last executing test programs:

2.392048363s ago: executing program 4 (id=189):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x3c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x3c, r1, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
readv(r0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f0000000480)=""/209, 0xd1}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000680)=""/80, 0x50}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000840)=""/224, 0xe0}], 0x9)
socket(0x1e, 0x4, 0x0) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000700)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}}}, 0x80, 0x0}}], 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0x11}}}}}, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000400)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000400)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0)

1.992492293s ago: executing program 4 (id=196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x3c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x3c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xbc506211d454a8f7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r2, @ANYBLOB="831c050000000000280012800b000100697036746e6c00001800028014000200ff012000000000000000000000000001292877f60034b78600298b5d861f33d81160d5fab6f524999b70abf6a4840f05d9df4ba831d82bb54f6caff7848d386796e38393a20a29c1a8af8784dd613d03bddfc0bbe23fb64e99a1ccef1600d05777bc8e1b876744a144875806315a7c3da86aad20faefced6d0c65e922c7c81719c930905fc82943b4b4425be9a2396c6437090862eac"], 0x48}, 0x1, 0x0, 0x0, 0x8002}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0x1}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'caif0\x00', {}, 0x5})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'syz_tun\x00', {0x4}, 0x2b1})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

1.632817454s ago: executing program 1 (id=201):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a0102000000000000000001000900010073797a30000000000900030073797a310000000038000000030a01e6b9511c0000000000010000010900030073797a32000000000000010900010073797a300000000014000000000000000000000a00"/163], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, &(0x7f0000001080)) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000000000050000801c0011802e"], 0x30}], 0x1}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x6c}}, 0x0)

1.519771556s ago: executing program 2 (id=202):
syz_emit_ethernet(0x2cd, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x297, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x2f, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @jumbo]}], "983864eee1fe71e030673c5d9f2a0d512afd8bcdc98b342beaeeac01407508381ddf452b0ecc470ae144882e0766e2bd2f73bedf534a13a74fff0d3a25edba25839e625378c87c580477b49fec358dfbbe727df3ee057de73dfd2e630b6a77ed16966ffef0d2db48b687d8bf0da168016b8daab690da059e1680f10d96f3023c92a86c9a164a16d9acbfd029d24d824bf3ea09887510f8618d7c9ddd8747cd4aca00597422b4c96adec5755f5f49ff44c10ee5396c7d05149f8e01e1b07adab463ed9eb188af60497998153bbca8a38e5862c785898230d71850c4dbcae034"}}}}}}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev}, &(0x7f0000000100)=0xc) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev, <r1=>0x0}, &(0x7f0000000100)=0xc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) (async)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000007740)={0xe, {{0xa, 0x4e22, 0x9, @mcast1, 0x40}}}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r9}, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1e, 0x1, 0xa292, 0x10, 0x80d0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1e, 0x1, 0xa292, 0x10, 0x80d0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xffff7fff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r14, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfa}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2c, '\x00', r1, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x2, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[r3, r4, r11, r12, r13, r14], &(0x7f0000000400)=[{0x1, 0x1, 0x6, 0x7}, {0x0, 0x4, 0x8, 0x4}, {0x4, 0x4, 0xc, 0x9}], 0x10, 0x4, @void, @value}, 0x94)

1.519134258s ago: executing program 3 (id=203):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002c00010200000000000000000400008004000e"], 0x18}], 0x1}, 0x0)

1.48899688s ago: executing program 4 (id=204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006669620014000280080002400000000208000140de0000000900010073797a30000000000900020073697a32000000001400005be5331fbd5cdd67948574e10c87084000"], 0x78}}, 0x0)

1.299795402s ago: executing program 3 (id=206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x2c}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001580)={r7, @in6={{0xa, 0x4e21, 0xff, @empty, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000540)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r7, 0xfff8, 0x1ff}, &(0x7f0000000180)=0x8)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf2}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x840)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r8, 0x8000}, [@IFLA_TXQLEN={0x8, 0xd, 0x7fffffff}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x9843}, @IFLA_IFALIASn={0x4}]}, 0x60}}, 0x0)

1.296411834s ago: executing program 1 (id=208):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c004d0def78aaa3ee431d8914e1d1b7430000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000f9dbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000094}, 0x40000)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000000)=0x2) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000008c000000b700"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1)
close(0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073019d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r8) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) (async, rerun: 64)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r11, r11, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x9, 0x801, 0x0, 0x8, 'syz1\x00'}) (async, rerun: 32)
ioctl$sock_bt_hidp_HIDPCONNDEL(r12, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r13=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="70010000", @ANYRES16=r9, @ANYRES8=r9, @ANYRES32, @ANYBLOB="08febb5c61d05a847294566bfe98bba9", @ANYRES32=r13, @ANYRES32], 0x170}}, 0x4040000) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltfilter={0x44, 0x2d, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x0, 0xfff1}, {0xfffa, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x17, 0xb}}, @TCA_RATE={0x6, 0x5, {0x5, 0xd2}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x44}}, 0x240008c0)

1.270614087s ago: executing program 2 (id=209):
socket(0x1e, 0x1, 0xaf0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000001100)=""/4029, 0xfbd}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000500)=""/192, 0xc0}], 0x8}, 0x2000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x19, 0x0, 0x0)
r2 = socket(0x1, 0x80000, 0x8002)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400000008000000feffff7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0005000000000000000000000000000000e2ff000000000000000000"], 0x48)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180))

