last executing test programs:

3.306827261s ago: executing program 1 (id=295):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3.065254739s ago: executing program 0 (id=301):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x2, 0x44})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x40b942b37d0000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a)
recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x5852, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x1000008, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0x0, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x800, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x5, 0x5, 0x37f, 0x40, 0x6, 0xc, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x4, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x5, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.012731998s ago: executing program 3 (id=302):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$kcm(0xa, 0x1, 0x106)
unshare(0x2c020400) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r3, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async)
r4 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)
r8 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x38, 0x4855}, 0x24000052)
sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x434, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfd, {0x10, 0x0, 0x3, [0x5, 0xfff, 0x2, 0xe5, 0x0, 0x3, 0xd190, 0x800, 0x3, 0x7, 0xf839, 0x9, 0x80000000, 0x5, 0x9, 0x2, 0x1ff, 0xd6, 0x1, 0x1, 0x200, 0x8, 0x81, 0x4, 0x6, 0x6, 0xfffffffb, 0xff, 0x8000, 0xf, 0x8b74, 0x9, 0x101, 0x101, 0x10001, 0x0, 0x800, 0x101, 0x9, 0xffff3cde, 0x897, 0x2, 0x171, 0x1, 0x9, 0x8, 0x4, 0x3, 0x7, 0xfffffff1, 0x6a, 0x6, 0x0, 0xa9a, 0xfffffff3, 0x8, 0x7, 0x1ff, 0x97, 0xffffffff, 0x3, 0x3, 0x9, 0x9], [0x6, 0xe6d, 0x40, 0x0, 0x8, 0x1, 0x6, 0x2a, 0xf5, 0x480, 0xa, 0xd2cd, 0x4, 0x8, 0x0, 0x7, 0x4d9, 0x220, 0x4, 0x80000000, 0x7, 0xfffffffb, 0x4, 0xfffffff7, 0x2, 0x0, 0x81, 0x10000, 0x8, 0x7f, 0x3, 0x6, 0x3, 0x3, 0x0, 0x814, 0xe, 0x5, 0x100, 0x67e, 0x233c, 0x8, 0x1ca, 0x7f, 0x5, 0x6, 0x8000, 0x7, 0x6, 0xffffa5fd, 0x4, 0x10000, 0x40, 0xa, 0x9, 0xffffff01, 0x5, 0x80000001, 0x2, 0x4a20, 0x4, 0x8, 0x3, 0xffff], [0xdc, 0x3, 0x2, 0x0, 0x1, 0x0, 0x8, 0x8001, 0xadf, 0x7, 0x2, 0x7d80000, 0x3, 0x2, 0x101, 0x720d0a0c, 0x3, 0x3ff, 0x4, 0xffffffff, 0x3, 0x9, 0xfffffffe, 0x118d, 0x0, 0x5, 0x9, 0xe, 0x6, 0x7, 0x81, 0x2, 0xbf, 0x6a0800, 0x10001, 0x8, 0x80, 0xffffffff, 0x7, 0x1, 0x51, 0x0, 0x0, 0x9, 0x1, 0x9, 0xc3, 0x1, 0x1f8c, 0x0, 0x3, 0x146ae6ce, 0x16d800, 0x6, 0x10, 0x0, 0x201, 0x40, 0x6, 0x10000, 0x4, 0x200000, 0x8], [0x5, 0x3, 0x2, 0xe5, 0x200, 0x0, 0x9, 0x3, 0x9, 0x7, 0x800, 0x9, 0x3, 0xffffff7a, 0x3, 0xb, 0x7ff, 0x9, 0x4, 0x0, 0xfff, 0x1200, 0x9, 0x1, 0x0, 0xd4, 0x5, 0xfffffff9, 0x3ff, 0x7, 0x10001, 0x8d, 0x2, 0x76, 0x7, 0xb2c2, 0xfffffff6, 0x1ff, 0x5, 0x80, 0x4, 0x7f, 0xfffffff7, 0x80000000, 0x3, 0x7, 0x4, 0x3, 0x8000, 0x6, 0xef5, 0x9e9, 0x6, 0x7, 0x5, 0x8001, 0x4, 0xc8c, 0x48, 0x5, 0xf5, 0x9, 0x7, 0x3], 0x14, ['\'\x00', '\x00', '\x00', '\x00', '@}\xf9-\'[}}\xda^%-{\x00', '\x00']}, [""]}, 0x434}, 0x1, 0x0, 0x0, 0x804}, 0xe094) (async)
sendmsg$sock(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0xc0) (async)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000600)=0x5)
ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f00000005c0)={0x3, @default, 0xee01}) (async)
unshare(0x20000400)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r10, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r10}}, 0x1c) (async)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001"], 0x84}}, 0x0)

2.948938455s ago: executing program 4 (id=303):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r4=>0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x34, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008881}, 0x0)
bind$nfc_llcp(r2, &(0x7f00000003c0)={0x27, r4, 0x0, 0x5, 0x8, 0x8, "ac419365b98256684199a89a886a834379876712e666bd3700f6ad9bf78d357cd6ca1795e4a7d1bd9fd582801bfbdc92739cdb8f5a54ae5854cc769ac3c723", 0x33}, 0x60)
r7 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r8 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f00000001c0)=[{r7}, {r7, 0x10}], 0x2, 0x0, 0x0, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffd}, 0x2f)
close(r8)

2.617355949s ago: executing program 3 (id=304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x4, 0x0)
r6 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r6, 0x0, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b50200000000000085000000830000004ce300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r7}, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8012, 0x3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)

2.431794435s ago: executing program 1 (id=305):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000026378500000071000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
unshare(0x6a040000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0xcc}, 0x8)
socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0x5, 0x1}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20020804}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20020804}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r3, @ANYRESOCT=r1], 0x1000f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.266096928s ago: executing program 0 (id=306):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={<r1=>0x0, 0x6f, "849b6c390f61151b9bb44f650dec11f8b2ee1b32b4a18b97de47110a510d95ba759f362f1e39fbb67eed1a64d0ebf5c4c3e932de21ec43b500cbaa04cd5312b288f20ba4832f65b546a7102d2b19d6eb3c896c0a703f4c82199258546a592111b77eb43715764e5f9fcb1873070a5f"}, &(0x7f0000000080)=0x77)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x8001, 0x5}, &(0x7f0000000240)=0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x8001, 0x5}, &(0x7f0000000240)=0x8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r6, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107070400", 0xd)
getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000240)=0x5b)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r7, 0x40047459, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES8=r9, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRESDEC=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x0)

2.082858034s ago: executing program 0 (id=307):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
unshare(0x28000600)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x29, 0x68, 0xff, 0x41, 0x4, @empty, @loopback, 0x80, 0x8057, 0x8, 0x800}})

1.872910768s ago: executing program 4 (id=309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x40}}, @void}}]]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x240000c4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="69d27d1f4f4c95816abfbca7d10f0008000003005efd"], 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x0)

1.604403381s ago: executing program 4 (id=310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x3, 0x10002)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000200)={0x11, {{0x29, 0x0, 0x3000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1001fff}}}, 0x88)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x25, &(0x7f0000000300)={&(0x7f0000000500)={0xb8, r1, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x94, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7a473d7513f7"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="591c00"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2806}]}, 0xb8}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x74, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3d2, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x40800)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000010c0)="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", 0xf41}, {0x0}, {&(0x7f0000000180)}], 0x3}}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000004c0)=@req3={0xc6, 0xfffff001, 0x101, 0x401, 0x3, 0x6, 0x180}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52ba}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
r9 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x4, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

1.592561914s ago: executing program 1 (id=311):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x0, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x7, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x16, &(0x7f0000000680)=""/22, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0xb, 0x9, 0xfffffff8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000740)=[{0x0, 0x5, 0x6, 0xb}], 0x10, 0x10001}, 0x94)
poll(&(0x7f00000008c0)=[{r3}, {r6, 0x8}, {r4, 0x42}, {r1, 0x8040}, {r0, 0x4220}, {r0, 0x4614}, {r2, 0x44e0}, {r4, 0x51}, {r5, 0x8}, {r0, 0x20}], 0xa, 0x10001)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r5, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {0xf00}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x49, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x100}]}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000200)=0x3, 0x4)
sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703", 0x4}], 0x1}}], 0x1, 0x4c818)

1.544889582s ago: executing program 0 (id=312):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={0x0}}, 0x4000000)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x2, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x207)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20}, 0x0)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r8, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x2)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

1.540663266s ago: executing program 2 (id=313):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00f6e87b5040d44d1a735f9a75917df701000000000000"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000008100"], 0x30}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)

1.43224058s ago: executing program 3 (id=314):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000900)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x74c411270dffa51d)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x0, 0x430, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x7, {0x0, 0x3}}, 0x5)
read$nci(r0, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x5)
read$nci(r0, &(0x7f0000000680)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)
write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
read$nci(r0, &(0x7f0000000840)=""/100, 0x64)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="40a900000000113be05a03b5fc9e3f2e3d2df3e229db5c3182f4e41b"], 0x7)
r5 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r5, 0x80000000)
r6 = socket(0x2, 0x3, 0x100000001)
setsockopt(r6, 0xff, 0x9, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x17e8}}, 0x40)

1.332014085s ago: executing program 2 (id=315):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
socket$isdn(0x22, 0x3, 0x26)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x40}}, 0x0)

