last executing test programs:

3.21009099s ago: executing program 1 (id=348):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2dc, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x2c8, 0x1, [@m_skbmod={0xe8, 0x1f, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x8}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x788, 0x5, 0x10001, 0x1}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="6d9a0cc86b77"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x138, 0x11, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x102, 0x6, "2d3226d2e3c57ead557080202f648bcdfe78417bc2116e51a2e0cec3ecc283dc8d7821b2facbf465d9f7be2aa1e8f71e4d6e3358561c91cc59b3e412fff5eebfc75d3f6b2f7b38f6c6ae34cb709f2cc9bcc18fdc130c26ecec8584ee187dd61ac669e1360f3594d45ae4e3bad23daf0d6783c18c59c8c9e2fcbd90d335bc50b9fe7f8bc3d0041c343f964816c387c2b856c8dc4b06bf7a3fe6e0fb860738eb6bfbd18b07588e329e421012b28551f9c1267b24f31285115c4986075bc929c62ad791236fd2c769aa297fe40da014506d861bfbd51a5e408d3a670759313c72590c4d78459ca7243d0539e14a26d7f08a6523777b2ca84a894c6e3c4b19b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x54, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x2a, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db257bc0277a998c2a2037a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x50, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x48c7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x2dc}}, 0x0) (async)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast}, [@default, @bcast, @rose, @bcast, @bcast, @netrom, @default, @rose]}, &(0x7f0000000100)=0x48, 0x80000) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9320000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="050041b6"], 0x44}}, 0x20000000) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x68, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0xd}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "868de8f9804c487b379f6af8d46083a8775e5a062b78ac49"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20002004}, 0x0) (async)
connect$ax25(r0, &(0x7f0000000540)={{0x3, @null, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 64)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (rerun: 64)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000000000)=""/130, &(0x7f00000000c0)=0x82)

2.967396072s ago: executing program 1 (id=352):
socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080800000b0000000000021e000008000c01d900000005003d00fd"], 0x24}, 0x1, 0x0, 0x0, 0x7}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)

2.250171588s ago: executing program 1 (id=362):
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040), 0x0)
r1 = socket(0x11, 0x800000003, 0x1000000)
r2 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_PARMS={0x14, 0x1, {0xfffffffe, 0x84, 0x9, 0xd, 0x9, 0x8, 0x8}}]}}]}, 0x150}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="5800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00400000000000001400030064756d6d7930000000000000000000000500210001"], 0x58}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x78, r6, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x0, 0x0, {0x460e6d6b, 0x0, 0x0, 0x3be, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400}}, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x78}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3636db3a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]]}, 0x24}}, 0x40)

1.972049528s ago: executing program 1 (id=366):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/143, 0x8f, 0x4, &(0x7f0000000200)=@ll={0x11, 0x10, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
socket$nl_sock_diag(0x10, 0x3, 0x4)

1.970824186s ago: executing program 2 (id=367):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe39}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@alu={0x4, 0x1, 0x6, 0x4, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x7b, &(0x7f00000005c0)=""/123, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xb, 0x3, 0x9d}, 0x10, 0x17d2f, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x5, 0x5, 0x0, 0x8}], 0x10, 0x5, @void, @value}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r5, r6, 0x4, r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14}}}, 0x30}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x24, r9, 0x70d, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac0000000081010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001672dfb555824f2823cc7527cc8457f013c867cc33bb9c5a55fdd7e189934da3734572268"], 0xac}}, 0x0)

1.802834224s ago: executing program 0 (id=369):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) (async)
sendto$unix(r1, &(0x7f00000004c0)="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", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.662215428s ago: executing program 0 (id=370):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, &(0x7f0000000000)=""/48}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x4}, 0x8) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x4}, 0x8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@loopback, @private=0xa010102, 0x1, 0x2f7b}, 0x10)
syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0)

1.553265594s ago: executing program 4 (id=371):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x218, 0x238, 0x238, 0x218, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000000c00078008000640"], 0x58}}, 0x0)

1.495853521s ago: executing program 0 (id=372):
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0)
r3 = epoll_create1(0x0)
close(r3) (async)
write$cgroup_subtree(r2, 0x0, 0xfe33) (async)
write$cgroup_subtree(r2, &(0x7f0000003100)=ANY=[], 0x10448) (async)
read(r0, &(0x7f0000000000)=""/122, 0x7a)

1.386074855s ago: executing program 4 (id=373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0xffffffffffffffd8, &(0x7f0000001740)=[{&(0x7f0000000280)=' ', 0x1}], 0x1}, 0x8000)
recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x22)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000100))
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r9, 0x0)
mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r9, 0x0)
mmap(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x13, r9, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x21013, r11, 0xdd8f7000)
write(r6, &(0x7f00000000c0)="510003000000", 0x6)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)

1.38392067s ago: executing program 2 (id=374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40000)

1.378092994s ago: executing program 3 (id=375):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) (async)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) (async)
r6 = socket$rds(0x15, 0x5, 0x0)
sendmsg$sock(r6, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r8, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async)
connect$inet(r11, &(0x7f0000000080)={0x2, 0x2, @broadcast}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xf, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000000000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.275295516s ago: executing program 0 (id=376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvfrom(r3, &(0x7f0000000080)=""/60, 0x3c, 0x0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x4, 0x1, 0x1, 0x1}}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async)
recvfrom(r3, &(0x7f0000000080)=""/60, 0x3c, 0x0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x4, 0x1, 0x1, 0x1}}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async)

1.224483372s ago: executing program 2 (id=377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
recvfrom$x25(r3, 0x0, 0x0, 0x40, 0x0, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@broadcast, @local}, &(0x7f0000000080)=0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3bc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x0, 0xe1f, 0x6, 0x0, 0x5, 0x8f3, 0xfffa]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x8440)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0748670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.130365446s ago: executing program 4 (id=378):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000d238000000000000000000003fd31340e92c4bb89b14a86028586a071aeed1e89fb978e51f8c1ebadc76b4bb16b06dd2516b148e58fcb495e576a92dc653591b0e"], 0x48}, 0x300, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000340008803000bf008024000100f44da367a88ee6564f020211456727082f5ceb0b8c1bf5eb7337341b459b39220800030004000000140002007767320200"/86], 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x300, 0x0, 0x0, 0x8000}, 0x0)

1.124778494s ago: executing program 3 (id=379):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000c3ac755dd8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae58d305ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.028120797s ago: executing program 1 (id=380):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r0, 0x8b20, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xff)

986.415753ms ago: executing program 2 (id=381):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x13)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @local}, 0x10) (async)
setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f00000005c0)={r2, 0x1, 0x6, @local}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xfffffffc}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4000000}, 0x0)

882.292674ms ago: executing program 3 (id=382):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xa4, r4, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xb}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r0}, 0x10)
r5 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

817.590131ms ago: executing program 0 (id=383):
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x6) (async)
r1 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmmsg$inet6(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@flowinfo={{0x11}}, @flowinfo={{0x14}}], 0x30}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r8=>0x0})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, 0x0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, 0x0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x3000000}, 0x0) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x3000000}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r5)
sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r10, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r11, 0x0, 0xc)
write(r10, &(0x7f0000000040)="05000000010097", 0x7)
syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c)

746.864393ms ago: executing program 4 (id=384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r5, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, "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"}}, 0xfce)
ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xe)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="080001000000000008000200e0000002080009000e00000008000100ac1414"], 0x54}}, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x2, {0x0, 0x0, 0x1}, 0xfe}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r13=>0x0})
r14 = socket(0x1d, 0x2, 0x6)
recvfrom$packet(r14, 0x0, 0x0, 0x4001, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048000}, 0x4804)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r15, 0x1, 0x0, 0x0, {0x35}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)