1.258158115s ago: executing program 4 (id=210):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r3, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x8004}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={<r7=>r4, 0x7, 0x0, 0x4cb})
sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000cc0)={0x428, 0x3f4, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x1, 0x11, [0x3, 0x401, 0x5, 0x8, 0x3, 0x4, 0x200, 0x4, 0xfff, 0x9, 0x101, 0x8000, 0x5, 0x3f, 0x7, 0x8, 0x6, 0x9, 0x0, 0x2, 0x1, 0x22, 0x431, 0x5d, 0x80000001, 0x1645, 0x4bb9, 0x2, 0x2, 0x6, 0x6, 0x6, 0x400, 0x0, 0x1ed75214, 0x0, 0xdb5, 0x4, 0x2, 0x10, 0x2, 0x1, 0x7, 0x9, 0x7fffffff, 0x4, 0xfc000000, 0x1ac0, 0x10, 0x8, 0x1000, 0x2, 0x1000, 0x2, 0x4, 0x5, 0x5, 0x9, 0x7, 0x0, 0xe, 0x9, 0x2, 0x1], [0x5, 0x2, 0xfffffffa, 0x46, 0x7, 0x7, 0x8, 0x6, 0x6, 0x9, 0x850, 0x3, 0x7, 0x8, 0x0, 0x7, 0xdfa9, 0x7c, 0x7, 0x5ba, 0xfffffff7, 0x6, 0x97, 0x8, 0x4, 0x3ff, 0x81, 0x7, 0xea8b, 0x80000000, 0x1000, 0x9, 0x2, 0xa, 0x800, 0x4, 0x0, 0x18, 0x8, 0x9, 0x7ff, 0xfffffff9, 0xfffffffe, 0x2, 0x5, 0x5, 0x8, 0xee2, 0x4, 0x9, 0x10000, 0x4, 0x5, 0x5, 0xfffffffb, 0x5, 0x3, 0x1, 0x8000, 0x2, 0x46d8ee8c, 0x51, 0x1, 0x4], [0xe, 0x1, 0x4, 0x9b, 0xffffff91, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x101, 0x5, 0x0, 0x80, 0x7, 0x9, 0x8, 0x400, 0x4, 0x353, 0x7fff, 0xfffffffd, 0x7, 0x3b, 0x82e1, 0x6, 0x7f, 0x3, 0x5, 0x2, 0xffff8000, 0x9, 0x2, 0x3, 0x6, 0x4, 0x80000001, 0xfffff4f4, 0x3, 0x0, 0x7, 0x14000000, 0x9, 0xd5c, 0xe9e, 0x9, 0x3, 0x5, 0x6, 0x6, 0x3c38, 0x5, 0x7, 0x0, 0x7ae, 0x0, 0xe, 0x0, 0x7, 0x7, 0x3, 0x9, 0xfffffff9, 0x5], [0x801, 0x1000, 0x4, 0xfff, 0x0, 0x1, 0xb, 0xefd, 0x46a6, 0xb21, 0x99f, 0x3, 0x9, 0x5, 0x2, 0x36bf, 0x10, 0x1dd, 0x8, 0x40, 0xc99, 0x3, 0xb, 0x37ddc104, 0x6, 0x8, 0x5f0, 0xffff, 0x6, 0xd, 0x4, 0xfffffffd, 0x7, 0x8, 0x9ef, 0x2e, 0xac9, 0x7, 0x7, 0x2, 0xde, 0xffffffff, 0x8, 0x2, 0x7, 0xfffffffd, 0x2, 0x2, 0x80000000, 0x5, 0x3, 0xa7f6, 0x5, 0x5, 0x7, 0x7, 0x40000000, 0x7ff, 0x2, 0xdbc3, 0x0, 0x1, 0xa5, 0x443], 0x5, ['syz0\x00']}, ["", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4008004)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r9, 0x0, 0x13, &(0x7f0000000000)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) (async)
setsockopt$inet_mreqsrc(r9, 0x0, 0x13, &(0x7f0000000000)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x414, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6583}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1e61d30a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private2, 0x495}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @mcast1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @loopback, 0x31ae}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x630d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x20000044}, 0x404c000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000680)=""/205, 0xcd}], 0x3, &(0x7f0000000780)=""/10, 0xa}, 0x1}], 0x1, 0x40010000, &(0x7f0000001100)={0x0, 0x3938700}) (async)
recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000680)=""/205, 0xcd}], 0x3, &(0x7f0000000780)=""/10, 0xa}, 0x1}], 0x1, 0x40010000, &(0x7f0000001100)={0x0, 0x3938700})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r11, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r11, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)

1.0719449s ago: executing program 0 (id=211):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000480))
sendto$packet(0xffffffffffffffff, &(0x7f00000008c0)="48d53699a77a5fcfcc2c51eb2cb2257b3f043f50c113e0f80d1b14a60e55f818960d3f561a950d2d3ca49749529c021a9887f8e2ea94cdf9f90e3da793b216d101c044e05f45472dc90fb63deefc641dda948f82137dd65641dd9ab7cf0e7a642a9b9c2935d1739c020d58862831f1467e32708665d24601d3260a9f73b840e8c99a82820596e74438cba82a9609b0b2f12d5aedc8b015d31a859559", 0x9c, 0x40000, &(0x7f0000000a00)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_IE={0x45, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0x976, "99cd7c5c74ca", @long="5233dbc80d8899c3efc3dcb2e6888ec1"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000)
sendto$unix(0xffffffffffffffff, &(0x7f0000000c40)="3643f38ea4a08f7617fd87379ec0b1120b4609b0437f8590e238c4a8b7ecf3c95467554f2fe100a63612e9f863fe7ee1f7f4a290f50fc257c2fa780d42964e8d7c880a1a779a861a00015d9a2515e6a1ce6cb4d95104f4bdfe52b72b811b684f494d12d99486613563d4abbf6c93773251362624928411b840e6808e25383d41c1bbf23c79438602ee5691b85cd6ec5719a3a2551499427020077c6a1e9edb8176e6fb9132df6ed914b365142c4c28a01c40f3d5d7cd73e0075d49ada4e8d1f8c78d96e3ba61970bb38fc8c5f93effe6a938", 0xd2, 0x800, &(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e)
accept4$unix(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e40)=0x6e, 0x800)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002540), 0x80000)
accept4$packet(r2, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000025c0)=0x14, 0x400)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000002600)={0x1f, 0x0, 0x1}, 0x6)

1.047410869s ago: executing program 3 (id=212):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x458}, {0x61, 0x0, 0x0, 0xacb3}, {0x6}]})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000080)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = accept(r5, &(0x7f0000000340)=@generic, &(0x7f0000000400)=0x80)
sendmsg$nl_route(r7, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd28, 0x25dfdbfb, {0x2, 0x10, 0x0, 0x8, 0x107, 0x4, 0xc8, 0x3, 0x400}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r6}, 0x10, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000cbfc0b9af540340ccc43cf29a6c566fd4a5e3ba79e7d311a47d46017f4960a8d2ca94b8b939df39367fecd0f89da4924891d03"], 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000018c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000ae0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000400c18584ec"], 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'sit0\x00', @random="030156b53eb4"})
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000f8ffff05000000080001"], 0x28}}, 0x20004084)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000540)={0x3b, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x18, {0x0, 0x4, 0x68, 0x8, [0x3d, 0x6]}}, @generic={0x1, 0xf0, "a90677fc92378a254f163de30ad42732a44d246340bc8e9a6d43758dd85fd6abb458fe8fe822ed0721e57a7a1395ba7acb617c3309ecf8fe5db5f37f397391b8659672cf64ea1da30884c2a51fb28281aa1e51a43ee82524711c19256b0f40af9ac00077257d0d1c1ee888aa49bcca76d9e45da1bb702b91a9b6c21c434856adfd31c48998b76717b8974776b17d8b010e2a0c253b0bc99c85ffa23f2ea3f2dff3838668d3132ccb75c5642309415b84914ea7d8a277fc47dd1ecdf8d652ef4d70371def861d1dd074aaa360ebe34e26863a716686cc5e60833ad3efa1a1ea1ae2fd8684600608a21bc8979757b15b9d"}, @jumbo={0xc2, 0x4, 0x7}]}, 0x120)

1.038714891s ago: executing program 1 (id=213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000400000000008006966623000000000000000000000002264756d6d78300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000180c20000000000000000000000b8000000b8000000e80000006970005100000000000600000000000000000000000000a823c565625b8d72002000000000000000008430040000000000000000000033a149b78f014c020d7400e286b830f07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