1.192994843s ago: executing program 2 (id=316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020605000000000000000000ffec000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000001, 0x4}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

1.118625514s ago: executing program 2 (id=317):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x3b8}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000104001d80000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800600187893000000040012000500160002"], 0x50}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}]}, 0x190)
r7 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000000)=0x6e)
recvmmsg$unix(r7, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000340)=""/89, 0x59}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000680)=""/186, 0xba}], 0x5, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40012141, &(0x7f0000000800))
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x21800}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x50, 0x10, 0x0, 0x64}, 0x94)
socket$kcm(0x29, 0x5, 0x0)

1.060065752s ago: executing program 0 (id=318):
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x3, 0x2}, 0x28)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x54, r9, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042bbd70234240734d00fedbdf25080080000507ccc671a236c541979d289158000d00000000000601000000000000050004000600000006001b004e24000000000000000002c805001e000700000005002100010000002d0e96bda681efbf57572d43b7dd6ca7f9d7a9f1388f024dc2b265cf49b951fdd47633107c9f9148b4c44561b5f7366193ea3af9f294108d"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
socket$inet_sctp(0x2, 0x5, 0x84)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0x60, 0x800)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0)

864.020504ms ago: executing program 2 (id=319):
socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32)
r0 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000880), &(0x7f0000000500)=r1, 0xa2}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
unshare(0x6a040000) (async, rerun: 32)
r3 = socket(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0) (async)
unshare(0x44000000) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20044810}, 0x4000011)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000f3fd235d837582d6b1cfe0000000aa08000a40000000020900020073797a3100"], 0x4c}}, 0x4000080) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

847.230145ms ago: executing program 4 (id=320):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000030000b00000000093080000000000305f30"], 0x0, 0x2a}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d797b5bbeb61411f88ee1554a78306fe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

741.609339ms ago: executing program 4 (id=321):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r2, 0x0, 0x5}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r3)
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'vlan0\x00'})
close(0x4)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f00000002c0)=0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

549.325267ms ago: executing program 1 (id=322):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0xc00)
getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10)
getsockname$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000001c0)="b2675c71a9dcc71904255895b2aa2d9262ec0fcf5da72e5b8b9961ff2c38e36aa73ef1e914f00654551a6d345dda4d77b7c2dbe1ada42c1b90371cca7a8a3a1b18bc2b5aaa60c433ff9a48b98956efd0e6f1fd3ed864467d34dcefc091a25aa34a2511d17f418e0225e1ca979fd4ad2ee3f71a6de48bbea6e854e2f43da1837ff58c6005f2d7bb83a72d8100152cba652890616a74376b55f3dfcb8d88484488dc087edb8a7e717a2eb65156d9c3db7dcb7c153967544f9508", 0xb9}, {&(0x7f0000000280)="a63cf3bbc59e0e8eb87364f70a14e15f7cc7b3b6692d7fae7fd0f0f3b5946fc49142dbe379b3ce9868e67ef7b66775ec3566", 0x32}, {&(0x7f00000002c0)="696ed8c005247010b680d5c2bbeab4e01519e79cc02ebd45831ffb4ce1cf519dab218ad3dc9ff7eca0ccefdd0656399b10ffb07248610af438f6a8966e984779c09c9cb56441935da659aba795129133f5e1860f624dfabeab2f528e47e3e770179274d91e437c38c5b74882129cfe428cadf7e766b99183e778dfe1c84ec5ca58c1e66167dee2a00abacb73a2d4d669cef430288f834f011c52d120ca5a4892eb15f2fe4d0dffa1bc3972813fa53cd47c2e8686c27342db517e0679449a82935ab4d3151f291a652fbe107a054de74ab74759239f8176afd90d2e6356f8980ae60d4241f0c08f8ab5cb17c6f32c7f08af46", 0xf2}, {&(0x7f00000003c0)="3495a4cc451a06d0ff8d5b5fd39367ab2d5e5651e4cfcdde5224300815560f0142d0b059145ec3be41fb385df7697c12fd5724f524d69d5ee16e5c5c93d2a858c948aa83577506d0e41696514d5edd0decffd5afaa5ea98bbf334b84a24655568d00af9b48f48d2e9f31af0a6f41c3b5cffdcf8f0b926e6f01954ecc883c51a03747a1915a6af2afa5feea525c0b9e15c1442be4e6a517c433f603bb42d6d767bb33fc0e3f18a6c0198b9945afa1d455aa14871de7cc5b5ae67204bd45bf52", 0xbf}, {&(0x7f0000000480)="99ea76c3c970108b2dd1ba07", 0xc}, {&(0x7f00000004c0)="a71ecb110fa8d4e7e5a8a42c3414a3224efc2fc75ee5283431de64242be5e1466aca92cd4acfe7d6ee246bebff1afc7368bd0bb6e0438058540f6a19ba19d1", 0x3f}, {&(0x7f0000000500)="705acd634b58dc95d93b5d11d9265b14a7a7bd93a95c1da146417dab5e964b21dc8cbb9bb77a069947ebb0dde009086c0554a09d51154a9bdc0a13a3984b7fdc1a47e8b7e2b45dca64e9b5455b04a2664a9ce0c5a909b29cb95c624c7ac69eb630710aaf77e27f47c9f10c01f2721480ee8b5874", 0x74}, {&(0x7f0000000580)="416f565c18f19723e86e81377049e8400eea02cf540020b57c218d7d13b00badb69f58f73a19fb18d956b9e6adb8524c817acbbe04214f68bfb77075143f42568a97311fdd953fbad15132f8d6656e5218dbc9a16da35dc28f97aaf2d8f799b13d6a8b8d9bf385c258b6fb3b00bafe9effd3944dba693147871d64ed152a2f68d93a5dea4d27fc1524f67e3720e8bc2cd03df0a07d8d13f079f376d411fe", 0x9e}], 0x8}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x240, r2, 0xf36, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0xa}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4225672f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "8629eb43f60b63c8ef0f4e2907b59c5d45637acc9f48f9"}}, @TIPC_NLA_NODE_ID={0x65, 0x3, "165dee289b6abdb129e37c128e3be1e36640010745df12857f118dbb32281465d0db252cf9bdf8cc32cb49fcbd81e7e7a00d8324be1da5b31600786fec735739c54fcc632c6e91bc7243a7443b69d7e565a934f45072c3b9a43dc5777a7cf06f00"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "13af6e7a8bf2cd3c70d6e4feff8a5128cb573ed646ed89"}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) (async)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x240, r2, 0xf36, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0xa}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x18000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4225672f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "8629eb43f60b63c8ef0f4e2907b59c5d45637acc9f48f9"}}, @TIPC_NLA_NODE_ID={0x65, 0x3, "165dee289b6abdb129e37c128e3be1e36640010745df12857f118dbb32281465d0db252cf9bdf8cc32cb49fcbd81e7e7a00d8324be1da5b31600786fec735739c54fcc632c6e91bc7243a7443b69d7e565a934f45072c3b9a43dc5777a7cf06f00"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "13af6e7a8bf2cd3c70d6e4feff8a5128cb573ed646ed89"}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x20040001)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a40), 0x44000, 0x0)
ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000a80)={0xfb, 0x1})
accept4$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0x0) (async)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0x0)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000b40)=@req={0x1c6, 0xe, 0x8, 0x3}, 0x10) (async)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000b40)=@req={0x1c6, 0xe, 0x8, 0x3}, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000b80)={0x0, @initdev, @loopback}, &(0x7f0000000bc0)=0xc)
r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000c00)={{0x3, @netrom}, [@rose, @bcast, @rose, @default, @netrom, @null, @rose, @bcast]}, &(0x7f0000000c80)=0x48)
r8 = getuid()
ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000cc0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r8}) (async)
ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000cc0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r8})
getpid() (async)
r9 = getpid()
sendmsg$nl_netfilter(r1, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x120, 0x0, 0xa, 0x301, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0xa}, [@nested={0x100, 0x7, 0x0, 0x1, [@generic="e16852273b062935e704df17a1207fe771dbfc337b74588a4c9de178c0b808ea326d31118da7fc298aa33a777aa7ff70c301bb29c5de67556abd42177961551fd79a87940499f524f97ade8f2ecf593e19ce0dcdabd35807c1a113cc046ba6a8af804118f116384a813eafb9bc59921ea4b3ed5e3a041a13c54b2a73acc78eb7a2bd685054272ad7f3e7e0b767c2e5f7facdc23f73b9097de1921dcc3d60dec3189bdfdee223944538e03c7772610d0645c4801b4f8b3627a8b311bcb4d4280d2330c4f7ce2ecebe2932f7f4cae11ac2025fcf0e4b936e4a0fa9d52b78b8569bd9a76777", @typed={0x5, 0x106, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xb3, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0xa6, 0x0, 0x0, @pid=r9}]}, @typed={0x4, 0xe6}, @typed={0x8, 0x125, 0x0, 0x0, @fd=r0}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
accept4$x25(r7, &(0x7f0000000f00)={0x9, @remote}, &(0x7f0000000f40)=0x12, 0xc0000) (async)
r10 = accept4$x25(r7, &(0x7f0000000f00)={0x9, @remote}, &(0x7f0000000f40)=0x12, 0xc0000)
ioctl$SIOCX25GCAUSEDIAG(r10, 0x89e6, &(0x7f0000000f80)={0x3, 0xff})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, r11, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x200, 0x21}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c920}, 0x2404c000) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, r11, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x200, 0x21}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c920}, 0x2404c000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)='%pS    \x00'}, 0x20)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x60, [{0xe, 0x3, 0x1}, {0xe, 0x2, 0x10000}]}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x1, 0x2}, {0x10, 0x5}]}]}, {0x0, [0x61, 0x30, 0x30, 0x0, 0x5f, 0x5f, 0x0]}}, &(0x7f00000013c0)=""/4096, 0x75, 0x1000, 0x1, 0x7f, 0x10000}, 0x28)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0xff9, 0x6, 0x3e5c, 0x8400, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x7}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000024c0)={0x0, 0xfffffffb, 0x10}, 0xc) (async)
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000024c0)={0x0, 0xfffffffb, 0x10}, 0xc)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1c, 0x6, &(0x7f0000001200)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xd4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000001240)='GPL\x00', 0xf, 0x8d, &(0x7f0000001280)=""/141, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x22, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002400)={0x1, 0x2, 0x5, 0x20000}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000002580)=[r15, r16, 0xffffffffffffffff, r17], &(0x7f00000025c0)=[{0x3, 0x5, 0x7, 0xb}, {0x1, 0x3, 0xc, 0xa}, {0x1, 0x2, 0x1, 0x6}, {0x2, 0x2, 0xc, 0xa}, {0x4, 0x3, 0x5, 0x4}, {0x9606, 0x4, 0x9, 0xc}, {0x4, 0x3, 0xa}], 0x10, 0x5}, 0x94)