674.034779ms ago: executing program 3 (id=385):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000040)={&(0x7f0000000540)=""/236, 0xec, <r3=>0x0, &(0x7f0000000640)=""/75, 0x4b}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x726, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000380)={0xd, 0x0, 0xb, 0x7, 0x401})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000040)={&(0x7f0000000540)=""/236, 0xec, 0x0, &(0x7f0000000640)=""/75, 0x4b}}, 0x10) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x726, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000380)={0xd, 0x0, 0xb, 0x7, 0x401}) (async)

523.296518ms ago: executing program 1 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)

520.555078ms ago: executing program 0 (id=387):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003500)={0xe0, 0x13, 0x1, 0x0, 0x0, "", [@generic="d8f00d2c09a739aaf9a450f21dd3ab4b0551f902cbf669a2e5ac6b1a5317c2d9532d75ff4393c8de5aed294ee89cd85a07ecb834de0e49d5bb9ff633e6425c1ba3849a0e10f972e2f4d18aabb3175c574e59c6419f3b9f60f7779c868d9c7b400f20c00ca51b4c9e29f97a9bdd9620d71a84a46d52dd3dc1661e478c9a1934d5e0cdd5f2c9076e879ddca6639824c343424bd884dc991f14b5b58ce35b1699bd64dd4e7e4e5cde2ff49723c8624f33298c16cf9d4c41b9e61c8416bd52700661880e486563693121216e05c62f"]}, 0xe0}], 0x1, 0x0, 0x0, 0xc848}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(&(0x7f0000001240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendfile(r3, r2, 0x0, 0x24)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x3, 0x2f, 0x1, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1}, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x4fb0eb87ac8c2398, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x10001, 0x488d}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440), &(0x7f0000000480)=[{0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0xe, 0x5}], 0x10, 0x8, @void, @value}, 0x94)

456.549446ms ago: executing program 3 (id=388):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x300, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x85)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400018ffff100007800c00028008000140ac1414aa040008"], 0x78}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c00098006000600800a000004"], 0x528}}, 0xc000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x2, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4044040)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @enum, @int]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x14, r9, 0x926fdb2c68a18847, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2)

277.800007ms ago: executing program 2 (id=389):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0xe, 0x0, &(0x7f0000000040))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r3}, 0x20)
ppoll(&(0x7f00000000c0)=[{r3, 0x9004}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10d, 0x2, &(0x7f0000000040), 0xf15e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c0000002a000b0000000000000000fd07000000040003000c0001800600000088480000080002"], 0x2c}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
sendmsg$alg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000040)="23721f6568d62efe0d332e3d880d88dd", 0x10}], 0x1, &(0x7f0000000ec0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x498, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_USERDATA={0xb8, 0xd, 0x1, 0x0, "7b7d751afc1705637d95f3ab2348b01894645927dc3fef9d9e0fd73fc7f74c47d76d04f96280dc7972b4c0890cb329dfc110128dddf19746adae7456f91ba704325b7f7f4df2ab6f1648ee4dd96f7873d29e505ff632e9ba3e9127a29a8ca1746deb0cdd93a4bc86a3b9570af5e19cacb13b1b1a887ac87c353ac3b69fa2336e9a41534f2763e81efebfc66b7db0e4db425fc7f7b4abfd7543389b395bff6137088b3a60f890a9894c4cf401c1bc3479da3331d9"}, @NFTA_SET_DESC={0x3a8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x240000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d2e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_CONCAT={0x190, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x779}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x26f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfadc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5fd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x51b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe50}, @NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85e4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}]}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x160, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x99, 0x8, "4c955f5b6a00173bcbe74d56b8a439af557dddf2952df1229c1f234a73c5f32c3e2dcf0ce84d4fc31802b354ac392bfac9aa188a00581abf2d59f416be6b105b29fc4847092683964421e35ccfa21959ad30e72b65dfe7a6a7d64c7c4e348fc06b314cc0288ab77810ecc802e43f58b8a827e6ed2a2c24c128d62ab111de7b828b4fa390b13b3d0eee94dda31171ee89ee8b8113a5"}, @NFTA_OBJ_USERDATA={0x86, 0x8, "fd12d39ac08b29a1c472b469c59208a52da2c05313ed7aa0919867d7bd0baac765c93272dace7d7584e5b10117ca306f143613b7d783412e3bbe633e723803c2f8f0e7073b5bf5758f05ecae3e13457e491b7bba8719de4aaa7632c524be51fca14e4817104094ffd48f58036b8dee5c7023bd720e6d8dde728be1962a832d98cadf"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x703, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x66c}, 0x1, 0x0, 0x0, 0x24040810}, 0x4000085)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6d)

249.168089ms ago: executing program 4 (id=390):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002600)=<r1=>0x0)
syz_open_procfs$namespace(r1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r9=>0x0})
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r11 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c00300002400000227bd7000fbdbdf25110000004f01fb8004000780040056801400af002001000000000000000000000000000208002200ac1414aa9545293acd1587b355309bf13aba9730369ae1fb07c595fd051646ba4ea1fb51d2b128c50a9205c4b007c060b4bc5e0989107672b039461b95ba989260f71650973446d4643f8cc6a933e9d1efa142bf3c386bdf2bccc160aa8db9f0dd3eb065d0b13170cab5a08fb81e0fd8fd0fdf9d39afaa3785ea115acf3df28cbec53649befc25142740a64ba733de6d475b09594b34cc22822f30a9c673e4dd2c7809589a2220c98ad782fbeb6b1f71f161e1d5a096acbe55f1f6c4df4f38d1807612e4f4e7db948d08000800", @ANYRES32=r1, @ANYBLOB="04000e80ff12f5ddb37c962ec059948cba31ecca2817df12bfab4ab0159d035343c5d6795937d9dd5abcf5e970e1ada07cb39d5b90a67667a63c06d1d2161524ac596c5e6623e602b739437bc34ff749a698ebbe628e13f39d8400b900178005000b0000000000384542a1041b2a56b0349893e4bdb5dc8f59814be2e27f72a724030800d000", @ANYRES32=r2, @ANYBLOB="15000000", @ANYRES32=r3, @ANYBLOB='\b\x00-\x00', @ANYRES32=r11, @ANYBLOB="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"], 0x3c0}}, 0x15)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e20, 0x801, @mcast1, 0x7}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r13, 0x29, 0x37, 0x0, 0x0)
connect$pppl2tp(r12, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}}}, 0x32)
writev(r12, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
sendto$inet6(r13, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4)
r14 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095", @ANYRESDEC=0x0, @ANYRESOCT=r14, @ANYRES8=r14, @ANYRESOCT=r14, @ANYBLOB="f17428eb222c9f8a4f6c5193417344d63d876215daddd57f6e9b3067056f65e3036188cbbf4dbf6df358c991d5a6894add6896743f5f88c46583b1689767747a40553ec0af77d5a3f7982e924dca8196cb82e0f407dee72fcdd82c9be214d70f1964fb471546adc19abf670fbe06bf3f71e85caec07c9866070df8864b36a16744033420ef7cc9b9b1fcaca7b91250b942d77a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

86.171935ms ago: executing program 4 (id=391):
syz_80211_inject_frame(0x0, 0x0, 0x262)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x800)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x1, 0x9, 0x0, 0x7}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00ebff6800e9780000000c000000000a000300000000000400e273"], 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)