948.72648ms ago: executing program 2 (id=214):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x6, @random='OTay|y'})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, @local, @mcast2, 0x0, 0x8000, 0x9, 0x5}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0xd, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xfe, &(0x7f0000000280)=""/254, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x59dcdd65, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x7e, 0x7c, &(0x7f00000004c0)="795d36a59c5fde2a96ef89b1ceab7f7ec2dfe70aad621b82021ca693869de5fce13907ace4ff8cbcfc0f8a2ac265135d0a80eaa6e7961879da7da5e071c61a487b41104cebc7fd9179d8b1c28f0dc9c83b148342cf30d7363ad76acac3b7486cc1daa88319be67a5e0959a9bb37757deb930d9f0d7f0def0920a44deb608", &(0x7f0000000540)=""/124, 0x65, 0x0, 0x59, 0xe4, &(0x7f00000005c0)="7246b9b154593968d4d89ec4ce8ed69b0dd3249cc7ba1e62a2118665e0656d01566fa11e0b3207848d685bbc921c8dc487d04ed1e766e2b2b62ce52a0e65d9b59c7c029b40a308861e9ebe51944de2925aea6ad361f58ba7cb", &(0x7f0000000640)="874feb581437d8cca6a74f236af7f4cac30a941eb5fb833e3e743dea63d1f50c0fbbced55c1d9afefa40863155effbeff32a75dd525e2ed38b1c9dd5bdb459ca413c86950216efc4b02d67dd5a2e82b35051b89182546e224dc8246cd776c58a665b33a868d565c9b951abb1bae0985c7058442c926d87fe3ae0c8bae0aec7983a730e3701c7f013d2c1eff95dd1d97881606320fefc97e80bf91983915d1be0177a1f23a88b3c75ae7893f01f409ae0fd4bf820333a3bca86ce2e58406c95a14aa8651c505493d4fe8ca26db7038a02de6826a97bc6fd5eec4450482766649adad715a6", 0x4, 0x0, 0x7}, 0x50)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00054000000000000000000900010073797a30"], 0x534}}, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socket$isdn_base(0x22, 0x3, 0x0)

947.882482ms ago: executing program 0 (id=215):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$bt_BT_VOICE(r0, 0x12, 0xb, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x650, 0xffffffff, 0x0, 0x138, 0x0, 0xffffffff, 0xffffffff, 0x580, 0x580, 0x580, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0xf, 0x6, 0x0, {0x100000000}}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x8, 0x6, 0x2}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x210, 0x240, 0x0, {}, [@common=@srh={{0x30}, {0x6c, 0x9, 0x3, 0x8, 0x0, 0xb90, 0x1001}}, @common=@rt={{0x138}, {0xffff7fff, [0x2, 0x1], 0x1, 0x5, 0x7, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, @dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4}, {0x0, 0x6}, 0x6, 0x91d800}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0xc, [0x7, 0x1], 0x3, 0x30, 0x0, [@empty, @empty, @loopback, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, @private0, @private1, @private1, @local, @remote], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000a00)=0x2, 0x4) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)="5c00000012006bab9a3fe3d86e17caaa0a046b876c350048007ea608fc64160a1d001901000000e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938036e70e4509c50600000000000000822e9e6982020671e5cebe", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a0002000535", 0x1e}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r5, 0x8b0f, &(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmmsg(r6, &(0x7f00000010c0)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}, 0xfffffffb}}, 0x80, 0x0}}], 0x1, 0x4044)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c00000010000d0700000000000064a992a87d7e07342af6c5ed3fb587d9f992bcf3ed44000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800c00210000000000000000800c0022000000000000000000"], 0x4c}}, 0x0) (async)
r9 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
read(0xffffffffffffffff, &(0x7f0000000900)=""/166, 0xa6) (async, rerun: 32)
r10 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32)
write$cgroup_subtree(r1, &(0x7f00000009c0)={[{0xb6a5d25bc4057a81, 'blkio'}]}, 0x7) (async, rerun: 32)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x9cdc2384056b48b8) (rerun: 32)

835.589327ms ago: executing program 4 (id=216):
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
r0 = socket(0x21, 0x2, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x110, 0x6, 0x0, 0x20000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112e00000000008510000002000000850000000000001095000000000000009500850500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x23c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x6ffc}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0xfc00}, {0x8, 0x13, 0x1d3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x4b2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x23c}}, 0x4004000)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
syz_emit_ethernet(0x7c, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "22fff4", 0x46, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5]}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x2}}}}}}}}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa880000000001c00128009000207886f6e64000000000c020280050200422d0151c349144bb947d37afc2ec880a06c4d76ce"], 0x3c}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x88ca}, @val={0x1, 0x80, 0x3, 0x2, 0x8, 0x4}, @eth={@link_local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x800, @igmp={{0x39, 0x4, 0x2, 0x15, 0x10b, 0x68, 0x0, 0x5, 0x2, 0x0, @private=0xa010101, @loopback, {[@ssrr={0x89, 0x27, 0x19, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @private=0xa010101, @remote, @empty, @multicast2, @local, @local]}, @end, @noop, @rr={0x7, 0xf, 0xd9, [@remote, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xc, [{@rand_addr=0x64010101}, {@empty, 0x1}]}, @timestamp={0x44, 0xc, 0x27, 0x0, 0x3, [0x7, 0x7f]}, @cipso={0x86, 0x3b, 0x0, [{0x2, 0x8, "9cbf188fbf34"}, {0x5, 0xa, "fd51f48ba0ca3671"}, {0x7, 0xe, "143b90b2ed3ce1fb05bf426a"}, {0x2, 0x12, "d49bd33575a6867214975f0fe695b019"}, {0x6, 0x3, 'Z'}]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0x0, [0x4]}, @rr={0x7, 0x17, 0xf0, [@rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2]}, @ssrr={0x89, 0x1b, 0x9, [@multicast1, @local, @multicast2, @private=0xa010101, @multicast1, @remote]}]}}, {0x22, 0x7, 0x0, @multicast2, "5d34f59375d211dcd8e0acb736a23114fab13312c237ad83a415484a5faeb3"}}}}}}, 0x12b)
socketpair(0x1e, 0x6, 0x7fff, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff72d}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488c0}, 0x40c0)
r9 = socket(0x10, 0x2, 0x5)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept4(r8, &(0x7f0000000200)=@caif, &(0x7f0000000280)=0x80, 0x80000)
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x15}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

797.248212ms ago: executing program 1 (id=217):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}})
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xff)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r3, 0x0)
accept$inet6(r3, 0x0, 0x0)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

696.948955ms ago: executing program 2 (id=218):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000500)="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", 0x132)
r1 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xca) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000001800000000000000500000085000000000000001800d2d4000000000000b3d07fd17e9ad2bf00000000000095000000000000000000000000000000e4940b2595a91653dfd07bb6f90000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0xfffe) (async)
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

