last executing test programs:

4.019637005s ago: executing program 3 (id=122):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1d, 0x6, 0x568, 0xf8, 0x2a8, 0x1d8, 0x1d8, 0x378, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast1, @remote, [], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)

3.731842178s ago: executing program 3 (id=129):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff004)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x11)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff130000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)

3.079120214s ago: executing program 4 (id=138):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8)
getsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000001500), &(0x7f0000001540)=0x4)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.790177757s ago: executing program 4 (id=141):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x5e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54)
sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000840)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000200)}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
socket$rds(0x15, 0x5, 0x0)
setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r12}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @ldst={0x0, 0x2, 0x1, 0xb, 0x7, 0xc, 0x4}, @ldst={0x1, 0x1, 0x4, 0x6, 0x0, 0x6, 0x4}, @jmp={0x5, 0x0, 0x8, 0x5, 0x3, 0x30, 0xffffffffffffffe4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4, 0xed, &(0x7f0000000500)=""/237, 0x40f00, 0x6, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0xfffff000, 0x65d8}, 0x10, 0x1b5d2, r12, 0x3, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x1}, {0x3, 0x5, 0xb, 0x8}, {0x0, 0x2, 0x8, 0x6}], 0x10, 0x4a}, 0x94)
recvmmsg(r0, &(0x7f0000003940), 0x0, 0x0, 0x0)

2.583544697s ago: executing program 3 (id=144):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="74b3223fc89feb01001800000000000000480000000000060000000d000000020000040000000e0000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f0000004f90f63c7c4b3b737d5687eb858e287abd36ad66e1378125031b0f81e8f811809b8ecdf0d0f968229e33dfcb3f978e68b01f7820625f03de8b72399ab3a5813ded8fbd38418df34712af807b5f3b58a5da216367c8cd72f0d3ac5e5e0b8557f19d2b3c10fc063fd66593d363dda382fa057814eeb58a1ff904c8d587993df4f81a"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0xfff)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8)
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff})
r6 = socket$netlink(0x10, 0x3, 0x0)
splice(r5, 0x0, r6, 0x0, 0x10d00, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000400fff00000000000002112000021a8c10118fbac4aebd177e200c01e9ba21f2bfe1fe02a48f2ae546d3844b21b496f0aa6c04fa6c658952d8c061aceb03e635379297309d80eef645334de631e69ca5e562a6438bf12222bb9c7f822457659634cbc2b895d8e7f6f780886c5714f7b471f3d8c142ea331cf4e4c96d8731af32f73b4e883da151646345cd3aaa124021c3ee1c6db1d51d0bfec55a8d3a501776f8b762cd0e0fe6e8fedff6667cbd4aa6c9e024af82eb8c6d215ff09869aa8090099feea6c8df80e1436d657291fdd5b2481d7eef6365de3ae9eb3f89169ca2d56a5c2783ee0f679cba555f6b24098ddc57824e7e4832588605e47f943da9fc6f4daf662adb9ec3438a6b16edf00939d053d02ba0afd1e5eb047183d2e013ee1c4414a753a55320a74c0ade3fc83aa88c325293c7a43249c74e00203", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0)

2.279618516s ago: executing program 4 (id=149):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

1.960256158s ago: executing program 4 (id=153):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000340)="bf27a7c8512b883acf13728636cc12c1", 0x10)
read(r1, &(0x7f0000000380)=""/128, 0x80)
listen(r6, 0x0)
connect$phonet_pipe(r4, &(0x7f0000000400)={0x23, 0x28, 0x40, 0x80}, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r2, 0x810, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000080)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7)
ioctl$FIOCLEX(r7, 0x5451)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x7, '\x00', 0x0, r5, 0x0, 0x5, 0x4}, 0x50)
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x0)
r9 = accept4$phonet_pipe(r4, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x80800)
ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, 0x3, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3, 0x4]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, r11, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9e8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000b80))
socket(0x1e, 0x5, 0x2)

1.581751617s ago: executing program 1 (id=160):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r0=>0x0, 0x20, 0x40, 0x9, 0x8, {{0x9, 0x4, 0x3, 0x26, 0x24, 0x68, 0x0, 0x9, 0x29, 0x0, @local, @local, {[@timestamp={0x44, 0x10, 0x7f, 0x0, 0x8, [0x8000, 0x1, 0x16247768]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x24, '\x00', r0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0x50) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) (async)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa)
r3 = socket$inet6(0xa, 0x80003, 0x6) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000050000002de85d7d104c6b850000000000fdd2ddb39c4e32e3edf45a69c9d19163a4ace985f5c79ec015d6ff5a7149993e9df50dc322467159eac16ec98355", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x18, 0x3d, 0x1, 0x80000000, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}}, 0xc000)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250095ebe45d003b73696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (rerun: 64)

1.577862908s ago: executing program 2 (id=161):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0)
write$cgroup_int(r4, &(0x7f0000000100)=0x3, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xfffffff7, 0x80, 0x5, 0x50462, 0x1, 0x0, '\x00', r1, r4, 0x5, 0x5, 0x3, 0x8, @void, @value, @value=r3}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x24, 0x26, 0xd27}, 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0)
close(0x3)