433.690665ms ago: executing program 3 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff4000000000000000000000000000000000000000000000020100000000000000000000000000000000000100000000000c0015005d07350081000000"], 0xc4}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000002e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x79, &(0x7f0000000000)=""/121, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r7 = accept4$tipc(r5, &(0x7f0000000380)=@id, &(0x7f0000000640)=0x10, 0x0)
ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000680)={0x4, 0x3})
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x190, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb958}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ac6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c8e3545}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3b}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1330}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x67d2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x801}, 0x20040000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c34e169bb8fa"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000000}, 0x24004004)

432.248282ms ago: executing program 1 (id=324):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0xb852, 0x0, 0x8, 0x926c, 0xa}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r3=>0x0, 0x40, 0x80a0, 0x7, 0x3, {{0x26, 0x4, 0x1, 0x9, 0x98, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x37}}]}, @cipso={0x86, 0x24, 0x3, [{0x1, 0xc, "897e45dc00913942747c"}, {0x7, 0x12, "f8b17608a02f4f97bc9999fa507c9091"}]}, @ssrr={0x89, 0x1f, 0x9f, [@multicast2, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x5, [{@multicast1}, {@broadcast, 0x101}, {@remote, 0x6}, {@multicast1, 0x2}, {@loopback, 0x9}]}, @generic={0x7, 0x2}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r0, 0xe0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000001440)=[0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xba, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0xc, 0x8, 0x8, &(0x7f0000001580)}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = accept4$alg(r0, 0x0, 0x0, 0x80800)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r7}, &(0x7f00000004c0), &(0x7f0000000b40)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080", 0x9c}], 0x1}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000100000000000000000008000000ac1e1f0105000d"], 0x20}], 0x1}, 0x800)
read$alg(r6, &(0x7f00000018c0)=""/4096, 0x1000)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r10, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b85, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0x0, 0x9, 0x8}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xb, 0x5, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0xb}, @ldst={0x0, 0x1, 0x3, 0xa, 0xb, 0x104, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x10001, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x33, '\x00', r3, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x3, &(0x7f0000001780)=[r5, 0x1, r11, r12, r13], &(0x7f00000017c0)=[{0x4, 0x2, 0xa, 0x4}, {0x4, 0x3, 0x0, 0x5}, {0x5, 0x2, 0x8, 0x2}]}, 0x94)

347.123257ms ago: executing program 4 (id=325):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, 0x80000000, 0xfffffffffffffff7, 0x8})
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x9, 0x8, 0xc}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x80801, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
socket$rxrpc(0x21, 0x2, 0x2)
bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000095001e00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003ec0)={0x1, [{r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}], 0x7, "3113d84c0ab819"})
r6 = socket(0x8, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4000)
ioctl$IMGETCOUNT(r6, 0x61d8, &(0x7f0000000000))
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

196.692215ms ago: executing program 0 (id=326):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r0, 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[], 0x30}}], 0x1, 0x8000) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000600000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0}) (async)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000380), &(0x7f00000004c0)=0x80) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008095}, 0x20040000) (async, rerun: 32)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64)
r11 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r13=>0x0})
sendto$packet(r11, &(0x7f00000002c0)="05031600ddfc14000000478886dd", 0xe, 0x24000020, &(0x7f0000000140)={0x11, 0x18, r13, 0x1, 0x1, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x1a6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002", 0x11)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) (async)
sendmsg$nl_generic(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200150f"], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x3c}}, 0x40000) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) (rerun: 32)

195.989507ms ago: executing program 2 (id=327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x61f5d74f}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2004})
epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x2000c800)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x9}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0)
recvmsg(r0, &(0x7f0000001840)={&(0x7f00000018c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/210, 0xd2}, {0x0}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000001880)=""/15, 0xf}], 0x5, &(0x7f0000000840)=""/4096, 0x1000}, 0x142)
bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r9, 0xffffffffffffffff, 0x0, 0xf03a0005)
sendmmsg(r7, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x4004004)

112.279624ms ago: executing program 3 (id=328):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, <r1=>0xffffffffffffffff}, 0x4) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x1ff}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.66754ms ago: executing program 3 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000a0a050000000000000000000a00000909000100a35ec1"], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000006c0)=@acquire={0x128, 0x17, 0xa01, 0x70bd25, 0x25dfdbfd, {{@in=@empty, 0x4d5, 0x3c}, @in=@empty, {@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e20, 0x0, 0x4e21, 0x430b, 0x2, 0x0, 0x0, 0x89}, {{@in=@empty, @in6=@mcast1, 0x4e20, 0x5, 0x4e21, 0x6, 0x0, 0x0, 0x10, 0x87}, {0x2, 0x100, 0x0, 0x100000001, 0x7f, 0xb, 0x5, 0x4}, {0x5db2, 0x1000, 0x7, 0x2}, 0x7, 0x0, 0x1, 0x0, 0x2, 0x2}, 0xc, 0x4, 0x5, 0x70bd2b}}, 0x128}}, 0x4)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000480)={0x6, 0x3, 0x11})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES8=r1, @ANYRESOCT=r4, @ANYBLOB="49671c3918546d71016b3a0abbbdc7f957f16ecd17dfe5f724592d493da101c9a03d5f409f6a0e668f618814416ddeaeb8526589a679a4080658c6df582eb2a60332644fe6a106383f84"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xc0b0)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000280), &(0x7f0000000340)=0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2}], 0x1c)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8aea}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
pipe(&(0x7f0000000180)={<r11=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r9, 0x4, r11}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=@newtaction={0x21c, 0x30, 0xb, 0x0, 0x0, {}, [{0x208, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}]}, {0x4}, {0xc}, {0xc, 0x9}}}, @m_simple={0x148, 0x14, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0x3, 0x2}}, @TCA_DEF_DATA={0xc, 0x3, 'skbedit\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}]}, {0xee, 0x6, "fbbc5a3dc63c56bdc79ffa3ce25795e055f050f5d1272f9b0e6187a9cfed6e241a4fad0b4238e44517f5ac814bb2bc2ba58a61c77f1aff513c086033fa5841b4e8f63ef3f2e89f68b9b98ac8b96e9f580806218ca0b91e59f58e9dd86d9038cc09eb1de830e84a699ea3125adf10863fd06271121d32af36a1463e9672c3558462505ce34c78a6a582f1178651884ba4969dfa1ff26698708b987c1b170c705e35e52f6c78e20c0ed1f1babfb527d7870e782b554e91b487a42e8e1d6379770f85bc2245be74875b0aaa6e300fc066574a02bb1964a0485d905442b91d8d0c6c00735391b8959800737f"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_vlan={0x7c, 0x15, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x932}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xec4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6bd}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xba3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc5e}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x772}]}, {0x16, 0x6, "33bff9a04fe3429c0b92949cdd257b99a8a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x21c}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000240)={<r13=>0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1, 0x0, 0x60f4, 0x3, 0x81, 0x400, 0x6b}, &(0x7f0000000000)=0x9c)
setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r13, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xfff}, 0x8)