643.990298ms ago: executing program 0 (id=219):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000280)="c3a64d655b5545f49e1ba64caf0b235f9d11155259d228d2c7edde13dd0dc037c229004af96c5e61503ec459cd461864cdd209b5280a8109492030ed778f29b7d4451e5fbe39df9663a2068e86619e262130e05038686e115c5b569895ccff702f0aa0bee35ab8b2c5b61f73c17af6c2995e5ccc6b6196017afaab789850fbb6dd109931485e5ffc7aa75dd736826877090100d80d0c972ac451186ff75b67ba3af2aade789db62534e587c0c4f9f20e2d8b876cd13ca764c2f4b64dee8a17", 0xbf)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x30)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003400000000004000a80040001"], 0x364}}, 0x0)

557.818173ms ago: executing program 3 (id=220):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) (async)
sendto$inet(r3, 0x0, 0x0, 0x200240d5, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2b0300000000fcdbdf250500000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x24040845}, 0x0) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r1)

483.571782ms ago: executing program 0 (id=221):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0x3, 0x7, 0x9}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={<r3=>r2, 0x9, 0xf, 0x73f, 0x10001, 0x9a}, &(0x7f0000000400)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0xf, 0x2}, &(0x7f0000000200)=0x8)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)

415.844343ms ago: executing program 1 (id=222):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x1b0, 0x310, 0x0, 0x1b0, 0xd0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xff], 'macvlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0xfd}, {0xffffffffffffffff}, {}, 0xf3d9, 0x2}}}, {{@ipv6={@mcast1, @remote, [], [0xff, 0x0, 0x0, 0xff], '\x00', 'dummy0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1, @empty, [0x0, 0x0, 0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1000, 0x6, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x800448d2, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000009, 0x10012, r7, 0xffffe000)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000640)={'lo\x00', 0x2})
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r8, 0x100101)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001fffffeffffffffff000000000a140000001100010000000000000000000100000a"], 0x28}}, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r9, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0)

335.46015ms ago: executing program 2 (id=223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

326.019847ms ago: executing program 0 (id=224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28)

235.95783ms ago: executing program 3 (id=225):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000480))
sendto$packet(0xffffffffffffffff, &(0x7f00000008c0)="48d53699a77a5fcfcc2c51eb2cb2257b3f043f50c113e0f80d1b14a60e55f818960d3f561a950d2d3ca49749529c021a9887f8e2ea94cdf9f90e3da793b216d101c044e05f45472dc90fb63deefc641dda948f82137dd65641dd9ab7cf0e7a642a9b9c2935d1739c020d58862831f1467e32708665d24601d3260a9f73b840e8c99a82820596e74438cba82a9609b0b2f12d5aedc8b015d31a859559", 0x9c, 0x40000, &(0x7f0000000a00)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_IE={0x45, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0x976, "99cd7c5c74ca", @long="5233dbc80d8899c3efc3dcb2e6888ec1"}}, @gcr_ga={0xbd, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000)
sendto$unix(0xffffffffffffffff, &(0x7f0000000c40)="3643f38ea4a08f7617fd87379ec0b1120b4609b0437f8590e238c4a8b7ecf3c95467554f2fe100a63612e9f863fe7ee1f7f4a290f50fc257c2fa780d42964e8d7c880a1a779a861a00015d9a2515e6a1ce6cb4d95104f4bdfe52b72b811b684f494d12d99486613563d4abbf6c93773251362624928411b840e6808e25383d41c1bbf23c79438602ee5691b85cd6ec5719a3a2551499427020077c6a1e9edb8176e6fb9132df6ed914b365142c4c28a01c40f3d5d7cd73e0075d49ada4e8d1f8c78d96e3ba61970bb38fc8c5f93effe6a938", 0xd2, 0x800, &(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e)
accept4$unix(0xffffffffffffffff, &(0x7f0000000dc0), &(0x7f0000000e40)=0x6e, 0x800)
socket$nl_audit(0x10, 0x3, 0x9)
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000002540), 0x80000)
accept4$packet(r2, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000025c0)=0x14, 0x400)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000002600)={0x1f, 0x0, 0x1}, 0x6)

234.697923ms ago: executing program 4 (id=226):
r0 = socket(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
recvfrom(r3, &(0x7f0000000440)=""/4096, 0x1000, 0x162, &(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x1}}, 0x80)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000001540)={'syztnl2\x00', <r5=>0x0, 0x1, 0x700, 0x6, 0x3, {{0x27, 0x4, 0x3, 0xf, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x2, 0xd, "660fb76346fa81de89b627"}]}, @noop, @timestamp_addr={0x44, 0x34, 0xf, 0x1, 0xc, [{@multicast1, 0x31510acf}, {@broadcast, 0xd9c2}, {@empty, 0xff}, {@multicast1, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x5}]}, @noop, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010102, 0x2}, {@multicast2, 0x1}, {@remote, 0x96e}, {@multicast1, 0x70}, {@local, 0x2}]}]}}}}})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x0, 0x1200, 0x2, 0x9020, r4, 0x8, '\x00', r5, r6, 0x3, 0x1, 0x2, 0xb, @value=r4, @void, @void, @value}, 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r7, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1)

121.317175ms ago: executing program 3 (id=227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xf9}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

117.596768ms ago: executing program 1 (id=228):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, r1, 0xa09, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24044894) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @local, @initdev}, &(0x7f00000001c0)=0xc)
r4 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000240)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', <r8=>0x0, 0x80, 0x7, 0xb, 0xdb7, {{0x28, 0x4, 0x2, 0x5, 0xa0, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x9a, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xb26}, {@private=0xa010100, 0x114f}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x6}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x1b, 0x1b, [@loopback, @private=0xa010102, @empty, @broadcast, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xfd, [@empty, @broadcast, @loopback]}, @generic={0x82, 0xf, "bf8576e2941f1e842543f0bd05"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x0, [{@local, 0x3}]}]}}}}}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vxcan0\x00', <r10=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0x2, 0x0, 0x40, 0x46, @mcast2, @remote, 0x10, 0x7800, 0x5, 0x10000}}) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@rand_addr, <r12=>0x0}, &(0x7f00000006c0)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x148, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20}, 0x4080) (async)
r13 = socket$netlink(0x10, 0x3, 0x0) (async)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
r15 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r15, &(0x7f0000000340)={&(0x7f0000000040)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x0) (async)
getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r16, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

39.922938ms ago: executing program 2 (id=229):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x32, @multicast2, 0x4e21, 0xa, 'lc\x00', 0x8, 0xe9, 0x12}, 0x2c)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r2, 0x80044942, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000004ac58f000000000000000000851000000500000085000000bb0000006d0000000000000018000000ffff0000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x32, @multicast2, 0x4e21, 0xa, 'lc\x00', 0x8, 0xe9, 0x12}, 0x2c) (async)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$IMGETDEVINFO(r2, 0x80044942, 0xfffffffffffffffe) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000004ac58f000000000000000000851000000500000085000000bb0000006d0000000000000018000000ffff0000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)