2.231798ms ago: executing program 2 (id=392):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="080000a8f182d17e40585ab2860000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%pi6   \x00'}, 0x20) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200001e, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x18, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x1, 0x0, 0x3, 0xa, 0x5, 0xc, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query], &(0x7f0000000300)='GPL\x00', 0x4, 0xe, &(0x7f0000000340)=""/14, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sysctl, r3, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, 0x0, &(0x7f00000003c0)=[{0x5, 0x1, 0x9, 0x4}], 0x10, 0x4, @void, @value}, 0x94) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) (async)
r6 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000000)={0x1}) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'wg2\x00', <r8=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)

0s ago: executing program 3 (id=393):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000000f6ffffdfffffffff008f00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000880)=0x3, 0x12)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts.
[   74.068178][ T5820] cgroup: Unknown subsys name 'net'
[   74.218265][ T5820] cgroup: Unknown subsys name 'cpuset'
[   74.226572][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.753117][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.418485][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.424898][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.435636][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.438430][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.443203][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.451640][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.457779][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.466906][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.472768][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.485903][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.493553][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.495214][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.508419][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.516390][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.526587][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.534370][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.534796][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.549044][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   79.556487][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.566165][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.570200][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   79.574469][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   79.587979][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.595664][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.598021][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.610118][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.618685][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.626395][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.633656][   T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.642415][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.989744][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   80.064709][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   80.217870][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   80.233532][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.241181][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.249340][ T5831] bridge_slave_0: entered allmulticast mode
[   80.256104][ T5831] bridge_slave_0: entered promiscuous mode
[   80.297770][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.304896][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.312371][ T5831] bridge_slave_1: entered allmulticast mode
[   80.319160][ T5831] bridge_slave_1: entered promiscuous mode
[   80.348761][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   80.392381][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.404533][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.450457][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.459337][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.467103][ T5841] bridge_slave_0: entered allmulticast mode
[   80.473844][ T5841] bridge_slave_0: entered promiscuous mode
[   80.481068][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   80.517838][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.524984][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.533195][ T5841] bridge_slave_1: entered allmulticast mode
[   80.540244][ T5841] bridge_slave_1: entered promiscuous mode
[   80.564118][ T5831] team0: Port device team_slave_0 added
[   80.600130][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.607864][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.615389][ T5830] bridge_slave_0: entered allmulticast mode
[   80.622361][ T5830] bridge_slave_0: entered promiscuous mode
[   80.631371][ T5831] team0: Port device team_slave_1 added
[   80.652458][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.666168][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.683450][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.690944][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.698397][ T5830] bridge_slave_1: entered allmulticast mode
[   80.705138][ T5830] bridge_slave_1: entered promiscuous mode
[   80.757906][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.764888][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.795189][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.826663][ T5841] team0: Port device team_slave_0 added
[   80.838867][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.848502][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.858724][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.885421][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.908956][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.916405][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.923622][ T5836] bridge_slave_0: entered allmulticast mode
[   80.931336][ T5836] bridge_slave_0: entered promiscuous mode
[   80.940277][ T5841] team0: Port device team_slave_1 added
[   80.963054][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.978287][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.987446][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.994584][ T5836] bridge_slave_1: entered allmulticast mode
[   81.002023][ T5836] bridge_slave_1: entered promiscuous mode
[   81.024893][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.032169][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.039919][ T5833] bridge_slave_0: entered allmulticast mode
[   81.047483][ T5833] bridge_slave_0: entered promiscuous mode
[   81.073936][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.082604][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.109064][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.120542][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.128753][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.136839][ T5833] bridge_slave_1: entered allmulticast mode
[   81.143886][ T5833] bridge_slave_1: entered promiscuous mode
[   81.163961][ T5830] team0: Port device team_slave_0 added
[   81.179550][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.186596][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.213724][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.252101][ T5830] team0: Port device team_slave_1 added
[   81.271473][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.284135][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.301025][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.312850][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.376180][ T5831] hsr_slave_0: entered promiscuous mode
[   81.382515][ T5831] hsr_slave_1: entered promiscuous mode
[   81.390606][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.401381][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.427895][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.441926][ T5836] team0: Port device team_slave_0 added
[   81.463473][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.472366][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.498551][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.511828][ T5836] team0: Port device team_slave_1 added
[   81.534568][ T5841] hsr_slave_0: entered promiscuous mode
[   81.541012][ T5841] hsr_slave_1: entered promiscuous mode
[   81.547385][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.555429][ T5841] Cannot create hsr debugfs directory
[   81.563414][ T5833] team0: Port device team_slave_0 added
[   81.597043][ T5833] team0: Port device team_slave_1 added
[   81.603919][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.611124][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.618501][ T5840] Bluetooth: hci4: command tx timeout
[   81.637190][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.639482][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.660904][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.687110][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.687216][ T5840] Bluetooth: hci2: command tx timeout
[   81.697785][ T5147] Bluetooth: hci1: command tx timeout
[   81.698148][ T5147] Bluetooth: hci0: command tx timeout
[   81.698342][ T5147] Bluetooth: hci3: command tx timeout
[   81.763802][ T5830] hsr_slave_0: entered promiscuous mode
[   81.770377][ T5830] hsr_slave_1: entered promiscuous mode
[   81.776992][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.784576][ T5830] Cannot create hsr debugfs directory
[   81.807752][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.814732][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.840782][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.894694][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.908319][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.943726][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.054111][ T5836] hsr_slave_0: entered promiscuous mode
[   82.060846][ T5836] hsr_slave_1: entered promiscuous mode
[   82.068253][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.076278][ T5836] Cannot create hsr debugfs directory
[   82.195502][ T5833] hsr_slave_0: entered promiscuous mode
[   82.202084][ T5833] hsr_slave_1: entered promiscuous mode
[   82.211585][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.219631][ T5833] Cannot create hsr debugfs directory
[   82.524722][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.539384][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.549931][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.568865][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.607886][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.618486][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.629131][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.643833][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.694002][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.704931][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.722706][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.752695][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.798213][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.832316][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.842864][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.864813][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.914102][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.949824][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.980368][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.004742][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.020171][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.072531][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   83.088541][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.110156][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.117546][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.138272][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.145553][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.190543][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   83.201710][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.248224][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   83.272373][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.279604][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.303373][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.310623][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.342953][ T3498] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.350137][ T3498] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.370221][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.377398][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.408721][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.477762][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.488969][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.534807][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   83.567737][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.574943][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.615081][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.622751][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.686686][ T5147] Bluetooth: hci4: command tx timeout
[   83.730095][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.775659][ T5147] Bluetooth: hci3: command tx timeout
[   83.781149][ T5147] Bluetooth: hci2: command tx timeout
[   83.787436][ T5840] Bluetooth: hci1: command tx timeout
[   83.793358][ T5840] Bluetooth: hci0: command tx timeout
[   83.829398][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.859538][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.912915][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   83.943468][ T5831] veth0_vlan: entered promiscuous mode
[   83.977825][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.985083][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.000061][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.007243][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.037650][ T5831] veth1_vlan: entered promiscuous mode
[   84.071708][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.110293][ T5841] veth0_vlan: entered promiscuous mode
[   84.178755][ T5831] veth0_macvtap: entered promiscuous mode
[   84.187566][ T5841] veth1_vlan: entered promiscuous mode
[   84.213941][ T5831] veth1_macvtap: entered promiscuous mode
[   84.273382][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.303563][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.350464][ T5841] veth0_macvtap: entered promiscuous mode
[   84.393751][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.421460][ T5841] veth1_macvtap: entered promiscuous mode
[   84.438710][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.448816][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.458663][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.468119][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.513590][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.551770][ T5836] veth0_vlan: entered promiscuous mode
[   84.588741][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.607862][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.621260][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.633770][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.644795][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.656753][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.667361][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.679830][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.689061][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.698134][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.722894][ T5830] veth0_vlan: entered promiscuous mode
[   84.735836][ T5836] veth1_vlan: entered promiscuous mode
[   84.793603][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.817435][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.822073][ T5830] veth1_vlan: entered promiscuous mode
[   84.853891][ T5836] veth0_macvtap: entered promiscuous mode
[   84.864319][ T5833] veth0_vlan: entered promiscuous mode
[   84.877245][ T5833] veth1_vlan: entered promiscuous mode
[   84.891793][ T5836] veth1_macvtap: entered promiscuous mode
[   84.949332][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.960410][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.969156][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.969193][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.002755][ T5830] veth0_macvtap: entered promiscuous mode
[   85.023893][ T5830] veth1_macvtap: entered promiscuous mode
[   85.044384][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.066233][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.076958][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.087841][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.100148][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.120005][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.132666][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.147442][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.158871][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.163192][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.176518][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.188017][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.197962][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.209593][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.221825][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.243001][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.259699][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.270127][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.282337][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.294209][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.308673][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.317858][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.327839][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.338245][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.361923][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.395917][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.416084][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.440601][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.451303][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.462044][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.473284][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.496931][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.507454][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.524723][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.534137][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.608428][ T5833] veth0_macvtap: entered promiscuous mode