0s ago: executing program 1 (id=339):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e13b2ebd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008848"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts.
[   64.820176][ T5810] cgroup: Unknown subsys name 'net'
[   64.946311][ T5810] cgroup: Unknown subsys name 'cpuset'
[   64.954648][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.299319][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.819731][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.827964][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.836315][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.843845][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.852104][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.859741][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.876527][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.885101][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.893993][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.906502][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.914403][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.923454][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.931083][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.939064][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.946454][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.955395][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.962812][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.969900][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.977633][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.985789][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.993449][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.002676][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.010719][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   69.023497][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.041168][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.499432][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   69.708604][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   69.718894][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   69.839651][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.847786][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.855224][ T5820] bridge_slave_0: entered allmulticast mode
[   69.862245][ T5820] bridge_slave_0: entered promiscuous mode
[   69.907899][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.915093][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.922166][ T5820] bridge_slave_1: entered allmulticast mode
[   69.929426][ T5820] bridge_slave_1: entered promiscuous mode
[   69.947806][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   69.983897][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   70.028211][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.049965][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.057165][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.065489][ T5822] bridge_slave_0: entered allmulticast mode
[   70.072318][ T5822] bridge_slave_0: entered promiscuous mode
[   70.092327][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.124453][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.131564][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.138828][ T5822] bridge_slave_1: entered allmulticast mode
[   70.145746][ T5822] bridge_slave_1: entered promiscuous mode
[   70.201654][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.208865][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.216686][ T5832] bridge_slave_0: entered allmulticast mode
[   70.223733][ T5832] bridge_slave_0: entered promiscuous mode
[   70.260178][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.267405][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.275182][ T5832] bridge_slave_1: entered allmulticast mode
[   70.282175][ T5832] bridge_slave_1: entered promiscuous mode
[   70.291261][ T5820] team0: Port device team_slave_0 added
[   70.313847][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.338544][ T5820] team0: Port device team_slave_1 added
[   70.361502][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.415710][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.422889][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.430484][ T5830] bridge_slave_0: entered allmulticast mode
[   70.437415][ T5830] bridge_slave_0: entered promiscuous mode
[   70.457882][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.490555][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.497768][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.505538][ T5830] bridge_slave_1: entered allmulticast mode
[   70.512388][ T5830] bridge_slave_1: entered promiscuous mode
[   70.520775][ T5822] team0: Port device team_slave_0 added
[   70.528532][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.539239][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.546300][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.572748][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.584542][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.591658][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.599201][ T5834] bridge_slave_0: entered allmulticast mode
[   70.606129][ T5834] bridge_slave_0: entered promiscuous mode
[   70.627499][ T5822] team0: Port device team_slave_1 added
[   70.657453][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.664508][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.690749][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.702082][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.709443][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.716722][ T5834] bridge_slave_1: entered allmulticast mode
[   70.724092][ T5834] bridge_slave_1: entered promiscuous mode
[   70.746414][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.776034][ T5832] team0: Port device team_slave_0 added
[   70.806022][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.839297][ T5832] team0: Port device team_slave_1 added
[   70.856362][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.863398][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.889334][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.901949][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.908933][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.934834][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.947991][ T5830] team0: Port device team_slave_0 added
[   70.963940][ T5828] Bluetooth: hci0: command tx timeout
[   70.964008][ T5825] Bluetooth: hci1: command tx timeout
[   70.978738][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.019119][ T5830] team0: Port device team_slave_1 added
[   71.038534][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.043760][ T5825] Bluetooth: hci4: command tx timeout
[   71.047821][ T5828] Bluetooth: hci2: command tx timeout
[   71.072464][ T5820] hsr_slave_0: entered promiscuous mode
[   71.078808][ T5820] hsr_slave_1: entered promiscuous mode
[   71.096402][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.103488][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.129721][ T5828] Bluetooth: hci3: command tx timeout
[   71.129734][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.131620][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.152714][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.179066][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.217421][ T5822] hsr_slave_0: entered promiscuous mode
[   71.224007][ T5822] hsr_slave_1: entered promiscuous mode
[   71.230202][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   71.236054][ T5822] Cannot create hsr debugfs directory
[   71.291374][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[   71.296723][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.297852][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[   71.311242][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.337670][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.350233][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.357430][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.383860][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.396825][ T5834] team0: Port device team_slave_0 added
[   71.453533][ T5834] team0: Port device team_slave_1 added
[   71.541467][ T5832] hsr_slave_0: entered promiscuous mode
[   71.547780][ T5832] hsr_slave_1: entered promiscuous mode
[   71.553983][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   71.559707][ T5832] Cannot create hsr debugfs directory
[   71.592064][ T5830] hsr_slave_0: entered promiscuous mode
[   71.598430][ T5830] hsr_slave_1: entered promiscuous mode
[   71.605053][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   71.610779][ T5830] Cannot create hsr debugfs directory
[   71.629277][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.636403][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.662593][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.701962][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.709047][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.735054][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.919929][ T5834] hsr_slave_0: entered promiscuous mode
[   71.926524][ T5834] hsr_slave_1: entered promiscuous mode
[   71.932490][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   71.938671][ T5834] Cannot create hsr debugfs directory
[   72.161351][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.172654][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.193091][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.216211][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.304962][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.320551][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.334228][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.346790][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.422570][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   72.439029][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   72.449656][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   72.459520][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   72.550074][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.560220][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.584183][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.594322][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.666431][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.695908][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.708277][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.719807][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.730057][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.774819][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   72.837673][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.844868][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.856273][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.863423][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.881654][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.921232][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.946839][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   72.988418][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   72.997598][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.004752][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.033869][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.040948][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.046138][ T5828] Bluetooth: hci1: command tx timeout
[   73.052811][ T5825] Bluetooth: hci0: command tx timeout
