last executing test programs:

2.72958033s ago: executing program 2 (id=3):
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24008000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

2.601250001s ago: executing program 2 (id=5):
syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x4000000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
listen(r4, 0x9)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000008974c04a4d29b37bc3de7f096d733d8a34c4d901ab37f191419fa5b8166a975736261ac7d902bb9c064712b7bf6affe72fc84447abe7ea50088f613e7e98b8d9b91adf77d0a9a175d857209d2f739c91269f76e6a2cf810503a2797ce6721f4b3c04a44c8aa73b36681d600f4ae53da4f53a8b53b4e6d3610c4345ad4315d9742e6d6408d4edc7f88cfd56b8a4650bfff25bab9f4e60955848bbc31bf4710d35a7b7ddbb35", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r14=>0x0})
setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f0000000080)={r14, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f00000001c0)={r14, 0x1, 0x6}, 0x10)
close(0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0)

2.343291767s ago: executing program 2 (id=7):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2e56a2b8}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1700000004001000040162000b00000001000000", @ANYRES32, @ANYBLOB="008b5700000000000038c62328735dede0f72eae5f4d725ae2768a58103529767195a6165b75ad7d2444788f649c4bad2dab73205b8833ddbb994e92d887e2ee085025ae640ed5be6f30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)

1.52442129s ago: executing program 1 (id=15):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x7, 0x4000000}]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0xc3b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x242}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x7f}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
close(r3)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x24, r11, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x18c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x60, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x0, 0x0, {0x5, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x309, 0x0, 0xab}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}]}, @NL80211_ATTR_PROBE_RESP={0x4f, 0x91, "0f809861b820881a68191778d63886fd3714ff5bdd52f69087cf6208a1cbf3a506fabe433593fc82c9a1634458d7b8323d29b8b5f240acc64e1829ce1c466941814ac195488b9227eb9c75"}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

1.442148931s ago: executing program 0 (id=16):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x24004040)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040), 0x0, <r5=>0x0, &(0x7f0000000080)=""/132, 0x84}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='qi_submit\x00', r6, 0x0, 0x9}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0d631000000002307a9491b86a53f7d21e3f2254afad971a5600eb1f212a4aad387eef08386169d79640e8b5dff0000000008000000000000008000000000000000000000005a45f69541dcdfbd400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
r10 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r10, 0x0, 0x700, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e23, 0x1ff, @loopback}, 0x1c)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000040000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x24004011}, 0x4006800)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="b361e8cc1156ab917ddff9070035d9", @ANYRES16=r14, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r15, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES8=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000033a7156a000000000000"], 0x48)

1.440074717s ago: executing program 1 (id=17):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd88, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)

1.35065391s ago: executing program 1 (id=18):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000103e7ff84000000870000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.305588268s ago: executing program 1 (id=19):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a0104000000f5000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)

1.297244878s ago: executing program 0 (id=20):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x88c0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x20040804) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async, rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x10}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.209581055s ago: executing program 1 (id=21):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042dbd7000fddbdf2501000000080008007f00000114000500ff0100000000000000000000000000012e87662cc7f9ef9c3499e9576ed52c066bc02a57db665e10ac2114b144be39da36262f40bc115037e5a342f812c2806df416f9ea2199f601fdc6a70e90b64757b5bfdc9e7dccca8e375586fd4a16715cfb41a84fddd4c7ec10c239697c3bd5849f7b58765e3b2188dac981534014e6abf6231100fa25196d15fa713ee471e38dc7e691fb3c9413d39572d1c1e4f114"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="90", 0x1}, {0x0, 0x2e}], 0x2}, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.208355264s ago: executing program 0 (id=22):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
epoll_create1(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
shutdown(r4, 0x1)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r6=>0x0, 0x700, 0x80, 0xf410, 0x2, {{0xd, 0x4, 0x1, 0x13, 0x34, 0x66, 0x0, 0xc1, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x1b, 0x96, [@local, @empty, @local, @multicast2, @multicast2, @empty]}, @end, @ra={0x94, 0x4}]}}}}})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x5, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @enum64={0xa, 0x8, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x7, 0x3}, {0x5, 0x6, 0x5}, {0xf, 0x1, 0x2}, {0xd, 0x4, 0x6}, {0x10, 0xfff, 0xce}, {0x10, 0x80, 0x9}, {0x6, 0xc, 0xffff}, {0x3, 0x2, 0x5}]}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000000580)=""/248, 0xa5, 0xf8, 0x1, 0xbb, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], <r8=>0x0, 0x3e, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x34, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0x8, 0x8, 0x8, 0x20, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x4, 0x2, 0xfffffffffffffff8, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0xa8, &(0x7f0000000300)=""/168, 0x41100, 0x22, '\x00', r6, @fallback=0x2f, r7, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x5, 0x9cf, 0x7}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r9], &(0x7f0000000ac0)=[{0x1, 0x1, 0x6, 0x7}, {0x1, 0x1, 0x2, 0xd}], 0x10, 0x9}, 0x94)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x27d}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

920.60855ms ago: executing program 1 (id=23):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x400, 0x4, 0xa9, 0xffffffffffffffff, 0x6f, '\x00', 0x0, r2, 0x2, 0x2, 0x4, 0xb}, 0x50)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000240)={0x1, 0x7b0, 0x9, 0x8, 0x445f})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000180)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x17}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x34}]}}, @timestamp={0xd, 0x0, 0x0, 0x3a, 0x1, 0x8f8b, 0x80000000, 0xa37}}}, 0x3a)

217.809511ms ago: executing program 0 (id=24):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffff, 0xffff}, {0xc, 0x2}}}, 0x24}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg(r2, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0)

48.688795ms ago: executing program 0 (id=25):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x27, &(0x7f0000000340)={&(0x7f0000000080)={0xffffffffffffff3b, r1, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x27, &(0x7f0000000340)={&(0x7f0000000080)={0xffffffffffffff3b, r1, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) (async)

0s ago: executing program 0 (id=26):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f7, &(0x7f0000000100)={'ip6_vti0\x00', 0x0})
r5 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
write$tun(r2, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_getaddr={0x20, 0x16, 0x2, 0x70bd25, 0x25dfdbff, {0xa, 0x38, 0x20, 0x0, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3228' (ED25519) to the list of known hosts.
syzkaller login: [   49.959391][ T5781] cgroup: Unknown subsys name 'net'
[   50.065110][ T5781] cgroup: Unknown subsys name 'cpuset'
[   50.070611][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.400472][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.602737][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.606232][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.609174][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.613541][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.616058][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.633817][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.637757][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.641272][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.644670][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.648380][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.678024][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.682851][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.685804][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.689990][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.697195][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.954560][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   57.996236][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   58.094794][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   58.145941][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.148466][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.151107][ T5843] bridge_slave_0: entered allmulticast mode
[   58.154527][ T5843] bridge_slave_0: entered promiscuous mode
[   58.181863][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.184182][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.186444][ T5843] bridge_slave_1: entered allmulticast mode
[   58.189260][ T5843] bridge_slave_1: entered promiscuous mode
[   58.208423][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.210749][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.213906][ T5847] bridge_slave_0: entered allmulticast mode
[   58.217040][ T5847] bridge_slave_0: entered promiscuous mode
[   58.236698][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.242326][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.245915][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.248306][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.250667][ T5847] bridge_slave_1: entered allmulticast mode
[   58.255461][ T5847] bridge_slave_1: entered promiscuous mode
[   58.310005][ T5843] team0: Port device team_slave_0 added
[   58.321929][ T5843] team0: Port device team_slave_1 added
[   58.332928][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.335415][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.337978][ T5851] bridge_slave_0: entered allmulticast mode
[   58.340775][ T5851] bridge_slave_0: entered promiscuous mode
[   58.347866][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.360449][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.363045][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.365329][ T5851] bridge_slave_1: entered allmulticast mode
[   58.368354][ T5851] bridge_slave_1: entered promiscuous mode
[   58.374665][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.378029][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.380209][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.389342][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.419865][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.422896][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.433098][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.438458][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.443492][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.456874][ T5847] team0: Port device team_slave_0 added
[   58.460671][ T5847] team0: Port device team_slave_1 added
[   58.505275][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.507630][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.516091][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.530108][ T5851] team0: Port device team_slave_0 added
[   58.533799][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.536478][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.547096][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.563499][ T5851] team0: Port device team_slave_1 added
[   58.569576][ T5843] hsr_slave_0: entered promiscuous mode
[   58.572587][ T5843] hsr_slave_1: entered promiscuous mode
[   58.599315][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.602519][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.612541][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.618916][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.622779][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.631837][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.674110][ T5847] hsr_slave_0: entered promiscuous mode
[   58.676373][ T5847] hsr_slave_1: entered promiscuous mode
[   58.678507][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   58.680356][ T5847] Cannot create hsr debugfs directory
[   58.776032][ T5851] hsr_slave_0: entered promiscuous mode
[   58.778712][ T5851] hsr_slave_1: entered promiscuous mode
[   58.781912][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   58.784123][ T5851] Cannot create hsr debugfs directory
[   59.061330][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.069930][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.076359][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.081529][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.123241][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.130813][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.140366][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.148744][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.216237][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.232583][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.237446][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.246626][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.279649][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.306821][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   59.317707][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.320095][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.334102][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.337059][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.387969][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.415658][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   59.432289][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.434891][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.454916][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.457872][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.477870][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.522304][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   59.535654][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.538180][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.554366][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.556666][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.647102][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.696160][ T5846] Bluetooth: hci1: command tx timeout
[   59.698826][ T5846] Bluetooth: hci0: command tx timeout
[   59.715064][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.759488][ T5843] veth0_vlan: entered promiscuous mode
[   59.771586][ T5846] Bluetooth: hci2: command tx timeout
[   59.779010][ T5843] veth1_vlan: entered promiscuous mode
[   59.793991][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.812791][ T5851] veth0_vlan: entered promiscuous mode
[   59.825447][ T5843] veth0_macvtap: entered promiscuous mode
[   59.837693][ T5843] veth1_macvtap: entered promiscuous mode
[   59.853301][ T5851] veth1_vlan: entered promiscuous mode
[   59.866806][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.876285][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.890331][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.908662][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.912194][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.914902][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.919489][ T5847] veth0_vlan: entered promiscuous mode
[   59.936182][ T5851] veth0_macvtap: entered promiscuous mode
[   59.963659][ T5851] veth1_macvtap: entered promiscuous mode
[   59.974201][ T5847] veth1_vlan: entered promiscuous mode
[   60.017503][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.020736][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.024631][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.029201][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.054166][ T5847] veth0_macvtap: entered promiscuous mode
[   60.077274][ T5847] veth1_macvtap: entered promiscuous mode
[   60.089192][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.095563][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.103648][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.104921][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.106737][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.110144][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.130209][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.147214][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.197194][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.200576][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.218995][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.226430][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.232714][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.277163][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.290612][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.296999][ T5910] IPv6: NLM_F_REPLACE set, but no existing node found!
[   60.323088][ T5910] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2'.
[   60.332360][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.335525][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.448751][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.458682][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.484334][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.488680][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.625964][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.629310][ T5923] openvswitch: netlink: Flow actions attr not present in new flow.
[   60.725316][ T5924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.775959][ T5928] batadv_slave_0: entered promiscuous mode
[   60.861109][ T5927] batadv_slave_0: left promiscuous mode
[   60.900377][ T5938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'.
[   60.950553][ T5938] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   61.013848][ T5938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'.
[   61.035697][ T5941] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.049467][ T5945] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.096055][ T5945] Illegal XDP return value 16128 on prog  (id 7) dev lo, expect packet loss!
[   61.099868][ T5943] syzkaller1: entered promiscuous mode
[   61.103234][ T5943] syzkaller1: entered allmulticast mode
[   61.252688][ T5954] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.379548][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'.
[   61.386143][ T5961] openvswitch: netlink: Flow actions attr not present in new flow.
[   61.514716][ T5963] ip6tnl1: entered promiscuous mode
[   61.516921][ T5963] ip6tnl1: entered allmulticast mode
[   61.520663][ T5963] team0: Device ip6tnl1 is of different type
[   61.676699][ T5970] batadv_slave_0: entered promiscuous mode
[   61.697072][ T5969] batadv_slave_0: left promiscuous mode
[   61.737066][ T5941] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.782521][ T5850] Bluetooth: hci1: command tx timeout
[   61.785901][ T5846] Bluetooth: hci0: command tx timeout
[   61.839440][ T5979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'.
[   61.851212][ T5846] Bluetooth: hci2: command tx timeout
[   61.894159][ T5979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'.
[   62.049190][ T5990] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   62.397748][ T6005] syzkaller1: entered promiscuous mode
[   62.399930][ T6005] syzkaller1: entered allmulticast mode
[   63.155275][ T5941] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.224655][ T5941] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.296655][ T5941] BUG: unable to handle page fault for address: ffff8881a3c21020
[   63.299172][ T5941] #PF: supervisor write access in kernel mode
[   63.301438][ T5941] #PF: error_code(0x0002) - not-present page
[   63.304034][ T5941] PGD 1a201067 P4D 1a201067 PUD 0 
[   63.305674][ T5941] Oops: Oops: 0002 [#1] SMP KASAN PTI
[   63.307399][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.2.7 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   63.311597][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.314708][ T5941] RIP: 0010:nsim_queue_free+0xdc/0x150
[   63.316486][ T5941] Code: 10 cd bd 8d 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 99 0d fb 49 8b 07 48 8b 0c 24 <4a> 01 4c 28 20 4c 89 f7 be 00 02 00 00 e8 32 6a 6f fa 4c 89 e7 be
[   63.322460][ T5941] RSP: 0018:ffffc900045cede0 EFLAGS: 00010246
[   63.324336][ T5941] RAX: ffff8881a3c21000 RBX: ffff88810e4b1800 RCX: 0000000000000000
[   63.326820][ T5941] RDX: ffffc90004151000 RSI: 000000000004d37f RDI: 000000000004d380
[   63.329313][ T5941] RBP: 0000000000000001 R08: ffffffff8e1e58e7 R09: 1ffffffff1c3cb1c
[   63.331731][ T5941] R10: dffffc0000000000 R11: fffffbfff1c3cb1d R12: ffff88810e4b1a18
[   63.334220][ T5941] R13: 0000000000000000 R14: ffffffff87157be3 R15: ffffffff8dbdcd18
[   63.336673][ T5941] FS:  00007f6f384b76c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[   63.339400][ T5941] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.341463][ T5941] CR2: ffff8881a3c21020 CR3: 0000000028da2000 CR4: 00000000000006f0
[   63.343903][ T5941] Call Trace:
[   63.344968][ T5941]  <TASK>
[   63.345903][ T5941]  nsim_create+0xbbf/0xf10
[   63.347313][ T5941]  __nsim_dev_port_add+0x6b6/0xb10
[   63.348924][ T5941]  ? __pfx___nsim_dev_port_add+0x10/0x10
[   63.350684][ T5941]  ? queue_delayed_work_on+0x1f7/0x280
[   63.352370][ T5941]  ? __pfx_queue_delayed_work_on+0x10/0x10
[   63.354181][ T5941]  ? timer_init_key+0x171/0x2d0
[   63.355697][ T5941]  nsim_dev_port_add_all+0x37/0xf0
[   63.357268][ T5941]  nsim_dev_reload_up+0x451/0x780
[   63.358832][ T5941]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[   63.360537][ T5941]  devlink_reload+0x4ec/0x8d0
[   63.361999][ T5941]  ? __pfx_devlink_reload+0x10/0x10
[   63.363609][ T5941]  ? apparmor_capable+0x137/0x1b0
[   63.365167][ T5941]  ? bpf_lsm_capable+0x9/0x20
[   63.366650][ T5941]  ? security_capable+0x7e/0x2e0
[   63.368201][ T5941]  devlink_nl_reload_doit+0x9c2/0xd50
[   63.369869][ T5941]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[   63.371675][ T5941]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   63.373624][ T5941]  genl_family_rcv_msg_doit+0x215/0x300
[   63.375319][ T5941]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   63.377286][ T5941]  ? bpf_lsm_capable+0x9/0x20
[   63.378938][ T5941]  ? security_capable+0x7e/0x2e0
[   63.380530][ T5941]  genl_rcv_msg+0x60e/0x790
[   63.381953][ T5941]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.383530][ T5941]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[   63.385511][ T5941]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[   63.387336][ T5941]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[   63.389369][ T5941]  ? __asan_memcpy+0x40/0x70
[   63.390820][ T5941]  ? __pfx_ref_tracker_free+0x10/0x10
[   63.392503][ T5941]  netlink_rcv_skb+0x208/0x470
[   63.393976][ T5941]  ? __lock_acquire+0xab9/0xd20
[   63.395478][ T5941]  ? __pfx_genl_rcv_msg+0x10/0x10
[   63.397017][ T5941]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   63.398661][ T5941]  ? down_read+0x1ad/0x2e0
[   63.400026][ T5941]  genl_rcv+0x28/0x40
[   63.401248][ T5941]  netlink_unicast+0x82f/0x9e0
[   63.402719][ T5941]  ? __pfx_netlink_unicast+0x10/0x10
[   63.404317][ T5941]  ? netlink_sendmsg+0x642/0xb30
[   63.405838][ T5941]  ? skb_put+0x11b/0x210
[   63.407153][ T5941]  netlink_sendmsg+0x805/0xb30
[   63.408651][ T5941]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.410273][ T5941]  ? aa_sock_msg_perm+0xf1/0x1d0
[   63.411817][ T5941]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   63.413513][ T5941]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.415179][ T5941]  __sock_sendmsg+0x21c/0x270
[   63.416663][ T5941]  ____sys_sendmsg+0x505/0x830
[   63.418153][ T5941]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.419816][ T5941]  ? import_iovec+0x74/0xa0
[   63.421228][ T5941]  ___sys_sendmsg+0x21f/0x2a0
[   63.422693][ T5941]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.424306][ T5941]  ? __fget_files+0x2a/0x420
[   63.425763][ T5941]  ? __fget_files+0x3a0/0x420
[   63.427240][ T5941]  __x64_sys_sendmsg+0x19b/0x260
[   63.428804][ T5941]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   63.430508][ T5941]  ? rcu_is_watching+0x15/0xb0
[   63.432007][ T5941]  ? do_syscall_64+0xbe/0x3b0
[   63.433505][ T5941]  do_syscall_64+0xfa/0x3b0
[   63.434932][ T5941]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.436555][ T5941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.438456][ T5941]  ? exc_page_fault+0x9f/0xf0
[   63.439895][ T5941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.441674][ T5941] RIP: 0033:0x7f6f3758ebe9
[   63.443073][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.448958][ T5941] RSP: 002b:00007f6f384b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.451538][ T5941] RAX: ffffffffffffffda RBX: 00007f6f377b5fa0 RCX: 00007f6f3758ebe9
[   63.453992][ T5941] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[   63.456453][ T5941] RBP: 00007f6f37611e19 R08: 0000000000000000 R09: 0000000000000000
[   63.458946][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.461934][ T5941] R13: 00007f6f377b6038 R14: 00007f6f377b5fa0 R15: 00007ffdaf7dd7b8
[   63.465134][ T5941]  </TASK>
[   63.466419][ T5941] Modules linked in:
[   63.468017][ T5941] CR2: ffff8881a3c21020
[   63.469737][ T5941] ---[ end trace 0000000000000000 ]---
[   63.471948][ T5941] RIP: 0010:nsim_queue_free+0xdc/0x150
[   63.473970][ T5941] Code: 10 cd bd 8d 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 cb 99 0d fb 49 8b 07 48 8b 0c 24 <4a> 01 4c 28 20 4c 89 f7 be 00 02 00 00 e8 32 6a 6f fa 4c 89 e7 be
[   63.479956][ T5941] RSP: 0018:ffffc900045cede0 EFLAGS: 00010246
[   63.482311][ T5941] RAX: ffff8881a3c21000 RBX: ffff88810e4b1800 RCX: 0000000000000000
[   63.485381][ T5941] RDX: ffffc90004151000 RSI: 000000000004d37f RDI: 000000000004d380
[   63.488352][ T5941] RBP: 0000000000000001 R08: ffffffff8e1e58e7 R09: 1ffffffff1c3cb1c
[   63.491542][ T5941] R10: dffffc0000000000 R11: fffffbfff1c3cb1d R12: ffff88810e4b1a18
[   63.494752][ T5941] R13: 0000000000000000 R14: ffffffff87157be3 R15: ffffffff8dbdcd18
[   63.497908][ T5941] FS:  00007f6f384b76c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[   63.501457][ T5941] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.504077][ T5941] CR2: ffff8881a3c21020 CR3: 0000000028da2000 CR4: 00000000000006f0
[   63.506585][ T5941] Kernel panic - not syncing: Fatal exception in interrupt
[   63.510195][ T5941] Kernel Offset: disabled
[   63.511928][ T5941] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:45:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=00000000000017bf RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ee0 RBP=ffffc900061df608 RSP=ffffc900061df4c0
R8 =0000000000000000 R9 =0000000000000000 R10=ffff888029875f00 R11=ffffffff81ac3890
R12=0000000000000000 R13=0000000000000000 R14=ffffffff822c7eba R15=ffffea00009d5580
RIP=ffffffff822c7ed0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81231f46c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3c5dcc CR3=0000000029464000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=020007a403700200 07a20314020007a0 XMM03=00000002080607a8 0300020007a60340
XMM04=0000000000000000 0000000000000000 XMM05=00005555872c366d 00005555872c3230
XMM06=0000000000000000 0000000000000000 XMM07=0005e00300100005 d00300100005c003
XMM08=02100005b0034010 0003900302080007 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005f RBX=000000000000005f RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000004defc RDI=000000000004defd RBP=00000000000003f8 RSP=ffffc900045ce430
R8 =ffff888106700237 R9 =1ffff11020ce0046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48e2 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6f384b76c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff8881a3c21020 CR3=0000000028da2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6f37612e53
XMM06=0000000000000000 00007f6f37612e4d XMM07=0000000000000000 00007f6f37612e61
XMM08=0000000000000000 00007f6f37612ee7 XMM09=0000000000000000 00007f6f37612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