[   85.777628][ T5840] Bluetooth: hci4: command tx timeout
[   85.818581][ T5833] veth1_macvtap: entered promiscuous mode
[   85.846033][ T5840] Bluetooth: hci0: command tx timeout
[   85.851500][ T5840] Bluetooth: hci2: command tx timeout
[   85.855295][ T5853] Bluetooth: hci1: command tx timeout
[   85.857167][ T5147] Bluetooth: hci3: command tx timeout
[   85.972702][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.991442][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.001811][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.014462][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.024574][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.035252][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.045437][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.056551][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.068217][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.091412][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.108138][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.139823][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.177888][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.191548][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.212419][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.222599][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.244167][ T5942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9'.
[   86.255315][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.266638][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.278041][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.297405][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.320696][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.330227][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.363063][ T5940] netlink: 'syz.1.9': attribute type 39 has an invalid length.
[   86.395561][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.403524][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.428481][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.443245][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.453670][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.464322][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.479004][ T5940] veth0_macvtap: left promiscuous mode
[   86.512603][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.524806][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.704354][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.765730][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.849973][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.868544][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.954650][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   86.978994][   T25] cfg80211: failed to load regulatory.db
[   87.073949][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'.
[   87.180602][    C1] Unknown status report in ack skb
[   87.459775][ T5980] Zero length message leads to an empty skb
[   87.492975][ T5980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'.
[   87.748978][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'.
[   87.847941][ T5147] Bluetooth: hci4: command tx timeout
[   87.923366][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20'.
[   87.932382][ T5147] Bluetooth: hci1: command tx timeout
[   87.932428][ T5147] Bluetooth: hci0: command tx timeout
[   87.942646][ T5840] Bluetooth: hci3: command tx timeout
[   87.949481][ T5840] Bluetooth: hci2: command tx timeout
[   88.041136][ T6002] raw_sendmsg: syz.4.20 forgot to set AF_INET. Fix it!
[   88.071022][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20'.
[   88.121017][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'.
[   88.211115][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'.
[   88.273404][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.293759][ T6017] netlink: 'syz.3.25': attribute type 10 has an invalid length.
[   88.412012][ T6017] geneve0: entered promiscuous mode
[   88.429272][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'.
[   88.434906][ T5956] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12'.
[   88.456520][ T6013] syz.0.23 (6013) used greatest stack depth: 19056 bytes left
[   88.674954][ T6028] openvswitch: netlink: Missing key (keys=40, expected=100)
[   88.944718][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.422978][ T6060] netlink: 'syz.3.40': attribute type 1 has an invalid length.
[   89.643216][ T6066] netlink: 'syz.3.43': attribute type 8 has an invalid length.
[   89.703239][ T6069] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   90.451690][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.944633][ T6126] netlink: 'syz.4.60': attribute type 1 has an invalid length.
[   90.985594][ T6126] netlink: 'syz.4.60': attribute type 1 has an invalid length.
[   91.006694][ T6129] Bluetooth: MGMT ver 1.23
[   91.030190][ T6129] warning: `syz.0.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.137130][ T6135] veth0: entered promiscuous mode
[   91.167103][ T6133] veth0: left promiscuous mode
[   91.436252][ T6147] __nla_validate_parse: 5 callbacks suppressed
[   91.436272][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'.
[   91.570149][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.597253][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.604661][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.629919][ T6155] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.654909][ T6161] netlink: 'syz.2.72': attribute type 2 has an invalid length.
[   91.677455][ T6155] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.687412][ T6161] netlink: 244 bytes leftover after parsing attributes in process `syz.2.72'.
[   91.752881][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.791369][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.838665][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.847806][ T6155] wlan0 speed is unknown, defaulting to 1000
[   91.886352][ T6155] wlan0 speed is unknown, defaulting to 1000
[   92.517835][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'.
[   92.546167][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'.
[   92.847372][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.92'.
[   93.014128][ T6216] netlink: 56 bytes leftover after parsing attributes in process `syz.2.93'.
[   93.061584][ T6218] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   93.069852][ T6218] netlink: 228 bytes leftover after parsing attributes in process `syz.0.94'.
[   93.083319][ T6218] netlink: 11 bytes leftover after parsing attributes in process `syz.0.94'.
[   93.118565][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   93.158636][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'.
[   93.814620][ T6254] bridge_slave_0: left allmulticast mode
[   93.823314][ T6254] bridge_slave_0: left promiscuous mode
[   93.841074][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.903707][ T6254] bridge_slave_1: left allmulticast mode
[   93.909617][ T6254] bridge_slave_1: left promiscuous mode
[   93.918805][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.951672][ T6254] bond0: (slave bond_slave_0): Releasing backup interface
[   93.963474][ T6254] bond0: (slave bond_slave_1): Releasing backup interface
[   94.009849][ T6254] team0: Port device team_slave_0 removed
[   94.042095][ T6254] team0: Port device team_slave_1 removed
[   94.051031][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.063130][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.074518][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.093588][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.758399][ T6282] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   95.208337][ T6295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.615895][ T6318] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET)
[   95.792760][ T6335] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   95.883348][ T6335] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   95.947154][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.052311][ T6347] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[   96.162566][ T6347] syzkaller1: entered promiscuous mode
[   96.203252][ T6347] syzkaller1: entered allmulticast mode
[   96.250157][ T6347] vlan2: entered promiscuous mode
[   96.277478][ T6347] bond1: (slave vlan2): Opening slave failed
[   96.516688][ T6368] pimreg: entered allmulticast mode
[   96.535010][ T6370] pimreg: left allmulticast mode
[   96.708378][ T6378] __nla_validate_parse: 41 callbacks suppressed
[   96.708398][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   96.772029][ T6382] C: renamed from lo (while UP)
[   96.793372][ T6382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   96.999757][ T6397] netdevsim netdevsim2: Direct firmware load for .
[   96.999757][ T6397]  failed with error -2
[   97.017828][ T6397] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   97.017828][ T6397] 
[   97.687186][ T6425] bridge0: port 3(ipvlan2) entered blocking state
[   97.715139][ T6425] bridge0: port 3(ipvlan2) entered disabled state
[   97.732128][ T6425] ipvlan2: entered allmulticast mode
[   97.748403][ T6425] bridge0: entered allmulticast mode
[   97.770195][ T6425] ipvlan2: left allmulticast mode
[   97.815186][ T6425] bridge0: left allmulticast mode
[   98.003262][ T6440] unsupported nlmsg_type 40
