] netlink: 'syz.1.243': attribute type 7 has an invalid length.
[  116.486575][ T6891] netlink: 'syz.1.243': attribute type 7 has an invalid length.
[  116.535971][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.683001][ T6888] : entered promiscuous mode
[  116.816697][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.948248][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803461ac00: rx timeout, send abort
[  116.996973][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.180691][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.457241][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803461ac00: abort rx timeout. Force session deactivation
[  117.601897][   T12] bridge_slave_1: left allmulticast mode
[  117.619880][   T12] bridge_slave_1: left promiscuous mode
[  117.686216][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.746575][   T12] bridge_slave_0: left allmulticast mode
[  117.766676][   T12] bridge_slave_0: left promiscuous mode
[  117.782740][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.951380][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.969793][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.982409][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.997386][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.007504][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.257178][ T6944] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[  118.265104][ T6944] netlink: 224 bytes leftover after parsing attributes in process `syz.1.252'.
[  118.390870][ T6948] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI
[  118.402811][ T6948] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f]
[  118.412382][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.3.254 Not tainted 6.15.0-syzkaller-12458-g27cea0e419d2 #0 PREEMPT(full) 
[  118.423948][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  118.434014][ T6948] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[  118.440021][ T6948] Code: 80 3c 2f 00 74 08 48 89 df e8 ec f0 0e f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c1 f0 0e f7 4d 8b 2c 24 49 83 c5
[  118.459634][ T6948] RSP: 0018:ffffc9000bcc6fc0 EFLAGS: 00010206
[  118.465718][ T6948] RAX: 00000000000a2403 RBX: ffff88807bef6560 RCX: ffff88807eb90000
[  118.473691][ T6948] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  118.481660][ T6948] RBP: ffffc9000bcc7330 R08: ffff88807bef605f R09: 1ffff1100f7dec0b
[  118.489634][ T6948] R10: dffffc0000000000 R11: ffffed100f7dec0c R12: 0000000000512018
[  118.497616][ T6948] R13: dffffc0000000000 R14: ffff88807bef6000 R15: 1ffff1100f7decac
[  118.505591][ T6948] FS:  00007f84c71f66c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000
[  118.514526][ T6948] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.521115][ T6948] CR2: 000020000000e000 CR3: 000000007647e000 CR4: 00000000003526f0
[  118.529114][ T6948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  118.537085][ T6948] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  118.545058][ T6948] Call Trace:
[  118.548341][ T6948]  <TASK>
[  118.551283][ T6948]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[  118.556924][ T6948]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  118.562485][ T6948]  ? __lruvec_stat_mod_folio+0x79/0x2f0
[  118.568039][ T6948]  ? __phys_addr+0xd3/0x180
[  118.572539][ T6948]  ? __kasan_kmalloc_large+0x85/0xa0
[  118.577823][ T6948]  ? rcu_is_watching+0x15/0xb0
[  118.582585][ T6948]  ? rcu_is_watching+0x15/0xb0
[  118.587355][ T6948]  ? trace_kmalloc+0x1f/0xd0
[  118.591945][ T6948]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  118.598541][ T6948]  ? __build_skb_around+0x257/0x3e0
[  118.603749][ T6948]  smc_diag_dump+0x59/0xa0
[  118.608173][ T6948]  netlink_dump+0x62a/0xe20
[  118.612684][ T6948]  ? __pfx_netlink_dump+0x10/0x10
[  118.617716][ T6948]  ? netlink_lookup+0x30/0x200
[  118.622503][ T6948]  ? netlink_lookup+0x30/0x200
[  118.627296][ T6948]  ? netlink_lookup+0x30/0x200
[  118.632105][ T6948]  __netlink_dump_start+0x5cb/0x7e0