1.407011568s ago: executing program 2 (id=162):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x12c8, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10a0, 0x10c8, 0x0, {0x100000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1328)

1.406517405s ago: executing program 1 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x0)

1.330651925s ago: executing program 0 (id=164):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)

1.271601061s ago: executing program 1 (id=165):
write$bt_hci(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESOCT], 0x138) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=@gettaction={0xfc, 0x32, 0x4, 0x70bd23, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x14, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}]}]}, 0xfc}}, 0x80000)
socket$alg(0x26, 0x5, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="39000e0080000000ffffffffffff080211000000dfffff7fffff00000000000000000000ff0701000406f0027f0007a70602060005038c670400000008000d4ac85e6b000000000008000c006400000004001b80"], 0x6c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0a8c5d447a9331f002d47c2afc987999da5db40efd2f43c7c7105515eefc73f3c251", @ANYRES16=r4, @ANYBLOB="00010300"/18, @ANYRES32=r6, @ANYBLOB="24006e8004000100040002000400010004000100040001000400020004000200040001000a000600ffffffffffff0000"], 0x4c}}, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000040)=0xb, 0x12) (async)
r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00')
ioctl$NS_GET_USERNS(r11, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r10, 0xb701, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x120, 0x308, 0x498, 0x120, 0x308, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000140), {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'ip6tnl0\x00', 'team0\x00', {0xff}, {}, 0x29, 0x1, 0x68}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x2, 0x0, 0x2], 0x1}, {0x3, [0x3, 0x4, 0x1, 0x1, 0x7, 0x6], 0x4, 0x4e61dd645e8cd6c5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x9, 0x0}, @local, 0xff, 0xffffff00, 'pimreg\x00', 'virt_wifi0\x00', {}, {0xff}, 0x11, 0x2, 0x54}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}, @common=@set={{0x40}, {{0x4, [0x4, 0x1, 0x5, 0x3, 0x0, 0x7], 0x3, 0x1}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @remote, 0xffffffff, 0x0, 'macsec0\x00', 'dvmrp0\x00', {}, {}, 0x33, 0x1, 0x37}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @local, 0x0, 0xffffffff, 'veth1_to_hsr\x00', 'pim6reg1\x00', {0x80}, {}, 0x4, 0x0, 0x15}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x500, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x7, 0x2}}}, {{@ip={@remote, @broadcast, 0xff000000, 0xff000000, 'veth0_virt_wifi\x00', 'wg0\x00', {0xff}, {}, 0x67, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10, 0x7, @local, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590)
r12 = openat$cgroup_int(r0, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r12, r12, 0x0, 0x6) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000004", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1.135484367s ago: executing program 3 (id=166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x639f0}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x0, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0)

1.134969162s ago: executing program 0 (id=167):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1.091380623s ago: executing program 2 (id=168):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x8, [{@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4001}}}, 0x10)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x2000}, 0x4)
socket(0x2d, 0x3, 0x5)
getsockopt$bt_hci(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf2501000000400008803c00008024000100f44da367a88ee6564f02021145672f082f5cebee8b1bf5eb7337341b459b39221400040002004623ac1414bb00000000000000001400020077673100"/98], 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={<r5=>0x0, @in6={{0xa, 0x4e24, 0xffff8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0xc, 0x3ff, 0x4, 0x5, 0x40, 0xfffff800, 0x4}, &(0x7f00000002c0)=0x9c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r5, 0x5, 0x7, 0xffffffff}, &(0x7f0000000540)=0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r6, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
getuid()
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000600)=@delsa={0x250, 0x11, 0x910, 0x70bd28, 0x25dfdbfb, {@in=@local, 0x4d2, 0x2, 0xff}, [@algo_auth={0x137, 0x1, {{'rmd160\x00'}, 0x778, "0af035d810b1ed54cc1d8c5269be8592b6b934e5bfa65f76241bb474c8535c3068adce045b6e86d2f20cbc4a34fbac8366c15997d2d75d593f7cd951804e5c29ebd2a902b85a7fa072bfbc6967a5889235e24d4ad7ea427f704c1c4ae62193b86c6184ade2275a95fc1479ece6e1a7f457a6bee76addb1e26ccb464d0eb91780ca2a3d8d118a809ccc1b00535342806ac56426da793a51b5aa0d97bb74c659a41e32d59d7031486515731efe4d9d9627276a248fe3a517fa8e24db04e53ca7d9ae6ced51f08f3a6ea1dd1a83add4f916f42eb4406d9e36112f2ae1dd178b9bf7815a6dd0942a4156c8b62ba26d06ff"}}, @replay_thresh={0x8, 0xb, 0x3b8a}, @replay_thresh={0x8, 0xb, 0x2}, @offload={0xc}, @lastused={0xc, 0xf, 0x2}, @extra_flags={0x8, 0x18, 0x3}, @algo_auth_trunc={0xc0, 0x14, {{'blake2b-256-generic\x00'}, 0x3a0, 0xa0, "f784ea48551fc0e2b5662b40e2f10b555ff4342aa12812ee57a596713a7a96997255cb6f5e2db1c879ba142f4c4f08d9a0c0c7531a29723d663cd05f40403f8044440ed70f335a2ca8770636f1b2afb2809d9dd429d0a40615fe52f9c85e35e21935f53a4b2f23a85b01879968c93f84e3dfe789"}}]}, 0x250}, 0x1, 0x0, 0x0, 0x40014}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r8, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}]}, 0x3c}, 0x1, 0x620b}, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140))
r11 = accept(r9, &(0x7f0000000400)=@llc, &(0x7f0000000480)=0x80)
setsockopt$sock_timeval(r11, 0x1, 0x42, &(0x7f00000004c0)={0x77359400}, 0x10)
ioctl$PPPIOCSPASS(r10, 0x40107447, 0x0)
socket(0x10, 0x3, 0x0)