[   98.043426][ T6443] netlink: 5 bytes leftover after parsing attributes in process `syz.4.162'.
[   98.344787][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'.
[   98.395265][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'.
[   98.417349][ T6455] netlink: 'syz.3.165': attribute type 7 has an invalid length.
[   98.581703][ T6470] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   98.616472][ T6474] bridge1: entered promiscuous mode
[   98.621739][ T6474] bridge1: entered allmulticast mode
[   98.632912][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   98.670258][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'.
[   98.677235][ T6474] team0: Port device bridge1 added
[   98.683428][ T6479] netlink: 72 bytes leftover after parsing attributes in process `syz.3.174'.
[   98.943174][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.178'.
[   99.448050][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'.
[  100.082179][ T6553] netlink: 23 bytes leftover after parsing attributes in process `syz.2.196'.
[  100.235632][ T6562] sctp: [Deprecated]: syz.0.198 (pid 6562) Use of int in maxseg socket option.
[  100.235632][ T6562] Use struct sctp_assoc_value instead
[  100.284717][ T6562] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20001
[  100.549481][ T6573] ieee802154 phy1 wpan1: encryption failed: -22
[  101.051715][ T6594] netlink: 'syz.3.210': attribute type 1 has an invalid length.
[  101.209385][ T6597] bond1: entered promiscuous mode
[  101.234425][ T6610] IPVS: set_ctl: invalid protocol: 0 172.20.20.33:20003
[  101.291864][ T6597] bond1: entered allmulticast mode
[  101.343759][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.609373][ T6628] ieee802154 phy1 wpan1: encryption failed: -22
[  102.423573][ T6659] netlink: 'syz.0.225': attribute type 1 has an invalid length.
[  102.497312][ T6664] openvswitch: netlink: Duplicate key (type 32).
[  102.697282][ T6669] delete_channel: no stack
[  102.731321][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.760066][ T6676] lo speed is unknown, defaulting to 1000
[  102.782576][ T6676] lo speed is unknown, defaulting to 1000
[  102.833122][ T6676] lo speed is unknown, defaulting to 1000
[  102.914957][ T6684] __nla_validate_parse: 10 callbacks suppressed
[  102.914977][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'.
[  102.942898][ T6684] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  103.208597][ T5846] lo speed is unknown, defaulting to 1000
[  103.230994][ T6676] infiniband syz0: set active
[  103.256004][ T6676] infiniband syz0: added lo
[  103.356960][ T6676] RDS/IB: syz0: added
[  103.366772][ T6676] smc: adding ib device syz0 with port count 1
[  103.373268][ T6676] smc:    ib device syz0 port 1 has pnetid 
[  103.417657][   T25] lo speed is unknown, defaulting to 1000
[  103.440674][ T6676] lo speed is unknown, defaulting to 1000
[  103.577153][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'.
[  103.965247][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'.
[  104.016189][ T6676] lo speed is unknown, defaulting to 1000
[  104.303812][ T6739] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  104.450435][ T6676] lo speed is unknown, defaulting to 1000
[  104.621556][ T6752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.787683][ T6760] team0: Failed to send options change via netlink (err -105)
[  104.797564][ T6760] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  104.830694][ T6760] team0: Port device team_slave_1 removed
[  104.863620][ T6752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.888473][ T6676] lo speed is unknown, defaulting to 1000
[  104.938625][ T6752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.985571][ T6769] batman_adv: batadv0: Adding interface: dummy0
[  104.996448][ T6769] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.052234][ T6769] batman_adv: batadv0: Interface activated: dummy0
[  105.139285][ T6752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.183836][ T6770] batadv0: mtu less than device minimum
[  105.212591][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.225154][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.237526][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.250068][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.261752][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.273588][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.285596][ T6770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.338443][ T6676] lo speed is unknown, defaulting to 1000
[  105.403450][ T6752] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.426323][ T6752] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.487599][ T6752] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.521252][ T6752] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.000517][ T6798] sctp: [Deprecated]: syz.0.259 (pid 6798) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.000517][ T6798] Use struct sctp_sack_info instead
[  106.343268][ T6818] netlink: 'syz.3.261': attribute type 1 has an invalid length.
[  106.379778][ T6818] netlink: 64 bytes leftover after parsing attributes in process `syz.3.261'.
[  106.541666][ T6822] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode
[  106.683603][ T6837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.269'.
[  107.001852][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[  107.070400][ T6857] (unnamed net_device) (uninitialized): option ad_select: invalid value (255)
[  107.084831][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[  107.100462][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[  107.110848][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'.
[  107.269838][   T29] audit: type=1107 audit(1738775463.339:2): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='������<Ԡ+H7��}�Ø��d:$Ӭ�>��!�:�E˔�yM�.6s���N;�ci��e��o'=n�pap}<���?�8�UNTq��B��_��s*��}{�!
[  107.269838][   T29] �H�{/�|�����	Q�O�$��3��`�G���K<
[  107.269838][   T29] �!%�ux�*�d��ŷ2,�DZ��D�����(VHm��Cn���X?�a�%E!<jT��8*m�5�c�ʔ����X#�E�
[  107.269838][   T29] u�~�����ϒE�k�гI�Vi�'
[  107.319722][ T6866] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[  107.330687][ T6866] netlink: 'syz.0.279': attribute type 4 has an invalid length.
[  107.357932][ T6866] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.279'.
[  107.654491][ T6878] can: request_module (can-proto-5) failed.
[  107.762654][ T6887] sctp: [Deprecated]: syz.2.282 (pid 6887) Use of int in max_burst socket option.
[  107.762654][ T6887] Use struct sctp_assoc_value instead
[  107.862417][ T6893] Driver unsupported XDP return value 0 on prog  (id 58) dev N/A, expect packet loss!
[  107.970839][ T6901] net_ratelimit: 12 callbacks suppressed
[  107.970857][ T6901] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.979656][ T6902] netlink: 'syz.3.287': attribute type 1 has an invalid length.
[  108.026385][ T6902] netlink: 'syz.3.287': attribute type 10 has an invalid length.
[  108.038510][ T6904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.045157][ T6902] __nla_validate_parse: 1 callbacks suppressed
[  108.045174][ T6902] netlink: 236 bytes leftover after parsing attributes in process `syz.3.287'.
[  108.065489][ T6901] netlink: 256 bytes leftover after parsing attributes in process `syz.2.288'.
[  108.075233][ T6904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.273178][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.290'.
[  108.405137][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[  108.410782][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  108.459876][ T6919] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[  108.505437][ T6919] netlink: 'syz.0.293': attribute type 4 has an invalid length.
[  108.514280][ T6919] netlink: 188 bytes leftover after parsing attributes in process `syz.0.293'.
[  108.523466][ T6919] NCSI netlink: No device for ifindex 458760
[  108.646104][ T5840] Bluetooth: hci4: command tx timeout
[  108.827797][ T6943] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  108.836207][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.919719][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[  108.942891][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[  109.049069][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[  109.233329][ T6964] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.306'.
[  109.254285][ T6964] netlink: zone id is out of range
[  109.260446][ T6963] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  109.292214][ T6963] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  109.317581][ T6963] gretap1: entered promiscuous mode
[  109.329769][ T6963] gretap1: entered allmulticast mode
[  109.414432][ T6967] wlan0 speed is unknown, defaulting to 1000
[  109.463101][ T6967] lo speed is unknown, defaulting to 1000
[  109.982657][ T6988] bridge_slave_0: left allmulticast mode
[  109.988665][ T6988] bridge_slave_0: left promiscuous mode
[  109.994684][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.047214][ T6988] bridge_slave_1: left allmulticast mode
[  110.056312][ T6988] bridge_slave_1: left promiscuous mode
[  110.073105][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.087331][ T7007] xt_hashlimit: max too large, truncated to 1048576
[  110.097409][ T6988] bond0: (slave bond_slave_0): Releasing backup interface
[  110.112386][ T6988] bond0: (slave bond_slave_1): Releasing backup interface
[  110.196010][ T6988] team0: Port device team_slave_0 removed
[  110.259600][ T6988] team0: Port device team_slave_1 removed