0s ago: executing program 0 (id=230):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r2 = accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x16008100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01ff2bbd7000ffdbdf25040000002000018008000100", @ANYRES32=r1, @ANYBLOB="1400020070696d36726567310000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000080)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x8000004, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9, 0x7fff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x40}]}]}]}}]}, 0x44}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts.
[   72.405134][ T5824] cgroup: Unknown subsys name 'net'
[   72.539868][ T5824] cgroup: Unknown subsys name 'cpuset'
[   72.548424][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   74.091769][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.313033][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.321668][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.329860][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.366643][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.376836][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.386570][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.475005][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.483454][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.491306][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.500372][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.516710][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.524774][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.557756][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.568173][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.575910][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.584862][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.592981][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.603819][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.656816][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.664522][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.674673][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.682965][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.692131][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.699526][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.708398][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.715583][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.725504][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.733040][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.740232][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.748971][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.882037][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   77.048369][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.055879][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.065026][ T5834] bridge_slave_0: entered allmulticast mode
[   77.072239][ T5834] bridge_slave_0: entered promiscuous mode
[   77.122313][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.129828][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.137347][ T5834] bridge_slave_1: entered allmulticast mode
[   77.146276][ T5834] bridge_slave_1: entered promiscuous mode
[   77.238672][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.252606][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.266820][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   77.320787][ T5834] team0: Port device team_slave_0 added
[   77.331735][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   77.343461][ T5834] team0: Port device team_slave_1 added
[   77.395148][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   77.460180][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.467551][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.493612][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.507791][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.514877][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.541164][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.594219][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   77.624764][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.632373][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.639946][ T5841] bridge_slave_0: entered allmulticast mode
[   77.647183][ T5841] bridge_slave_0: entered promiscuous mode
[   77.654860][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.663108][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.670620][ T5839] bridge_slave_0: entered allmulticast mode
[   77.677904][ T5839] bridge_slave_0: entered promiscuous mode
[   77.690309][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.697843][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.705165][ T5839] bridge_slave_1: entered allmulticast mode
[   77.712643][ T5839] bridge_slave_1: entered promiscuous mode
[   77.750571][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.757848][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.765007][ T5841] bridge_slave_1: entered allmulticast mode
[   77.772923][ T5841] bridge_slave_1: entered promiscuous mode
[   77.865855][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.878090][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.904263][ T5834] hsr_slave_0: entered promiscuous mode
[   77.911298][ T5834] hsr_slave_1: entered promiscuous mode
[   77.928747][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.939653][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.958261][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.965444][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.972950][ T5845] bridge_slave_0: entered allmulticast mode
[   77.979927][ T5845] bridge_slave_0: entered promiscuous mode
[   77.987763][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.994901][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.002261][ T5845] bridge_slave_1: entered allmulticast mode
[   78.009235][ T5845] bridge_slave_1: entered promiscuous mode
[   78.063260][ T5839] team0: Port device team_slave_0 added
[   78.121887][ T5841] team0: Port device team_slave_0 added
[   78.130100][ T5839] team0: Port device team_slave_1 added
[   78.138345][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.154859][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.162224][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.170108][ T5849] bridge_slave_0: entered allmulticast mode
[   78.177107][ T5849] bridge_slave_0: entered promiscuous mode
[   78.185284][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.192600][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.200185][ T5849] bridge_slave_1: entered allmulticast mode
[   78.207307][ T5849] bridge_slave_1: entered promiscuous mode
[   78.215310][ T5841] team0: Port device team_slave_1 added
[   78.241375][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.276832][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.283896][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.309952][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.352829][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.360101][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.390630][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.403322][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.410606][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.436793][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.438476][   T54] Bluetooth: hci0: command tx timeout
[   78.472418][ T5845] team0: Port device team_slave_0 added
[   78.481375][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.494030][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.503889][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.511792][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.537908][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.581598][ T5845] team0: Port device team_slave_1 added
[   78.597248][   T54] Bluetooth: hci1: command tx timeout
[   78.626291][ T5839] hsr_slave_0: entered promiscuous mode
[   78.632887][ T5839] hsr_slave_1: entered promiscuous mode
[   78.639800][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.647918][ T5839] Cannot create hsr debugfs directory
[   78.666903][   T54] Bluetooth: hci2: command tx timeout
[   78.676172][ T5849] team0: Port device team_slave_0 added
[   78.688262][ T5849] team0: Port device team_slave_1 added
[   78.713695][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.720882][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.747322][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.767078][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.774069][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.800603][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.814433][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.821749][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.847851][   T54] Bluetooth: hci4: command tx timeout
[   78.853537][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.856654][   T54] Bluetooth: hci3: command tx timeout
[   78.876752][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.884182][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.910804][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.982535][ T5841] hsr_slave_0: entered promiscuous mode
[   78.990043][ T5841] hsr_slave_1: entered promiscuous mode
[   78.996015][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.003879][ T5841] Cannot create hsr debugfs directory
[   79.112950][ T5849] hsr_slave_0: entered promiscuous mode
[   79.119571][ T5849] hsr_slave_1: entered promiscuous mode
[   79.125516][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.133577][ T5849] Cannot create hsr debugfs directory
[   79.166331][ T5845] hsr_slave_0: entered promiscuous mode
