last executing test programs:

400.500633ms ago: executing program 1 (id=770):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x194, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "c8c7c21252e12e00c921a5f61beab5ee7fa2886fd267d2bfed904ce95d79196e964cd937f74984799276139b56bc3738154387bfb0b7949405d3dc3e1f3a0122d7f7c82c8bdd1984ddeca2b8bce3a91890794004cbb25bfa9287a84427bec94e7ede6904c68443dc128225fbf591bbe1f1543eb4f45db96e90bb7c5baebad379c6ec8e4c7c880916e8cacb"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x64, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macsec0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x0, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x308b98f3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5dd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x303, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x298}, 0x1, 0x0, 0x0, 0x1}, 0x0)

399.8516ms ago: executing program 1 (id=772):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', <r0=>0x0, 0x4, 0x60, 0x3, 0x4, 0x2c, @private0, @private0, 0x1, 0x10, 0x6, 0x8000003}})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x10}, 0x10}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d00)=@deltclass={0x24, 0x29, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xfffa, 0xd}, {0x6, 0x3}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket(0x2, 0x3, 0xff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000))
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

328.830921ms ago: executing program 2 (id=773):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

326.480286ms ago: executing program 1 (id=774):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x234, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x221, 0x3, 0x0, 0x1, [@generic="53e6b10dbfea3624569211c29d8b650197ee90cb094363f7ed672b676ac6e87401267b341ac80ed43ff58b4fcf1a920f9bfe400cd4ad8d868dda66e3cfce435f2a77500e5c17798bb3db3d27e4eea6fe05e722291b501c3d0fcfa4424330bd72d2cd0c0b3fc39e9da36fc6abab296fbe5c79ee49ceadd164c39d6aa4a89af052cd9b82507e8be0184ceb6d3f00c968a7f664423cd243ef143977752e36", @nested={0x176, 0x64, 0x0, 0x1, [@generic="7ff7a6762d58bbbc929d5bcb1089892f10ae3662844eb8e5615474d4d2ccd6c3c44a2be846a4bc2f3b8d6ac6c3d6e9057bea346fb1609f92cd544e63b7ffb469d54379d37d375b336c0fd47e10f98c555f334f2bcb862e995ffb69a8772eeeff1ff43d24ffb530d565001d498c04644e124659dfa4c11af1df2c3e4b85616c7fc7ce9b65507edaccfc6b3bebc41bf8e3ecab345259419e6c225981daee3cfbb7", @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e", @nested={0x9d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x6}, @generic="9d22bafd4ac33962aa04d1d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9ff7d7b7dcdd3ff695f09d07d5bb51d26400cddadfdbe0e4743e2fc2de354d12a8dfa5d63bd31b1b7c88cb471db103f547cd17324c6c751a30a58325c4", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x104, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@remote}]}]}, 0x234}], 0x1}, 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x12, {0x0, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x80, 0x4)

261.330432ms ago: executing program 1 (id=775):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r1=>0x0})
setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000080), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0xa, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0xc, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r10=>0x0})
bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14)
r11 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r11, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x10, 0x6, @link_local}, 0x14)
syz_emit_ethernet(0x5e, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000fe80000000000000000000000000000000000000000001000000000000000000"], 0x0)
r12 = socket$isdn(0x22, 0x2, 0x26)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x80044943, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x221, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0x10, 0xc}, {0xfff7, 0x5}}}, 0x24}}, 0x0)
r15 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
read(r15, &(0x7f0000000100)=""/146, 0x92)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="41000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0)

260.677947ms ago: executing program 2 (id=776):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = syz_init_net_socket$ax25(0x3, 0x6, 0xc4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0))
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x4000, 0x9f2d, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x104, 0x7, 0x1, 0x0, "ff3cfd82dcdf9907bd32ec8cdf8e6e2e21c26e00fc1d1aa16571d6135a8e08b97e2adabee40bac5cf5f680f2bb20c638ccc05496b83f07fc173ce4672110c032591317b9b9496b4896be9916e572dc6882b5b63e79ece0fd3897106c1d3714a44c5b45f2485de3af0a0daca59ffb342c2db3edeb752f7f47a482be0b0ff85333e02ed5b64ad124f9075a9d64fc36cdec1fd436e401b7e5bc2ab24da348f09736c4acfdf738841d6f0f73a971a8a97479786340c9a1702ddafd521109bb78561f879074a5491343ab9c86f62c26e17ac80f9760269b64dbc95623f2833b6d0713bb38e0f52becbb44412740d147dc4f3291fd0a7f02884b6aea3fafb6c345e43e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x160}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10)
close(r6)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
r8 = socket$kcm(0x10, 0x2, 0x4)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3179223d}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
setsockopt(r7, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="2fae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="1709000000000000000001000000050007001a00000008000900fffffffe060002000100000008000a000100000008001800ac1414aa08001900e0000002"], 0x44}}, 0x0)
getsockname$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10)