[  110.275979][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.283419][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.308828][ T6988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.334276][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.359479][ T6996] lo: entered promiscuous mode
[  110.368730][ T6996] tunl0: entered promiscuous mode
[  110.374452][ T6996] gre0: entered promiscuous mode
[  110.400577][ T6996] gretap0: entered promiscuous mode
[  110.418030][ T6996] erspan0: entered promiscuous mode
[  110.426483][ T6996] ip_vti0: entered promiscuous mode
[  110.432637][ T6996] ip6_vti0: entered promiscuous mode
[  110.439504][ T6996] sit0: entered promiscuous mode
[  110.446238][ T6996] ip6tnl0: entered promiscuous mode
[  110.451938][ T6996] ip6gre0: entered promiscuous mode
[  110.477889][ T6996] syz_tun: entered promiscuous mode
[  110.484193][ T6996] ip6gretap0: entered promiscuous mode
[  110.491953][ T6996] bridge0: entered promiscuous mode
[  110.498256][ T6996] vcan0: entered promiscuous mode
[  110.503627][ T6996] bond0: entered promiscuous mode
[  110.522186][ T6996] bond_slave_0: entered promiscuous mode
[  110.531652][ T6996] bond_slave_1: entered promiscuous mode
[  110.540956][ T6996] team0: entered promiscuous mode
[  110.549293][ T6996] team_slave_0: entered promiscuous mode
[  110.558151][ T6996] team_slave_1: entered promiscuous mode
[  110.564846][ T6996] dummy0: entered promiscuous mode
[  110.584369][ T6996] nlmon0: entered promiscuous mode
[  110.612369][ T6996] caif0: entered promiscuous mode
[  110.618234][ T6996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.642657][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.316'.
[  110.668747][ T5932] lo speed is unknown, defaulting to 1000
[  110.680116][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[  111.606532][ T5932] IPVS: starting estimator thread 0...
[  111.613052][ T7067] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20005
[  111.756053][ T7069] IPVS: using max 21 ests per chain, 50400 per kthread
[  111.883547][ T7082] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  112.261837][ T7102] xt_TCPMSS: Only works on TCP SYN packets
[  112.564951][ T7118] team_slave_0: entered promiscuous mode
[  112.630850][ T7118] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  113.146411][ T7156] __nla_validate_parse: 5 callbacks suppressed
[  113.146431][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'.
[  113.223834][ T7161] batadv_slave_1: entered promiscuous mode
[  113.354309][ T7165] netlink: 'syz.4.361': attribute type 1 has an invalid length.
[  113.374632][ T7165] netlink: 'syz.4.361': attribute type 1 has an invalid length.
[  113.432575][ T7158] batadv_slave_1: left promiscuous mode
[  113.500642][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'.
[  113.583573][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.683524][ T7185] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[  113.686583][ T7186] netlink: 'syz.4.364': attribute type 10 has an invalid length.
[  113.843285][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.909050][ T7199] netlink: zone id is out of range
[  113.916481][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'.
[  113.927066][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[  113.950417][ T7199] netlink: zone id is out of range
[  113.968914][ T7199] netlink: zone id is out of range
[  113.981200][ T7199] netlink: set zone limit has 8 unknown bytes
[  114.001246][ T7186] vlan0: entered allmulticast mode
[  114.042674][ T7208] sctp: [Deprecated]: syz.0.370 (pid 7208) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.042674][ T7208] Use struct sctp_sack_info instead
[  114.060364][ T7207] sctp: [Deprecated]: syz.0.370 (pid 7207) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.060364][ T7207] Use struct sctp_sack_info instead
[  114.063176][ T7186] veth0_vlan: entered allmulticast mode
[  114.090916][ T7186] team0: Port device vlan0 added
[  114.420368][ T7215] xt_addrtype: ipv6 does not support BROADCAST matching
[  114.584055][ T7229] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  114.607150][ T7233] netlink: 'syz.3.379': attribute type 12 has an invalid length.
[  114.610420][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'.
[  114.614892][ T7233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.379'.
[  115.144882][ T7270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.384'.
[  115.276756][ T7277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  115.301918][ T7277] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  115.403337][ T7280] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.388'.
[  115.517096][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'.
[  115.732124][ T7295] 
[  115.734499][ T7295] ======================================================
[  115.741530][ T7295] WARNING: possible circular locking dependency detected
[  115.748568][ T7295] 6.13.0-syzkaller-09710-ga1300691aed9 #0 Not tainted
[  115.755339][ T7295] ------------------------------------------------------
[  115.762365][ T7295] syz.4.391/7295 is trying to acquire lock:
[  115.768261][ T7295] ffff88805e3b0218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{3:3}, at: __dev_queue_xmit+0x23f9/0x3f50
[  115.780399][ T7295] 
[  115.780399][ T7295] but task is already holding lock:
[  115.787761][ T7295] ffff8880291f1108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x8a/0x2d0
[  115.799769][ T7295] 
[  115.799769][ T7295] which lock already depends on the new lock.
[  115.799769][ T7295] 
[  115.810167][ T7295] 
[  115.810167][ T7295] the existing dependency chain (in reverse order) is:
[  115.819174][ T7295] 
[  115.819174][ T7295] -> #2 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}:
[  115.828384][ T7295]        lock_acquire+0x1ed/0x550
[  115.833415][ T7295]        _raw_spin_lock+0x2e/0x40
[  115.838444][ T7295]        ieee80211_handle_wake_tx_queue+0x8a/0x2d0
[  115.844944][ T7295]        ieee80211_queue_skb+0x1ae9/0x24b0
[  115.850766][ T7295]        ieee80211_tx+0x2c4/0x470
[  115.855787][ T7295]        __ieee80211_subif_start_xmit+0xe93/0x1600
[  115.862277][ T7295]        ieee80211_subif_start_xmit+0xde/0x4d0
[  115.868423][ T7295]        dev_hard_start_xmit+0x27a/0x7d0
[  115.874053][ T7295]        __dev_queue_xmit+0x1b73/0x3f50
[  115.879590][ T7295]        ip6_finish_output2+0x12ad/0x1780
[  115.885313][ T7295]        ip6_finish_output+0x41e/0x840
[  115.890767][ T7295]        NF_HOOK+0x9e/0x430
[  115.895275][ T7295]        mld_sendpack+0x843/0xdb0
[  115.900297][ T7295]        mld_ifc_work+0x7d9/0xd90
[  115.905316][ T7295]        process_scheduled_works+0xa66/0x1840
[  115.911376][ T7295]        worker_thread+0x870/0xd30
[  115.916477][ T7295]        kthread+0x7a9/0x920
[  115.921062][ T7295]        ret_from_fork+0x4b/0x80
[  115.925993][ T7295]        ret_from_fork_asm+0x1a/0x30
[  115.931275][ T7295] 
[  115.931275][ T7295] -> #1 (_xmit_ETHER#2){+.-.}-{3:3}:
[  115.938756][ T7295]        lock_acquire+0x1ed/0x550
[  115.943780][ T7295]        _raw_spin_lock+0x2e/0x40
[  115.948801][ T7295]        sch_direct_xmit+0x1a7/0x5d0
[  115.954086][ T7295]        __dev_queue_xmit+0x1a8f/0x3f50
[  115.959654][ T7295]        lapb_data_transmit+0x91/0xb0
[  115.965040][ T7295]        lapb_transmit_buffer+0x168/0x1f0
[  115.970759][ T7295]        lapb_establish_data_link+0x84/0xd0
[  115.976743][ T7295]        lapb_device_event+0x4e0/0x670
[  115.982215][ T7295]        notifier_call_chain+0x1a5/0x3f0
[  115.987842][ T7295]        __dev_notify_flags+0x207/0x400
[  115.993381][ T7295]        dev_change_flags+0xf0/0x1a0
[  115.998667][ T7295]        devinet_ioctl+0xcce/0x1ac0
[  116.003864][ T7295]        inet_ioctl+0x3d7/0x4f0
[  116.008703][ T7295]        sock_do_ioctl+0x158/0x460
[  116.013807][ T7295]        sock_ioctl+0x626/0x8e0
[  116.018651][ T7295]        __se_sys_ioctl+0xf5/0x170
[  116.023763][ T7295]        do_syscall_64+0xf3/0x230
[  116.028783][ T7295]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.035193][ T7295] 
[  116.035193][ T7295] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{3:3}:
[  116.045380][ T7295]        validate_chain+0x18ef/0x5920
[  116.050764][ T7295]        __lock_acquire+0x1397/0x2100
[  116.056143][ T7295]        lock_acquire+0x1ed/0x550
[  116.061160][ T7295]        _raw_spin_lock+0x2e/0x40
[  116.066175][ T7295]        __dev_queue_xmit+0x23f9/0x3f50
[  116.071706][ T7295]        __netlink_deliver_tap+0x56b/0x7f0
[  116.077511][ T7295]        netlink_deliver_tap+0x19d/0x1b0
[  116.083138][ T7295]        netlink_sendskb+0x68/0x140
[  116.088332][ T7295]        netlink_unicast+0x39d/0x990
[  116.093610][ T7295]        hwsim_unicast_netgroup+0x1c4/0x2a0
[  116.099501][ T7295]        mac80211_hwsim_tx_frame_nl+0xbad/0x11f0
[  116.105842][ T7295]        ieee80211_handle_wake_tx_queue+0x1ae/0x2d0
[  116.112416][ T7295]        ieee80211_queue_skb+0x1ae9/0x24b0
[  116.118212][ T7295]        ieee80211_tx+0x2c4/0x470
[  116.123226][ T7295]        __ieee80211_subif_start_xmit+0xe93/0x1600
[  116.129722][ T7295]        ieee80211_subif_start_xmit+0xde/0x4d0
[  116.135873][ T7295]        dev_hard_start_xmit+0x27a/0x7d0
[  116.141510][ T7295]        __dev_queue_xmit+0x1b73/0x3f50
[  116.147048][ T7295]        __bpf_tx_skb+0x18e/0x260
[  116.152071][ T7295]        bpf_clone_redirect+0x26f/0x3d0
[  116.157604][ T7295]        bpf_prog_c6f54bbad6dab1ee+0x5f/0x64
[  116.163585][ T7295]        bpf_test_run+0x4f0/0xa90