[   79.172750][ T5845] hsr_slave_1: entered promiscuous mode
[   79.180242][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.187907][ T5845] Cannot create hsr debugfs directory
[   79.297822][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.310532][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.320039][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.333455][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.482378][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.518940][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.540480][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.552253][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.649876][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.673556][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.684899][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.713441][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.768408][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.808987][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.823353][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.838581][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.853848][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.913038][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.922697][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.934533][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.969321][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.990488][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   80.005842][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.013302][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.062761][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.078869][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.085985][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.151083][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   80.165780][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.172967][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.200233][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.214784][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.222046][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.295361][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   80.310191][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.366070][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.373266][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.382571][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.389732][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.402996][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   80.415688][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.467282][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.495598][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.502826][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.512835][   T54] Bluetooth: hci0: command tx timeout
[   80.554972][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.562202][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.595074][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   80.658079][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.665266][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.678504][   T54] Bluetooth: hci1: command tx timeout
[   80.728234][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.735423][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.748126][   T54] Bluetooth: hci2: command tx timeout
[   80.825702][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   80.839785][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.865160][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.906834][   T54] Bluetooth: hci3: command tx timeout
[   80.908090][ T5848] Bluetooth: hci4: command tx timeout
[   80.925013][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.054009][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.085025][ T5834] veth0_vlan: entered promiscuous mode
[   81.121136][ T5834] veth1_vlan: entered promiscuous mode
[   81.212034][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.290391][ T5834] veth0_macvtap: entered promiscuous mode
[   81.298531][ T5841] veth0_vlan: entered promiscuous mode
[   81.320976][ T5834] veth1_macvtap: entered promiscuous mode
[   81.343549][ T5841] veth1_vlan: entered promiscuous mode
[   81.391526][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.425231][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.445220][ T5841] veth0_macvtap: entered promiscuous mode
[   81.464043][ T5849] veth0_vlan: entered promiscuous mode
[   81.479768][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.488927][ T5841] veth1_macvtap: entered promiscuous mode
[   81.504987][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.514659][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.523797][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.532755][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.564952][ T5849] veth1_vlan: entered promiscuous mode
[   81.609831][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.621166][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.638899][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.689606][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.703475][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.716304][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.739273][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.755456][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.764576][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.773716][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.787558][ T5839] veth0_vlan: entered promiscuous mode
[   81.844660][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.853067][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.867281][ T5849] veth0_macvtap: entered promiscuous mode
[   81.901644][ T5839] veth1_vlan: entered promiscuous mode
[   81.923577][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.932373][ T5849] veth1_macvtap: entered promiscuous mode
[   81.937132][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.965684][ T5845] veth0_vlan: entered promiscuous mode
[   82.012507][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.023852][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.035374][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.046761][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.067521][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.083483][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.085959][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.102778][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.119023][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.122161][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.132501][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.155719][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.167984][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.179090][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.188603][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.197463][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.206189][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.223269][ T5845] veth1_vlan: entered promiscuous mode
[   82.276260][ T5839] veth0_macvtap: entered promiscuous mode
[   82.307215][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.309228][ T5839] veth1_macvtap: entered promiscuous mode
[   82.315085][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.385383][ T5845] veth0_macvtap: entered promiscuous mode
[   82.415246][ T5845] veth1_macvtap: entered promiscuous mode
[   82.432349][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.443794][ T5914] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1'.
[   82.452993][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.453020][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.453039][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.453055][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.453071][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.454458][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.485085][ T5914] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1'.
[   82.537343][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.556564][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.582496][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.597237][ T5848] Bluetooth: hci0: command tx timeout
[   82.612482][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.623964][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.635283][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.647483][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.674592][ T5916] ieee802154 phy0 wpan0: encryption failed: -22
[   82.681649][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.691597][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.700523][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.709335][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.746942][ T5848] Bluetooth: hci1: command tx timeout
[   82.755981][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.781013][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.791456][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.827308][ T5848] Bluetooth: hci2: command tx timeout
[   82.833486][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.878396][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.889156][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.899099][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.910284][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.920223][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.930902][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.943393][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.969217][ T5920] netlink: 'syz.1.7': attribute type 33 has an invalid length.