[  118.637331][ T6948]  smc_diag_handler_dump+0x178/0x210
[  118.642645][ T6948]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  118.648464][ T6948]  ? __pfx_smc_diag_dump+0x10/0x10
[  118.653600][ T6948]  ? sock_diag_lock_handler+0x19/0x290
[  118.659076][ T6948]  ? sock_diag_lock_handler+0x19/0x290
[  118.664550][ T6948]  sock_diag_rcv_msg+0x4cc/0x600
[  118.669531][ T6948]  netlink_rcv_skb+0x208/0x470
[  118.674304][ T6948]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  118.679784][ T6948]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.685081][ T6948]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.690298][ T6948]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.695508][ T6948]  netlink_unicast+0x75b/0x8d0
[  118.700295][ T6948]  netlink_sendmsg+0x805/0xb30
[  118.705088][ T6948]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.710382][ T6948]  ? aa_sock_msg_perm+0x94/0x160
[  118.715329][ T6948]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.720631][ T6948]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.725916][ T6948]  __sock_sendmsg+0x219/0x270
[  118.730599][ T6948]  ____sys_sendmsg+0x505/0x830
[  118.735372][ T6948]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.740683][ T6948]  ? import_iovec+0x74/0xa0
[  118.745193][ T6948]  ___sys_sendmsg+0x21f/0x2a0
[  118.749876][ T6948]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.755102][ T6948]  ? __fget_files+0x2a/0x420
[  118.759703][ T6948]  ? __fget_files+0x3a0/0x420
[  118.764390][ T6948]  __x64_sys_sendmsg+0x19b/0x260
[  118.769361][ T6948]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.774846][ T6948]  ? rcu_is_watching+0x15/0xb0
[  118.779624][ T6948]  ? do_syscall_64+0xbe/0x3b0
[  118.784323][ T6948]  do_syscall_64+0xfa/0x3b0
[  118.788846][ T6948]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.794048][ T6948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.800123][ T6948]  ? clear_bhb_loop+0x60/0xb0
[  118.804809][ T6948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.810725][ T6948] RIP: 0033:0x7f84c938e929
[  118.815166][ T6948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.834789][ T6948] RSP: 002b:00007f84c71f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.843210][ T6948] RAX: ffffffffffffffda RBX: 00007f84c95b6080 RCX: 00007f84c938e929
[  118.851190][ T6948] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000015
[  118.859165][ T6948] RBP: 00007f84c9410b39 R08: 0000000000000000 R09: 0000000000000000
[  118.867152][ T6948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.875135][ T6948] R13: 0000000000000000 R14: 00007f84c95b6080 R15: 00007ffc935e0f78
[  118.883130][ T6948]  </TASK>
[  118.886162][ T6948] Modules linked in:
[  118.896356][ T6948] ---[ end trace 0000000000000000 ]---
[  118.901863][ T6948] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80
[  118.909094][ T6948] Code: 80 3c 2f 00 74 08 48 89 df e8 ec f0 0e f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c1 f0 0e f7 4d 8b 2c 24 49 83 c5
[  118.928830][ T6948] RSP: 0018:ffffc9000bcc6fc0 EFLAGS: 00010206
[  118.934933][ T6948] RAX: 00000000000a2403 RBX: ffff88807bef6560 RCX: ffff88807eb90000
[  118.942982][ T6948] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  118.951088][ T6948] RBP: ffffc9000bcc7330 R08: ffff88807bef605f R09: 1ffff1100f7dec0b
[  118.959079][ T6948] R10: dffffc0000000000 R11: ffffed100f7dec0c R12: 0000000000512018
[  118.967075][ T6948] R13: dffffc0000000000 R14: ffff88807bef6000 R15: 1ffff1100f7decac
[  118.975077][ T6948] FS:  00007f84c71f66c0(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000
[  118.984017][ T6948] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.991012][ T6948] CR2: 000020000000e000 CR3: 000000007647e000 CR4: 00000000003526f0
[  118.999350][ T6948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  119.007390][ T6948] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  119.015427][ T6948] Kernel panic - not syncing: Fatal exception
[  119.021811][ T6948] Kernel Offset: disabled
[  119.026136][ T6948] Rebooting in 86400 seconds..