260.214472ms ago: executing program 0 (id=777):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000010000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23)

259.933878ms ago: executing program 0 (id=778):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={0xffffffffffffffff, r6, 0x0, 0x9, &(0x7f0000000e40)='pim6reg0\x00'}, 0x30)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x28801)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r7, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240))
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0)

258.180233ms ago: executing program 2 (id=779):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x7}, {0x92e132d6, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x100, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1a5}, {}, {}, {0x0, 0x5}, {}, {}, {}, {0xfffffffd}], [{}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x7}, {0x92e132d6, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x100, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5b6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x10000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1a5}, {}, {}, {0x0, 0x5}, {}, {}, {}, {0xfffffffd}], [{}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0700001e000033d69cf7a0a37e299d539618e7460f001400f5723000000000ef00080005000800b500cdfefbff025e476264fa9f030303030300000000cc0000005300000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x80000000, 0xffffffff, 0x2000008, 0x3, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xf}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x80000000, 0xffffffff, 0x2000008, 0x3, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xf}, 0x50)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x8}, 0x8)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r3, 0x0, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4c}}, 0x2) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4c}}, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="40d6a7180431155f06a4a16a2d88e05ecff7e430c8f4698221c4c3750b4fe4f67865f28fae4a91c78142a339f1907bb5c566b3ec939b81bac27355025a21be61b94cdbad3d91a108506d3e34ac176d7e147656bc760eb394fd65ef5a1b6adb9182bfae6a1598a6c773b909", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r6}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="a4000000070a010100000000000000000a00000408000b40000000040900010073797a30000000000900020073797a32000000000900010073797a310000000008b4056d24fb09403000010073797a3000000000440005800800014000000000080001400000000c08000140000088ca08000140000000670800014000006005080001400000002b080001400000008908000140000000840c0003400000000000000005"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000)

181.030129ms ago: executing program 0 (id=780):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001800000000000000009f000104000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)

179.587665ms ago: executing program 1 (id=781):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000606010800000000"], 0x14}}, 0x810)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000c0002000400000000000000100007800c00018008000100", @ANYBLOB='\b\x00'], 0x44}}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400f346", @ANYRESDEC=r7, @ANYRES8=r4], 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x20008050)
unshare(0x14000000)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4050)

175.816367ms ago: executing program 0 (id=786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="e50000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000000000040001"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

174.323207ms ago: executing program 2 (id=782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
unshare(0x1e030f80)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c)
r3 = socket(0x10, 0x803, 0x0)
bind$bt_hci(r3, 0x0, 0xc00)

71.782987ms ago: executing program 2 (id=783):
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000002543100200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)

21.570114ms ago: executing program 0 (id=784):
unshare(0x6020400)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001500"/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

20.242352ms ago: executing program 2 (id=785):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0xfffffffd, 0x80008}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000030000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

19.766094ms ago: executing program 0 (id=787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)