1.034904835s ago: executing program 0 (id=169):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x4, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]})

939.733539ms ago: executing program 1 (id=170):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4)

938.076377ms ago: executing program 3 (id=171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty, 0x20}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @remote, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @remote, @remote, [], "d4a3fb00"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(0x4)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0x10, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x4}, &(0x7f0000000440)=0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'pim6reg\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000240))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'pim6reg\x00'})

892.984835ms ago: executing program 4 (id=172):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r3, &(0x7f000000b4c0)=[{{&(0x7f0000000000)=@caif=@dgm={0x25, 0x7, 0xf}, 0x80, &(0x7f0000003440)=[{&(0x7f0000000080)="fe0af462", 0x4}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

857.63798ms ago: executing program 2 (id=173):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000180)="8409a0914174205eba6941e8f4ac3011ec858788a382f5b67d089f4865f738c32511b60003861ae3fdc99384a0ada015838f51b1bd5a7f559e8ded80adcedfebe5f89b4250e8997267215922c96409d7b169bf7f40947615027b59a4e282d4f7d375323d38960f7a", 0x68, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48)

731.612052ms ago: executing program 0 (id=174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
listen(r2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async)

716.084387ms ago: executing program 1 (id=175):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x8)

627.250164ms ago: executing program 2 (id=176):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x25, 0x148, 0x138, 0x60, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x21a, 0x0, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

411.216076ms ago: executing program 1 (id=177):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0xd0, 0x10, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd0, 0x1c}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0xca25, 0xba, 0x0, 0x1f}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x280)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0xffffffffffffffff, {0x0, 0x1}}, 0x18)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x3a, 0xf9, 0x6}, 0x20)
sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r6, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x14)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x78}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0"], 0x90}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000007311ba0e53e2614b5476f3f54635dd1389743700000000008510000002000000850000007600000095000810000000009500a5050040"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000840)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @generic={0x7, 0x5, 0x0, 0x8, 0x80000000}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x1, 0x0, 0x3, 0x80, 0xfffffffffffffff0}], &(0x7f0000000980)='syzkaller\x00', 0xfffff163, 0x0, 0x0, 0x41000, 0x20, '\x00', r5, 0x15, r8, 0x8, &(0x7f00000009c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x1, 0x100, 0x7}, 0x10, 0x22b00, r7, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8)

409.484425ms ago: executing program 0 (id=178):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
getpeername$packet(r1, 0x0, 0x0)
write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async)
write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x0, 0x0, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000008000100020000"], 0x1c}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97) (async)
write$cgroup_int(r3, &(0x7f0000000200)=0x5, 0xfffffe97)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x14) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@rand_addr, <r4=>0x0}, &(0x7f0000000280)=0x14)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100))
write$ppp(r7, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x3, 0x1, 0x0, 0x0, 0x4b808, 0x1, 0x0, '\x00', 0x0, r0, 0x4, 0x3, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8af}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x4a, &(0x7f00000001c0)=""/74, 0x40f00, 0x0, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x5, 0x5d4f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r9]}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8af}]}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x4a, &(0x7f00000001c0)=""/74, 0x40f00, 0x0, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x5, 0x5d4f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r9]}, 0x94)

228.52517ms ago: executing program 4 (id=179):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x9}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="a4", 0x1, 0x2000c855, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @loopback, 0xffffffff}, 0x1c)

192.13362ms ago: executing program 3 (id=180):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010040000000000002034400000008"], 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r3=>0x0})
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x4, 0x20000000, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c)
sendto$inet6(r5, &(0x7f0000000780)='\r', 0x1, 0x6d91fb6102d8d9cc, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x2406e880, 0x0, 0x0)
recvfrom$inet6(r4, &(0x7f0000000100)=""/254, 0xfe, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @empty, 0xffffff5f}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000380)=0x6e, 0x0)
recvfrom$unix(r10, &(0x7f0000000540)=""/168, 0xa8, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2b0322bd7000fcdbdf250500000008000700", @ANYRES32, @ANYBLOB="0c0099000001000022000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9)
sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x16, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)

