last executing test programs:

1m25.040910861s ago: executing program 2 (id=20):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) (async)
unshare(0x20400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x0, 0x200006}, 0x28) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0xe, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x91}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x2)

1m24.951642971s ago: executing program 2 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xc}}, @NFCTH_TUPLE={0x90, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x88}, 0x4008050)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m24.847068662s ago: executing program 2 (id=22):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000000280)=""/132, 0x84}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/2, 0x2}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/122, 0x7a}, {&(0x7f0000003000)=""/68, 0x44}, {&(0x7f0000003080)=""/107, 0x6b}, {&(0x7f0000003100)=""/6, 0x6}], 0x9}, 0x2000)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000000000)="e56b63eed97f16e0557d53a87906488c29c013e853d678bcd6aab548ff", 0x1d)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000dfffffffffffffff00000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000000000000ffffffffffff000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, <r10=>0xffffffffffffffff}, 0x4) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x4}, 0x18) (async)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x19, 0x14, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x73f, 0x0, 0x0, 0x0, 0xcfbe}, {}, {}, [@tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0x7f, 0x23, &(0x7f0000000980)=""/35, 0x41000, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x9, 0x4, 0x6}, 0x10, 0x0, r8, 0x0, &(0x7f0000000dc0)=[r9, r10, r11, r12], 0x0, 0x10, 0xc4}, 0x94) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async)
r13 = socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r15, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m24.846013565s ago: executing program 2 (id=23):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0xfd, 0xff}]}, 0x10)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be000c2fd3fe8000000000000000000000000000aaff020000000000000000000000050001"], 0xfdef)

1m24.46027763s ago: executing program 0 (id=24):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x1000000, 0xffffffff, 0x250, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x28}, 0x0, 0x1f0, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'ip6gretap0\x00', {0x6, 0x0, 0x0, 0x338, 0x0, 0x80000000, 0x3, 0x3, 0x0, 0x18}, {0x3}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xb], 0x3, 0x6}, {0x1, [0x4, 0x6, 0x2, 0x0, 0x5, 0x2], 0xfd}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6d12, 0x3ff, 0x6, 'snmp\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r6}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r6, 0x58, &(0x7f0000000400)}, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m24.398287683s ago: executing program 0 (id=25):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000200)=0x4) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0xa38}, 0x8) (async)
sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0={0xfc, 0x0, '\x00', 0x8}, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) (async)
shutdown(r2, 0x1) (async)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = socket(0x5, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0xffffffff, 0x5, 0x8, 0x3, 0x1]}, &(0x7f00000001c0)=0x54) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r6, @ANYBLOB="080029bd7000fbdbdf253d00000008005d000000000008005d000100000008005d0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2004c892) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0x1208, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20040054)

1m24.210174182s ago: executing program 0 (id=26):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = epoll_create1(0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d2688a2", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {0xffff, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)

1m23.95130163s ago: executing program 1 (id=27):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xff90}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

1m23.950197678s ago: executing program 1 (id=28):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xfce)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000008e8aaaaaaaaaaaaaaaaaaaaaaaa88a80c0081003d0086dd"], 0x2e)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x4)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r7, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept(r7, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffe0, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x7, 0x2, 0xa, 0xd, 0x1c4, 0x8000007, 0x2, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x60}}, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r14, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m23.949384724s ago: executing program 0 (id=29):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000000107030d0000000000000000020000061c000780080002400000000308000140000000f607000140"], 0x30}, 0x1, 0x0, 0x0, 0xa053}, 0x20800)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="2d637075202b6e65745f7072696f20efcd306b0e352f380f6eb032de8f4dce5071b76e237926d29c00069e1fb6e799947561932cfd7781e87d5970e497d54b67d1e03a446962b867d5ab4e428d56cea35c399f8d61eb280472766460566a3e7e7ad93bc13764dd9274010863d949a50fdb3c10ece02bd98b2a4c07880fd6b7d6186d6e53b2426232de8144b5ebdb0600000000000000b200000000b452b8510000000000"], 0xf)
write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000980)=@assoc_value={<r10=>0x0}, &(0x7f0000000940)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x28}}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={r10, 0x7f}, 0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000005c0)={r10, 0x100}, 0x8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f00000000c0)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x401, 0x1, 0x0, 0x0, <r12=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r12, 0x7}, &(0x7f0000000180)=0x8)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000000)="15a74f80283fb1879ef6f58125ba8ebd9bd95b318f711fb5bb33cc2d0e067c8adf8885c181b64b704d29e259f3b2a9bdd8bff7a1e5bb06b1ad99d043e5cdfb022e6ef4c36b94b4019a618ca14c5bd63fb2845f59cc7f3867b6277adb4259e996620ca191cd2cab5cce05740ab7", 0x6d}, {&(0x7f0000000280)="565e085234567427f13ba9ada43e8bed112d9d324d80a008a7f5317e7f11c17a13eb9e05f37c03c5481da0e899d2e8317eaf935514c29dbb7a8d3a14b7fe868767221c19a81a2b9baa0b53f038a66170f55e3eb28c288942da2d03a2892459eeadb443ab006c0412a78014a5d17cd94fe4f5cd2eae413a38185214912ada1c8fd2440471f1b6f793b9dc6811e9ea46f483a0fa93f42ee51ad2f39c16097b050e2a0bb47b38f010181313e4ebdae1718ca158f2dea76a60e9c70bb21dde58db56b86e429d34c5ed4385d2b0c008f0a37737a79b7e8be1f3d0", 0xd8}, {&(0x7f00000003c0)="7ebe50c2924f28154e807ee09139c332547b1b8e050e95ffc83fc462b34995539dbd4f9d2b4d4eb657f3f6c7dc11b418c902301e4ef112506616c0eab7d55d055bd7d85d05f9abf91e81116f7539d2938f260ce40c828fb8125b993c6d5002fb45883aa7acea59075020535d7a62c0342a9797c06d6b84d0d8ecb285c57c9005be2e3ed0c6df39b71d0b33f3bc4b9b1926b9157da20faeb314", 0x99}, {&(0x7f0000000480)="3183fbda16b224e1133d6a2199580e39073ff35812228cf2e1c0f3b0e2b6568ba7b9fa5e0fd3c2adaab1c30667885ca7b00ac3b109e8b219ce30602b3bb05d0fbe80e16e9eb96c0d40baa5be74bcd41cf65f555d3570a7f1abeb33a7c688c4d1eb121d8cfb1fc83932eb1017cb1cc035fa81ad88daee77bdd8399ea83e8d31067f882e45570e0ad929de69c78e395f7a1de616c261a339d97cb3d210380e3e671405f40e0b7bacedf70de9b436221c719750a5a0ea29d3db8c74ee6f64b235130a", 0xc1}, {&(0x7f0000000600)="dfebfd4c9791e1e884929400f295cbdd3e9f71d00ab98bebd47dccb02c80d7cbeb9ef97016cb74d6052e60d97700263daafcba2be1f47d6b059eac3b9ab17d1a99377b90908eadb4a7916b2f094e23e474e99b565fc2d0c0355cf5c9b4957a070f11a8145a03dc0d58fce1f235b30deb97b535", 0x73}, {&(0x7f0000000680)="ef76928f119e82de", 0x8}, {&(0x7f00000006c0)="2e41a1c782740b2ca8b46fb63e95873f1b92bbf13688d46db5f70d354873e7880f8c36c4f0efa4987d80578ac77a2e75e565bcbcd2e5a30bfa02db", 0x3b}, {&(0x7f0000000700)="c39156f485e8e4ee1ae12e9d491a926c1a1f397f977a82d0476ff99a4941", 0x1e}, {&(0x7f0000000740)="a1b97f9092ebf66f44fdfb82ede7b6b416fb1e23259ea867401715ed0aacea245e3aec652ab48a3cefe393c74cce0a1aeffb7a02", 0x34}], 0x9)

1m23.922172386s ago: executing program 1 (id=30):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async)
sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1m23.834503566s ago: executing program 1 (id=31):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080))
r3 = socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000040000000001c0012800b00010067726574617000000c00028008000700000000000a000100b1"], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x10)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m23.740721022s ago: executing program 0 (id=32):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x8054)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000054)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r6)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000380)={{0x0, 0x100, 0x2, 0x7, 0x800, 0x4, 0x2, 0xfffffffe, 0xfffdfff8, 0x7, 0x29ac, 0x4, 0x8, 0x7e, 0x1000}, 0x8, [0x0]}) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1ff, 0x7, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1m23.690604584s ago: executing program 1 (id=33):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x20000)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
pread64(r8, &(0x7f00000003c0)=""/238, 0xee, 0x75)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0x1}, {}, {0x2, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x2b, 0x1, 0x1) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x20000) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
pread64(r8, &(0x7f00000003c0)=""/238, 0xee, 0x75) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0x1}, {}, {0x2, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async)

1m23.581118202s ago: executing program 2 (id=34):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0xfc, 0x7, 0x49, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0xa, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x9, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m23.580561525s ago: executing program 1 (id=35):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b6, 0xc, 0xd, 0x4, 0x10000, 0x0, 0x4, 0x4]}}, 0x5c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa5, 0x22}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4ce3cb6442eb1f8c116f75ff21"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "129cd456cb1c45538eb809d6af"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004180}, 0x4000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d1ac21", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)

1m23.578360952s ago: executing program 0 (id=36):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0xffffffffffffff17, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x9, r3}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000340)="538d23bdc26e8287912db99222b2ba33423bb38702ae4c97e7887142d5d3717f90f43b8a1b2353f5a105b78baa5646c7c17f68749f97059f7caf4fac4a835c7568166e5fec88ae55fbc541c9c5133f3efaf62432d017a45600755fee9093ce3c5db865a4c0f9fc2f0a7ca7ec775d309c3175", &(0x7f00000003c0)=@udp6=r2, 0x4}, 0x20)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r9=>0x0)
ioctl$TUNSETOWNER(r4, 0x400454cc, r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="040000007cdad9b4b47381c988ca", 0xe}], 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x9, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa97}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xc, 0x3da48c8682330ab8}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x2004884)

1m23.454292579s ago: executing program 2 (id=37):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0)
sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008004)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x474, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1f22, 0x1, 0xdfa, 0x78, 0x207, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x25, 0xfffffffc, 0x7fff, 0x2, 0x7f, 0xcdb, 0x401, 0x10, 0x2000400, 0x3, 0x401, 0xffff, 0x8, 0x8, 0x2, 0xfdf9, 0x7, 0x100, 0x2, 0x7fff, 0x5, 0x3, 0x510, 0x80, 0x0, 0x2, 0x80000001, 0x7, 0x7ff, 0x0, 0x5, 0x4, 0x5, 0x8, 0x2, 0x3ff, 0x76, 0xc64, 0xfff, 0x4, 0x3ff, 0x7, 0x9, 0x40, 0x7, 0xff, 0xff, 0x40, 0x9, 0xf38, 0x39c, 0x400, 0x8001, 0x100, 0x3, 0x2, 0x0, 0x3ff, 0x1000, 0x4, 0x5, 0x8, 0x9, 0x6, 0x4, 0x74e, 0x2a3000, 0x8, 0x2, 0x42, 0x4, 0x4, 0x3e64a8e5, 0x8, 0x6, 0x7, 0x9, 0x5, 0x40000000, 0x9, 0x0, 0x9, 0x0, 0x7, 0xffffffff, 0x800, 0xcc, 0x9, 0x4, 0x7fffffff, 0x9a80, 0x2, 0x5, 0x8, 0x3, 0x2, 0x200, 0x8, 0x200, 0x0, 0x75f, 0x7, 0x401, 0xcbb4, 0x5, 0x1, 0x9, 0x1bd7, 0x25, 0x1ff, 0x6, 0xbf45, 0x0, 0x9, 0xfffffffc, 0x9, 0x100, 0x3, 0x9, 0x350a, 0x1, 0x3, 0xd, 0x3, 0x2, 0x9, 0xd, 0x9, 0x2, 0xff, 0xb, 0x40, 0x1, 0x0, 0x0, 0xfff, 0xffffffaf, 0x58f, 0x7, 0x2, 0x4, 0x4, 0x3, 0x843, 0x400, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0xfffffffd, 0x7, 0x9, 0x5, 0x8, 0x9, 0x8, 0xfffffff8, 0x200, 0x4, 0x81, 0x0, 0x1, 0x8, 0x3, 0x7fff, 0x2, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x80000, 0x7, 0x9db, 0x2, 0x5, 0x8, 0x0, 0x7, 0xc0000, 0xd9, 0xfffffffc, 0x1, 0x800, 0x7, 0x4, 0xffff, 0x1, 0x4, 0x7, 0x6, 0xb, 0x2000, 0x7, 0xb9d9, 0x7f, 0x2d2, 0x7ff, 0x8, 0x3, 0x5, 0xc51b, 0x101, 0x1000, 0x5, 0x4, 0x7, 0x8000, 0x800, 0x9, 0x6e7, 0x3, 0x1ff, 0xf, 0x3, 0x800, 0x2, 0x2, 0x727, 0x8856, 0x2, 0x8, 0x0, 0xea, 0x2, 0x54ff, 0x5, 0x4, 0x47c, 0x2, 0x5, 0x8, 0xa69, 0x0, 0x3, 0xe71, 0x81, 0x7, 0xf, 0x1, 0x3f3, 0xf55, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x8, 0x8291, 0x100, {0x10, 0x0, 0x3ff, 0x7f, 0x100, 0xb}, {0x5, 0x2, 0x9, 0x5, 0x8, 0xdc28}, 0x5, 0x0, 0x21f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x474, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1f22, 0x1, 0xdfa, 0x78, 0x207, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x25, 0xfffffffc, 0x7fff, 0x2, 0x7f, 0xcdb, 0x401, 0x10, 0x2000400, 0x3, 0x401, 0xffff, 0x8, 0x8, 0x2, 0xfdf9, 0x7, 0x100, 0x2, 0x7fff, 0x5, 0x3, 0x510, 0x80, 0x0, 0x2, 0x80000001, 0x7, 0x7ff, 0x0, 0x5, 0x4, 0x5, 0x8, 0x2, 0x3ff, 0x76, 0xc64, 0xfff, 0x4, 0x3ff, 0x7, 0x9, 0x40, 0x7, 0xff, 0xff, 0x40, 0x9, 0xf38, 0x39c, 0x400, 0x8001, 0x100, 0x3, 0x2, 0x0, 0x3ff, 0x1000, 0x4, 0x5, 0x8, 0x9, 0x6, 0x4, 0x74e, 0x2a3000, 0x8, 0x2, 0x42, 0x4, 0x4, 0x3e64a8e5, 0x8, 0x6, 0x7, 0x9, 0x5, 0x40000000, 0x9, 0x0, 0x9, 0x0, 0x7, 0xffffffff, 0x800, 0xcc, 0x9, 0x4, 0x7fffffff, 0x9a80, 0x2, 0x5, 0x8, 0x3, 0x2, 0x200, 0x8, 0x200, 0x0, 0x75f, 0x7, 0x401, 0xcbb4, 0x5, 0x1, 0x9, 0x1bd7, 0x25, 0x1ff, 0x6, 0xbf45, 0x0, 0x9, 0xfffffffc, 0x9, 0x100, 0x3, 0x9, 0x350a, 0x1, 0x3, 0xd, 0x3, 0x2, 0x9, 0xd, 0x9, 0x2, 0xff, 0xb, 0x40, 0x1, 0x0, 0x0, 0xfff, 0xffffffaf, 0x58f, 0x7, 0x2, 0x4, 0x4, 0x3, 0x843, 0x400, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0xfffffffd, 0x7, 0x9, 0x5, 0x8, 0x9, 0x8, 0xfffffff8, 0x200, 0x4, 0x81, 0x0, 0x1, 0x8, 0x3, 0x7fff, 0x2, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x80000, 0x7, 0x9db, 0x2, 0x5, 0x8, 0x0, 0x7, 0xc0000, 0xd9, 0xfffffffc, 0x1, 0x800, 0x7, 0x4, 0xffff, 0x1, 0x4, 0x7, 0x6, 0xb, 0x2000, 0x7, 0xb9d9, 0x7f, 0x2d2, 0x7ff, 0x8, 0x3, 0x5, 0xc51b, 0x101, 0x1000, 0x5, 0x4, 0x7, 0x8000, 0x800, 0x9, 0x6e7, 0x3, 0x1ff, 0xf, 0x3, 0x800, 0x2, 0x2, 0x727, 0x8856, 0x2, 0x8, 0x0, 0xea, 0x2, 0x54ff, 0x5, 0x4, 0x47c, 0x2, 0x5, 0x8, 0xa69, 0x0, 0x3, 0xe71, 0x81, 0x7, 0xf, 0x1, 0x3f3, 0xf55, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x8, 0x8291, 0x100, {0x10, 0x0, 0x3ff, 0x7f, 0x100, 0xb}, {0x5, 0x2, 0x9, 0x5, 0x8, 0xdc28}, 0x5, 0x0, 0x21f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1m0.105632588s ago: executing program 32 (id=36):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0xffffffffffffff17, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x9, r3}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x368}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000340)="538d23bdc26e8287912db99222b2ba33423bb38702ae4c97e7887142d5d3717f90f43b8a1b2353f5a105b78baa5646c7c17f68749f97059f7caf4fac4a835c7568166e5fec88ae55fbc541c9c5133f3efaf62432d017a45600755fee9093ce3c5db865a4c0f9fc2f0a7ca7ec775d309c3175", &(0x7f00000003c0)=@udp6=r2, 0x4}, 0x20)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=<r9=>0x0)
ioctl$TUNSETOWNER(r4, 0x400454cc, r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="040000007cdad9b4b47381c988ca", 0xe}], 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x9, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa97}}}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r10, {0xc, 0x3da48c8682330ab8}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x2004884)

33.852477088s ago: executing program 33 (id=35):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r2}, 0xc)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r2, 0xffffff8f}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b6, 0xc, 0xd, 0x4, 0x10000, 0x0, 0x4, 0x4]}}, 0x5c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xa5, 0x22}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4ce3cb6442eb1f8c116f75ff21"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "129cd456cb1c45538eb809d6af"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004180}, 0x4000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d1ac21", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)

0s ago: executing program 34 (id=37):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0)
sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008004)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x474, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1f22, 0x1, 0xdfa, 0x78, 0x207, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x25, 0xfffffffc, 0x7fff, 0x2, 0x7f, 0xcdb, 0x401, 0x10, 0x2000400, 0x3, 0x401, 0xffff, 0x8, 0x8, 0x2, 0xfdf9, 0x7, 0x100, 0x2, 0x7fff, 0x5, 0x3, 0x510, 0x80, 0x0, 0x2, 0x80000001, 0x7, 0x7ff, 0x0, 0x5, 0x4, 0x5, 0x8, 0x2, 0x3ff, 0x76, 0xc64, 0xfff, 0x4, 0x3ff, 0x7, 0x9, 0x40, 0x7, 0xff, 0xff, 0x40, 0x9, 0xf38, 0x39c, 0x400, 0x8001, 0x100, 0x3, 0x2, 0x0, 0x3ff, 0x1000, 0x4, 0x5, 0x8, 0x9, 0x6, 0x4, 0x74e, 0x2a3000, 0x8, 0x2, 0x42, 0x4, 0x4, 0x3e64a8e5, 0x8, 0x6, 0x7, 0x9, 0x5, 0x40000000, 0x9, 0x0, 0x9, 0x0, 0x7, 0xffffffff, 0x800, 0xcc, 0x9, 0x4, 0x7fffffff, 0x9a80, 0x2, 0x5, 0x8, 0x3, 0x2, 0x200, 0x8, 0x200, 0x0, 0x75f, 0x7, 0x401, 0xcbb4, 0x5, 0x1, 0x9, 0x1bd7, 0x25, 0x1ff, 0x6, 0xbf45, 0x0, 0x9, 0xfffffffc, 0x9, 0x100, 0x3, 0x9, 0x350a, 0x1, 0x3, 0xd, 0x3, 0x2, 0x9, 0xd, 0x9, 0x2, 0xff, 0xb, 0x40, 0x1, 0x0, 0x0, 0xfff, 0xffffffaf, 0x58f, 0x7, 0x2, 0x4, 0x4, 0x3, 0x843, 0x400, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0xfffffffd, 0x7, 0x9, 0x5, 0x8, 0x9, 0x8, 0xfffffff8, 0x200, 0x4, 0x81, 0x0, 0x1, 0x8, 0x3, 0x7fff, 0x2, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x80000, 0x7, 0x9db, 0x2, 0x5, 0x8, 0x0, 0x7, 0xc0000, 0xd9, 0xfffffffc, 0x1, 0x800, 0x7, 0x4, 0xffff, 0x1, 0x4, 0x7, 0x6, 0xb, 0x2000, 0x7, 0xb9d9, 0x7f, 0x2d2, 0x7ff, 0x8, 0x3, 0x5, 0xc51b, 0x101, 0x1000, 0x5, 0x4, 0x7, 0x8000, 0x800, 0x9, 0x6e7, 0x3, 0x1ff, 0xf, 0x3, 0x800, 0x2, 0x2, 0x727, 0x8856, 0x2, 0x8, 0x0, 0xea, 0x2, 0x54ff, 0x5, 0x4, 0x47c, 0x2, 0x5, 0x8, 0xa69, 0x0, 0x3, 0xe71, 0x81, 0x7, 0xf, 0x1, 0x3f3, 0xf55, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x8, 0x8291, 0x100, {0x10, 0x0, 0x3ff, 0x7f, 0x100, 0xb}, {0x5, 0x2, 0x9, 0x5, 0x8, 0xdc28}, 0x5, 0x0, 0x21f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x488, 0x2, [@TCA_ROUTE4_POLICE={0x474, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1f22, 0x1, 0xdfa, 0x78, 0x207, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x25, 0xfffffffc, 0x7fff, 0x2, 0x7f, 0xcdb, 0x401, 0x10, 0x2000400, 0x3, 0x401, 0xffff, 0x8, 0x8, 0x2, 0xfdf9, 0x7, 0x100, 0x2, 0x7fff, 0x5, 0x3, 0x510, 0x80, 0x0, 0x2, 0x80000001, 0x7, 0x7ff, 0x0, 0x5, 0x4, 0x5, 0x8, 0x2, 0x3ff, 0x76, 0xc64, 0xfff, 0x4, 0x3ff, 0x7, 0x9, 0x40, 0x7, 0xff, 0xff, 0x40, 0x9, 0xf38, 0x39c, 0x400, 0x8001, 0x100, 0x3, 0x2, 0x0, 0x3ff, 0x1000, 0x4, 0x5, 0x8, 0x9, 0x6, 0x4, 0x74e, 0x2a3000, 0x8, 0x2, 0x42, 0x4, 0x4, 0x3e64a8e5, 0x8, 0x6, 0x7, 0x9, 0x5, 0x40000000, 0x9, 0x0, 0x9, 0x0, 0x7, 0xffffffff, 0x800, 0xcc, 0x9, 0x4, 0x7fffffff, 0x9a80, 0x2, 0x5, 0x8, 0x3, 0x2, 0x200, 0x8, 0x200, 0x0, 0x75f, 0x7, 0x401, 0xcbb4, 0x5, 0x1, 0x9, 0x1bd7, 0x25, 0x1ff, 0x6, 0xbf45, 0x0, 0x9, 0xfffffffc, 0x9, 0x100, 0x3, 0x9, 0x350a, 0x1, 0x3, 0xd, 0x3, 0x2, 0x9, 0xd, 0x9, 0x2, 0xff, 0xb, 0x40, 0x1, 0x0, 0x0, 0xfff, 0xffffffaf, 0x58f, 0x7, 0x2, 0x4, 0x4, 0x3, 0x843, 0x400, 0x2, 0x0, 0xfffffff7, 0x1, 0x4, 0xfffffffd, 0x7, 0x9, 0x5, 0x8, 0x9, 0x8, 0xfffffff8, 0x200, 0x4, 0x81, 0x0, 0x1, 0x8, 0x3, 0x7fff, 0x2, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x80000, 0x7, 0x9db, 0x2, 0x5, 0x8, 0x0, 0x7, 0xc0000, 0xd9, 0xfffffffc, 0x1, 0x800, 0x7, 0x4, 0xffff, 0x1, 0x4, 0x7, 0x6, 0xb, 0x2000, 0x7, 0xb9d9, 0x7f, 0x2d2, 0x7ff, 0x8, 0x3, 0x5, 0xc51b, 0x101, 0x1000, 0x5, 0x4, 0x7, 0x8000, 0x800, 0x9, 0x6e7, 0x3, 0x1ff, 0xf, 0x3, 0x800, 0x2, 0x2, 0x727, 0x8856, 0x2, 0x8, 0x0, 0xea, 0x2, 0x54ff, 0x5, 0x4, 0x47c, 0x2, 0x5, 0x8, 0xa69, 0x0, 0x3, 0xe71, 0x81, 0x7, 0xf, 0x1, 0x3f3, 0xf55, 0x7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0x8, 0x8291, 0x100, {0x10, 0x0, 0x3ff, 0x7f, 0x100, 0xb}, {0x5, 0x2, 0x9, 0x5, 0x8, 0xdc28}, 0x5, 0x0, 0x21f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x89}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31824' (ED25519) to the list of known hosts.
syzkaller login: [   49.593586][ T5534] cgroup: Unknown subsys name 'net'
[   49.735367][ T5534] cgroup: Unknown subsys name 'cpuset'
[   49.742543][ T5534] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.616085][ T5534] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.333383][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.338823][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.342683][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.347775][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.351869][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.360057][ T5000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.370698][ T5000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.375487][ T5000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.381028][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.384600][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.390664][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.395650][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.396530][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.402987][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.415249][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.297352][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.300943][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.303304][ T5611] bridge_slave_0: entered allmulticast mode
[   57.306147][ T5611] bridge_slave_0: entered promiscuous mode
[   57.317639][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.320869][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.323868][ T5611] bridge_slave_1: entered allmulticast mode
[   57.327702][ T5611] bridge_slave_1: entered promiscuous mode
[   57.346397][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.349336][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.353197][ T5609] bridge_slave_0: entered allmulticast mode
[   57.356339][ T5609] bridge_slave_0: entered promiscuous mode
[   57.365395][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.368399][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.371549][ T5609] bridge_slave_1: entered allmulticast mode
[   57.375455][ T5609] bridge_slave_1: entered promiscuous mode
[   57.429547][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.437231][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.442866][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.447726][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.452594][ T5605] bridge_slave_0: entered allmulticast mode
[   57.456663][ T5605] bridge_slave_0: entered promiscuous mode
[   57.479323][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.482909][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.486160][ T5605] bridge_slave_1: entered allmulticast mode
[   57.492898][ T5605] bridge_slave_1: entered promiscuous mode
[   57.499889][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.527332][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.540515][ T5611] team0: Port device team_slave_0 added
[   57.545489][ T5611] team0: Port device team_slave_1 added
[   57.579509][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.584455][ T5609] team0: Port device team_slave_0 added
[   57.597341][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.601647][ T5609] team0: Port device team_slave_1 added
[   57.604126][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.606457][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.616914][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.643231][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.645351][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.654166][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.682494][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.685211][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.693203][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.698854][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.701056][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.709323][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.714610][ T5605] team0: Port device team_slave_0 added
[   57.726453][ T5605] team0: Port device team_slave_1 added
[   57.770162][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.772717][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.780917][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.800415][ T5611] hsr_slave_0: entered promiscuous mode
[   57.803944][ T5611] hsr_slave_1: entered promiscuous mode
[   57.807655][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.810674][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.819554][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.829529][ T5609] hsr_slave_0: entered promiscuous mode
[   57.832394][ T5609] hsr_slave_1: entered promiscuous mode
[   57.835325][ T5609] debugfs: 'hsr0' already exists in 'hsr'
[   57.837817][ T5609] Cannot create hsr debugfs directory
[   57.933305][ T5605] hsr_slave_0: entered promiscuous mode
[   57.935805][ T5605] hsr_slave_1: entered promiscuous mode
[   57.937957][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   57.940310][ T5605] Cannot create hsr debugfs directory
[   58.232426][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.244664][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.248119][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.257915][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.264125][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.272853][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.284417][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.291248][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.327812][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.335709][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.344941][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.352024][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.360522][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.368837][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.372579][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.376760][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.389557][   T54] Bluetooth: hci0: command tx timeout
[   58.443273][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.450139][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.455482][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.462060][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.466834][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.472848][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.479917][   T54] Bluetooth: hci2: command tx timeout
[   58.483395][ T5000] Bluetooth: hci1: command tx timeout
[   58.490016][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.495098][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.567031][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.607959][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   58.622941][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.625501][ T2202] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.635344][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.641875][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.644232][ T2202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.674941][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.696232][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   58.715752][ T2202] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.718774][ T2202] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.741743][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.744492][ T2202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.753727][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   58.775790][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.778879][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.795970][ T2202] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.798496][ T2202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.097241][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.151878][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.155018][ T5611] veth0_vlan: entered promiscuous mode
[   59.164373][ T5611] veth1_vlan: entered promiscuous mode
[   59.217443][ T5611] veth0_macvtap: entered promiscuous mode
[   59.230457][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.236167][ T5611] veth1_macvtap: entered promiscuous mode
[   59.248970][ T5609] veth0_vlan: entered promiscuous mode
[   59.264047][ T5609] veth1_vlan: entered promiscuous mode
[   59.271561][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.279072][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.301203][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.304451][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.311277][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.314453][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.346511][ T5605] veth0_vlan: entered promiscuous mode
[   59.356204][ T5609] veth0_macvtap: entered promiscuous mode
[   59.373557][ T5609] veth1_macvtap: entered promiscuous mode
[   59.384826][ T5605] veth1_vlan: entered promiscuous mode
[   59.420258][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.431256][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.435112][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.439944][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.454199][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.457321][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.477035][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.480969][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.483998][ T5605] veth0_macvtap: entered promiscuous mode
[   59.491557][ T5605] veth1_macvtap: entered promiscuous mode
[   59.500547][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.504057][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.509804][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.546253][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.577666][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.581215][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.582079][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.584131][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.584334][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.615935][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.630109][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.690349][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.697777][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.756639][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.763603][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.809645][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.813496][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.978456][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.177064][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   60.187874][ T5737] block nbd0: not configured, cannot reconfigure
[   60.304914][ T5754] syzkaller0: entered promiscuous mode
[   60.307829][ T5754] syzkaller0: entered allmulticast mode
[   60.330157][ T5755] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   60.347693][ T5755] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.471480][   T54] Bluetooth: hci0: command tx timeout
[   60.486769][ T5757] syzkaller0: entered promiscuous mode
[   60.491429][ T5757] syzkaller0: entered allmulticast mode
[   60.512617][ T5757] tipc: Started in network mode
[   60.515138][ T5757] tipc: Node identity b63f1d6ae12c, cluster identity 4711
[   60.517535][ T5757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.523166][ T5756] tipc: Resetting bearer <eth:syzkaller0>
[   60.541546][ T5756] tipc: Disabling bearer <eth:syzkaller0>
[   60.558733][   T54] Bluetooth: hci2: command tx timeout
[   60.560554][   T54] Bluetooth: hci1: command tx timeout
[   60.834029][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   61.093518][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   61.149569][ T5780] syzkaller0: entered promiscuous mode
[   61.151327][ T5780] syzkaller0: entered allmulticast mode
[   61.355124][ T5788] netlink: 84 bytes leftover after parsing attributes in process `syz.2.21'.
[   61.494038][ T5797] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET)
[   61.844950][ T5799] xt_hashlimit: overflow, try lower: 6/0
[   62.124449][ T5808] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   62.127937][ T5808] netlink: 756 bytes leftover after parsing attributes in process `syz.0.26'.
[   62.137481][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   62.247392][ T5811] syzkaller1: entered promiscuous mode
[   62.251311][ T5811] syzkaller1: entered allmulticast mode
[   62.257019][ T5811] syzkaller1: left promiscuous mode
[   62.259937][ T5811] syzkaller1: left allmulticast mode
[   62.352651][ T5813] netlink: 'syz.0.29': attribute type 1 has an invalid length.
[   62.464595][ T5813] netlink: 67 bytes leftover after parsing attributes in process `syz.0.29'.
[   62.523825][ T5823] netlink: 84 bytes leftover after parsing attributes in process `syz.1.31'.
[   62.548523][ T5000] Bluetooth: hci0: command tx timeout
[   62.630330][ T5000] Bluetooth: hci1: command tx timeout
[   62.632775][   T54] Bluetooth: hci2: command tx timeout
[   62.641098][ T5825] syzkaller0: entered promiscuous mode
[   62.644722][ T5825] syzkaller0: entered allmulticast mode
[   62.767672][ T5837] bridge0: entered allmulticast mode
[   62.835876][ T5839] syzkaller0: entered promiscuous mode
[   62.837907][ T5839] syzkaller0: entered allmulticast mode
[   64.701066][ T5000] Bluetooth: hci0: command tx timeout
[   64.714062][ T5000] Bluetooth: hci1: command tx timeout
[   64.715816][ T5000] Bluetooth: hci2: command tx timeout
[   66.072862][   T31] cfg80211: failed to load regulatory.db
[   69.388244][    C1] sched: DL replenish lagged too much
[   72.799888][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  133.819390][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  183.791585][ T5612] Bluetooth: hci0: command 0x0406 tx timeout
[  183.794313][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  183.796916][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  195.628728][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  213.196340][   T35] INFO: task kworker/1:1:31 blocked for more than 143 seconds.
[  213.205643][   T35]       Not tainted syzkaller #0
[  213.207638][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  213.218059][   T35] task:kworker/1:1     state:D stack:26312 pid:31    tgid:31    ppid:2      task_flags:0x4208060 flags:0x00080000
[  220.151596][   T35] Workqueue: events request_firmware_work_func
[  220.153613][   T35] Call Trace:
[  220.154644][   T35]  <TASK>
[  220.155593][   T35]  __schedule+0x17d9/0x56c0
[  220.157084][   T35]  ? do_raw_spin_unlock+0x4d/0x210
[  221.351810][   T35]  ? __pfx___schedule+0x10/0x10
[  221.353777][   T35]  ? __pfx___schedule+0x10/0x10
[  221.355695][   T35]  ? schedule+0x90/0x2b0
[  221.357361][   T35]  schedule+0x164/0x2b0
[  221.739187][   T35]  schedule_preempt_disabled+0x13/0x30
[  221.741027][   T35]  __mutex_lock+0x7bf/0x1550
[  221.742810][   T35]  ? __mutex_lock+0x5d4/0x1550
[  221.744652][   T35]  ? regdb_fw_cb+0x7d/0x1c0
[  221.746387][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  222.301647][   T35]  ? process_scheduled_works+0xa20/0x14e0
[  222.303907][   T35]  regdb_fw_cb+0x7d/0x1c0
[  222.305667][   T35]  ? __pfx_regdb_fw_cb+0x10/0x10
[  222.307621][   T35]  request_firmware_work_func+0xf7/0x2d0