[   82.979951][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.990870][ T5848] Bluetooth: hci4: command tx timeout
[   82.996595][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.006593][ T5848] Bluetooth: hci3: command tx timeout
[   83.013122][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.023740][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.034041][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.044990][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.055032][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.065621][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.077222][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.113657][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.160898][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.176737][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.189139][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.216527][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.237786][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.252727][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.272917][ T5928] Bluetooth: MGMT ver 1.23
[   83.524200][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.551089][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.625832][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.658415][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.727941][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.735848][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.808081][ T5944] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.822610][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.829009][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'.
[   83.854300][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.235851][ T5959] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   84.277556][ T5959] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5'.
[   84.376757][ T5963] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET)
[   84.667620][ T5848] Bluetooth: hci0: command tx timeout
[   84.828047][ T5848] Bluetooth: hci1: command tx timeout
[   84.906972][ T5848] Bluetooth: hci2: command tx timeout
[   85.067649][ T5848] Bluetooth: hci3: command tx timeout
[   85.067662][   T54] Bluetooth: hci4: command tx timeout
[   85.160698][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   85.198527][ T5984] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[   85.208185][ T5984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24'.
[   85.234698][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'.
[   85.261669][ T5984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24'.
[   85.392625][ T5932] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1
[   85.410255][ T5932] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22
[   85.431896][ T5994] netlink: 88 bytes leftover after parsing attributes in process `syz.3.26'.
[   85.666622][ T6004] openvswitch: netlink: Invalid VLAN frame
[   85.711432][ T6004] veth0: entered promiscuous mode
[   85.725457][ T6003] veth0: left promiscuous mode
[   85.733743][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   85.864943][ T6017] batadv_slave_1: entered promiscuous mode
[   85.898518][ T6018] batadv_slave_1: left promiscuous mode
[   85.944894][ T6017] batadv_slave_1: entered promiscuous mode
[   86.023421][ T6017] batadv_slave_1: left promiscuous mode
[   86.254398][ T6042] netlink: 'syz.3.38': attribute type 8 has an invalid length.
[   86.276051][ T6039] tipc: Started in network mode
[   86.291308][ T6044] Cannot find set identified by id 0 to match
[   86.297799][ T6039] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   86.317222][ T6039] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   86.329881][ T6042] unknown channel width for channel at 909000KHz?
[   86.497779][ T6039] netlink: 'syz.2.37': attribute type 5 has an invalid length.
[   86.564655][ T6051] xt_TCPMSS: Only works on TCP SYN packets
[   86.759282][ T6059] gretap0: entered promiscuous mode
[   86.792169][ T6059] batadv_slave_1: entered promiscuous mode
[   87.097224][ T6077] netlink: 'syz.3.54': attribute type 142 has an invalid length.
[   87.152265][ T6076] geneve2: entered promiscuous mode
[   87.189005][ T6076] geneve2: entered allmulticast mode
[   87.987775][ T6115] __nla_validate_parse: 3 callbacks suppressed
[   87.987797][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.61'.
[   88.071394][ T6116] netlink: 'syz.3.61': attribute type 8 has an invalid length.
[   88.132254][ T6116] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   88.718158][ T6137] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   88.777455][ T6137] bridge0: port 3(team0) entered blocking state
[   88.803826][ T6137] bridge0: port 3(team0) entered disabled state
[   88.831567][ T6137] team0: entered allmulticast mode
[   88.857195][ T6137] team_slave_0: entered allmulticast mode
[   88.876691][ T6137] team_slave_1: entered allmulticast mode
[   88.888243][ T6137] team0: entered promiscuous mode
[   88.905453][ T6137] team_slave_0: entered promiscuous mode
[   88.931489][ T6137] team_slave_1: entered promiscuous mode
[   88.948766][ T6137] bridge0: port 3(team0) entered blocking state
[   88.955375][ T6137] bridge0: port 3(team0) entered forwarding state
[   89.150458][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'.
[   89.204353][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   89.241704][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'.
[   89.254415][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   89.291123][ T6150] netlink: 'syz.1.73': attribute type 11 has an invalid length.
[   89.595186][ T6167] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   89.791163][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'.
[   89.821063][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.80'.
[   90.358959][ T6200] netlink: 'syz.2.85': attribute type 2 has an invalid length.
[   90.384333][ T6200] netlink: 244 bytes leftover after parsing attributes in process `syz.2.85'.
[   90.530985][ T6208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'.
[   90.581066][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'.
[   90.804681][ T6216] dummy0: entered promiscuous mode
[   90.845580][ T6216] macsec1: entered promiscuous mode
[   91.021431][ T6224] Zero length message leads to an empty skb
[   91.146896][ T6228] nbd: must specify at least one socket
[   91.331382][ T6240] syzkaller1: entered promiscuous mode
[   91.366081][ T6240] syzkaller1: entered allmulticast mode
[   92.203151][   T25] cfg80211: failed to load regulatory.db
[   92.516799][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.523021][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   92.726044][ T6289] team0: left allmulticast mode
[   92.757036][ T6289] team_slave_0: left allmulticast mode
[   92.762609][ T6289] team_slave_1: left allmulticast mode
[   92.788040][ T6289] team0: left promiscuous mode
[   92.792893][ T6289] team_slave_0: left promiscuous mode
[   92.800029][ T6289] team_slave_1: left promiscuous mode
[   92.807111][ T6289] bridge0: port 3(team0) entered disabled state
[   92.817890][ T6289] bridge_slave_1: left allmulticast mode
[   92.823781][ T6289] bridge_slave_1: left promiscuous mode
[   92.885009][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.915909][ T6300] openvswitch: netlink: IPv4 tunnel dst address is zero
[   92.932921][ T6289] bridge_slave_0: left allmulticast mode
[   92.939617][ T6289] bridge_slave_0: left promiscuous mode
[   92.957041][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.087606][ T6302] vlan2: entered promiscuous mode
[   93.094789][ T6305] xt_TPROXY: Can be used only with -p tcp or -p udp
[   93.112885][ T6302] bridge0: entered promiscuous mode
[   93.122238][ T6302] vlan2: entered allmulticast mode
[   93.134160][ T6302] bridge0: entered allmulticast mode
[   93.492917][ T6320] __nla_validate_parse: 9 callbacks suppressed
[   93.492940][ T6320] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.129'.
[   93.503976][ T6323] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.573901][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'.
[   93.605187][ T6320] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16)
[   93.611469][ T6323] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   93.625749][ T6320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.643384][ T6323] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   93.662143][ T6323] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   93.677677][ T6323] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   93.708481][ T6323] geneve2: entered promiscuous mode
[   93.723324][ T6323] geneve2: entered allmulticast mode
[   93.736079][ T6323] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   93.747520][ T6323] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   93.766597][ T6323] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   93.786438][ T6323] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   93.813754][ T6336] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   94.025574][ T6340] netlink: 'syz.4.136': attribute type 1 has an invalid length.
[   94.042962][ T6340] netlink: 'syz.4.136': attribute type 1 has an invalid length.
[   94.100919][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'.
[   94.237158][ T6345] Bluetooth: MGMT ver 1.23
[   94.865746][ T6372] xt_CT: You must specify a L4 protocol and not use inversions on it
[   95.713433][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'.
[   95.724045][ T6403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.154'.