[   73.058634][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.089436][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.096598][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.115177][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.122240][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.129871][ T5825] Bluetooth: hci4: command tx timeout
[   73.135362][ T5828] Bluetooth: hci2: command tx timeout
[   73.191309][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.203612][ T5825] Bluetooth: hci3: command tx timeout
[   73.217452][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.299160][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.320981][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   73.339944][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   73.361720][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.368889][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.411511][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.418695][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.446581][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.453794][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.501998][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.509278][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.591969][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.740501][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.775534][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.831133][ T5820] veth0_vlan: entered promiscuous mode
[   73.872221][ T5820] veth1_vlan: entered promiscuous mode
[   73.991789][ T5830] veth0_vlan: entered promiscuous mode
[   74.008686][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.030852][ T5830] veth1_vlan: entered promiscuous mode
[   74.048133][ T5820] veth0_macvtap: entered promiscuous mode
[   74.090649][ T5820] veth1_macvtap: entered promiscuous mode
[   74.131221][ T5830] veth0_macvtap: entered promiscuous mode
[   74.167573][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.197949][ T5830] veth1_macvtap: entered promiscuous mode
[   74.208471][ T5834] veth0_vlan: entered promiscuous mode
[   74.219007][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.259159][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.275895][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.286552][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.300940][ T5834] veth1_vlan: entered promiscuous mode
[   74.308263][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.317485][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.332141][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.346307][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.376111][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.388885][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.419243][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.428538][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.469971][ T5834] veth0_macvtap: entered promiscuous mode
[   74.493121][ T5822] veth0_vlan: entered promiscuous mode
[   74.510710][ T5834] veth1_macvtap: entered promiscuous mode
[   74.565030][ T5822] veth1_vlan: entered promiscuous mode
[   74.583534][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.587512][ T5832] veth0_vlan: entered promiscuous mode
[   74.592949][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.634433][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.656970][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.665002][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.679994][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.690559][ T5832] veth1_vlan: entered promiscuous mode
[   74.744964][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.753962][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.779663][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.796825][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.813212][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.816290][ T5822] veth0_macvtap: entered promiscuous mode
[   74.832083][ T5822] veth1_macvtap: entered promiscuous mode
[   74.840596][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.849607][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.966250][ T5117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.974543][ T5117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.989560][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.998556][ T5832] veth0_macvtap: entered promiscuous mode
[   75.028577][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.057728][ T5832] veth1_macvtap: entered promiscuous mode
[   75.091014][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.121910][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.132743][ T5825] Bluetooth: hci1: command tx timeout
[   75.137138][ T5828] Bluetooth: hci0: command tx timeout
[   75.157492][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.166662][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.203976][ T5828] Bluetooth: hci2: command tx timeout
[   75.204259][ T5825] Bluetooth: hci4: command tx timeout
[   75.230799][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.249957][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.252439][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.259362][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.284009][ T5825] Bluetooth: hci3: command tx timeout
[   75.330383][ T1161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.344340][ T1161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.466019][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.483491][ T1161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.578910][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.603985][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.615216][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.633059][ T5949] syzkaller0: entered promiscuous mode
[   75.633555][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.641760][ T5949] syzkaller0: entered allmulticast mode
[   75.759749][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.776392][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.808687][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.824863][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.959603][ T5957] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7'.
[   76.039270][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.056119][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.132704][ T5960] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.8'.
[   76.152812][ T5962] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.237264][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'.
[   76.293986][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'.
[   76.403074][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.524830][ T5972] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[   76.554515][ T5978] Zero length message leads to an empty skb
[   76.708666][ T5984] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.206840][ T5828] Bluetooth: hci0: command tx timeout
[   77.212316][ T5825] Bluetooth: hci1: command tx timeout
[   77.284467][ T5825] Bluetooth: hci2: command tx timeout
[   77.293401][ T5825] Bluetooth: hci4: command tx timeout
[   77.364022][ T5825] Bluetooth: hci3: command tx timeout
[   77.850599][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.035416][ T6002] æÿîÿ: entered promiscuous mode
[   78.382471][ T6010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.432543][ T6018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21'.
[   78.774471][ T6010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.788872][ T6026] xt_hashlimit: size too large, truncated to 1048576
[   78.822205][ T6026] syz.3.24: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   78.840107][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) 
[   78.840128][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   78.840144][ T6026] Call Trace:
[   78.840152][ T6026]  <TASK>
[   78.840159][ T6026]  dump_stack_lvl+0x189/0x250
[   78.840194][ T6026]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.840217][ T6026]  ? __pfx__printk+0x10/0x10
[   78.840235][ T6026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   78.840258][ T6026]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   78.840283][ T6026]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   78.840308][ T6026]  warn_alloc+0x214/0x310
[   78.840337][ T6026]  ? __pfx_warn_alloc+0x10/0x10
[   78.840368][ T6026]  ? __get_vm_area_node+0x28f/0x300
[   78.840391][ T6026]  ? htable_create+0x101/0x7a0
[   78.840417][ T6026]  __vmalloc_node_range_noprof+0x690/0x12d0
[   78.840456][ T6026]  ? alloc_pages_mpol+0x3cd/0x4a0
[   78.840472][ T6026]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   78.840494][ T6026]  ? rcu_is_watching+0x15/0xb0
[   78.840511][ T6026]  ? htable_create+0x101/0x7a0
[   78.840528][ T6026]  __kvmalloc_node_noprof+0x674/0x910
[   78.840548][ T6026]  ? htable_create+0x101/0x7a0
[   78.840565][ T6026]  ? hashlimit_pernet+0x23/0x240
[   78.840586][ T6026]  ? hashlimit_pernet+0x23/0x240
[   78.840604][ T6026]  ? hashlimit_pernet+0x23/0x240
[   78.840627][ T6026]  htable_create+0x101/0x7a0
[   78.840654][ T6026]  hashlimit_mt_check_common+0x719/0xa10
[   78.840685][ T6026]  xt_check_match+0x3d1/0xab0
[   78.840711][ T6026]  ? __pfx_xt_check_match+0x10/0x10
[   78.840734][ T6026]  ? pcpu_alloc_noprof+0xfdd/0x1720
[   78.840763][ T6026]  ? xt_find_match+0x1f7/0x250
[   78.840789][ T6026]  translate_table+0x1553/0x2040
[   78.840828][ T6026]  ? __pfx_translate_table+0x10/0x10
[   78.840847][ T6026]  ? __might_fault+0xb0/0x130
[   78.840887][ T6026]  ? _copy_from_user+0x94/0xb0
[   78.840914][ T6026]  do_ip6t_set_ctl+0x970/0xce0
[   78.840935][ T6026]  ? rcu_is_watching+0x15/0xb0
[   78.840953][ T6026]  ? trace_contention_end+0x39/0x120
[   78.840972][ T6026]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   78.841009][ T6026]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   78.841027][ T6026]  ? file_init_path+0x3b/0x590
[   78.841045][ T6026]  ? __lock_acquire+0xab9/0xd20
[   78.841061][ T6026]  nf_setsockopt+0x26f/0x290
[   78.841083][ T6026]  rawv6_setsockopt+0x23b/0x5b0
[   78.841100][ T6026]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   78.841114][ T6026]  ? aa_sock_opt_perm+0xff/0x1b0
[   78.841134][ T6026]  ? sock_common_setsockopt+0x36/0xc0
[   78.841152][ T6026]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   78.841172][ T6026]  do_sock_setsockopt+0x17c/0x1b0
[   78.841189][ T6026]  __x64_sys_setsockopt+0x13f/0x1b0
[   78.841208][ T6026]  do_syscall_64+0xfa/0xfa0
[   78.841219][ T6026]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.841232][ T6026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.841244][ T6026]  ? clear_bhb_loop+0x60/0xb0
[   78.841260][ T6026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.841272][ T6026] RIP: 0033:0x7f5f00d8f6c9
[   78.841292][ T6026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.841303][ T6026] RSP: 002b:00007f5f01b7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   78.841317][ T6026] RAX: ffffffffffffffda RBX: 00007f5f00fe5fa0 RCX: 00007f5f00d8f6c9
[   78.841326][ T6026] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[   78.841334][ T6026] RBP: 00007f5f00e11f91 R08: 0000000000000588 R09: 0000000000000000
[   78.841342][ T6026] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[   78.841350][ T6026] R13: 00007f5f00fe6038 R14: 00007f5f00fe5fa0 R15: 00007fff52ca31c8
[   78.841373][ T6026]  </TASK>
[   79.163403][ T6026] Mem-Info:
[   79.271609][ T6026] active_anon:9992 inactive_anon:0 isolated_anon:0