[  116.168707][ T7295]        bpf_prog_test_run_skb+0xcaa/0x1830
[  116.174603][ T7295]        bpf_prog_test_run+0x2e4/0x360
[  116.180062][ T7295]        __sys_bpf+0x48d/0x810
[  116.184831][ T7295]        __x64_sys_bpf+0x7c/0x90
[  116.189774][ T7295]        do_syscall_64+0xf3/0x230
[  116.194802][ T7295]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.201212][ T7295] 
[  116.201212][ T7295] other info that might help us debug this:
[  116.201212][ T7295] 
[  116.211432][ T7295] Chain exists of:
[  116.211432][ T7295]   dev->qdisc_tx_busylock ?: &qdisc_tx_busylock --> _xmit_ETHER#2 --> &local->handle_wake_tx_queue_lock
[  116.211432][ T7295] 
[  116.228397][ T7295]  Possible unsafe locking scenario:
[  116.228397][ T7295] 
[  116.236013][ T7295]        CPU0                    CPU1
[  116.241367][ T7295]        ----                    ----
[  116.246730][ T7295]   lock(&local->handle_wake_tx_queue_lock);
[  116.252723][ T7295]                                lock(_xmit_ETHER#2);
[  116.259495][ T7295]                                lock(&local->handle_wake_tx_queue_lock);
[  116.268014][ T7295]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock);
[  116.274952][ T7295] 
[  116.274952][ T7295]  *** DEADLOCK ***
[  116.274952][ T7295] 
[  116.283091][ T7295] 8 locks held by syz.4.391/7295:
[  116.288099][ T7295]  #0: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x19/0x140
[  116.297962][ T7295]  #1: ffffffff8e9387c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f4/0x3f50
[  116.307909][ T7295]  #2: ffff888034b10d18 (_xmit_ETHER#2){+.-.}-{3:3}, at: __dev_queue_xmit+0x1822/0x3f50
[  116.317678][ T7295]  #3: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: __ieee80211_subif_start_xmit+0x300/0x1600
[  116.328391][ T7295]  #4: ffff8880291f1108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x8a/0x2d0
[  116.340828][ T7295]  #5: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: hwsim_unicast_netgroup+0x2a/0x2a0
[  116.350864][ T7295]  #6: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0
[  116.360657][ T7295]  #7: ffffffff8e9387c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f4/0x3f50
[  116.370615][ T7295] 
[  116.370615][ T7295] stack backtrace:
[  116.376513][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.4.391 Not tainted 6.13.0-syzkaller-09710-ga1300691aed9 #0
[  116.376531][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  116.376543][ T7295] Call Trace:
[  116.376549][ T7295]  <TASK>
[  116.376556][ T7295]  dump_stack_lvl+0x241/0x360
[  116.376576][ T7295]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.376590][ T7295]  ? __pfx__printk+0x10/0x10
[  116.376616][ T7295]  print_circular_bug+0x13a/0x1b0
[  116.376633][ T7295]  check_noncircular+0x36a/0x4a0
[  116.376648][ T7295]  ? __pfx_check_noncircular+0x10/0x10
[  116.376662][ T7295]  ? queued_spin_lock_slowpath+0x42/0x50
[  116.376683][ T7295]  ? lockdep_lock+0x1b0/0x2b0
[  116.376705][ T7295]  validate_chain+0x18ef/0x5920
[  116.376726][ T7295]  ? __pfx_validate_chain+0x10/0x10
[  116.376739][ T7295]  ? __pfx_validate_chain+0x10/0x10
[  116.376762][ T7295]  ? __pfx_lock_acquire+0x10/0x10
[  116.376781][ T7295]  ? is_bpf_text_address+0x26/0x2a0
[  116.376801][ T7295]  ? mark_lock+0x9a/0x360
[  116.376822][ T7295]  __lock_acquire+0x1397/0x2100
[  116.376847][ T7295]  lock_acquire+0x1ed/0x550
[  116.376865][ T7295]  ? __dev_queue_xmit+0x23f9/0x3f50
[  116.376881][ T7295]  ? __pfx_lock_acquire+0x10/0x10
[  116.376900][ T7295]  ? __pfx_lock_acquire+0x10/0x10
[  116.376920][ T7295]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  116.376938][ T7295]  ? rcu_read_lock_bh_held+0x7e/0x120
[  116.376958][ T7295]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  116.376973][ T7295]  ? skb_clone+0x20c/0x390
[  116.376988][ T7295]  _raw_spin_lock+0x2e/0x40
[  116.377003][ T7295]  ? __dev_queue_xmit+0x23f9/0x3f50
[  116.377016][ T7295]  __dev_queue_xmit+0x23f9/0x3f50
[  116.377031][ T7295]  ? netlink_unicast+0x39d/0x990
[  116.377052][ T7295]  ? __ieee80211_subif_start_xmit+0xe93/0x1600
[  116.377069][ T7295]  ? __dev_queue_xmit+0x1b73/0x3f50
[  116.377081][ T7295]  ? __dev_queue_xmit+0x2f4/0x3f50
[  116.377093][ T7295]  ? bpf_clone_redirect+0x26f/0x3d0
[  116.377107][ T7295]  ? bpf_prog_c6f54bbad6dab1ee+0x5f/0x64
[  116.377118][ T7295]  ? bpf_test_run+0x4f0/0xa90
[  116.377137][ T7295]  ? bpf_prog_test_run_skb+0xcaa/0x1830
[  116.377158][ T7295]  ? __pfx___dev_queue_xmit+0x10/0x10
[  116.377177][ T7295]  ? __copy_skb_header+0x437/0x5b0
[  116.377191][ T7295]  ? __asan_memcpy+0x40/0x70
[  116.377210][ T7295]  ? __copy_skb_header+0x437/0x5b0
[  116.377224][ T7295]  ? __skb_clone+0x454/0x6c0
[  116.377239][ T7295]  ? skb_clone+0x240/0x390
[  116.377253][ T7295]  __netlink_deliver_tap+0x56b/0x7f0
[  116.377278][ T7295]  ? netlink_deliver_tap+0x2e/0x1b0
[  116.377299][ T7295]  netlink_deliver_tap+0x19d/0x1b0
[  116.377321][ T7295]  netlink_sendskb+0x68/0x140
[  116.377340][ T7295]  netlink_unicast+0x39d/0x990
[  116.377362][ T7295]  ? __pfx_netlink_unicast+0x10/0x10
[  116.377383][ T7295]  ? net_generic+0x1f/0x240
[  116.377404][ T7295]  hwsim_unicast_netgroup+0x1c4/0x2a0
[  116.377421][ T7295]  ? hwsim_unicast_netgroup+0x2a/0x2a0
[  116.377437][ T7295]  mac80211_hwsim_tx_frame_nl+0xbad/0x11f0
[  116.377458][ T7295]  ? __pfx_mac80211_hwsim_tx_frame_nl+0x10/0x10
[  116.377474][ T7295]  ? mac80211_hwsim_tx+0x17a0/0x23c0
[  116.377501][ T7295]  ieee80211_handle_wake_tx_queue+0x1ae/0x2d0
[  116.377519][ T7295]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  116.377533][ T7295]  ? ieee80211_queue_skb+0x18b6/0x24b0
[  116.377548][ T7295]  ? do_raw_spin_unlock+0x13c/0x8b0
[  116.377567][ T7295]  ieee80211_queue_skb+0x1ae9/0x24b0
[  116.377593][ T7295]  ieee80211_tx+0x2c4/0x470
[  116.377607][ T7295]  ? __pfx_ieee80211_tx+0x10/0x10
[  116.377627][ T7295]  ? ieee80211_xmit+0x30f/0x3f0
[  116.377660][ T7295]  __ieee80211_subif_start_xmit+0xe93/0x1600
[  116.377682][ T7295]  ? __ieee80211_subif_start_xmit+0x300/0x1600
[  116.377700][ T7295]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  116.377723][ T7295]  ieee80211_subif_start_xmit+0xde/0x4d0
[  116.377741][ T7295]  ? packet_rcv+0x16f/0x14b0
[  116.377756][ T7295]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  116.377774][ T7295]  ? dev_queue_xmit_nit+0x2b/0xca0
[  116.377796][ T7295]  ? dev_queue_xmit_nit+0xc0d/0xca0
[  116.377829][ T7295]  ? dev_queue_xmit_nit+0x2b/0xca0
[  116.377852][ T7295]  dev_hard_start_xmit+0x27a/0x7d0
[  116.377899][ T7295]  __dev_queue_xmit+0x1b73/0x3f50
[  116.377919][ T7295]  ? __dev_queue_xmit+0x2f4/0x3f50
[  116.377935][ T7295]  ? __pfx___dev_queue_xmit+0x10/0x10
[  116.377962][ T7295]  ? rcu_is_watching+0x15/0xb0
[  116.377978][ T7295]  ? skb_release_data+0x2b5/0x8a0
[  116.378007][ T7295]  ? pskb_expand_head+0xc52/0x1380
[  116.378028][ T7295]  ? __bpf_redirect+0x93c/0xe10
[  116.378045][ T7295]  __bpf_tx_skb+0x18e/0x260
[  116.378068][ T7295]  bpf_clone_redirect+0x26f/0x3d0
[  116.378087][ T7295]  bpf_prog_c6f54bbad6dab1ee+0x5f/0x64
[  116.378101][ T7295]  ? preempt_schedule+0xe1/0xf0
[  116.378119][ T7295]  ? preempt_schedule_common+0x84/0xd0
[  116.378138][ T7295]  ? preempt_schedule+0xe1/0xf0
[  116.378156][ T7295]  ? bpf_test_run+0x370/0xa90
[  116.378179][ T7295]  ? __pfx_lockdep_softirqs_off+0x10/0x10
[  116.378201][ T7295]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  116.378228][ T7295]  ? bpf_test_run+0x370/0xa90
[  116.378250][ T7295]  ? __pfx___cant_migrate+0x10/0x10
[  116.378268][ T7295]  ? bpf_test_run+0x370/0xa90
[  116.378290][ T7295]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  116.378310][ T7295]  ? bpf_test_timer_continue+0x11a/0x350
[  116.378337][ T7295]  bpf_test_run+0x4f0/0xa90
[  116.378362][ T7295]  ? bpf_test_run+0x370/0xa90
[  116.378390][ T7295]  ? __pfx_bpf_test_run+0x10/0x10
[  116.378422][ T7295]  ? __pfx_eth_type_trans+0x10/0x10
[  116.378441][ T7295]  ? convert___skb_to_skb+0x41/0x620
[  116.378465][ T7295]  bpf_prog_test_run_skb+0xcaa/0x1830
[  116.378497][ T7295]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  116.378520][ T7295]  ? __fget_files+0x2a/0x410
[  116.378538][ T7295]  ? fput+0x21b/0x290
[  116.378554][ T7295]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  116.378579][ T7295]  bpf_prog_test_run+0x2e4/0x360
[  116.378600][ T7295]  __sys_bpf+0x48d/0x810
[  116.378620][ T7295]  ? __pfx___sys_bpf+0x10/0x10
[  116.378643][ T7295]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  116.378665][ T7295]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  116.378688][ T7295]  ? exc_page_fault+0x590/0x8b0
[  116.378708][ T7295]  __x64_sys_bpf+0x7c/0x90
[  116.378725][ T7295]  do_syscall_64+0xf3/0x230
[  116.378747][ T7295]  ? clear_bhb_loop+0x35/0x90
[  116.378771][ T7295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.378794][ T7295] RIP: 0033:0x7f0788b8cde9
[  116.378808][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.378822][ T7295] RSP: 002b:00007f0789a1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  116.378839][ T7295] RAX: ffffffffffffffda RBX: 00007f0788da6080 RCX: 00007f0788b8cde9
[  116.378851][ T7295] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  116.378861][ T7295] RBP: 00007f0788c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  116.378871][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.378880][ T7295] R13: 0000000000000001 R14: 00007f0788da6080 R15: 00007ffe1abf9088
[  116.378897][ T7295]  </TASK>
[  117.191682][ T7293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium