last executing test programs: 3m4.129377671s ago: executing program 2 (id=64): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) writev(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m3.801833264s ago: executing program 2 (id=69): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c0002800800050001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180042005600230000fd0000", @ANYRES32=0x0], 0x18}}, 0x0) 3m2.974384215s ago: executing program 4 (id=75): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000380)=0xfffffe5a) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000009c0)="27050200160014000600002fb96dbcf706e10500070088a800a88800f90ecf7b704fb64a5239", 0x26}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000500)={r4, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x2) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "adf83dd9149bc431", "bbc6ae386b11411f6ff3dce3504e9d5c", '\x00', "a5cc48f33a8300"}, 0x28) recvfrom(r6, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r4, 0x5, 0x30, 0xdfe7, 0xffffffff80000000}, &(0x7f0000000140)=0x18) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000f4ff00000000000000000000000000000019000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000001"], 0x90) (async) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x63, 0x26, &(0x7f0000000280)="b006c383460349f960de18c6a1bd1a7c658745e5cbad05661fd4261ae15086f81ec855d7cad382a7cfab0df5c99101e7d2995495f7238764a6f862ce7d55186cc406ce173b125250b039e5fc3a5662e611227ed596e1ed224d01b7b68d3d6951d2c639", &(0x7f0000000200)=""/38, 0xa, 0x0, 0xbe, 0x1b8, &(0x7f00000003c0)="f25468d7662a4b76d1e5b3e4ffe654a16a88f728e9156a632027e90eea49f86f97a21a75a5c04add3c5ab62d47d10c6f0f06c22bbf3cc8b3afbfff6cd258bb3d2fddaa45bed01b5eff5ed2bd2caabb0d4161081dd9dce6326434d1e45226fc0b186b3b14d135e904d3bf9b072387867adaf0d4339943ff76089678658bf671600460b84856f7baa354c9883b393671b8052ad7caccd71f0eac859f74250d1cfdd8fd476d38e9968f52e58bd576fc6f3253dbd8c9c8d07d60d81899255852", &(0x7f0000000bc0)="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", 0x2, 0x0, 0xf}, 0x50) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r7) 3m2.751094533s ago: executing program 1 (id=76): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe76}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r7 = socket(0xa, 0x3, 0x87) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x3000) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'netpci0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x78, r10}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8916, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) 3m2.199499277s ago: executing program 2 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000006d979ed100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5", 0x2f}], 0x1}, 0x4000804) 3m2.130802205s ago: executing program 3 (id=82): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x2) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r2, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) (async) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r2, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) (async) 3m1.944403891s ago: executing program 4 (id=83): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x80000, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@random="63b1286328b0dc2410aa52a0c02f", 0xe, 0x0) 3m1.943829065s ago: executing program 3 (id=84): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) pipe(&(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) 3m1.783198244s ago: executing program 2 (id=86): nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) recvmmsg(r0, &(0x7f0000004c00)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/216, 0xd8}], 0x4, &(0x7f00000014c0)=""/4096, 0x1000}, 0xf}, {{&(0x7f00000024c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002540)=""/69, 0x45}, {&(0x7f00000025c0)=""/187, 0xbb}, {&(0x7f0000002680)=""/151, 0x97}, {&(0x7f0000002740)=""/128, 0x80}, {&(0x7f00000027c0)=""/5, 0x5}, {&(0x7f0000002800)=""/160, 0xa0}], 0x6, &(0x7f0000002940)=""/44, 0x2c}, 0xbbfa}, {{&(0x7f0000002980)=@caif=@dbg, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a00)=""/232, 0xe8}, {&(0x7f0000002b00)=""/120, 0x78}, {&(0x7f0000002b80)=""/93, 0x5d}, {&(0x7f0000002c00)=""/165, 0xa5}], 0x4}, 0x40}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d00)=""/173, 0xad}], 0x1}, 0x9}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e80)=""/180, 0xb4}, {&(0x7f0000002f40)=""/157, 0x9d}, {&(0x7f0000003000)=""/218, 0xda}, {&(0x7f0000003100)}], 0x4, &(0x7f0000003180)=""/148, 0x94}, 0x6}, {{&(0x7f0000003240)=@can, 0x80, &(0x7f00000033c0)=[{&(0x7f00000032c0)=""/120, 0x78}, {&(0x7f0000003340)=""/36, 0x24}, {&(0x7f0000003380)=""/19, 0x13}], 0x3, &(0x7f0000003400)=""/136, 0x88}, 0x5}, {{&(0x7f00000034c0)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/120, 0x78}, {&(0x7f00000035c0)=""/157, 0x9d}, {&(0x7f0000003680)=""/3, 0x3}, {&(0x7f00000036c0)=""/67, 0x43}], 0x4, &(0x7f0000003780)=""/62, 0x3e}, 0x6}, {{&(0x7f00000037c0)=@caif=@dgm, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000003840)=""/109, 0x6d}, {&(0x7f00000038c0)=""/245, 0xf5}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000049c0)=""/106, 0x6a}, {&(0x7f0000004a40)=""/91, 0x5b}], 0x5, &(0x7f0000004b40)=""/129, 0x81}, 0x7fff}], 0x8, 0x100, &(0x7f0000004e00)={0x0, 0x3938700}) recvmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000004e40)=""/130, 0x82}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/247, 0xf7}, {&(0x7f0000006000)=""/171, 0xab}], 0x4, &(0x7f0000006100)=""/212, 0xd4}, 0x2}, {{&(0x7f0000006200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006280)}, {&(0x7f00000062c0)=""/134, 0x86}, {&(0x7f0000006380)=""/125, 0x7d}, {&(0x7f0000006400)=""/239, 0xef}, {&(0x7f0000006500)=""/178, 0xb2}, {&(0x7f00000065c0)=""/62, 0x3e}, {&(0x7f0000006600)=""/111, 0x6f}, {&(0x7f0000006680)=""/205, 0xcd}, {&(0x7f0000006780)=""/44, 0x2c}], 0x9, &(0x7f0000006880)=""/17, 0x11}, 0x2}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f00000068c0)=""/42, 0x2a}, {&(0x7f0000006900)=""/17, 0x11}, {&(0x7f0000006940)=""/234, 0xea}, {&(0x7f0000006a40)=""/18, 0x12}, {&(0x7f0000006a80)=""/236, 0xec}, {&(0x7f0000006b80)=""/2, 0x2}, {&(0x7f0000006bc0)}, {&(0x7f0000006c00)=""/32, 0x20}, {&(0x7f0000006c40)=""/178, 0xb2}, {&(0x7f0000006d00)=""/226, 0xe2}], 0xa, &(0x7f0000006ec0)=""/164, 0xa4}}, {{&(0x7f0000006f80)=@nfc_llcp, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/19, 0x13}], 0x1, &(0x7f0000007080)}, 0x78}, {{&(0x7f00000070c0)=@generic, 0x80, &(0x7f0000007440)=[{&(0x7f0000007140)=""/185, 0xb9}, {&(0x7f0000007200)=""/116, 0x74}, {&(0x7f0000007280)=""/4, 0x4}, {&(0x7f00000072c0)=""/90, 0x5a}, {&(0x7f0000007340)=""/195, 0xc3}], 