[   95.742282][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'.
[   95.752065][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'.
[   96.320343][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'.
[   96.367226][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.163'.
[   96.440934][ T6429] erspan0: entered promiscuous mode
[   96.467689][ T6429] batadv_slave_1: entered promiscuous mode
[   96.497425][ T6429] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   96.580695][ T6429] Cannot create hsr debugfs directory
[   96.665558][ T6443] ebt_among: dst integrity fail: 101
[   96.742375][ T6444] netlink: 216 bytes leftover after parsing attributes in process `syz.2.168'.
[   97.079526][ T6463] Cannot find add_set index 0 as target
[   97.085313][ T6457] Cannot find add_set index 0 as target
[   97.345546][ T6476] veth1_to_team: entered promiscuous mode
[   97.428923][ T6479] netlink: 'syz.4.182': attribute type 10 has an invalid length.
[   97.615664][ T6479] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.972744][   T35] bond0: (slave bond_slave_0): interface is now down
[   97.997031][ T6519] netlink: 'syz.1.191': attribute type 10 has an invalid length.
[   98.004917][   T35] bond0: (slave bond_slave_1): interface is now down
[   98.045118][   T35] bond0: (slave bond_slave_0): interface is now down
[   98.052645][   T35] bond0: (slave bond_slave_1): interface is now down
[   98.116525][ T6519] 8021q: adding VLAN 0 to HW filter on device team0
[   98.125432][ T6519] bond0: (slave team0): Enslaving as an active interface with an up link
[   98.241344][ T6527] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[   98.252050][ T6529] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[   98.462058][ T6545] netlink: 'syz.2.200': attribute type 1 has an invalid length.
[   98.576832][ T6550] __nla_validate_parse: 5 callbacks suppressed
[   98.576851][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'.
[   98.596080][ T6532] syz.4.196 (6532) used greatest stack depth: 19088 bytes left
[   98.684089][ T6558] Illegal XDP return value 4142319643 on prog  (id 38) dev N/A, expect packet loss!
[   98.909342][ T6565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.981106][ T6573] netlink: 'syz.2.209': attribute type 29 has an invalid length.
[   99.027546][ T6573] netlink: 'syz.2.209': attribute type 29 has an invalid length.
[   99.157653][ T1104] wlan1: Trigger new scan to find an IBSS to join
[   99.315826][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'.
[   99.358787][ T6593] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2
[   99.379101][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.216'.
[   99.505001][ T6603] netlink: 668 bytes leftover after parsing attributes in process `syz.0.219'.
[   99.552670][ T6603] netlink: 668 bytes leftover after parsing attributes in process `syz.0.219'.
[   99.716865][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'.
[   99.742302][ T6614] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   99.837260][ T6614] Cannot find map_set index 0 as target
[   99.957642][   T12] bond0: (slave bond_slave_0): interface is now down
[   99.964521][   T12] bond0: (slave bond_slave_1): interface is now down
[  100.128628][ T6630] 
[  100.131012][ T6630] =============================
[  100.135857][ T6630] [ BUG: Invalid wait context ]
[  100.140702][ T6630] 6.13.0-syzkaller-04117-g9e6c4e6b605c #0 Not tainted
[  100.147450][ T6630] -----------------------------
[  100.152285][ T6630] syz.3.227/6630 is trying to lock:
[  100.157484][ T6630] ffffffff8eac25b8 (kernfs_rename_lock){....}-{3:3}, at: kernfs_path_from_node+0x92/0xb00
[  100.167416][ T6630] other info that might help us debug this:
[  100.173290][ T6630] context-{5:5}
[  100.176753][ T6630] 3 locks held by syz.3.227/6630:
[  100.181762][ T6630]  #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  100.191698][ T6630]  #1: ffffffff8e93a3e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540
[  100.201092][ T6630]  #2: ffff88802903d1e0 (&mm->mmap_lock){++++}-{4:4}, at: stack_map_get_build_id_offset+0x431/0x870
[  100.211888][ T6630] stack backtrace:
[  100.215607][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.227 Not tainted 6.13.0-syzkaller-04117-g9e6c4e6b605c #0
[  100.215624][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  100.215636][ T6630] Call Trace:
[  100.215643][ T6630]  <TASK>
[  100.215650][ T6630]  dump_stack_lvl+0x241/0x360
[  100.215675][ T6630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.215696][ T6630]  ? __pfx__printk+0x10/0x10
[  100.215720][ T6630]  __lock_acquire+0x15a8/0x2100
[  100.215746][ T6630]  lock_acquire+0x1ed/0x550
[  100.215763][ T6630]  ? kernfs_path_from_node+0x92/0xb00
[  100.215782][ T6630]  ? mark_lock+0x9a/0x360
[  100.215803][ T6630]  ? __pfx_lock_acquire+0x10/0x10
[  100.215829][ T6630]  _raw_read_lock_irqsave+0xdd/0x130
[  100.215850][ T6630]  ? kernfs_path_from_node+0x92/0xb00
[  100.215868][ T6630]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  100.215890][ T6630]  ? percpu_ref_tryget+0x14/0x180
[  100.215912][ T6630]  kernfs_path_from_node+0x92/0xb00
[  100.215934][ T6630]  ? __pfx_kernfs_path_from_node+0x10/0x10
[  100.215953][ T6630]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  100.215980][ T6630]  ? get_mem_cgroup_from_mm+0x1b2/0x2a0
[  100.216003][ T6630]  get_mm_memcg_path+0x95/0x350
[  100.216024][ T6630]  __mmap_lock_do_trace_acquire_returned+0xfc/0x300
[  100.216044][ T6630]  ? __pfx_lock_acquire+0x10/0x10
[  100.216062][ T6630]  ? __pfx___mmap_lock_do_trace_acquire_returned+0x10/0x10
[  100.216091][ T6630]  ? __pfx_down_read_trylock+0x10/0x10
[  100.216118][ T6630]  stack_map_get_build_id_offset+0x84d/0x870
[  100.216135][ T6630]  ? __pfx_get_perf_callchain+0x10/0x10
[  100.216151][ T6630]  ? __pfx_stack_map_get_build_id_offset+0x10/0x10
[  100.216170][ T6630]  __bpf_get_stack+0x8da/0xad0
[  100.216187][ T6630]  ? __pfx___bpf_get_stack+0x10/0x10
[  100.216200][ T6630]  ? __pfx_lock_acquire+0x10/0x10
[  100.216221][ T6630]  bpf_get_stack+0x33/0x50
[  100.216243][ T6630]  bpf_get_stack_raw_tp+0x1a3/0x240
[  100.216268][ T6630]  ? bpf_trace_run2+0x1fc/0x540
[  100.216281][ T6630]  bpf_prog_ec3b2eefa702d8d3+0x43/0x47
[  100.216298][ T6630]  bpf_trace_run2+0x2ec/0x540
[  100.216314][ T6630]  ? __pfx_bpf_trace_run2+0x10/0x10
[  100.216333][ T6630]  trace_tlb_flush+0x11c/0x140
[  100.216353][ T6630]  switch_mm_irqs_off+0x77a/0xa70
[  100.216372][ T6630]  ? psi_task_switch+0x387/0x7a0
[  100.216387][ T6630]  ? __pfx_switch_mm_irqs_off+0x10/0x10
[  100.216410][ T6630]  __schedule+0x10f2/0x4be0
[  100.216439][ T6630]  ? __pfx___schedule+0x10/0x10
[  100.216465][ T6630]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  100.216484][ T6630]  ? preempt_schedule+0xe1/0xf0
[  100.216512][ T6630]  preempt_schedule_common+0x84/0xd0
[  100.216534][ T6630]  preempt_schedule+0xe1/0xf0
[  100.216554][ T6630]  ? __pfx_preempt_schedule+0x10/0x10
[  100.216575][ T6630]  ? lockdep_hardirqs_on+0x99/0x150
[  100.216597][ T6630]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  100.216617][ T6630]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.216638][ T6630]  preempt_schedule_thunk+0x1a/0x30
[  100.216658][ T6630]  try_to_wake_up+0x9c3/0x1470
[  100.216681][ T6630]  ? __pfx_try_to_wake_up+0x10/0x10
[  100.216701][ T6630]  ? __pfx_lock_release+0x10/0x10
[  100.216719][ T6630]  ? plist_del+0x3f1/0x410
[  100.216739][ T6630]  ? do_raw_spin_unlock+0x13c/0x8b0
[  100.216756][ T6630]  wake_up_q+0xc8/0x120
[  100.216771][ T6630]  futex_wake+0x523/0x5c0
[  100.216793][ T6630]  ? __pfx_futex_wake+0x10/0x10
[  100.216816][ T6630]  do_futex+0x392/0x560
[  100.216830][ T6630]  ? bpf_raw_tracepoint_open+0x18b/0x1f0
[  100.216850][ T6630]  ? __pfx_do_futex+0x10/0x10
[  100.216865][ T6630]  ? __pfx___sys_bpf+0x10/0x10
[  100.216882][ T6630]  __se_sys_futex+0x3f9/0x480
[  100.216900][ T6630]  ? __pfx___se_sys_futex+0x10/0x10
[  100.216915][ T6630]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  100.216934][ T6630]  ? do_syscall_64+0x100/0x230
[  100.216949][ T6630]  ? __x64_sys_futex+0x21/0xf0
[  100.216971][ T6630]  do_syscall_64+0xf3/0x230
[  100.216985][ T6630]  ? clear_bhb_loop+0x35/0x90
[  100.217003][ T6630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.217022][ T6630] RIP: 0033:0x7ff584f8cda9
[  100.217033][ T6630] Code: Unable to access opcode bytes at 0x7ff584f8cd7f.
[  100.217040][ T6630] RSP: 002b:00007ff585e500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  100.217055][ T6630] RAX: ffffffffffffffda RBX: 00007ff5851a5fa8 RCX: 00007ff584f8cda9
[  100.217066][ T6630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5851a5fac
[  100.217075][ T6630] RBP: 00007ff5851a5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  100.217085][ T6630] R10: 0000000000000007 R11: 0000000000000246 R12: 00007ff5851a5fac
[  100.217093][ T6630] R13: 0000000000000000 R14: 00007ffe9903ba70 R15: 00007ffe9903bb58
[  100.217109][ T6630]  </TASK>
[  100.219017][ T6633] netlink: 'syz.2.229': attribute type 18 has an invalid length.
[  100.402698][ T6637] netlink: 'syz.2.229': attribute type 18 has an invalid length.
[  100.410419][ T6633] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.686905][ T6633] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.695826][ T6633] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.704922][ T6633] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.726029][ T6637] base_sock_release(ffff888049d1b000) sk=ffff888064275000
[  101.866546][ T1032] bond0: (slave team0): interface is now down
[  101.872921][ T1032] bond0: now running without any active interface!
[  102.187461][   T58] wlan1: Trigger new scan to find an IBSS to join
[  105.226562][ T1104] wlan1: Trigger new scan to find an IBSS to join
[  106.126829][ T3434] wlan1: Creating new IBSS network, BSSID 7a:0a:30:47:b2:ec