70.768258ms ago: executing program 2 (id=181):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140102040000000000000008004a0001000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r7, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x6, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf04004000000000e0ff1200000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a0006000802110000010000280011"], 0x64}, 0x1, 0x0, 0x0, 0x400}, 0x0)

0s ago: executing program 0 (id=182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x58, r1, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x5, 0x0, {0x8, 0xa83, 0x0, 0xa6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x7f}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0xfffd, 0xb62, 0x2, 0x3}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, r5, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts.
[   80.532060][ T5833] cgroup: Unknown subsys name 'net'
[   80.649773][ T5833] cgroup: Unknown subsys name 'cpuset'
[   80.658385][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.262193][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.081077][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.089415][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.109916][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.117923][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.125387][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.132827][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.136048][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.148672][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.156240][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.164371][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.172405][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.186762][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.194111][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.194757][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.201743][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.209070][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.216138][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.225287][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.229695][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.237185][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.268830][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.276764][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.284266][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.293459][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.301528][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.963871][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   87.077961][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   87.110409][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   87.245702][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   87.261653][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   87.411018][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.418801][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.426039][ T5854] bridge_slave_0: entered allmulticast mode
[   87.433601][ T5854] bridge_slave_0: entered promiscuous mode
[   87.465124][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.472333][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.479926][ T5861] bridge_slave_0: entered allmulticast mode
[   87.487342][ T5861] bridge_slave_0: entered promiscuous mode
[   87.500044][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.507346][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.514600][ T5854] bridge_slave_1: entered allmulticast mode
[   87.521792][ T5854] bridge_slave_1: entered promiscuous mode
[   87.545819][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.553003][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.560434][ T5848] bridge_slave_0: entered allmulticast mode
[   87.567667][ T5848] bridge_slave_0: entered promiscuous mode
[   87.575229][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.582798][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.590208][ T5848] bridge_slave_1: entered allmulticast mode
[   87.598469][ T5848] bridge_slave_1: entered promiscuous mode
[   87.605266][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.612607][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.619834][ T5861] bridge_slave_1: entered allmulticast mode
[   87.627442][ T5861] bridge_slave_1: entered promiscuous mode
[   87.703622][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.711040][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.720718][ T5853] bridge_slave_0: entered allmulticast mode
[   87.728155][ T5853] bridge_slave_0: entered promiscuous mode
[   87.738195][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.750661][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.789729][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.797107][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.804246][ T5853] bridge_slave_1: entered allmulticast mode
[   87.811525][ T5853] bridge_slave_1: entered promiscuous mode
[   87.844605][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.856524][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.868098][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.880849][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.960960][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.972496][ T5854] team0: Port device team_slave_0 added
[   87.982298][ T5854] team0: Port device team_slave_1 added
[   87.988421][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.995788][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.004386][ T5855] bridge_slave_0: entered allmulticast mode
[   88.011844][ T5855] bridge_slave_0: entered promiscuous mode
[   88.047212][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.092730][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.099951][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.107606][ T5855] bridge_slave_1: entered allmulticast mode
[   88.114616][ T5855] bridge_slave_1: entered promiscuous mode
[   88.123863][ T5848] team0: Port device team_slave_0 added
[   88.133335][ T5848] team0: Port device team_slave_1 added
[   88.141715][ T5861] team0: Port device team_slave_0 added
[   88.160485][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.167601][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.193775][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.217594][ T5857] Bluetooth: hci1: command tx timeout
[   88.250710][ T5861] team0: Port device team_slave_1 added
[   88.259792][ T5853] team0: Port device team_slave_0 added
[   88.278324][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.285272][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.297405][ T5852] Bluetooth: hci2: command tx timeout
[   88.316055][ T5860] Bluetooth: hci3: command tx timeout
[   88.316626][ T5857] Bluetooth: hci0: command tx timeout
[   88.327940][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.347647][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.369314][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.376266][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.376509][ T5857] Bluetooth: hci4: command tx timeout
[   88.406585][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.421196][ T5853] team0: Port device team_slave_1 added
[   88.444684][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.467532][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.474493][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.503438][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.527299][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.534255][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.560980][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.573175][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.580360][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.606670][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.682548][ T5855] team0: Port device team_slave_0 added
[   88.691053][ T5855] team0: Port device team_slave_1 added
[   88.697866][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.704881][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.731798][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.749003][ T5854] hsr_slave_0: entered promiscuous mode
[   88.755407][ T5854] hsr_slave_1: entered promiscuous mode
[   88.805053][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.812324][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.838791][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.898754][ T5848] hsr_slave_0: entered promiscuous mode
[   88.904979][ T5848] hsr_slave_1: entered promiscuous mode
[   88.911399][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.919137][ T5848] Cannot create hsr debugfs directory
[   88.944493][ T5861] hsr_slave_0: entered promiscuous mode
[   88.951291][ T5861] hsr_slave_1: entered promiscuous mode
[   88.958301][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.965874][ T5861] Cannot create hsr debugfs directory
[   88.985552][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.992605][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.018834][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.031305][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.038829][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.064790][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.164693][ T5853] hsr_slave_0: entered promiscuous mode
[   89.171736][ T5853] hsr_slave_1: entered promiscuous mode
[   89.178233][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.185806][ T5853] Cannot create hsr debugfs directory
[   89.364338][ T5855] hsr_slave_0: entered promiscuous mode
[   89.371241][ T5855] hsr_slave_1: entered promiscuous mode
[   89.377658][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.385231][ T5855] Cannot create hsr debugfs directory
[   89.809956][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   89.822172][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   89.844922][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   89.869340][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   89.929042][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.944888][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.957494][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.980512][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.047920][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.065669][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.092403][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.103737][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.179711][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.193081][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.213483][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.250789][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.296901][ T5857] Bluetooth: hci1: command tx timeout
[   90.338711][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.362011][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.375159][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.382980][ T5857] Bluetooth: hci3: command tx timeout
[   90.389407][ T5852] Bluetooth: hci0: command tx timeout
[   90.389418][ T5860] Bluetooth: hci2: command tx timeout
[   90.403807][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.414388][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.450982][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   90.457722][ T5852] Bluetooth: hci4: command tx timeout
[   90.471436][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.514187][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.521359][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.554142][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.561301][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.590601][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   90.620951][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.628161][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.652659][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.659849][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.719004][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.740033][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.801335][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   90.832018][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.839181][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.872614][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   90.882764][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.889954][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.944034][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.951195][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.014261][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.021458][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.071832][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.162017][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   91.192574][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.235660][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.242857][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.318882][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.326085][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.445476][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.626208][ T5848] veth0_vlan: entered promiscuous mode
[   91.666229][  T978] cfg80211: failed to load regulatory.db
[   91.717398][ T5848] veth1_vlan: entered promiscuous mode
[   91.791022][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.805034][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.857804][ T5848] veth0_macvtap: entered promiscuous mode
[   91.874987][ T5848] veth1_macvtap: entered promiscuous mode
[   91.942946][ T5861] veth0_vlan: entered promiscuous mode
[   91.984097][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.002327][ T5854] veth0_vlan: entered promiscuous mode
[   92.009185][ T5861] veth1_vlan: entered promiscuous mode