[   79.271609][ T6026]  active_file:2828 inactive_file:39870 isolated_file:0
[   79.271609][ T6026]  unevictable:768 dirty:1623 writeback:0
[   79.271609][ T6026]  slab_reclaimable:10578 slab_unreclaimable:94764
[   79.271609][ T6026]  mapped:29245 shmem:5443 pagetables:1154
[   79.271609][ T6026]  sec_pagetables:0 bounce:0
[   79.271609][ T6026]  kernel_misc_reclaimable:0
[   79.271609][ T6026]  free:1319651 free_pcp:25027 free_cma:0
[   79.320125][ T6010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.338210][ T6026] Node 0 active_anon:36968kB inactive_anon:0kB active_file:11312kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116980kB dirty:6476kB writeback:0kB shmem:17336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11712kB pagetables:4464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.374547][ T6026] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   79.405323][ T6026] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.437846][ T6026] lowmem_reserve[]: 0 2504 2505 2505 2505
[   79.444705][ T6026] Node 0 DMA32 free:1370904kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34268kB inactive_anon:0kB active_file:11312kB inactive_file:159272kB unevictable:1536kB writepending:6476kB zspages:0kB present:3129332kB managed:2565112kB mlocked:0kB bounce:0kB free_pcp:87348kB local_pcp:66572kB free_cma:0kB
[   79.478979][ T6026] lowmem_reserve[]: 0 0 0 0 0
[   79.483759][ T6026] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.513104][ T6026] lowmem_reserve[]: 0 0 0 0 0
[   79.519248][ T6026] Node 1 Normal free:3893444kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19424kB local_pcp:9664kB free_cma:0kB
[   79.555160][ T6026] lowmem_reserve[]: 0 0 0 0 0
[   79.560000][ T6026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   79.574890][ T6026] Node 0 DMA32: 2*4kB (M) 3*8kB (UM) 10*16kB (UME) 24*32kB (UM) 5*64kB (UME) 2*128kB (UM) 2*256kB (M) 2*512kB (UM) 2*1024kB (M) 2*2048kB (ME) 333*4096kB (M) = 1373184kB
[   79.598175][ T6026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[   79.650697][ T6026] Node 1 Normal: 201*4kB (UE) 60*8kB (UME) 34*16kB (UME) 45*32kB (UME) 10*64kB (UME) 7*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3893444kB
[   79.672356][ T6026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   79.681974][ T6026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.682738][ T6010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.696033][ T6026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   79.712448][ T6026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.722109][ T6026] 44062 total pagecache pages
[   79.734994][ T6026] 0 pages in swap cache
[   79.741423][ T6026] Free swap  = 124996kB
[   79.746706][ T6026] Total swap = 124996kB
[   79.750864][ T6026] 2097051 pages RAM
[   79.762469][ T6026] 0 pages HighMem/MovableOnly
[   79.787581][ T6026] 424131 pages reserved
[   79.795672][ T6026] 0 pages cma reserved
[   79.927823][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.30'.
[   79.949105][   T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.953781][ T6053] xt_TCPMSS: Only works on TCP SYN packets
[   79.979536][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.028732][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.065281][ T5117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.099054][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31'.
[   80.128689][ T6057] netlink: 80 bytes leftover after parsing attributes in process `syz.3.31'.
[   80.192643][ T6061] openvswitch: netlink: IP tunnel dst address not specified
[   80.249284][ T6064] netlink: 'syz.0.33': attribute type 1 has an invalid length.
[   80.283468][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.601837][ T6073] xt_TCPMSS: Only works on TCP SYN packets
[   80.809396][ T6062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   80.925378][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   80.927112][ T6084] netlink: 'syz.0.37': attribute type 3 has an invalid length.
[   80.964166][ T6084] netlink: 'syz.0.37': attribute type 3 has an invalid length.
[   81.549230][   T24] cfg80211: failed to load regulatory.db
[   81.756119][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'.
[   81.988277][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'.
[   82.816280][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'.
[   82.990354][ T6146] netlink: 'syz.0.50': attribute type 12 has an invalid length.
[   83.616540][ T6168] 8021q: VLANs not supported on wg0
[   83.831782][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'.
[   83.909248][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'.
[   83.981841][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.56'.
[   84.017591][ T6184] netlink: 300 bytes leftover after parsing attributes in process `syz.0.55'.
[   84.066924][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   84.253708][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'.
[   85.140097][ T6213] sctp: [Deprecated]: syz.3.63 (pid 6213) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.140097][ T6213] Use struct sctp_sack_info instead
[   85.232348][ T6221] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   85.241580][ T6220] sctp: [Deprecated]: syz.3.63 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.241580][ T6220] Use struct sctp_sack_info instead
[   85.276397][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.286106][ T6221] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   85.310844][ T6221] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   85.359701][ T6195] Bluetooth: hci3: Opcode 0x0401 failed: -4
[   85.385247][ T6221] netlink: 40 bytes leftover after parsing attributes in process `syz.0.64'.
[   85.485981][ T6221] batadv0: entered promiscuous mode
[   85.495363][ T6221] batadv0: entered allmulticast mode
[   85.543782][ T6221] bond0: (slave batadv0): Releasing backup interface
[   85.568282][ T6221] bridge0: port 3(batadv0) entered blocking state
[   85.575454][ T6221] bridge0: port 3(batadv0) entered disabled state
[   85.869678][ T6248] netlink: 'syz.2.69': attribute type 58 has an invalid length.
[   85.965543][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   85.975053][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   86.522116][ T6273] netlink: 'syz.0.75': attribute type 5 has an invalid length.
[   86.564576][ T5825] Bluetooth: hci3: command 0x0401 tx timeout
[   86.646432][ T5825] Bluetooth: hci4: command tx timeout
[   86.749115][ T6277] pim6reg: entered allmulticast mode
[   86.791738][ T6281] __nla_validate_parse: 4 callbacks suppressed
[   86.791754][ T6281] netlink: 136 bytes leftover after parsing attributes in process `syz.2.78'.
[   86.901827][ T6278] pim6reg: left allmulticast mode
[   86.954255][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.0.79'.
[   87.171663][ T6291] openvswitch: netlink: Message has 138 unknown bytes.
[   87.702331][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'.
[   87.759256][ T6307] veth0_macvtap: left promiscuous mode
[   87.837126][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'.
[   87.908652][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   88.104152][ T6324] netlink: 'syz.3.92': attribute type 1 has an invalid length.
[   88.111856][ T6324] netlink: 'syz.3.92': attribute type 3 has an invalid length.
[   88.128706][ T6324] netlink: 'syz.3.92': attribute type 2 has an invalid length.
[   88.138912][ T6324] netlink: 'syz.3.92': attribute type 3 has an invalid length.
[   88.148177][ T6324] netlink: 184 bytes leftover after parsing attributes in process `syz.3.92'.
[   88.385534][ T6338] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   88.575327][ T6350] x_tables: duplicate underflow at hook 4
[   88.602152][ T6347] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.654532][ T6347] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   88.867851][ T6338] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   88.912087][ T6354] gretap1: entered promiscuous mode
[   88.968388][ T6354] gretap1: entered allmulticast mode
[   89.002339][ T6354] bond1: (slave gretap1): making interface the new active one
[   89.055034][ T6354] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   89.101322][   T30] audit: type=1800 audit(1763048465.337:2): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="blkio.bfq.time_recursive" dev="tmpfs" ino=100 res=0 errno=0
[   89.141743][ T6347] dvmrp12: entered allmulticast mode
[   89.189233][ T6347] dvmrp12: left allmulticast mode
[   89.260088][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'.
[   89.533044][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.541206][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.654509][ T6386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.661888][ T6386] IPv6: NLM_F_CREATE should be set when creating new route
[   89.669273][ T6386] IPv6: NLM_F_CREATE should be set when creating new route
[   89.835227][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.870261][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.041232][ T6372] 8021q: VLANs not supported on vcan0
[   90.077046][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   90.094021][ T6391] netlink: 'syz.4.104': attribute type 13 has an invalid length.
[   90.115121][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.104'.
[   90.124835][   T79] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.155413][   T79] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.210881][   T79] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.240116][   T79] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.490492][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'.
[   90.556478][ T6416] x_tables: duplicate underflow at hook 1
[   90.611639][ T6416] sctp: [Deprecated]: syz.3.109 (pid 6416) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.611639][ T6416] Use struct sctp_sack_info instead
[   90.686361][ T6411] hsr_slave_1 (unregistering): left promiscuous mode
[   90.721766][ T6416] sctp: [Deprecated]: syz.3.109 (pid 6416) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.721766][ T6416] Use struct sctp_sack_info instead
[   91.359679][ T6444] netlink: 'syz.3.114': attribute type 11 has an invalid length.
[   91.599503][ T6453] netlink: 'syz.3.116': attribute type 1 has an invalid length.
[   91.692133][ T6458] syzkaller0: entered promiscuous mode
[   91.700780][ T6458] syzkaller0: entered allmulticast mode
[   91.750585][ T6460] tipc: Started in network mode
[   91.774730][ T6460] tipc: Node identity 72f2f93fdad9, cluster identity 4711
[   91.819384][ T6460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.883256][ T6469] syzkaller0: entered promiscuous mode
[   91.923486][ T6469] syzkaller0: entered allmulticast mode
[   92.025472][ T6460] tipc: Resetting bearer <eth:syzkaller0>
[   92.061721][ T6459] tipc: Resetting bearer <eth:syzkaller0>
[   92.118639][ T6483] __nla_validate_parse: 3 callbacks suppressed
[   92.118662][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.121'.
[   92.135936][ T6459] tipc: Disabling bearer <eth:syzkaller0>
[   92.206533][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'.
[   92.453797][ T6501] ip6t_srh: unknown srh match flags  4000
[   92.488000][ T6501] syzkaller0: entered promiscuous mode
[   92.497781][ T6501] syzkaller0: entered allmulticast mode
[   92.855154][ T6516] netlink: 'syz.4.131': attribute type 1 has an invalid length.
[   93.042802][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.320917][ T6538] netlink: 68 bytes leftover after parsing attributes in process `syz.3.138'.
[   93.322519][ T6522] netlink: 1120 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.341516][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'.