0s ago: executing program 1 (id=788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5897' (ED25519) to the list of known hosts.
syzkaller login: [   50.163185][ T5795] cgroup: Unknown subsys name 'net'
[   50.286700][ T5795] cgroup: Unknown subsys name 'cpuset'
[   50.291011][ T5795] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.906660][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.652608][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.657283][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.660975][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.662202][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.665284][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.669806][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.670436][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.675736][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.681038][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.689172][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.713886][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.718171][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.721731][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.728793][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.732232][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.984551][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   57.045545][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   57.085484][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   57.134162][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.137074][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.140057][ T5807] bridge_slave_0: entered allmulticast mode
[   57.143622][ T5807] bridge_slave_0: entered promiscuous mode
[   57.153771][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.156184][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.158516][ T5807] bridge_slave_1: entered allmulticast mode
[   57.161176][ T5807] bridge_slave_1: entered promiscuous mode
[   57.212748][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.217556][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.220603][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.224905][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.228021][ T5816] bridge_slave_0: entered allmulticast mode
[   57.231754][ T5816] bridge_slave_0: entered promiscuous mode
[   57.267625][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.270712][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.274307][ T5816] bridge_slave_1: entered allmulticast mode
[   57.278133][ T5816] bridge_slave_1: entered promiscuous mode
[   57.309993][ T5807] team0: Port device team_slave_0 added
[   57.325228][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.328981][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.332028][ T5808] bridge_slave_0: entered allmulticast mode
[   57.336536][ T5808] bridge_slave_0: entered promiscuous mode
[   57.342037][ T5807] team0: Port device team_slave_1 added
[   57.360558][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.367077][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.382660][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.387310][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.390426][ T5808] bridge_slave_1: entered allmulticast mode
[   57.394355][ T5808] bridge_slave_1: entered promiscuous mode
[   57.411772][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.414743][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.425283][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.471847][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.476294][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.487467][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.498062][ T5816] team0: Port device team_slave_0 added
[   57.502974][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.517507][ T5816] team0: Port device team_slave_1 added
[   57.522696][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.591973][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.594995][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.606026][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.613565][ T5808] team0: Port device team_slave_0 added
[   57.636620][ T5807] hsr_slave_0: entered promiscuous mode
[   57.639901][ T5807] hsr_slave_1: entered promiscuous mode
[   57.646197][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.649034][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.659552][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.671553][ T5808] team0: Port device team_slave_1 added
[   57.747208][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.749457][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.758421][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.767825][ T5816] hsr_slave_0: entered promiscuous mode
[   57.771016][ T5816] hsr_slave_1: entered promiscuous mode
[   57.774060][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.777442][ T5816] Cannot create hsr debugfs directory
[   57.785538][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.787868][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.798617][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.906006][ T5808] hsr_slave_0: entered promiscuous mode
[   57.909358][ T5808] hsr_slave_1: entered promiscuous mode
[   57.912314][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.916246][ T5808] Cannot create hsr debugfs directory
[   58.121850][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.128284][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.145347][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.154907][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.172868][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.185217][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.191191][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.205098][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.267769][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.275038][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.281181][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.289094][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.362200][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.397853][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   58.418023][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.420582][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.429092][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.436808][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.439175][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.469327][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   58.478606][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.501731][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.504877][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.527856][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.530828][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.557940][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   58.588489][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.591507][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.596694][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.599662][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.686903][ T5200] Bluetooth: hci0: command tx timeout
[   58.766671][ T5200] Bluetooth: hci2: command tx timeout
[   58.766713][ T5812] Bluetooth: hci1: command tx timeout
[   58.820245][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.853266][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.915524][ T5807] veth0_vlan: entered promiscuous mode
[   58.930043][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.936043][ T5807] veth1_vlan: entered promiscuous mode
[   58.971658][ T5816] veth0_vlan: entered promiscuous mode
[   58.986018][ T5807] veth0_macvtap: entered promiscuous mode
[   58.998472][ T5807] veth1_macvtap: entered promiscuous mode
[   59.003420][ T5816] veth1_vlan: entered promiscuous mode
[   59.032755][ T5808] veth0_vlan: entered promiscuous mode
[   59.047565][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.056482][ T5808] veth1_vlan: entered promiscuous mode
[   59.062433][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.080290][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.087112][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.091077][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.096690][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.135553][ T5816] veth0_macvtap: entered promiscuous mode
[   59.157850][ T5808] veth0_macvtap: entered promiscuous mode
[   59.171163][ T5808] veth1_macvtap: entered promiscuous mode
[   59.182072][ T5816] veth1_macvtap: entered promiscuous mode
[   59.215899][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.216359][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.219370][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.241887][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.258317][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.263618][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.267900][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.271372][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.274944][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.298022][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.301704][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.307614][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.331304][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.344123][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.347890][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.351640][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.382458][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.398044][  T397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.412132][  T397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.444871][ T5876] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   59.486436][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.493919][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.503169][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.507522][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.542318][ T5878] netlink: 'syz.0.4': attribute type 10 has an invalid length.
[   59.546083][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4'.
[   59.550598][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.550635][ T5878] batadv0: entered promiscuous mode
[   59.555508][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.556839][ T5878] batadv0: entered allmulticast mode
[   59.560022][ T5878] bridge0: port 3(batadv0) entered blocking state
[   59.562426][ T5878] bridge0: port 3(batadv0) entered disabled state
[   59.572268][ T5878] bridge0: port 3(batadv0) entered blocking state
[   59.575019][ T5878] bridge0: port 3(batadv0) entered forwarding state
[   59.735249][   T51] IPVS: starting estimator thread 0...
[   59.771402][ T5884] netlink: 'syz.1.2': attribute type 12 has an invalid length.
[   59.836587][ T5885] IPVS: using max 78 ests per chain, 187200 per kthread
[   59.850537][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   59.971995][ T5905] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   59.978587][ T5905] netlink: 'syz.1.9': attribute type 8 has an invalid length.
[   59.982293][ T5905] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.076356][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   60.080310][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   60.119255][ T5910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10'.
[   60.251320][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.258203][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.261623][ T5921] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   60.261731][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.270063][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.276519][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.280241][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.439604][ T5928] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   60.478872][   T56] block nbd0: Receive control failed (result -107)
[   60.586196][ T5941] xt_TPROXY: Can be used only with -p tcp or -p udp
[   60.765228][ T5812] Bluetooth: hci0: command tx timeout
[   60.844155][ T5812] Bluetooth: hci2: command tx timeout
[   60.854911][ T5812] Bluetooth: hci1: command tx timeout
[   61.174481][ T5976] netlink: 'syz.0.35': attribute type 7 has an invalid length.
[   61.177070][ T5976] netlink: 'syz.0.35': attribute type 8 has an invalid length.
[   61.647445][ T6016] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   61.844619][ T6030] syzkaller1: entered promiscuous mode
[   61.847036][ T6030] syzkaller1: entered allmulticast mode
[   62.456251][ T6063] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   62.796626][ T6072] xt_TCPMSS: Only works on TCP SYN packets
[   62.843860][ T5812] Bluetooth: hci0: command tx timeout
[   62.924267][ T5200] Bluetooth: hci2: command tx timeout
[   62.926734][ T5812] Bluetooth: hci1: command tx timeout
[   63.623510][ T6126] netlink: 'syz.1.87': attribute type 29 has an invalid length.
[   63.634504][ T6126] unsupported nla_type 58
[   63.720783][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.779914][ T6136] syzkaller1: tun_chr_ioctl cmd 1074025677
[   63.781916][ T6136] syzkaller1: Linktype set failed because interface is up
[   63.810440][ T6138] trusted_key: syz.0.92 sent an empty control message without MSG_MORE.
[   63.882022][ T6145] Bluetooth: MGMT ver 1.23
[   64.297408][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.656518][ T6226] __nla_validate_parse: 112 callbacks suppressed
[   64.656529][ T6226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.117'.
[   64.681260][ T6228] syzkaller1: entered promiscuous mode
[   64.683079][ T6228] syzkaller1: entered allmulticast mode
[   64.782874][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   64.840651][ T6241] validate_nla: 2 callbacks suppressed
[   64.840758][ T6241] netlink: 'syz.2.124': attribute type 29 has an invalid length.
[   64.848933][ T6241] netlink: 'syz.2.124': attribute type 29 has an invalid length.
[   64.852561][ T6241] netlink: 500 bytes leftover after parsing attributes in process `syz.2.124'.
[   64.924821][ T5200] Bluetooth: hci0: command tx timeout
[   64.928138][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.127'.
[   65.004457][ T5200] Bluetooth: hci1: command tx timeout
[   65.004639][   T54] Bluetooth: hci2: command tx timeout
[   65.063877][ T6260] Zero length message leads to an empty skb
[   65.208079][ T6278] netlink: 596 bytes leftover after parsing attributes in process `syz.0.132'.
[   65.397782][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'.
[   65.509654][ T6292] netlink: 48 bytes leftover after parsing attributes in process `syz.1.136'.
[   65.555254][ T6299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'.
[   65.657765][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'.
[   65.787237][ T6324] warning: `syz.2.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.800233][ T6319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.148'.
[   65.806735][ T6324] batman_adv: batadv0: Adding interface: dummy0
[   65.808805][ T6324] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.819163][ T6324] batman_adv: batadv0: Interface activated: dummy0
[   65.888638][ T6324] netlink: 'syz.2.149': attribute type 30 has an invalid length.
[   65.898142][ T6324] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.901112][ T6324] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.904034][ T6324] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.906910][ T6324] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.968187][ T5812] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   66.341453][ T6360] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   66.373295][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.426368][ T6363] bond1: (slave veth3): Enslaving as an active interface with a down link
[   66.563271][ T6375] netlink: 'syz.1.165': attribute type 29 has an invalid length.
[   66.576355][ T6375] netlink: 'syz.1.165': attribute type 29 has an invalid length.
[   66.664666][ T6383] dvmrp1: entered allmulticast mode
[   67.003969][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.027058][ T6415] veth2: entered allmulticast mode
[   67.077430][ T6415] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   67.151037][ T6426] dvmrp0: entered allmulticast mode
[   67.203427][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.277798][ T6439] netlink: 'syz.0.187': attribute type 4 has an invalid length.
[   67.686480][ T6469] netlink: 'syz.1.195': attribute type 7 has an invalid length.
[   67.689110][ T6469] netlink: 'syz.1.195': attribute type 8 has an invalid length.
[   68.271075][ T6502] dvmrp0: entered allmulticast mode
[   68.798863][ T6533] 8021q: VLANs not supported on wg2
[   69.701780][ T6608] __nla_validate_parse: 28 callbacks suppressed
[   69.701790][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   69.710343][ T6601] netlink: 48 bytes leftover after parsing attributes in process `syz.0.235'.
[   69.751290][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'.
[   69.867579][ T6617] netlink: 228 bytes leftover after parsing attributes in process `syz.2.241'.
[   69.909867][ T6628] validate_nla: 7 callbacks suppressed
[   69.909879][ T6628] netlink: 'syz.0.242': attribute type 29 has an invalid length.
[   69.919835][ T6628] netlink: 'syz.0.242': attribute type 29 has an invalid length.
[   69.928441][ T6628] netlink: 500 bytes leftover after parsing attributes in process `syz.0.242'.
[   70.028960][ T6637] netlink: 596 bytes leftover after parsing attributes in process `syz.2.244'.
[   70.102688][ T6642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.246'.
[   70.142924][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'.
[   70.186964][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'.
[   70.220485][ T6649] IPv6: NLM_F_REPLACE set, but no existing node found!
[   70.288882][ T6663] Cannot find del_set index 0 as target
[   70.309203][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.255'.
[   70.929919][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.940963][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.071792][ T6728] netlink: 'syz.0.272': attribute type 7 has an invalid length.
[   71.076145][ T6728] netlink: 'syz.0.272': attribute type 8 has an invalid length.
[   71.082315][ T6728] erspan0: entered promiscuous mode
[   71.085801][ T6728] batadv_slave_1: entered promiscuous mode
[   71.703346][ T6764] xt_CT: No such helper "snmp"
[   71.713571][ T6771] netlink: 'syz.0.280': attribute type 29 has an invalid length.
[   71.718403][ T6771] netlink: 'syz.0.280': attribute type 29 has an invalid length.
[   72.123760][ T5812] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   72.126044][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.472486][ T6810] tls_set_device_offload_rx: netdev not found
[   72.636794][ T6826] netlink: 'syz.0.291': attribute type 1 has an invalid length.
[   72.648591][ T6826] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   73.693486][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.697031][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.712575][ T6860] batman_adv: batadv0: Interface deactivated: dummy0
[   73.770620][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.777413][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.818072][ T6860] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.821005][ T6860] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.829252][ T6860] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.832232][ T6860] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.854477][ T6860] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.857500][ T6860] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.860401][ T6860] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.863390][ T6860] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.996630][ T6876] netlink: 'syz.0.309': attribute type 7 has an invalid length.
[   73.999239][ T6876] netlink: 'syz.0.309': attribute type 8 has an invalid length.
[   74.036254][ T6873] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   74.317291][ T6897] netlink: 'syz.0.316': attribute type 29 has an invalid length.
[   74.665172][ T6916] ipvlan2: entered promiscuous mode
[   74.668940][ T6916] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   74.672531][ T6916] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   74.722080][ T6920] __nla_validate_parse: 26 callbacks suppressed
[   74.722092][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'.
[   74.820471][ T6925] netlink: 136 bytes leftover after parsing attributes in process `syz.1.327'.
[   74.986170][ T6925] validate_nla: 1 callbacks suppressed
[   74.986182][ T6925] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   74.990609][ T6925] netlink: 784 bytes leftover after parsing attributes in process `syz.1.327'.
[   75.062817][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   75.095610][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.138600][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'.
[   75.141665][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   75.145172][ T6938] netlink: 'syz.0.331': attribute type 10 has an invalid length.
[   75.148059][ T6938] bridge0: port 4(team0) entered blocking state
[   75.150199][ T6938] bridge0: port 4(team0) entered disabled state
[   75.152430][ T6938] team0: entered allmulticast mode
[   75.162687][ T6938] team_slave_0: entered allmulticast mode
[   75.165722][ T6938] team_slave_1: entered allmulticast mode
[   75.175074][ T6938] team0: entered promiscuous mode
[   75.176920][ T6938] team_slave_0: entered promiscuous mode
[   75.179853][ T6948] netlink: 596 bytes leftover after parsing attributes in process `syz.2.335'.
[   75.179859][ T6938] team_slave_1: entered promiscuous mode
[   75.185263][ T6938] bridge0: port 4(team0) entered blocking state
[   75.187444][ T6938] bridge0: port 4(team0) entered forwarding state
[   75.189817][ T6946] netlink: 'syz.1.334': attribute type 29 has an invalid length.
[   75.195287][ T6946] netlink: 'syz.1.334': attribute type 29 has an invalid length.
[   75.205013][ T6946] netlink: 500 bytes leftover after parsing attributes in process `syz.1.334'.
[   75.253848][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[   75.307083][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[   75.416997][ T6967] lo speed is unknown, defaulting to 1000
[   75.419097][ T6967] lo speed is unknown, defaulting to 1000
[   75.422477][ T6967] lo speed is unknown, defaulting to 1000
[   75.430225][ T6967] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.440986][ T6967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.464615][ T6967] lo speed is unknown, defaulting to 1000
[   75.470495][ T6967] lo speed is unknown, defaulting to 1000
[   75.475160][ T6967] lo speed is unknown, defaulting to 1000
[   75.634595][ T6982] tipc: Can't bind to reserved service type 0
[   75.641798][ T6983] netlink: 'syz.0.349': attribute type 7 has an invalid length.
[   75.644868][ T6983] netlink: 'syz.0.349': attribute type 8 has an invalid length.
[   76.218161][ T7019] openvswitch: netlink: Duplicate or invalid key (type 0).
[   76.220524][ T7019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.412308][ T7039] netlink: 'syz.0.364': attribute type 2 has an invalid length.
[   76.487089][ T7046] netlink: 'syz.1.366': attribute type 1 has an invalid length.
[   76.497518][ T7046] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   76.761520][ T7070] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   76.798879][ T7073] netlink: 'syz.0.373': attribute type 29 has an invalid length.
[   76.910551][ T7077] team0 (unregistering): Port device team_slave_0 removed
[   76.922075][ T7077] team0 (unregistering): Port device team_slave_1 removed
[   77.355482][ T7112] openvswitch: netlink: Flow key attr not present in new flow.
[   78.543441][ T7161] erspan0: entered promiscuous mode
[   78.547860][ T7161] batadv_slave_1: entered promiscuous mode
[   78.551780][ T7161] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   78.557187][ T7161] Cannot create hsr debugfs directory
[   79.675944][ T7256] netlink: 'syz.1.435': attribute type 11 has an invalid length.
[   79.727627][ T7266] __nla_validate_parse: 45 callbacks suppressed
[   79.727638][ T7266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.438'.
[   79.736516][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[   79.888513][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'.
[   79.891469][ T7281] nbd: socks must be embedded in a SOCK_ITEM attr
[   80.038745][ T7298] validate_nla: 14 callbacks suppressed
[   80.038758][ T7298] netlink: 'syz.1.446': attribute type 4 has an invalid length.
[   80.078153][ T7298] netlink: 'syz.1.446': attribute type 4 has an invalid length.
[   80.156616][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.447'.
[   80.238469][ T7318] netlink: 'syz.0.450': attribute type 29 has an invalid length.
[   80.241538][ T7318] netlink: 'syz.0.450': attribute type 29 has an invalid length.
[   80.253100][ T7318] netlink: 500 bytes leftover after parsing attributes in process `syz.0.450'.
[   80.274248][ T7323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.452'.
[   80.297154][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   80.334960][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'.
[   80.337929][ T7329] netlink: 'syz.0.455': attribute type 7 has an invalid length.
[   80.340423][ T7329] netlink: 'syz.0.455': attribute type 8 has an invalid length.
[   80.344970][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'.
[   80.351877][ T7331] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   80.457643][ T7340] netlink: 596 bytes leftover after parsing attributes in process `syz.0.459'.
[   80.590714][ T7350] lo speed is unknown, defaulting to 1000
[   80.606989][ T7354] lo speed is unknown, defaulting to 1000
[   80.619429][ T5859] IPVS: starting estimator thread 0...
[   80.725565][ T7360] IPVS: using max 80 ests per chain, 192000 per kthread
[   80.780578][ T7367] netlink: 'syz.2.469': attribute type 10 has an invalid length.
[   80.784308][ T7367] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   80.788610][ T7367] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   80.797166][ T7367] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   80.852351][ T7370] netlink: 'syz.1.470': attribute type 29 has an invalid length.
[   80.859829][ T7370] netlink: 'syz.1.470': attribute type 29 has an invalid length.
[   81.170598][   T10] cfg80211: failed to load regulatory.db
[   81.697875][ T7456] atomic_op ffff8881066bc198 conn xmit_atomic 0000000000000000
[   83.294774][ T7536] erspan0: entered promiscuous mode
[   83.297983][ T7536] batadv_slave_1: entered promiscuous mode
[   83.301536][ T7536] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   83.306337][ T7536] Cannot create hsr debugfs directory
[   83.308234][ T7536] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[   83.311431][ T7536] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.233329][ T7553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.833946][ T7604] __nla_validate_parse: 22 callbacks suppressed
[   84.833964][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.545'.
[   84.839684][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'.
[   84.979519][ T7614] xt_hashlimit: max too large, truncated to 1048576
[   84.982805][ T7614] No such timeout policy "syz1"
[   85.096664][ T7620] validate_nla: 10 callbacks suppressed
[   85.096677][ T7620] netlink: 'syz.1.548': attribute type 29 has an invalid length.
[   85.106946][ T7620] netlink: 'syz.1.548': attribute type 29 has an invalid length.
[   85.118176][ T7620] netlink: 500 bytes leftover after parsing attributes in process `syz.1.548'.
[   85.301681][ T7635] netlink: 'syz.1.555': attribute type 1 has an invalid length.
[   85.328866][ T7635] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.333125][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[   85.333764][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.337213][ T7635] netlink: 3 bytes leftover after parsing attributes in process `syz.1.555'.
[   85.365860][ T7635] bond3: (slave veth0_to_bond): making interface the new active one
[   85.370075][ T7635] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   85.378776][ T7635] vlan2: entered allmulticast mode
[   85.380465][ T7635] veth1: entered allmulticast mode
[   85.382529][ T7635] veth1: entered promiscuous mode
[   85.386404][ T7635] veth1: left promiscuous mode
[   85.389074][ T7635] bond3: (slave vlan2): Enslaving as an active interface with an up link
[   85.410466][ T7642] netlink: 'syz.2.557': attribute type 8 has an invalid length.
[   85.456849][ T7648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.559'.
[   85.871301][ T7664] netlink: 'syz.1.561': attribute type 4 has an invalid length.
[   85.871430][ T7663] netlink: 'syz.1.561': attribute type 4 has an invalid length.
[   85.922045][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.562'.
[   86.227509][ T7688] netlink: 'syz.0.572': attribute type 6 has an invalid length.
[   86.230537][ T7688] netlink: 'syz.0.572': attribute type 7 has an invalid length.
[   86.232995][ T7688] netlink: 'syz.0.572': attribute type 8 has an invalid length.
[   86.239227][ T7688] netlink: 'syz.0.572': attribute type 21 has an invalid length.
[   86.242508][ T7688] netlink: 128 bytes leftover after parsing attributes in process `syz.0.572'.
[   86.248676][ T7688] netlink: 3 bytes leftover after parsing attributes in process `syz.0.572'.
[   86.340459][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.575'.
[   86.398173][ T7699] syzkaller0: entered promiscuous mode
[   86.400585][ T7699] syzkaller0: entered allmulticast mode
[   87.200505][ T7716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.415837][ T7740] Illegal XDP return value 1381505294 on prog  (id 132) dev N/A, expect packet loss!
[   88.459527][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.065083][ T7855] tipc: Started in network mode
[   89.067697][ T7855] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   89.072293][ T7855] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.083867][ T7855] veth1_to_batadv: mtu greater than device maximum
[   89.186325][ T7816] syz.1.615 (7816) used greatest stack depth: 19352 bytes left
[   89.425452][ T7881] netlink: 'syz.1.641': attribute type 11 has an invalid length.
[   89.593880][ T7888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.165933][ T7916] __nla_validate_parse: 25 callbacks suppressed
[   90.165946][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'.
[   90.415965][ T7924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.660'.
[   90.551687][ T7935] validate_nla: 12 callbacks suppressed
[   90.551705][ T7935] netlink: 'syz.1.662': attribute type 29 has an invalid length.
[   90.559496][ T7935] netlink: 'syz.1.662': attribute type 29 has an invalid length.
[   90.562693][ T7935] netlink: 500 bytes leftover after parsing attributes in process `syz.1.662'.
[   90.599804][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'.
[   90.643913][ T7937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.663'.
[   90.712401][ T7957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'.
[   90.964059][ T7988] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   90.968312][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'.
[   90.973310][ T7988] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[   90.977138][ T7988] netlink: 224 bytes leftover after parsing attributes in process `syz.0.684'.
[   90.980821][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'.
[   90.986368][ T7989] netlink: 'syz.2.682': attribute type 5 has an invalid length.
[   90.989598][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'.
[   91.335855][ T8016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.392740][ T8016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.459209][ T8016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.525169][ T8016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.609491][ T8016] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.625951][ T8016] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.639803][ T8016] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.652619][ T8016] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.767430][ T8025] syzkaller1: entered promiscuous mode
[   91.769840][ T8025] syzkaller1: entered allmulticast mode
[   91.941105][ T8039] lo speed is unknown, defaulting to 1000
[   92.271556][ T8070] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[   92.380729][ T8079] tipc: Started in network mode
[   92.382824][ T8079] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   92.401553][ T8079] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   92.576681][ T8106] netlink: 'syz.2.722': attribute type 7 has an invalid length.
[   92.579629][ T8106] netlink: 'syz.2.722': attribute type 8 has an invalid length.
[   92.810436][ T8116] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   93.001538][ T8139] xt_TCPMSS: Only works on TCP SYN packets
[   93.686302][ T8209] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.837505][ T8231] netlink: 'syz.2.768': attribute type 5 has an invalid length.
[   94.074847][ T8250] delete_channel: no stack
[   94.232139][ T8262] xt_TCPMSS: Only works on TCP SYN packets
[   94.262796][ T8279] netlink: 'syz.2.785': attribute type 7 has an invalid length.
[   94.276947][ T8279] netlink: 'syz.2.785': attribute type 8 has an invalid length.
[   94.314306][ T8283] 
[   94.315326][ T8283] =============================
[   94.316879][ T8283] WARNING: suspicious RCU usage
[   94.318433][ T8283] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   94.322866][ T8283] -----------------------------
[   94.325535][ T8283] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage!
[   94.330776][ T8283] 
[   94.330776][ T8283] other info that might help us debug this:
[   94.330776][ T8283] 
[   94.335666][ T8283] 
[   94.335666][ T8283] rcu_scheduler_active = 2, debug_locks = 1
[   94.338949][ T8283] 1 lock held by syz.1.788/8283:
[   94.341011][ T8283]  #0: ffffffff8e13f040 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[   94.345669][ T8283] 
[   94.345669][ T8283] stack backtrace:
[   94.348100][ T8283] CPU: 1 UID: 0 PID: 8283 Comm: syz.1.788 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   94.348119][ T8283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.348128][ T8283] Call Trace:
[   94.348135][ T8283]  <TASK>
[   94.348140][ T8283]  dump_stack_lvl+0x189/0x250
[   94.348167][ T8283]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.348188][ T8283]  ? __pfx__printk+0x10/0x10
[   94.348215][ T8283]  lockdep_rcu_suspicious+0x140/0x1d0
[   94.348240][ T8283]  get_callchain_entry+0x2b6/0x3c0
[   94.348258][ T8283]  get_perf_callchain+0xa1/0x6b0
[   94.348275][ T8283]  ? __pfx_get_perf_callchain+0x10/0x10
[   94.348293][ T8283]  ? preempt_schedule+0xae/0xc0
[   94.348315][ T8283]  __bpf_get_stack+0x3fc/0xa60
[   94.348340][ T8283]  ? __pfx___bpf_get_stack+0x10/0x10
[   94.348359][ T8283]  ? __lock_acquire+0xab9/0xd20
[   94.348406][ T8283]  bpf_get_stack+0x33/0x50
[   94.348426][ T8283]  ? bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e
[   94.348439][ T8283]  bpf_get_stack_raw_tp+0x1a9/0x220
[   94.348460][ T8283]  bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e
[   94.348473][ T8283]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[   94.348492][ T8283]  bpf_prog_test_run_syscall+0x312/0x4b0
[   94.348509][ T8283]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   94.348522][ T8283]  ? __fget_files+0x2a/0x420
[   94.348541][ T8283]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[   94.348557][ T8283]  bpf_prog_test_run+0x2c7/0x340
[   94.348577][ T8283]  __sys_bpf+0x4a4/0x860
[   94.348600][ T8283]  ? __pfx___sys_bpf+0x10/0x10
[   94.348630][ T8283]  ? rcu_is_watching+0x15/0xb0
[   94.348655][ T8283]  __x64_sys_bpf+0x7c/0x90
[   94.348671][ T8283]  do_syscall_64+0xfa/0x3b0
[   94.348682][ T8283]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.348702][ T8283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.348715][ T8283]  ? exc_page_fault+0x9f/0xf0
[   94.348736][ T8283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.348749][ T8283] RIP: 0033:0x7ff226d8e929
[   94.348761][ T8283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.348772][ T8283] RSP: 002b:00007ff227c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   94.348785][ T8283] RAX: ffffffffffffffda RBX: 00007ff226fb5fa0 RCX: 00007ff226d8e929
[   94.348794][ T8283] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[   94.348801][ T8283] RBP: 00007ff226e10b39 R08: 0000000000000000 R09: 0000000000000000
[   94.348809][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.348815][ T8283] R13: 0000000000000000 R14: 00007ff226fb5fa0 R15: 00007fff9ce72e38
[   94.348835][ T8283]  </TASK>

VM DIAGNOSIS:
00:56:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000029470 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88801bc66348 RBP=ffff88801bc66300 RSP=ffffc9000698f590
R8 =ffff88801bc6634b R9 =1ffff1100378cc69 R10=dffffc0000000000 R11=ffffed100378cc6a
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffff88801bc66348
RIP=ffffffff822ef1eb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583cfb500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ec1fffc CR3=0000000109356000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff226e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f54 RDI=0000000000000f55 RBP=00000000000003f8 RSP=ffffc9000305f2b0
R8 =ffff88801fdf8237 R9 =1ffff11003fbf046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48eb R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff227c9e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000023b94000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff226f84478 00007ff226f84450 XMM03=00007ff226f84488 00007ff226f84480
XMM04=00007ff227aed100 00007ff226f84440 XMM05=00007ff226f84458 00007ff226f844a0
XMM06=00007ff226f84498 00007ff226f84490 XMM07=00007ff226f84488 00007ff226f84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff226e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