[   92.024841][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.050297][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.059836][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.069040][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.078678][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.111103][ T5854] veth1_vlan: entered promiscuous mode
[   92.119517][ T5853] veth0_vlan: entered promiscuous mode
[   92.134996][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.205601][ T5853] veth1_vlan: entered promiscuous mode
[   92.214106][ T5861] veth0_macvtap: entered promiscuous mode
[   92.251292][ T5861] veth1_macvtap: entered promiscuous mode
[   92.260814][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.279281][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.325933][ T5854] veth0_macvtap: entered promiscuous mode
[   92.362048][ T5853] veth0_macvtap: entered promiscuous mode
[   92.369499][ T5854] veth1_macvtap: entered promiscuous mode
[   92.377871][ T5852] Bluetooth: hci1: command tx timeout
[   92.398467][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.410390][ T5853] veth1_macvtap: entered promiscuous mode
[   92.421954][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.437043][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.445786][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.453297][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.456534][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.471133][ T5852] Bluetooth: hci3: command tx timeout
[   92.474517][ T5857] Bluetooth: hci2: command tx timeout
[   92.476621][ T5852] Bluetooth: hci0: command tx timeout
[   92.482990][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.499177][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.510124][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.534418][ T5855] veth0_vlan: entered promiscuous mode
[   92.541238][ T5852] Bluetooth: hci4: command tx timeout
[   92.564693][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.593485][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.596226][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.610662][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.627814][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.636652][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.650770][ T5855] veth1_vlan: entered promiscuous mode
[   92.685111][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.735717][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.813378][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.815176][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   92.825805][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.832726][ T5967] netlink: 'syz.0.1': attribute type 3 has an invalid length.
[   92.843470][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.853494][ T5967] ieee802154 phy0 wpan0: encryption failed: -22
[   92.863486][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.961656][ T5855] veth0_macvtap: entered promiscuous mode
[   92.981455][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.994049][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.012843][ T5855] veth1_macvtap: entered promiscuous mode
[   93.039871][ T5970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'.
[   93.050596][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.051473][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.066268][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.080014][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.103758][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.121883][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.145088][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.164635][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.241797][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.270267][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.286899][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.295403][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.434284][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.476362][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.539016][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.565791][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.573574][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.579508][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.641449][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.650414][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.816947][ T5984] netlink: 'syz.4.9': attribute type 1 has an invalid length.
[   93.971190][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   94.026116][ T5986] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.4'.
[   94.163365][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   94.459114][ T5852] Bluetooth: hci1: command tx timeout
[   94.472726][ T6010] bond1: entered promiscuous mode
[   94.477831][ T6010] bond1: entered allmulticast mode
[   94.483636][ T6010] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.537482][ T5857] Bluetooth: hci2: command tx timeout
[   94.543097][ T5860] Bluetooth: hci3: command tx timeout
[   94.545892][ T6016] Zero length message leads to an empty skb
[   94.549631][ T5852] Bluetooth: hci0: command tx timeout
[   94.592228][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.616834][ T5852] Bluetooth: hci4: command tx timeout
[   94.820303][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.849078][ T6036] xt_cgroup: path and classid specified
[   94.881298][ T6041] tipc: Trying to set illegal importance in message
[   95.112779][ T6048] netlink: 52 bytes leftover after parsing attributes in process `syz.1.24'.
[   95.400966][ T6062] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET)
[   95.635669][ T6073] netlink: 3 bytes leftover after parsing attributes in process `syz.3.31'.
[   95.684477][ T6074] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   95.753889][ T6078] netlink: 'syz.2.32': attribute type 142 has an invalid length.
[   95.813199][ T6080] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   95.815453][ T6071] team0: Port device ip6gretap1 added
[   95.966905][ T6074] veth3: entered promiscuous mode
[   95.988714][ T6070] syz.0.30 (6070) used greatest stack depth: 19880 bytes left
[   95.995260][ T6074] team0: Port device veth3 added
[   96.322399][ T6099] Bluetooth: MGMT ver 1.23
[   96.972663][ T6128] netlink: 'syz.4.47': attribute type 33 has an invalid length.
[   97.022613][ T6128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.47'.
[   97.060293][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'.
[   97.269701][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   98.269784][ T6192] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.283828][ T6192] netlink: 'syz.3.63': attribute type 18 has an invalid length.
[   98.315612][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'.
[   98.342108][ T6192] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.351070][ T6192] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.359822][ T6192] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.368602][ T6192] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.651349][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'.
[   98.678608][ T6208] bond0: entered promiscuous mode
[   98.686109][ T6208] bond_slave_0: entered promiscuous mode
[   98.721665][ T6208] bond_slave_1: entered promiscuous mode
[   98.733792][ T6208] batadv0: entered promiscuous mode
[   98.768293][ T6208] 8021q: adding VLAN 0 to HW filter on device hsr1
[   98.809882][ T6216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.71'.
[   98.857882][ T6208] bond0: left promiscuous mode
[   98.862693][ T6208] bond_slave_0: left promiscuous mode
[   98.900770][ T6208] bond_slave_1: left promiscuous mode
[   98.915013][ T6208] batadv0: left promiscuous mode
[   99.101178][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   99.317024][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'.
[   99.373233][ T6244] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   99.400449][ T6246] netlink: 'syz.0.76': attribute type 15 has an invalid length.
[   99.414679][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.75'.
[   99.416905][ T6243] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   99.440166][ T5937] IPVS: starting estimator thread 0...
[   99.455029][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'.
[   99.556446][ T6248] IPVS: using max 28 ests per chain, 67200 per kthread
[   99.632827][ T6254] netlink: 'syz.3.77': attribute type 1 has an invalid length.
[   99.694136][ T6256] netlink: 'syz.0.78': attribute type 11 has an invalid length.
[   99.729805][ T6256] netlink: 'syz.0.78': attribute type 11 has an invalid length.
[   99.761763][ T6256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.78'.
[   99.813830][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   99.837153][ T6260] netlink: 68 bytes leftover after parsing attributes in process `syz.2.79'.
[  100.055411][ T6271] netlink: 'syz.0.83': attribute type 10 has an invalid length.
[  100.106143][ T6274] netlink: 'syz.0.83': attribute type 10 has an invalid length.
[  100.158282][ T6271] bridge0: port 3(team0) entered blocking state
[  100.187186][ T6278] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  100.197778][ T6271] bridge0: port 3(team0) entered disabled state
[  100.204198][ T6271] team0: entered allmulticast mode
[  100.262650][ T6271] team_slave_0: entered allmulticast mode
[  100.284000][ T6271] team_slave_1: entered allmulticast mode
[  100.295367][ T6271] team0: entered promiscuous mode
[  100.305177][ T6271] team_slave_0: entered promiscuous mode
[  100.312122][ T6271] team_slave_1: entered promiscuous mode
[  100.323467][ T6271] bridge0: port 3(team0) entered blocking state
[  100.330004][ T6271] bridge0: port 3(team0) entered forwarding state
[  100.359339][ T6275] netlink: 'syz.2.84': attribute type 5 has an invalid length.
[  100.562125][ T6287] tipc: Started in network mode
[  100.573604][ T6287] tipc: Node identity 02a49053a188, cluster identity 4711
[  100.586012][ T6289] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[  100.598063][ T6287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.614739][ T6287] tipc: Resetting bearer <eth:syzkaller0>
[  100.689107][ T6286] tipc: Disabling bearer <eth:syzkaller0>
[  100.721925][ T6289] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  101.007570][ T6312] bridge0: port 3(syz_tun) entered blocking state
[  101.030226][ T6312] bridge0: port 3(syz_tun) entered disabled state
[  101.042629][ T6312] syz_tun: entered allmulticast mode
[  101.075460][ T6312] syz_tun: entered promiscuous mode
[  101.111731][ T6312] bridge0: port 3(syz_tun) entered blocking state
[  101.118518][ T6312] bridge0: port 3(syz_tun) entered forwarding state
[  101.167300][ T6310] vlan2: entered promiscuous mode
[  101.177203][ T6310] vlan2: entered allmulticast mode
[  101.182838][ T6310] hsr_slave_1: entered allmulticast mode
[  101.213665][ T6319] gtp0: entered promiscuous mode
[  101.226375][ T6319] gtp0: entered allmulticast mode
[  101.303937][ T6323] xt_ipcomp: unknown flags B
[  101.318743][ T6323] x_tables: duplicate underflow at hook 1
[  101.400738][ T6329] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[  101.531300][ T6332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.960818][ T6357] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[  101.961674][ T6359] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[  101.970070][ T6358] trusted_key: syz.0.112 sent an empty control message without MSG_MORE.
[  102.134282][ T6368] x_tables: duplicate underflow at hook 1
[  102.666812][ T6395] x_tables: duplicate underflow at hook 2
[  102.690402][ T6397] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  102.932606][ T6404] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  102.939260][ T6404] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  103.006846][ T6411] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  103.523424][ T6440] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.030908][ T6455] vlan2: entered allmulticast mode
[  104.036082][ T6455] team0: entered allmulticast mode
[  104.056670][ T6455] team_slave_0: entered allmulticast mode
[  104.072696][ T6455] team_slave_1: entered allmulticast mode
[  104.091180][ T6455] ip6gretap1: entered allmulticast mode
[  104.103617][ T6455] veth3: entered allmulticast mode
[  104.317056][ T6462] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.378613][ T6463] __nla_validate_parse: 14 callbacks suppressed
[  104.378632][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'.
[  104.449738][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'.
[  104.496796][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'.
[  104.516538][ T6472] Bluetooth: MGMT ver 1.23
[  104.657110][ T6477] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.154'.
[  104.901854][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[  105.206190][ T6503] tipc: Started in network mode
[  105.216091][ T6503] tipc: Node identity ba0c2acfa506, cluster identity 4711
[  105.234286][ T6503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.272526][ T6500] tipc: Disabling bearer <eth:syzkaller0>
[  105.298992][ T6505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.526557][ T6519] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  105.586552][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'.
[  105.720983][ T6527] bridge_slave_0: left allmulticast mode
[  105.726790][ T6527] bridge_slave_0: left promiscuous mode
[  105.743791][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.786110][ T6527] bridge_slave_1: left allmulticast mode
[  105.813130][ T6527] bridge_slave_1: left promiscuous mode
[  105.827311][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.920907][ T6527] bond0: (slave bond_slave_0): Releasing backup interface
[  105.982415][ T6527] bond0: (slave bond_slave_1): Releasing backup interface
[  106.023083][ T6527] team0: Port device team_slave_0 removed
[  106.073523][ T6527] team0: Port device team_slave_1 removed
[  106.090116][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.114104][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.142807][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.152290][ T6527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.155720][ T6551] xt_HMARK: spi-set and port-set can't be combined
[  106.180650][    C0] Unknown status report in ack skb
[  106.197895][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.213324][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.224080][ T6552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.178'.
[  106.313813][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.336472][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.414136][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.435239][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.464337][   T13] ------------[ cut here ]------------
[  106.470206][   T13] WARNING: CPU: 0 PID: 13 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440
[  106.480004][   T13] Modules linked in:
[  106.484036][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) 
[  106.496618][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.503506][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[  106.507003][   T13] Workqueue: cfg80211 cfg80211_event_work
[  106.507072][   T13] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  106.507099][   T13] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 dd a2 00 cc e8 12 01 f1 f6 90 0f 0b 90 eb bd e8 07 01 f1 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 f7 00 f1 f6 90 0f 0b 90 e9 de fd
[  106.507119][   T13] RSP: 0018:ffffc900001278e0 EFLAGS: 00010293
[  106.507142][   T13] RAX: ffffffff8acf3569 RBX: dffffc0000000000 RCX: ffff88801d2b8000
[  106.564086][   T13] RDX: 0000000000000000 RSI: ffffffff8d998b0c RDI: ffffffff8be29dc0
[  106.572198][   T13] RBP: ffffc900001279b8 R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  106.580248][   T13] R10: dffffc0000000000 R11: fffffbfff1f43e7f R12: ffff888058164d90
[  106.588300][   T13] R13: 1ffff92000024f24 R14: ffff8880587db338 R15: 0000000000000006
[  106.596351][   T13] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  106.605306][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.611960][   T13] CR2: 000020000000e000 CR3: 0000000034972000 CR4: 00000000003526f0
[  106.619990][   T13] Call Trace:
[  106.623286][   T13]  <TASK>
[  106.626219][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.631520][   T13]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  106.637826][   T13]  ? cfg80211_event_work+0x24/0x60
[  106.642977][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  106.648470][   T13]  cfg80211_process_wdev_events+0x38a/0x4f0
[  106.654406][   T13]  cfg80211_process_rdev_events+0xa1/0x110
[  106.660352][   T13]  cfg80211_event_work+0x2c/0x60
[  106.665312][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  106.671249][   T13]  process_scheduled_works+0xae1/0x17b0
[  106.676896][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.682938][   T13]  worker_thread+0x8a0/0xda0
[  106.687704][   T13]  kthread+0x70e/0x8a0
[  106.691832][   T13]  ? __pfx_worker_thread+0x10/0x10
[  106.697173][   T13]  ? __pfx_kthread+0x10/0x10
[  106.701823][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.707196][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.712447][   T13]  ? __pfx_kthread+0x10/0x10
[  106.717212][   T13]  ret_from_fork+0x3fc/0x770
[  106.721855][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  106.727078][   T13]  ? __switch_to_asm+0x39/0x70
[  106.731900][   T13]  ? __switch_to_asm+0x33/0x70
[  106.737237][   T13]  ? __pfx_kthread+0x10/0x10
[  106.741883][   T13]  ret_from_fork_asm+0x1a/0x30
[  106.747190][   T13]  </TASK>
[  106.750249][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  106.757562][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00182-g7727ec1523d7 #0 PREEMPT(full) 
[  106.769590][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.779658][   T13] Workqueue: cfg80211 cfg80211_event_work
[  106.785412][   T13] Call Trace:
[  106.788713][   T13]  <TASK>
[  106.791652][   T13]  dump_stack_lvl+0x99/0x250
[  106.796251][   T13]  ? __asan_memcpy+0x40/0x70
[  106.800842][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.806048][   T13]  ? __pfx__printk+0x10/0x10
[  106.810680][   T13]  panic+0x2db/0x790
[  106.814620][   T13]  ? __pfx_panic+0x10/0x10
[  106.819063][   T13]  ? show_trace_log_lvl+0x4fb/0x550
[  106.824300][   T13]  ? ret_from_fork_asm+0x1a/0x30
[  106.829249][   T13]  __warn+0x31b/0x4b0
[  106.833238][   T13]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  106.838799][   T13]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  106.844371][   T13]  report_bug+0x2be/0x4f0
[  106.848711][   T13]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  106.854254][   T13]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  106.859807][   T13]  ? __cfg80211_ibss_joined+0x3cc/0x440
[  106.865379][   T13]  handle_bug+0x84/0x160
[  106.869634][   T13]  exc_invalid_op+0x1a/0x50
[  106.874145][   T13]  asm_exc_invalid_op+0x1a/0x20
[  106.878998][   T13] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  106.885161][   T13] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 dd a2 00 cc e8 12 01 f1 f6 90 0f 0b 90 eb bd e8 07 01 f1 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 f7 00 f1 f6 90 0f 0b 90 e9 de fd
[  106.904776][   T13] RSP: 0018:ffffc900001278e0 EFLAGS: 00010293
[  106.910854][   T13] RAX: ffffffff8acf3569 RBX: dffffc0000000000 RCX: ffff88801d2b8000
[  106.918833][   T13] RDX: 0000000000000000 RSI: ffffffff8d998b0c RDI: ffffffff8be29dc0
[  106.926806][   T13] RBP: ffffc900001279b8 R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  106.934786][   T13] R10: dffffc0000000000 R11: fffffbfff1f43e7f R12: ffff888058164d90
[  106.942766][   T13] R13: 1ffff92000024f24 R14: ffff8880587db338 R15: 0000000000000006
[  106.950752][   T13]  ? __cfg80211_ibss_joined+0x3c9/0x440
[  106.956342][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.961587][   T13]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  106.967492][   T13]  ? cfg80211_event_work+0x24/0x60
[  106.972616][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  106.977656][   T13]  cfg80211_process_wdev_events+0x38a/0x4f0
[  106.983574][   T13]  cfg80211_process_rdev_events+0xa1/0x110
[  106.989389][   T13]  cfg80211_event_work+0x2c/0x60
[  106.994327][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  107.000050][   T13]  process_scheduled_works+0xae1/0x17b0
[  107.005622][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.011623][   T13]  worker_thread+0x8a0/0xda0
[  107.016233][   T13]  kthread+0x70e/0x8a0
[  107.020317][   T13]  ? __pfx_worker_thread+0x10/0x10
[  107.025435][   T13]  ? __pfx_kthread+0x10/0x10
[  107.030033][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.035246][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.040453][   T13]  ? __pfx_kthread+0x10/0x10
[  107.045050][   T13]  ret_from_fork+0x3fc/0x770
[  107.049650][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  107.054766][   T13]  ? __switch_to_asm+0x39/0x70
[  107.059545][   T13]  ? __switch_to_asm+0x33/0x70
[  107.064344][   T13]  ? __pfx_kthread+0x10/0x10
[  107.068974][   T13]  ret_from_fork_asm+0x1a/0x30
[  107.073790][   T13]  </TASK>
[  107.077136][   T13] Kernel Offset: disabled
[  107.081469][   T13] Rebooting in 86400 seconds..