[   93.366069][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.398148][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'.
[   93.422765][ T6538] hsr_slave_0: left promiscuous mode
[   93.430122][ T6522] netlink: 2044 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.452593][ T6522] netlink: 3644 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.463759][ T6538] hsr_slave_1: left promiscuous mode
[   93.491241][ T6543] batadv_slave_1: entered promiscuous mode
[   93.510788][ T6543] batadv_slave_1: left promiscuous mode
[   94.343703][ T6572] IPVS: length: 91 != 24
[   94.374296][ T6576] netlink: 'syz.2.147': attribute type 21 has an invalid length.
[   94.564608][ T6583] openvswitch: netlink: Missing key (keys=40, expected=80)
[   94.627125][ T6585] netlink: 'syz.0.154': attribute type 10 has an invalid length.
[   94.636398][ T6583] openvswitch: netlink: Flow actions attr not present in new flow.
[   94.659338][ T6585] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   94.709867][ T6591] netlink: 'syz.1.153': attribute type 9 has an invalid length.
[   94.749855][ T6591] netlink: 'syz.1.153': attribute type 6 has an invalid length.
[   94.776194][ T6591] netlink: 'syz.1.153': attribute type 7 has an invalid length.
[   94.785879][ T6591] netlink: 'syz.1.153': attribute type 8 has an invalid length.
[   94.858144][ T6597] openvswitch: netlink: Unknown key attributes 2
[   94.927146][ T6598] netlink: 'syz.0.158': attribute type 11 has an invalid length.
[   95.018718][ T6595] bond1: entered promiscuous mode
[   95.028587][ T6595] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.067814][ T6595] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.079314][ T6595] bond1: (slave bond2): making interface the new active one
[   95.086673][ T6595] bond2: entered promiscuous mode
[   95.092373][ T6595] bond1: (slave bond2): Enslaving as an active interface with an up link
[   95.109640][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.117574][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.157884][ T6603] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   95.311863][ T6609] syzkaller1: entered promiscuous mode
[   95.334667][ T6609] syzkaller1: entered allmulticast mode
[   95.670449][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.695574][ T6636] Cannot find add_set index 0 as target
[   95.897922][   T30] audit: type=1800 audit(1763048472.137:3): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.168" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[   95.923774][ T6648] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[   95.937468][ T6648] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[   95.949093][ T6648] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.756347][ T6698] IPVS: Error connecting to the multicast addr
[   96.888798][ T6706] syzkaller0: entered promiscuous mode
[   96.896453][ T6706] syzkaller0: entered allmulticast mode
[   97.049220][ T6720] validate_nla: 2 callbacks suppressed
[   97.049236][ T6720] netlink: 'syz.1.186': attribute type 2 has an invalid length.
[   97.184946][ T6709] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.206680][ T6709] syz.2.184 (6709) used greatest stack depth: 17832 bytes left
[   97.302737][ T6734] netlink: 'syz.4.188': attribute type 83 has an invalid length.
[   97.327970][ T6732] IPv6: addrconf: prefix option has invalid lifetime
[   97.467565][ T6741] __nla_validate_parse: 12 callbacks suppressed
[   97.467581][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'.
[   97.768269][ T6761] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.194'.
[   97.820188][ T5829] udevd[5829]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   97.931037][ T5824] udevd[5824]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   98.732590][ T6793] ip6t_srh: unknown srh match flags  4000
[   98.772542][ T6793] syzkaller0: entered promiscuous mode
[   98.779757][ T6793] syzkaller0: entered allmulticast mode
[   98.889573][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'.
[   99.170349][ T6817] netlink: 'syz.0.212': attribute type 2 has an invalid length.
[   99.213770][ T6817] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[   99.666781][ T6840] tipc: Started in network mode
[   99.671925][ T6840] tipc: Node identity 46ef7a200492, cluster identity 4711
[   99.679908][ T6840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.735502][ T6840] syzkaller0: entered promiscuous mode
[   99.742250][ T6840] syzkaller0: entered allmulticast mode
[   99.750804][ T6841] netlink: 'syz.1.217': attribute type 1 has an invalid length.
[   99.759430][ T6840] tipc: Resetting bearer <eth:syzkaller0>
[   99.806738][   T79] tipc: Resetting bearer <eth:syzkaller0>
[   99.871664][ T6841] bond2: entered promiscuous mode
[   99.878015][ T6841] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.985383][ T6840] bond2: (slave veth3): making interface the new active one
[  100.001677][ T6840] veth3: entered promiscuous mode
[  100.025424][ T6840] bond2: (slave veth3): Enslaving as an active interface with an up link
[  100.155552][ T6840] tipc: Resetting bearer <eth:syzkaller0>
[  100.863513][ T5897] tipc: Node number set to 1115519520
[  100.904805][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.221'.
[  100.919652][ T6867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'.
[  100.954704][ T6865] netlink: 324 bytes leftover after parsing attributes in process `syz.3.221'.
[  100.978123][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'.
[  101.673270][ T6840] tipc: Disabling bearer <eth:syzkaller0>
[  102.049190][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'.
[  102.150350][ T6895] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  102.246751][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  102.275046][ T6899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.313934][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'.
[  102.329418][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'.
[  102.361267][ T6909] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[  102.964265][   T10] IPVS: starting estimator thread 0...
[  103.013691][ T6939] __nla_validate_parse: 2 callbacks suppressed
[  103.013708][ T6939] netlink: 34 bytes leftover after parsing attributes in process `syz.0.238'.
[  103.063572][ T6937] IPVS: using max 30 ests per chain, 72000 per kthread
[  103.225508][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  103.245628][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'.
[  103.266668][ T6943] bridge5: entered allmulticast mode
[  103.282343][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  103.778954][ T6970] gretap0: entered promiscuous mode
[  103.801949][ T6970] vlan0: entered promiscuous mode
[  103.812956][ T6970] vlan0: entered allmulticast mode
[  103.820020][ T6970] gretap0: entered allmulticast mode
[  104.137159][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.157571][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.346755][ T5117] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.382966][ T6987] netlink: 136 bytes leftover after parsing attributes in process `syz.0.253'.
[  104.403498][ T6987] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  104.466249][ T5117] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.493489][ T5117] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.503258][ T5117] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.565141][ T5934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.624605][ T6994] netlink: 'syz.3.255': attribute type 13 has an invalid length.
[  104.730039][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'.
[  104.742608][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'.
[  104.763535][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'.
[  104.772538][ T7007] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[  104.801528][ T7002] bridge_slave_1: left allmulticast mode
[  104.821107][ T7002] bridge_slave_1: left promiscuous mode
[  104.829656][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.879176][ T7002] bridge_slave_0: left allmulticast mode
[  104.903364][ T7002] bridge_slave_0: left promiscuous mode
[  104.909147][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.111355][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.4.263'.
[  105.127581][ T7029] netlink: 108 bytes leftover after parsing attributes in process `syz.2.262'.
[  105.434706][ T7066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.531571][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.652411][ T7085] bond0: (slave erspan0): Opening slave failed
[  106.228242][ T7109] Ïl80: option downdelay: invalid value (18446744073709547007)
[  106.236068][ T7109] Ïl80: option downdelay: allowed values 0 - 2147483647
[  106.246561][ T7109] Ïl80 (unregistering): Released all slaves
[  106.628588][ T7143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  106.715699][ T7150] netlink: 'syz.4.290': attribute type 1 has an invalid length.
[  106.834948][ T7151] bond1 (unregistering): Released all slaves
[  106.880791][ T7150] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  106.948731][ T7167] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  106.965863][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.143442][ T7171] ip6t_srh: unknown srh match flags  4000
[  107.203670][ T7171] syzkaller0: entered promiscuous mode
[  107.222332][ T7171] syzkaller0: entered allmulticast mode
[  108.034819][ T7223] __nla_validate_parse: 10 callbacks suppressed
[  108.034835][ T7223] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.306'.
[  108.052826][ T7222] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.306'.
[  108.404639][ T5934] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  108.872618][ T7259] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[  108.901990][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'.
[  108.944813][ T7259] dummy0: entered promiscuous mode
[  108.972857][ T7259] bond0: (slave dummy0): Releasing backup interface
[  108.992866][ T7259] bridge0: port 4(dummy0) entered blocking state
[  109.007221][ T7259] bridge0: port 4(dummy0) entered disabled state
[  109.017596][ T7259] dummy0: entered allmulticast mode
[  109.150707][ T7282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.297619][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'.
[  109.316231][ T7288] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.427585][ T7288] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.428043][ T7296] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.314'.
[  109.490283][ T7296] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.314'.
[  109.520498][ T7288] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.603866][ T7288] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.749002][ T7306] netlink: 72 bytes leftover after parsing attributes in process `syz.4.321'.
[  109.749148][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.841224][   T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.926387][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.930138][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'.
[  109.945230][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.986480][ T7316] tipc: Started in network mode
[  110.004496][ T7316] tipc: Node identity , cluster identity 4711
[  110.010613][ T7316] tipc: Failed to set node id, please configure manually
[  110.044819][ T7316] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  110.159734][ T7322] netlink: 'syz.4.325': attribute type 12 has an invalid length.
Connection to 10.128.0.195 closed by remote host.
[  111.250501][ T7154] ==================================================================
[  111.258593][ T7154] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  111.266137][ T7154] Read of size 8 at addr ffff8880317b00a0 by task khidpd_15c25886/7154
[  111.274370][ T7154] 
[  111.276691][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  111.276734][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.276755][ T7154] Call Trace:
[  111.276762][ T7154]  <TASK>
[  111.276769][ T7154]  dump_stack_lvl+0x189/0x250
[  111.276793][ T7154]  ? __kasan_check_byte+0x12/0x40
[  111.276811][ T7154]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.276832][ T7154]  ? lock_release+0x4b/0x3e0
[  111.276852][ T7154]  ? __virt_addr_valid+0x4a5/0x5c0
[  111.276874][ T7154]  print_report+0xca/0x240
[  111.276894][ T7154]  ? __mutex_lock+0x801/0x1350
[  111.276909][ T7154]  kasan_report+0x118/0x150
[  111.276926][ T7154]  ? __mutex_lock+0x801/0x1350
[  111.276945][ T7154]  __mutex_lock+0x801/0x1350
[  111.276963][ T7154]  ? __mutex_lock+0x5bb/0x1350
[  111.276981][ T7154]  ? l2cap_unregister_user+0x6a/0x1b0
[  111.277004][ T7154]  ? __pfx___mutex_lock+0x10/0x10
[  111.277025][ T7154]  ? __pfx___timer_delete_sync+0x10/0x10
[  111.277050][ T7154]  l2cap_unregister_user+0x6a/0x1b0
[  111.277073][ T7154]  hidp_session_thread+0x3c9/0x410
[  111.277096][ T7154]  ? __pfx_hidp_session_thread+0x10/0x10
[  111.277117][ T7154]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  111.277140][ T7154]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  111.277164][ T7154]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  111.277186][ T7154]  ? __kthread_parkme+0x7b/0x200
[  111.277205][ T7154]  ? __kthread_parkme+0x1a1/0x200
[  111.277226][ T7154]  kthread+0x711/0x8a0
[  111.277247][ T7154]  ? __pfx_hidp_session_thread+0x10/0x10
[  111.277268][ T7154]  ? __pfx_kthread+0x10/0x10
[  111.277287][ T7154]  ? _raw_spin_unlock_irq+0x23/0x50
[  111.277315][ T7154]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.277330][ T7154]  ? __pfx_kthread+0x10/0x10
[  111.277350][ T7154]  ret_from_fork+0x4bc/0x870
[  111.277368][ T7154]  ? __pfx_ret_from_fork+0x10/0x10
[  111.277388][ T7154]  ? __switch_to_asm+0x39/0x70
[  111.277402][ T7154]  ? __switch_to_asm+0x33/0x70
[  111.277416][ T7154]  ? __pfx_kthread+0x10/0x10
[  111.277436][ T7154]  ret_from_fork_asm+0x1a/0x30
[  111.277458][ T7154]  </TASK>
[  111.277465][ T7154] 
[  111.478016][ T7154] Allocated by task 5834:
[  111.482323][ T7154]  kasan_save_track+0x3e/0x80
[  111.487160][ T7154]  __kasan_kmalloc+0x93/0xb0
[  111.491733][ T7154]  __kmalloc_noprof+0x411/0x7f0
[  111.496566][ T7154]  hci_alloc_dev_priv+0x28/0x2060
[  111.501573][ T7154]  vhci_create_device+0x120/0x650
[  111.506579][ T7154]  vhci_write+0x3ce/0x4a0
[  111.510885][ T7154]  vfs_write+0x5c9/0xb30
[  111.515110][ T7154]  ksys_write+0x145/0x250
[  111.519420][ T7154]  do_syscall_64+0xfa/0xfa0
[  111.523900][ T7154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.529770][ T7154] 
[  111.532072][ T7154] Freed by task 5834:
[  111.536028][ T7154]  kasan_save_track+0x3e/0x80
[  111.540685][ T7154]  __kasan_save_free_info+0x46/0x50
[  111.545863][ T7154]  __kasan_slab_free+0x5c/0x80
[  111.550610][ T7154]  kfree+0x19a/0x6d0
[  111.554484][ T7154]  bt_host_release+0x82/0x90
[  111.559053][ T7154]  device_release+0x9c/0x1c0
[  111.563625][ T7154]  kobject_put+0x22b/0x480
[  111.568019][ T7154]  vhci_release+0x15a/0x1a0
[  111.572499][ T7154]  __fput+0x44c/0xa70
[  111.576458][ T7154]  task_work_run+0x1d4/0x260
[  111.581029][ T7154]  do_exit+0x6b5/0x2300
[  111.585167][ T7154]  do_group_exit+0x21c/0x2d0
[  111.589737][ T7154]  __x64_sys_exit_group+0x3f/0x40
[  111.594745][ T7154]  x64_sys_call+0x21f7/0x2200
[  111.599401][ T7154]  do_syscall_64+0xfa/0xfa0
[  111.603884][ T7154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.609759][ T7154] 
[  111.612062][ T7154] Last potentially related work creation:
[  111.617751][ T7154]  kasan_save_stack+0x3e/0x60
[  111.622411][ T7154]  kasan_record_aux_stack+0xbd/0xd0
[  111.627586][ T7154]  insert_work+0x3d/0x330
[  111.631895][ T7154]  __queue_work+0xbaf/0xfb0
[  111.636379][ T7154]  queue_work_on+0x181/0x270
[  111.640949][ T7154]  process_scheduled_works+0xae1/0x17b0
[  111.646475][ T7154]  worker_thread+0x8a0/0xda0
[  111.651042][ T7154]  kthread+0x711/0x8a0
[  111.655101][ T7154]  ret_from_fork+0x4bc/0x870
[  111.659684][ T7154]  ret_from_fork_asm+0x1a/0x30
[  111.664434][ T7154] 
[  111.666744][ T7154] Second to last potentially related work creation:
[  111.673323][ T7154]  kasan_save_stack+0x3e/0x60
[  111.678014][ T7154]  kasan_record_aux_stack+0xbd/0xd0
[  111.683202][ T7154]  insert_work+0x3d/0x330
[  111.687513][ T7154]  __queue_work+0xcd2/0xfb0
[  111.691995][ T7154]  call_timer_fn+0x17e/0x5f0
[  111.696572][ T7154]  __run_timer_base+0x646/0x860
[  111.701427][ T7154]  run_timer_softirq+0xb7/0x180
[  111.706280][ T7154]  handle_softirqs+0x286/0x870
[  111.711028][ T7154]  __irq_exit_rcu+0xca/0x1f0
[  111.715603][ T7154]  irq_exit_rcu+0x9/0x30
[  111.719834][ T7154]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  111.725461][ T7154]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  111.731421][ T7154] 
[  111.733728][ T7154] The buggy address belongs to the object at ffff8880317b0000
[  111.733728][ T7154]  which belongs to the cache kmalloc-8k of size 8192
[  111.747759][ T7154] The buggy address is located 160 bytes inside of
[  111.747759][ T7154]  freed 8192-byte region [ffff8880317b0000, ffff8880317b2000)
[  111.761618][ T7154] 
[  111.763926][ T7154] The buggy address belongs to the physical page:
[  111.770324][ T7154] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x317b0
[  111.779062][ T7154] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  111.787559][ T7154] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  111.795081][ T7154] page_type: f5(slab)
[  111.799055][ T7154] raw: 00fff00000000040 ffff88801a027280 ffffea0000c63800 0000000000000006
[  111.807627][ T7154] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  111.816194][ T7154] head: 00fff00000000040 ffff88801a027280 ffffea0000c63800 0000000000000006
[  111.824842][ T7154] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  111.833495][ T7154] head: 00fff00000000003 ffffea0000c5ec01 00000000ffffffff 00000000ffffffff
[  111.842144][ T7154] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  111.850787][ T7154] page dumped because: kasan: bad access detected
[  111.857183][ T7154] page_owner tracks the page as allocated
[  111.862873][ T7154] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5484, tgid 5484 (run-parts), ts 42644239009, free_ts 42594683671
[  111.883165][ T7154]  post_alloc_hook+0x240/0x2a0
[  111.887918][ T7154]  get_page_from_freelist+0x2365/0x2440
[  111.893446][ T7154]  __alloc_frozen_pages_noprof+0x181/0x370
[  111.899246][ T7154]  alloc_pages_mpol+0x232/0x4a0
[  111.904079][ T7154]  allocate_slab+0x96/0x350
[  111.908564][ T7154]  ___slab_alloc+0xe94/0x18a0
[  111.913220][ T7154]  __slab_alloc+0x65/0x100
[  111.917619][ T7154]  __kmalloc_cache_noprof+0x411/0x6f0
[  111.922973][ T7154]  tomoyo_init_log+0x111f/0x1f70
[  111.927895][ T7154]  tomoyo_supervisor+0x340/0x1480
[  111.932902][ T7154]  tomoyo_env_perm+0x149/0x1e0
[  111.937645][ T7154]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  111.943258][ T7154]  tomoyo_bprm_check_security+0x11c/0x180
[  111.948959][ T7154]  security_bprm_check+0x89/0x270
[  111.953969][ T7154]  bprm_execve+0x8ee/0x1450
[  111.958456][ T7154]  do_execveat_common+0x510/0x6a0
[  111.963462][ T7154] page last free pid 5482 tgid 5482 stack trace:
[  111.969766][ T7154]  __free_frozen_pages+0xbc4/0xd30
[  111.974864][ T7154]  __slab_free+0x2e7/0x390
[  111.979261][ T7154]  qlist_free_all+0x97/0x140
[  111.983835][ T7154]  kasan_quarantine_reduce+0x148/0x160
[  111.989277][ T7154]  __kasan_slab_alloc+0x22/0x80
[  111.994118][ T7154]  __kmalloc_noprof+0x3c3/0x7f0
[  111.998955][ T7154]  tomoyo_supervisor+0xbd5/0x1480
[  112.003965][ T7154]  tomoyo_path_permission+0x25a/0x380
[  112.009320][ T7154]  tomoyo_check_open_permission+0x24d/0x3b0
[  112.015192][ T7154]  security_file_open+0xb1/0x270
[  112.020123][ T7154]  do_dentry_open+0x384/0x13f0
[  112.024866][ T7154]  vfs_open+0x3b/0x340
[  112.028914][ T7154]  path_openat+0x2ee5/0x3830
[  112.033484][ T7154]  do_filp_open+0x1fa/0x410
[  112.037968][ T7154]  do_sys_openat2+0x121/0x1c0
[  112.042624][ T7154]  __x64_sys_openat+0x138/0x170
[  112.047454][ T7154] 
[  112.049756][ T7154] Memory state around the buggy address:
[  112.055362][ T7154]  ffff8880317aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  112.063402][ T7154]  ffff8880317b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.071438][ T7154] >ffff8880317b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.079471][ T7154]                                ^
[  112.084560][ T7154]  ffff8880317b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.092599][ T7154]  ffff8880317b0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.100635][ T7154] ==================================================================
[  112.109800][ T7154] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  112.117019][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  112.126729][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  112.136785][ T7154] Call Trace:
[  112.140058][ T7154]  <TASK>
[  112.142982][ T7154]  dump_stack_lvl+0x99/0x250
[  112.147573][ T7154]  ? __asan_memcpy+0x40/0x70
[  112.152160][ T7154]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.157357][ T7154]  ? __pfx__printk+0x10/0x10
[  112.161951][ T7154]  vpanic+0x237/0x6d0
[  112.165935][ T7154]  ? __pfx_vpanic+0x10/0x10
[  112.170439][ T7154]  panic+0xb9/0xc0
[  112.174149][ T7154]  ? __pfx_panic+0x10/0x10
[  112.178550][ T7154]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  112.184429][ T7154]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.190307][ T7154]  ? __mutex_lock+0x801/0x1350
[  112.195049][ T7154]  check_panic_on_warn+0x89/0xb0
[  112.199972][ T7154]  ? __mutex_lock+0x801/0x1350
[  112.204727][ T7154]  end_report+0x78/0x160
[  112.208955][ T7154]  kasan_report+0x129/0x150
[  112.213438][ T7154]  ? __mutex_lock+0x801/0x1350
[  112.218198][ T7154]  __mutex_lock+0x801/0x1350
[  112.222774][ T7154]  ? __mutex_lock+0x5bb/0x1350
[  112.227519][ T7154]  ? l2cap_unregister_user+0x6a/0x1b0
[  112.232876][ T7154]  ? __pfx___mutex_lock+0x10/0x10
[  112.237883][ T7154]  ? __pfx___timer_delete_sync+0x10/0x10
[  112.243507][ T7154]  l2cap_unregister_user+0x6a/0x1b0
[  112.248690][ T7154]  hidp_session_thread+0x3c9/0x410
[  112.253787][ T7154]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.259402][ T7154]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.265279][ T7154]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.271504][ T7154]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  112.277725][ T7154]  ? __kthread_parkme+0x7b/0x200
[  112.282645][ T7154]  ? __kthread_parkme+0x1a1/0x200
[  112.287652][ T7154]  kthread+0x711/0x8a0
[  112.291703][ T7154]  ? __pfx_hidp_session_thread+0x10/0x10
[  112.297317][ T7154]  ? __pfx_kthread+0x10/0x10
[  112.301892][ T7154]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.307075][ T7154]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.312253][ T7154]  ? __pfx_kthread+0x10/0x10
[  112.316826][ T7154]  ret_from_fork+0x4bc/0x870
[  112.321471][ T7154]  ? __pfx_ret_from_fork+0x10/0x10
[  112.326643][ T7154]  ? __switch_to_asm+0x39/0x70
[  112.331399][ T7154]  ? __switch_to_asm+0x33/0x70
[  112.336140][ T7154]  ? __pfx_kthread+0x10/0x10
[  112.340716][ T7154]  ret_from_fork_asm+0x1a/0x30
[  112.345464][ T7154]  </TASK>
[  112.348710][ T7154] Kernel Offset: disabled
[  112.353011][ T7154] Rebooting in 86400 seconds..