0x5, &(0x7f00000074c0)=""/247, 0xf7}, 0xb}], 0x5, 0x40, &(0x7f0000007700)={0x77359400}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000007740)={0x4, 0x101, 0x4, 0x5, 0x6, 0x0, [{0x3b4, 0x3, 0x1, '\x00', 0x1201}, {0xd, 0xffff, 0x1, '\x00', 0x1}, {0x400, 0x8, 0x8, '\x00', 0x400}, {0x7fffffff, 0x3, 0xfe6, '\x00', 0x4}, {0x0, 0xffffffffffffff0b, 0xfffffffffffffffd, '\x00', 0x100}, {0x5, 0x4, 0x3, '\x00', 0x405}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f000000d400)=[{{&(0x7f00000078c0)=@can, 0x80, &(0x7f0000008a80)=[{&(0x7f0000007940)=""/90, 0x5a}, {&(0x7f00000079c0)=""/4096, 0x1000}, {&(0x7f00000089c0)=""/18, 0x12}, {&(0x7f0000008a00)=""/88, 0x58}], 0x4, &(0x7f0000008ac0)=""/240, 0xf0}, 0xdd}, {{&(0x7f0000008bc0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000008d00)=[{&(0x7f0000008c40)=""/145, 0x91}], 0x1, &(0x7f0000008d40)=""/4096, 0x1000}, 0xc2}, {{&(0x7f0000009d40)=@can, 0x80, &(0x7f000000c340)=[{&(0x7f0000009dc0)=""/64, 0x40}, {&(0x7f0000009e00)=""/166, 0xa6}, {&(0x7f0000009ec0)=""/154, 0x9a}, {&(0x7f0000009f80)=""/183, 0xb7}, {&(0x7f000000a040)=""/4096, 0x1000}, {&(0x7f000000b040)=""/73, 0x49}, {&(0x7f000000b0c0)=""/4096, 0x1000}, {&(0x7f000000c0c0)=""/157, 0x9d}, {&(0x7f000000c180)=""/174, 0xae}, {&(0x7f000000c240)=""/235, 0xeb}], 0xa, &(0x7f000000c400)=""/4096, 0x1000}, 0x404}], 0x3, 0x40000100, &(0x7f000000d4c0)) write(r1, &(0x7f000000d500), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f000000d540), 0x301000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f000000d580)={'pim6reg1\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl(r1, 0x52cb, &(0x7f000000d5c0)="a2d14d22ff57dce318a222c202f8611dd593c22e8d113fbfe436bac4b76958ebde5b731b9e9100bf54a0cdf8ea5f569a6b961260b76c1a0fae10d61b8180ce7b") r4 = openat$tun(0xffffffffffffff9c, &(0x7f000000d600), 0x10080, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f000000d640)={0x1, 0xa, [@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @local, @broadcast, @remote, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f000000d680), 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f000000d6c0), &(0x7f000000d700)=0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f000000d740), r6) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f000000d780)) writev(r0, &(0x7f000000d900)=[{&(0x7f000000d7c0)}, {&(0x7f000000d800)="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", 0xfc}], 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f000000d940), &(0x7f000000d980)=0x30) r7 = accept4(r0, &(0x7f000000d9c0)=@generic, &(0x7f000000da40)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f000000da80)=[@in6={0xa, 0x4e24, 0x1, @loopback, 0x8}], 0x1c) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f000000dac0)=0x2) sendmsg$NFT_BATCH(r7, &(0x7f000000dc80)={&(0x7f000000db00)={0x10, 0x0, 0x0, 0x44000104}, 0xc, &(0x7f000000dc40)={&(0x7f000000db40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELFLOWTABLE={0xc4, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xec}, 0x1, 0x0, 0x0, 0x2400c025}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f000000dd80)={'sit0\x00', &(0x7f000000dcc0)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x80, 0x0, [{@remote}, {@multicast2}, {}, {@multicast2}, {@broadcast}, {@empty}, {@local}, {@multicast2}]}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f000000ddc0)="1b1e6a782f54ea6015b0bcbefb874d3b", 0x10) listen(r0, 0xf0) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f000000de00)) 3m1.73289341s ago: executing program 1 (id=87): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 3m1.732485839s ago: executing program 4 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = epoll_create(0x541e) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x4}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000040)={0x9, 0xd0, 0x2}) 3m1.677726638s ago: executing program 0 (id=89): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) close(0x3) connect$vsock_stream(r1, &(0x7f00000002c0), 0x69) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) (async) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010102, @multicast1}, 0x8) (async) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000000c0)={0x20000000}) 3m1.414371255s ago: executing program 4 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x711, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x9, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000240)={0x6, 'pim6reg1\x00', {}, 0x8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a800000000010506000000000000000002000000340001801400018008000100ac14142308000200ac1414aa1c0002800500010006000000060002004e220000060003004e230000340002801400018008000100ac1414aa08000200ac1414231c0002800500010006000000060002004e230000060003004e220000100004800c00018005000100010000001400188008000100000001000800020000000000080007"], 0xa8}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8f70120b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 3m1.309048618s ago: executing program 1 (id=91): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x210, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8686}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ef67518f66eaae8e821dc17376662f93ed005b8"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd158}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x44}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x8010) 3m1.28926405s ago: executing program 0 (id=92): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000030000000600000008000300", @ANYRES32=r3, @ANYBLOB="090000000000000070cf617ef716e3b2a7e4d0eecafd5fab1eba599792e7088146b6c4edbae4ba1e89832505b2f708b2648f0a8ef40add8025e4f0897436853afec9b6955e85cb9949cb26addc"], 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYRES32=r2], 0x3c}}, 0x40000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030300000e00000000001100000708000300", @ANYRES32=r10, @ANYBLOB="0a0006"], 0x28}}, 0x14014) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r8, @ANYBLOB="040028bd7000fedbdf250f00000008000c00080000000400460008000c0006000000040005012800a6800a00060008021100000100000a00060008021100000000000a00060008021100000000004000a6800a00060008021100000000000a00060008021100001100000a00060008021100000000000a0002000000ffffffff00000a000600ffffffffffff00000500a30000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4011}, 0x4048001) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000328e19a1f0a99e4b140012800c0001", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3m1.219694992s ago: executing program 4 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1, &(0x7f00000000c0)=""/44, 0x2c}, 0x40000000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) 3m1.097063804s ago: executing program 1 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1485a414cfcf7e3740aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) 3m0.976902614s ago: executing program 0 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbddbbbb863f4d407de986dd637caa2700083c01fc010000000000000000000000000000ff020000002c000100000010000000012f0000000000000074a0df74b3fcd918e9c47cbcb7d6121e7b3d2e6f68395ad68574c92289ed89c89165b68e5654e65db4d6ef4b44590ae91f42aab21482a88f553c4b50babbc8e4af0fc3ebe9539275c0eedaf341820099a835ac0c1d6489858cf53490ffbc8fd5c0df8bd439df6e729f767d0754492dbd7db625e980ed8f3c11f7443646cefeb96de4a83dc8ddea30c7c03c162d"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0xc, 0xfffffbf7, 0x53fd, 0xd6, 0x7]}, &(0x7f0000000300)=0x54) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x40) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000306010200000000000000000000000405000100070000000900020073797a320000000040ad500bff63b3290e9acd7f26ca11fa0a206a9d41630a0f72e51a96aefcc2c5500ac7a84d7e6edd47ef61d7f920cbf11d43fbea655826ef0ffa61baa4f90218d90b74e8d99c3d59a2fba0ad9f8d27599519e274378da2deec5fe7d90829f67aa31aab0e283c3b58f6573f126f09ed8744740f2025"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4) 3m0.949420523s ago: executing program 3 (id=96): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@broadcast, @random="6c7621d7cc94", @void, {@generic={0x4305}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) (async) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@broadcast, @random="6c7621d7cc94", @void, {@generic={0x4305}}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10) (async) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) 3m0.768978305s ago: executing program 2 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000380)="075fdaf9"}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 3m0.768486188s ago: executing program 3 (id=98): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x72, r3}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m0.620180756s ago: executing program 2 (id=99): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x81}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x13, @mcast2, 0x2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}, @in6={0xa, 0x4e23, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}, @in6={0xa, 0x4e21, 0x2f3e, @mcast2, 0x3}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x1}], 0xac) poll(&(0x7f00000030c0)=[{r8, 0x1000}], 0x1, 0x4) 3m0.541120319s ago: executing program 0 (id=100): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000, '\x00', r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, [@alu={0x7, 0x1, 0xa, 0x3, 0x3, 0xfffffffffffffffc}, @ldst={0x0, 0x3, 0x1, 0x5, 0x9, 0x40, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xd1, &(0x7f0000000640)=""/209, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1, 0x10e, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r3, r5, r3, r2, r2, r4, r2], &(0x7f0000000940)=[{0x4, 0x5, 0x0, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="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", 0x0, 0x8, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x7, 0x0, 0x5c77}, 0x50) write$6lowpan_control(r0, &(0x7f0000000340)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 3m0.412221894s ago: executing program 0 (id=101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xd3, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @local, {[@generic={0x1c, 0x2}]}}, @redirect={0x5, 0x2, 0x0, @remote, {0x28, 0x4, 0x3, 0xf, 0x0, 0x65, 0x9f92, 0x5, 0x16, 0x10, @empty, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x7, [{@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@private=0xa010102, 0x1d5}, {@multicast2, 0x3}]}, @lsrr={0x83, 0x27, 0xd, [@loopback, @local, @broadcast, @multicast1, @multicast1, @empty, @local, @local, @multicast1]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x6, [0xfffffff8, 0x4, 0x1000]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x5a, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @broadcast, @multicast1, @loopback, @private=0xa010101, @empty]}]}}, "b8230f7d47"}}}}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x3fcb7000) 3m0.411117017s ago: executing program 1 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) (async, rerun: 64) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x812}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080003000000f58fa2b0"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b805509dbba9b374d59c9e2ad7a786fd8766d6935a31e49", 0x35}, {&(0x7f0000000540)="0276dd894f", 0x5}], 0x2}, 0x24004010) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x2000c884) (async, rerun: 64) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xab}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb2f8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xaf}, {0x6, 0x11, 0x3}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) (rerun: 64) 3m0.260783469s ago: executing program 4 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r4, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e24, @broadcast}}) sendto$inet6(r4, 0x0, 0x0, 0x20040401, &(0x7f0000000340)={0xa, 0x2, 0x3000, @empty}, 0x1c) unshare(0x8000600) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800010000000000ffdbdf251d01060008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x400c004) 3m0.246196536s ago: executing program 3 (id=104): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b704f9ffffff000085000000a4000000b7000000000000009500000000000000b7000000100000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x6, 0xd0ce5, &(0x7f0000100700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3m0.152362011s ago: executing program 1 (id=105): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000001440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001480)=0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000008000000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f0000000180)="63c31416951b", 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'hsr0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="55891778ad29f64af5b9655f22e0c787b4550f0f375d", 0x16}, {&(0x7f0000000100)="eacf500a58c40732a4bbbdbbfe93d7dac878a7f99203a655b1ad22258979137d590478f31aef9805e7708b90c9ad4acb0b70ed667e151df73fbf61f5", 0x3c}, {&(0x7f0000000340)="99fa28d8edbfdab533a59c3e3003c6c0d7d611c8be6d189aa30203fe7d6a848ea6c56026dc17496a37a1b208d972c6a952c7eac1c85472a52862af8424ac0e30e00a5f587414f451e60441bd62408adfe535bc099ac1df3a5400b7e02ebb4c98594c0d62ea56d924d07762a62409f1540b71fc05be0a", 0x76}, {&(0x7f00000003c0)="6abdc7e1083a8b8f720e8e506d16dd596c77436c52564b2fbe23bfe95caad9a3ae5790c58d68d8fc9462332ad246a5b9bad4c8181145807d47bb47e9b62a29f8e8064dcc361170168f51b4ac98d1e042d7b8557b4f5a7d", 0x57}, {&(0x7f0000000880)="cb594814bd9a7d6341eed27b40972082cc99ef5583ba4853ffa1ab6ff91064a06793128f12984abcf5cc9a7da61925f79ff73f8c6640f58424022108d4455a71a48a0930bc43e0b0ef362b161f16ecacc156d97bfc465746a6625d7c92aeb174358a5add71802524b1fe5643ae0533baee858ebede1852069765f73e50371be961af498c5e8af5bf6fc84804389fe8c67151e10cfd272d2bff383da198d88be1908cc12a8ff8daa52e9353f13308739df020d22dca48ac4bc38260b3690e7d102cc738dfcae230", 0xc7}, {&(0x7f0000000980)="8e9a1a0a795112474d3b7fad52226ef1a61a638f710580b68e0c8ed1df54b76bb8e773f14cb057d55a6a572977506219", 0x30}], 0x6}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f00000012c0), 0x0, &(0x7f0000001380)=[@tclass={{0x14, 0x29, 0x43, 0x830000}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000013c0)="9eee39a8e48a262724d381a5055826881c37bde16e2eedb0fd676b70b1a4a5b05ff9c135be568b693b3e5f5167", 0x2d}], 0x1, &(0x7f0000001500)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r4}}}], 0x50}}, {{&(0x7f0000001580)={0xa, 0x4e24, 0x4, @local, 0x79}, 0x1c, &(0x7f0000001700)}}, {{&(0x7f0000001740)={0xa, 0x4e24, 0x3, @empty, 0x80}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001780)="9dd435b63cef03b8f514a814ab3394c81e386f6def06ac7cc0115141a0add4fcd891ba948b8ee3e37ad56f123ebf7c7afeb6d255c83ed68ae6e8edf94181", 0x3e}, {&(0x7f00000017c0)="8379c0765e1d159de7f9b5618a17fcb5bd3c6ff7a12fa2d609984403adbba5ff0ef61f5ad44f768f00e637ffb8b3b868dfd1b72a426f7484e80b00c2e0acf356a2b145ef99632e71d7277dde750c3bcbdc3677ecf6e0312f01bdbd766174fb516f6ae2a0dcd74f0566edc2a1428e8314f8d59cc8ae661e9f9c1aa70f25d696e328dc2dd7b0b574716ce1d72f05597a6f9e92961d6581ee8e23bb8e172f963091666310772aa9f807eebef11d8f3b08ea1a7c1a28de1ca86305a3a9", 0xbb}, {&(0x7f0000001880)="41799c7932fb40ecadf4e321e3f0176d1d877aafa4bb4a4107caf8b4733c68386f77f48a", 0x24}, {&(0x7f00000018c0)="cf88cb42652b1eabe7aa997309cf7f828a239179f645680cbcb384e4726afa33a8f06bfa2ae1882954c2f4d83a6a2b18ed6ececac1c09341592da14c2ffa0c7f4457ebc0d4983bf32967b68de4ae4aeed11cd961028cb5fb58ef46b15fd264d90b15be5b391345e28c0271bc96779522a92a2261769162092a0dbdce8cb423b8a43df1a3c87ad382b1ed824c4e7a153278e042aa9a5e7286b24e662638295087", 0xa0}], 0x4, &(0x7f0000000a80)=[@tclass={{0x14, 0x29, 0x43, 0x6c8}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts_2292={{0x2f0, 0x29, 0x4, {0x2c, 0x5a, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @jumbo, @jumbo={0xc2, 0x4, 0x2}, @generic={0x70, 0xf6, "1bea27b17547bb39c397f9ce20de85a7789b348e9bf856cdfd9d1b19a129d3f917f21a5372efa112d03ea98330ac40bc9ad1617737a60446f8db82d9b52ae8ce5625a6ec7c869f1c6d92de59f6960cef5718afc37430ad5946416ad6f036dbe5ed4337e7e2ea83610150ccbce3a84d1d03cf2c6c24325b9e7cf38ad0baff4ec35b7f0bc98937b6c680bb47a3283cb578cb1b25e00a8a8825c8693ff0a0c2eacfbae4ed8b7c721f9bdacb55470f3af8b22e1a03fd7866ae8bf35d703377b444335bce2cf983cafb2b145ac3ef0b93b898437d96db344860be304d89809eb5a35d454d0527e4f603f06543c653f9ae6b0856f425b76f87"}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x4, [0x100, 0x3, 0x3, 0x3bdf, 0x8, 0x0]}}, @generic={0x1, 0x189, "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"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0xc, 0x1, '\x00', [@ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0x1e0, 0x29, 0x4, {0x8, 0x39, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @generic={0x0, 0xc9, "1d1fc81623bee7e66c0985be3cc20e19fec588db4a1212d759150464e02aa9939bae8c45b0d94be33f91432b242745a876b33a3f0fc931672e64018db2a4f7cecff1077b737a3cf77ccf73cd82ae00d9ba6e3d73149208fa07ba1d1da89b926f1f8331211a7afed56f39e63b9635557aa530a3558b574693691cd0b3c2e51021cf87023a3a3627e8e86dc22dc066eda402bd9f326c9a5aa6e2b10c3f1ae348a9e78078e35a8f71e8c0a9f2502b44f9113297dc0dcfd66bb2bd1ec86f7a4ff82b6cb9e1bcc40814cf82"}, @generic={0x8, 0xd7, "f979dcfbf657c46d94fe694a22a1dfe89dcf00220b69a531c4fc1f9cdf1d31cd3307726cc598ba7722844a03b7c05edd2fbbfccc8c5329acefc38302f94c3b0c765edc62e784361e8d704f7e99bf9bc443e693df00f0ff8f5ef93171f7bf84a029a89de35e5f9cc014eceb8a6d8ffe35df5298288347b01352b2c602de7f60db761d0f0b4b9fe76129d76eefc10d7fbbd9083298f21f5b9131be819ed8f03ebaabd5fbfd3d405b095ff85eaea4d526f53c90005d3a78e3c20689b7ab7f182c1f5cc83931553e33a04e96f8b68a319a645946f1fa009993"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x11, 0x6, 0x0, 0x5f, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2, @mcast1]}}}, @hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x2c, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x101}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x5, 0x9e, "9d8182afa3206b5985d2c0324986053d8345791b400add9b73d7f285c225a6169b1c6ee6399685104d080dce4a07d5d4bc6e3f75374155d4a313066b1dd1000f3b8aca3d190690cfa896e63893ecd0fdbc47d184856c69bbba487efb3e3332ca3285536baf95abb1cf267d8062e37cab04f7b5a6352261c98283da69381aacd688239a9aa32383d6e97e9da877d010266be0122707166a4f77e6fc116344"}, @jumbo={0xc2, 0x4, 0x3}]}}}], 0x6a0}}], 0x5, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r8, 0x801, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$FOU_CMD_GET(r5, &(0x7f0000001200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x68, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) socket(0x2a, 0x2, 0x0) (async) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100"], 0x74}}, 0x24005000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100"], 0x74}}, 0x24005000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m0.15181629s ago: executing program 0 (id=106): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3m0.139261199s ago: executing program 3 (id=107): socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) writev(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffff40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60dd69bf00542b00fc020000000000000000000000000001fe8000000000000000000000000000aa6c0000000000000001"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 32 (id=106): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 83.132647][ T5608] cgroup: Unknown subsys name 'net' [ 83.222003][ T5608] cgroup: Unknown subsys name 'cpuset' [ 83.225558][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.945957][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.411412][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.412585][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.413235][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.416920][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.417183][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.419827][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.422436][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.425456][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.425920][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.431641][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.433767][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.435299][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.439903][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.443234][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.446431][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.459558][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.462498][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.463872][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.471305][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.472357][ T4936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.556145][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.565193][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.575848][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.587004][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.595078][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.490166][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.490293][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.490804][ T5619] bridge_slave_0: entered allmulticast mode [ 89.494119][ T5619] bridge_slave_0: entered promiscuous mode [ 89.557818][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.564292][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.564717][ T5619] bridge_slave_1: entered allmulticast mode [ 89.572307][ T5625] Bluetooth: hci0: command tx timeout [ 89.572312][ T5635] Bluetooth: hci1: command tx timeout [ 89.572562][ T5624] Bluetooth: hci4: command tx timeout [ 89.577474][ T5619] bridge_slave_1: entered promiscuous mode [ 89.648106][ T5624] Bluetooth: hci3: command tx timeout [ 89.658121][ T5624] Bluetooth: hci2: command tx timeout [ 89.697827][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.739038][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.861467][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.861621][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.861903][ T5623] bridge_slave_0: entered allmulticast mode [ 89.863237][ T5623] bridge_slave_0: entered promiscuous mode [ 89.867801][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.868521][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.871724][ T5622] bridge_slave_0: entered allmulticast mode [ 89.882014][ T5622] bridge_slave_0: entered promiscuous mode [ 89.907840][ T5619] team0: Port device team_slave_0 added [ 89.952476][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.952586][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.952990][ T5623] bridge_slave_1: entered allmulticast mode [ 89.955394][ T5623] bridge_slave_1: entered promiscuous mode [ 89.964422][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.964547][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.964683][ T5622] bridge_slave_1: entered allmulticast mode [ 89.971317][ T5622] bridge_slave_1: entered promiscuous mode [ 90.015659][ T5619] team0: Port device team_slave_1 added [ 90.031667][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.031745][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.031841][ T5621] bridge_slave_0: entered allmulticast mode [ 90.033494][ T5621] bridge_slave_0: entered promiscuous mode [ 90.099884][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.100662][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.101780][ T5621] bridge_slave_1: entered allmulticast mode [ 90.103068][ T5621] bridge_slave_1: entered promiscuous mode [ 90.151525][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.154417][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.179730][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.179886][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.180152][ T5620] bridge_slave_0: entered allmulticast mode [ 90.182566][ T5620] bridge_slave_0: entered promiscuous mode [ 90.219914][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.222324][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.223173][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.223183][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.223202][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.224869][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.224963][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.225063][ T5620] bridge_slave_1: entered allmulticast mode [ 90.227648][ T5620] bridge_slave_1: entered promiscuous mode [ 90.300393][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.344810][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.344824][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.344846][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.404320][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.434657][ T5622] team0: Port device team_slave_0 added [ 90.437425][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.465460][ T5623] team0: Port device team_slave_0 added [ 90.469866][ T5623] team0: Port device team_slave_1 added [ 90.477010][ T5622] team0: Port device team_slave_1 added [ 90.485736][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.550262][ T5621] team0: Port device team_slave_0 added [ 90.600974][ T5620] team0: Port device team_slave_0 added [ 90.603075][ T5621] team0: Port device team_slave_1 added [ 90.619871][ T5619] hsr_slave_0: entered promiscuous mode [ 90.620792][ T5619] hsr_slave_1: entered promiscuous mode [ 90.622340][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.622353][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.622376][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.624514][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.624527][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.624549][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.626631][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.626645][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.626672][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.634358][ T5620] team0: Port device team_slave_1 added [ 90.714323][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.714383][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.714444][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.887131][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.887151][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.887179][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.968417][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.968447][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.968471][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.995332][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.995398][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.995460][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.083308][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.083327][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.083353][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.134357][ T5622] hsr_slave_0: entered promiscuous mode [ 91.135130][ T5622] hsr_slave_1: entered promiscuous mode [ 91.135739][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 91.135809][ T5622] Cannot create hsr debugfs directory [ 91.181368][ T5623] hsr_slave_0: entered promiscuous mode [ 91.182129][ T5623] hsr_slave_1: entered promiscuous mode [ 91.183242][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 91.183264][ T5623] Cannot create hsr debugfs directory [ 91.316185][ T5621] hsr_slave_0: entered promiscuous mode [ 91.316987][ T5621] hsr_slave_1: entered promiscuous mode [ 91.317473][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 91.317487][ T5621] Cannot create hsr debugfs directory [ 91.428579][ T5620] hsr_slave_0: entered promiscuous mode [ 91.429419][ T5620] hsr_slave_1: entered promiscuous mode [ 91.429983][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 91.430011][ T5620] Cannot create hsr debugfs directory [ 91.649055][ T5625] Bluetooth: hci4: command tx timeout [ 91.649087][ T5625] Bluetooth: hci0: command tx timeout [ 91.649184][ T5624] Bluetooth: hci1: command tx timeout [ 91.729024][ T5624] Bluetooth: hci2: command tx timeout [ 91.729055][ T5635] Bluetooth: hci3: command tx timeout [ 91.853020][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.868454][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.905428][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.912245][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.918848][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.934223][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.970084][ T9] cfg80211: failed to load regulatory.db [ 91.975821][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.991011][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.060597][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.064722][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.065479][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.082660][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.089779][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.106615][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.107782][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.125283][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.229674][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.235147][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.235990][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.255890][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.277004][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.289233][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.296114][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.314331][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.449844][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.453555][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.454410][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.457802][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.500061][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.503110][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.505753][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.514996][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.547157][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.658176][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.661840][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.664105][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.667511][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.706106][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.716171][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.726719][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.741715][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.745170][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.773464][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.825227][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.825430][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.853878][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.866515][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.882084][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.882250][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.926477][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.926888][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.967159][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.967247][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.999254][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.040356][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.040458][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.091129][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.091231][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.131568][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.216678][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.267854][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.268024][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.326487][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.326600][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.451222][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.522894][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.594066][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.594194][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.634242][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.634355][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.729896][ T5635] Bluetooth: hci1: command tx timeout [ 93.729931][ T5635] Bluetooth: hci0: command tx timeout [ 93.729955][ T5635] Bluetooth: hci4: command tx timeout [ 93.815592][ T5624] Bluetooth: hci3: command tx timeout [ 93.815627][ T5624] Bluetooth: hci2: command tx timeout [ 94.587883][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.659381][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.789505][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.866535][ T5619] veth0_vlan: entered promiscuous mode [ 94.906410][ T5619] veth1_vlan: entered promiscuous mode [ 94.945243][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.053196][ T5622] veth0_vlan: entered promiscuous mode [ 95.063705][ T5623] veth0_vlan: entered promiscuous mode [ 95.112200][ T5622] veth1_vlan: entered promiscuous mode [ 95.141271][ T5623] veth1_vlan: entered promiscuous mode [ 95.181758][ T5619] veth0_macvtap: entered promiscuous mode [ 95.225422][ T5619] veth1_macvtap: entered promiscuous mode [ 95.302754][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.341898][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.342531][ T5623] veth0_macvtap: entered promiscuous mode [ 95.346637][ T5622] veth0_macvtap: entered promiscuous mode [ 95.378255][ T5623] veth1_macvtap: entered promiscuous mode [ 95.381150][ T5622] veth1_macvtap: entered promiscuous mode [ 95.387376][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.446543][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.467752][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.485261][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.529976][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.549542][ T1262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.651605][ T5620] veth0_vlan: entered promiscuous mode [ 95.657822][ T5621] veth0_vlan: entered promiscuous mode [ 95.737265][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.737286][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.767249][ T5620] veth1_vlan: entered promiscuous mode [ 95.778223][ T1262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.809063][ T5635] Bluetooth: hci4: command tx timeout [ 95.809096][ T5635] Bluetooth: hci0: command tx timeout [ 95.809120][ T5635] Bluetooth: hci1: command tx timeout [ 95.846734][ T5621] veth1_vlan: entered promiscuous mode [ 95.859007][ T1107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859057][ T1107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859096][ T1107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859135][ T1107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859173][ T1107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859210][ T1107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859249][ T1107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.859502][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.859520][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.899376][ T5624] Bluetooth: hci2: command tx timeout [ 95.899695][ T5624] Bluetooth: hci3: command tx timeout [ 96.003312][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.003336][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.064938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.064960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.105155][ T5620] veth0_macvtap: entered promiscuous mode [ 96.144555][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.174674][ T5620] veth1_macvtap: entered promiscuous mode [ 96.192554][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192577][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.192829][ T5621] veth0_macvtap: entered promiscuous mode [ 96.239705][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.239728][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.252184][ T1107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256129][ T5621] veth1_macvtap: entered promiscuous mode [ 96.357189][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.430900][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.465239][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.502176][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.549378][ T5817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.798750][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799759][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844760][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.844783][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.869543][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.028946][ T3408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.029122][ T3408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.029618][ T3408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.029815][ T3408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.032963][ T3408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.032983][ T3408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.102530][ T1262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.102775][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.102808][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.102825][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.220832][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.220857][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.282147][ T3408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.295193][ T5828] syzkaller1: entered promiscuous mode [ 97.295218][ T5828] syzkaller1: entered allmulticast mode [ 97.367534][ T5817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.656427][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 97.788750][ T5847] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 98.327724][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.351118][ T5871] netlink: 684 bytes leftover after parsing attributes in process `syz.4.15'. [ 98.535107][ T5887] Zero length message leads to an empty skb [ 98.762306][ T5898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21'. [ 98.895928][ T5903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.24'. [ 99.175415][ T5910] netlink: 'syz.0.25': attribute type 5 has an invalid length. [ 99.724677][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 99.934064][ T5943] ip6gre1: entered allmulticast mode [ 99.948930][ T5944] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.513168][ T5975] netlink: NAT attribute has 4 unknown bytes [ 100.513210][ T5975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.678568][ T5980] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 100.681338][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 101.125908][ T6000] Bluetooth: MGMT ver 1.23 [ 101.286477][ T6000] tipc: Enabling of bearer rejected, media not registered [ 102.065040][ T6041] sctp: [Deprecated]: syz.3.62 (pid 6041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.065040][ T6041] Use struct sctp_sack_info instead [ 102.406877][ T6072] netlink: 'syz.0.65': attribute type 1 has an invalid length. [ 102.482576][ T6080] erspan0: entered promiscuous mode [ 102.482877][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 102.482926][ T6080] erspan0: left promiscuous mode [ 102.644625][ T6092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.68'. [ 102.854296][ T6110] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 103.304778][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 103.304814][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 103.486059][ T6113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.508679][ T6122] netlink: 312 bytes leftover after parsing attributes in process `syz.0.74'. [ 103.596641][ T6116] vlan2: entered allmulticast mode [ 103.596676][ T6116] bond0: entered allmulticast mode [ 103.596690][ T6116] bond_slave_0: entered allmulticast mode [ 103.596709][ T6116] bond_slave_1: entered allmulticast mode [ 103.683789][ T6090] bridge1: entered promiscuous mode [ 103.683816][ T6090] bridge1: entered allmulticast mode [ 104.273804][ T6154] netlink: 'syz.2.81': attribute type 39 has an invalid length. [ 104.701254][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 104.729798][ T6179] tipc: Failed to remove unknown binding: 66,0,0/0:4151991659/4151991660 [ 104.733387][ T6179] tipc: Failed to remove unknown binding: 66,0,0/0:4151991659/4151991660 [ 104.764904][ T6178] team0 (unregistering): Port device team_slave_0 removed [ 104.790264][ T6178] team0 (unregistering): Port device team_slave_1 removed [ 104.871315][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'. [ 105.061692][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 105.061727][ T6191] bridge: RTM_NEWNEIGH with invalid ether address [ 105.182938][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 105.287053][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 105.656224][ T6217] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 105.762028][ T6217] bond1: entered promiscuous mode [ 105.762465][ T6217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.955430][ T6217] bond1: (slave bridge1): making interface the new active one [ 105.955454][ T6217] bridge1: entered promiscuous mode [ 105.987049][ T6217] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 106.034545][ T6230] bond0: option miimon: invalid value (18446744071829782528) [ 106.034574][ T6230] bond0: option miimon: allowed values 0 - 2147483647 [ 110.376213][ C1] sched: DL replenish lagged too much [ 134.337462][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.346340][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.483120][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.491934][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.139591][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 212.247309][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 212.468745][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 256.162234][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.177559][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.165900][ T4936] Bluetooth: hci4: command 0x0406 tx timeout [ 289.760280][ T32] INFO: task kworker/0:5:5740 blocked for more than 144 seconds. [ 289.760316][ T32] Not tainted syzkaller #0 [ 289.760336][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.760351][ T32] task:kworker/0:5 state:D stack:27048 pid:5740 tgid:5740 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 289.760426][ T32] Workqueue: events reg_todo [ 289.760547][ T32] Call Trace: [ 289.760581][ T32] [ 289.760598][ T32] __schedule+0x17db/0x58f0 [ 289.760646][ T32] ? __pfx___schedule+0x10/0x10 [ 289.760685][ T32] ? __pfx___schedule+0x10/0x10 [ 289.760722][ T32] ? schedule+0x90/0x2b0 [ 289.760753][ T32] schedule+0x164/0x2b0 [ 289.760782][ T32] schedule_preempt_disabled+0x13/0x30 [ 289.760809][ T32] __mutex_lock+0x7c1/0x1550 [ 289.760844][ T32] ? __mutex_lock+0x5d4/0x1550 [ 289.760879][ T32] ? reg_process_self_managed_hints+0x8d/0x160 [ 289.760911][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 289.760939][ T32] ? reg_process_self_managed_hint+0x1ab/0x4d0 [ 289.760967][ T32] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 289.761002][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 289.761028][ T32] ? reg_todo+0x8da/0xa40 [ 289.761054][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 289.761086][ T32] reg_process_self_managed_hints+0x8d/0x160 [ 289.761116][ T32] reg_todo+0x8df/0xa40 [ 289.761149][ T32] ? process_scheduled_works+0x97a/0x1630 [ 289.761180][ T32] process_scheduled_works+0xc3d/0x1630 [ 289.761244][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.761282][ T32] ? assign_work+0x3cf/0x5d0 [ 289.761317][ T32] worker_thread+0xa47/0xfb0 [ 289.761373][ T32] ? __kthread_parkme+0x71/0x1f0 [ 289.761418][ T32] kthread+0x38b/0x480 [ 289.761442][ T32] ? __pfx_worker_thread+0x10/0x10 [ 289.761471][ T32] ? __pfx_kthread+0x10/0x10 [ 289.761495][ T32] ret_from_fork+0x514/0xb70 [ 289.761521][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 289.761543][ T32] ? __switch_to+0xc89/0x1420 [ 289.761578][ T32] ? __pfx_kthread+0x10/0x10 [ 289.761603][ T32] ret_from_fork_asm+0x1a/0x30 [ 289.761656][ T32] [ 289.761710][ T32] [ 289.761710][ T32] Showing all locks held in the system: [ 289.761720][ T32] locks held by kthreadd/2: 1, last CPU#1: [ 289.761736][ T32] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 289.761797][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#1: [ 289.761813][ T32] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 289.761878][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 289.761893][ T32] #0: ffff88807ede5540 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.761963][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762042][ T32] #2: ffff88802e4ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 289.762114][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 289.762129][ T32] #0: ffff88807ede6940 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762197][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762275][ T32] #2: ffff888029d07028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 289.762355][ T32] #3: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 289.762410][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 289.762426][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762488][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762550][ T32] #2: ffff888057460800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 289.762606][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 289.762621][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762683][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762745][ T32] #2: ffff888057550800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 289.762801][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#0: [ 289.762817][ T32] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 289.762885][ T32] locks held by kworker/1:0/25: 3, last CPU#1: [ 289.762901][ T32] #0: ffff88807ef19140 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.762968][ T32] #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 289.763046][ T32] #2: ffff88807b79a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 289.763117][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 289.763133][ T32] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 289.763187][ T32] locks held by kworker/u8:2/37: 4, on CPU#1: