last executing test programs: 1m49.61313356s ago: executing program 3 (id=535): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x12, "132bf2b2631e4a669e5ab545f4df3af85ad7"}, &(0x7f0000000180)=0x1a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002380)={{r2}, 0x0, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r4}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1m48.560087159s ago: executing program 0 (id=537): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r4, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r6, 0x97) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) write(r7, &(0x7f0000000000)="5a000300010003", 0x7) 1m47.721467424s ago: executing program 3 (id=539): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r5, 0x890b, &(0x7f0000000100)="000000010000000000000000000000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0x8, 0x800, 0xdf5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) 1m46.504946564s ago: executing program 2 (id=540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001880)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000350e000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a310000000009000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r12 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r12, 0x65, 0x7, 0x0, &(0x7f00000000c0)) 1m45.783578248s ago: executing program 0 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x42, 0x4, 0x320, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'vlan0\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x10000, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278, 0x6]}, {0xffff, [0x5, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x76, 0x0, {0x4ada}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x238, 0x238, 0xf8, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, "9876", 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xff0000ff, 0xffffff00, 0xff, 0xffffff00], 'team_slave_1\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x5c, 0x2, 0x0, 0xa}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xc}}, @common=@mh={{0x28}, {'\\['}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x4957, {0x510}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0x0, 0xffffff00], 'syzkaller0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x2b, 0x1, 0x0, 0x24}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r4, 0x0, 0xffffffff000) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0xa, 0x6, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1) accept4(r5, 0x0, &(0x7f0000000100), 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000000c0)=0x84) 1m41.992023777s ago: executing program 2 (id=545): socket(0x27, 0x6, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x142, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a00)={@random="e33110495bfd", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x3261e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, &(0x7f0000000800)={&(0x7f00000006c0)=[{0x2, 0x5, 0x0, 0x9}, {0xdf, 0x0, 0x3, 0xffffffff}, {0xef2f, 0x9, 0x6, 0xc295}, {0x6, 0x6, 0x5, 0xffffffffffffffff}, {0x1, 0x1a, 0x3, 0x7}, {0x8, 0x5, 0x3, 0xa86}], 0x6, 0x20, 0x6, 0xe3cd}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="417627bd7000fbdbdf250100000000000000014100000018001700190000005d6574683a677203"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r9, 0xd2440efef0cf245e, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x4, 0xffffffff, 0x1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1m41.961680525s ago: executing program 3 (id=546): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40408c4) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x1e, 0x305, 0x1000000, 0x25dfdbfe, {}, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x2}, 0x38) recvfrom$phonet(r1, 0x0, 0x0, 0x2020, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)="62846b", 0x3}, 0x1, 0x0, 0x0, 0x20001080}, 0x0) bind$can_j1939(r4, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000640)=0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000300)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x40010, r7, 0x0) 1m41.757034325s ago: executing program 1 (id=547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000000806010100b7000000000000020000020500010007000000090002"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="02000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x4800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) close(0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m39.9326857s ago: executing program 4 (id=548): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, 0x0, &(0x7f0000001700)=""/4096}, 0x20) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f00000000c0)={0x3, 0x6}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x8, 0xa}, &(0x7f0000000540)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x9, @remote, 0xaf4c}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0xc48}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xcc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r5, r7}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5eb138af4c971b7ea282175e0a13581934b6d5030000000000000000041c01001365199995759ebcef1a186fab84862a710dfd5d", @ANYRES16=r9, @ANYBLOB="00022dbd7000fcdbdf250900000005001300090000000500150007000000080014001300000005001d000d00000005001d000900000005001d000300000005001300f700000005001d001a0000000500150065000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4054040}, 0x4000091) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x2d, 0x0, 0x1}, 0x28) 1m38.634463734s ago: executing program 1 (id=549): socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000b0b0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x19, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b70800008b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001b47c008500000082000000b7080000000000007baaf8ff00000000b5080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r13}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1m37.777094994s ago: executing program 2 (id=550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x17) shutdown(r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m37.597095221s ago: executing program 4 (id=551): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a80)={r0, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002380)={{r2}, r4, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r5}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1m36.789657816s ago: executing program 3 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa2d}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffffffffffef3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x24e141, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xfce) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200802, 0x0) unshare(0x22020600) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xa, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r9], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000480)={r9, 0x3}, &(0x7f0000000600)=0x8) 1m35.197305696s ago: executing program 4 (id=553): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r4, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r6, 0x97) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) write(r7, &(0x7f0000000000)="5a000300010003", 0x7) 1m35.185942359s ago: executing program 0 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x50}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700170008"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) 1m35.168453976s ago: executing program 1 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m35.167937997s ago: executing program 2 (id=555): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0xfffffca4, &(0x7f00000006c0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff5997", 0x31}, {&(0x7f00000002c0)="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", 0xcd}, {&(0x7f0000000500)="eb1194", 0x3}, {&(0x7f0000000840)="396b0b2d92a081c10b00000001000000015ae169ced3036d77380fdfb4a449f37d3b3b69f6306c0a52aac4d6243e7bbe7f", 0x31}], 0x4}}], 0x400009d, 0x40080) 1m33.549032762s ago: executing program 1 (id=556): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000001780)={&(0x7f0000000140)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}}, 0x18, &(0x7f0000000040)={&(0x7f0000000e40)="38ea7551de9e607b4eab22dc0ecb28", 0xf}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000ce000000010000006cfa100024010000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000004000000050000000c00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x3b4}, 0x1, 0x0, 0x0, 0xdc8a6261849d5b70}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"/96], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000008e9b00000800000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="060000f801a51a00"/24], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc}, 0x94) 1m32.216525261s ago: executing program 0 (id=557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m32.079491581s ago: executing program 4 (id=558): r0 = socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) 1m31.922073953s ago: executing program 1 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a3100000000f400010007000000050005000a0000001400078008001240fffffffa08000b4000000401050004000000000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000680)=@sack_info={0x0, 0x6, 0x544}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864011702ac1414aa4001880b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, 0x0, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r6, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00fcdbdf2582000000080003000000000000", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044844) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x408020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x353}, &(0x7f0000000700)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r11) 1m31.689093433s ago: executing program 3 (id=560): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, r0}, 0x50) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) getsockopt$inet6_buf(r6, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) socket(0x8, 0x800, 0xdf5) 1m30.493361188s ago: executing program 0 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) unshare(0x20380) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a32000000001400000011000100000000000000006813000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES8, @ANYRESHEX=r0], 0x33) sendfile(r4, r3, 0x0, 0x10000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000002c0), 0x10000000000002ad, 0x4008005, 0x80) close(r7) socket$kcm(0x29, 0x2, 0x0) sendfile(r7, r6, 0x0, 0xf03a0005) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000400)=@caif=@dgm={0x25, 0x8, 0x2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)="e70020697d3aecda4f9bf8ead59b8ca87fe1aaafe02ef7bf1925282139fbf701d797371a3343af2dc896ac83f1507a3df1d2a257cba5c8e8b1f41cf1130a488372e712582aaeb30cc99595c81d35418cc81efe00454d41961b5f571856af52a3c410cd26df26d866aa6a7af3812839a4fd220f8bc076ae6dfa2db89316c460c82dd1b1e1cf35b95994826da34e8a2dd9951c861231413ca31e3e8edd321d3891b1e61676785c86c305", 0xa9}, {&(0x7f0000000a40)="5d0365bc0cffddcd22e6a2d0da46ccca1bbe05392a8ec7670960721838516816532abe2349aa6884c4fd26dd664a7ddf6b4ec7d76d040cda08a80da9f83aadb3ec9c8c121b341e43d5a993156892f4aff83b45b0e6ee792b23d8aa7ea0fde3cf2cfe0199edb46ef6b785c8ac5c36c416f3387b5480d0b5da840dfec3496925b2f1f478cdfa539434eeab6aaaa929d510dc798dab7af5b3f79d1255a0ba803bdf9eddcd013769d9b1730c13ebf75d6f7c400b063bbc51d73e2030e3cbb4f138d336877362e0a1e736eb6f1e454db36d04b4b969dbba4b23421ad81e081b1fa0b5fb34aa8fe21963e672", 0xe9}], 0x2, &(0x7f0000000c00)=[{0x68, 0x88, 0x6, "a370f8f3eed9c3183ba1cb3f8fe77b8cff6a83858dffa9544338ebddf15dec46000d1af7322340694551b6f47152b765ba64f00a099f489aa8d57b324b55c6fb07d467fab6160c1f42a5aea69b31acb523"}, {0xd0, 0x114, 0x4, "6b47bae697f576440c07686f7a7ecd77914b6da80a34149cb8fdcbb955cf68b0ff365f45e3c91671eb66d7f363b5b6ab77578834149cf94d27fdd8745733aaa1d38567d51c184e5e4eeebe123515e6b276d18679f7d53800e43c47253c0435fe5e87b40158d356ec60e76287ef474518cdb3851d6701b86c18f0fdf0dc1371ce2e884bf917bb1b7a9b9de6dbfa375e552ef65bae5da2efe7e3c1d0fd3810b3c043b81c76f5718d952658e3c52e02a30c584bbf091951e9be39"}, {0x68, 0x101, 0x7, "f848b3de905ceb37692348c4602582ee80fcd1c184c9652c51f9fd5c1517bd9f236947899aaa649d22b63df65fa90ce1714d0e3915a49ed4559afd74c3e6384c17c32c9c05ee4880c503ffbe881e2853bac46417"}, {0xa0, 0xb19988e6d26fc7ea, 0x8, "7dca76fb6f723e750fd1361c226b23936f237f0aad678d1398c8cc2270422104734ec58d40eea5a25ad1f512220a1f472ee5a09bf460edf7f163575106e40e22f826b874f222f910aa63dc45090c3034fff774696f4f8bdcb50d43994b053b7d94213456d24285c66bdb3a67168f046646fb839e8d4caac6e5464610b00b13d8e2da7050625440013d837b51"}], 0x240}}], 0x1, 0x4008041) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 1m28.183109542s ago: executing program 4 (id=562): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002", @ANYRES16=r1, @ANYBLOB="010000400000000000000100000008000100020000002400048005000300050000000500030002000000050003000100000005000300020000000800020002000000"], 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x13}}]}, 0x30}}, 0x4048000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0xd8, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x100}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x2000c001) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f0000000040)) 1m27.270326018s ago: executing program 2 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000d80)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @empty, 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x18}}], 0x1, 0x855) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf250100d8b8c1a47a9a0900000e0001006e65342f6c32636170000000080002000500000008"], 0x34}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x14040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000001050000000800000002000000000000070000000000002e"], 0x0, 0x50}, 0x28) 1m27.226793424s ago: executing program 1 (id=565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002380)={{r2}, r4, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r5}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 1m26.961385629s ago: executing program 0 (id=566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x17) shutdown(r0, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m26.404492119s ago: executing program 3 (id=567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000f00100001e65a127a940dcb5f0800000000217a2e73d76b097e6f7e0500000000000000f123fa60149bfbfbd043f678aca8de61", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000000c001a800800028004"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r7, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r5) 55.274559793s ago: executing program 2 (id=568): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x2b, &(0x7f00000000c0)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000001000a0000000c00000005000000020000000000000500000000005f615f00b3756e74d3a86c2783c801e5b34202f6c23220bf49e0fd927ccb3255361d78aadabd9fece6a7049ef667c9828d5fa4a2d275005528c3f76b1d46dc59ee17b7b1c3972dda3626eb40c2bbad4b01cd94f14a42477c2589d70917e399789acfdd04ff06d1b937e2ff07e463e1684e76488c2c9d925375aec021e1b8372a524d08119d5dad7682df2f258aae5e807f195f4047d188f96ca0a4765fa8f8cb3d238334f3"], 0x0, 0x29, 0x0, 0x1}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_opts(r1, 0x0, 0xd, 0x0, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) sendfile(r5, r4, 0x0, 0xf03a0005) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r8, r8, 0x0, 0x9) r9 = socket(0x400000000010, 0x3, 0x0) getsockopt$sock_int(r9, 0x1, 0x22, 0x0, &(0x7f0000000180)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x1, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x6a1f, 0x415}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0x10, 0x0, 0xfffffff4}, {0x2, 0x8, 0x1, 0x4}, {0x7, 0x4, 0xf, 0x5}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x50, 0x4, 0x1}, {0x3, 0xff, 0x0, 0x9}, {0x3, 0x0, 0x6, 0x1}, {0x9, 0x1a, 0x6, 0x1000}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) 0s ago: executing program 4 (id=569): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0xe0}, 0x1, 0x7}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000000090000000000000000000000000000080005400000001f080005400000001708000340000000080c00048008000140000000080c00048008000140000010060000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x81) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000002c0)={r4, &(0x7f0000000080)='GPL\x00', 0x200000, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x2]}, {0x7, 0x6, 0x6, 0x76a7}}, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x401}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) listen(r6, 0x97) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) write(r7, &(0x7f0000000000)="5a000300010003", 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. [ 82.439993][ T5609] cgroup: Unknown subsys name 'net' [ 82.574341][ T5609] cgroup: Unknown subsys name 'cpuset' [ 82.583472][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.265084][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.513294][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.524787][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.534921][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.545464][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.555667][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.650108][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.659401][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.673892][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.689707][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.699919][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.737369][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.747884][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.757536][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.765966][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.775966][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.827602][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.839665][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.849314][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.858085][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.869470][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.889640][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.902430][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.918768][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.927577][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.937810][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.629544][ T51] Bluetooth: hci0: command tx timeout [ 88.789696][ T51] Bluetooth: hci1: command tx timeout [ 88.857542][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.865654][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.872022][ T51] Bluetooth: hci2: command tx timeout [ 88.874253][ T5621] bridge_slave_0: entered allmulticast mode [ 88.886382][ T5621] bridge_slave_0: entered promiscuous mode [ 88.930240][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.937952][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.946212][ T5621] bridge_slave_1: entered allmulticast mode [ 88.953904][ T5621] bridge_slave_1: entered promiscuous mode [ 88.959862][ T51] Bluetooth: hci3: command tx timeout [ 89.028825][ T51] Bluetooth: hci4: command tx timeout [ 89.076624][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.084111][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.091695][ T5627] bridge_slave_0: entered allmulticast mode [ 89.099227][ T5627] bridge_slave_0: entered promiscuous mode [ 89.124696][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.132075][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.139645][ T5629] bridge_slave_0: entered allmulticast mode [ 89.147029][ T5629] bridge_slave_0: entered promiscuous mode [ 89.158543][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.168571][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.176971][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.184443][ T5627] bridge_slave_1: entered allmulticast mode [ 89.191832][ T5627] bridge_slave_1: entered promiscuous mode [ 89.232256][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.239543][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.246738][ T5629] bridge_slave_1: entered allmulticast mode [ 89.254226][ T5629] bridge_slave_1: entered promiscuous mode [ 89.263704][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.337518][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.357332][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.364965][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.372495][ T5633] bridge_slave_0: entered allmulticast mode [ 89.380907][ T5633] bridge_slave_0: entered promiscuous mode [ 89.403337][ T5621] team0: Port device team_slave_0 added [ 89.415196][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.442771][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.451189][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.458456][ T5633] bridge_slave_1: entered allmulticast mode [ 89.465963][ T5633] bridge_slave_1: entered promiscuous mode [ 89.476323][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.487515][ T5621] team0: Port device team_slave_1 added [ 89.529627][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.608356][ T5627] team0: Port device team_slave_0 added [ 89.614288][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.622740][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.630377][ T5634] bridge_slave_0: entered allmulticast mode [ 89.637642][ T5634] bridge_slave_0: entered promiscuous mode [ 89.648229][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.669562][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.676699][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.703530][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.717717][ T5627] team0: Port device team_slave_1 added [ 89.723789][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.731295][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.738482][ T5634] bridge_slave_1: entered allmulticast mode [ 89.746057][ T5634] bridge_slave_1: entered promiscuous mode [ 89.756288][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.786569][ T5629] team0: Port device team_slave_0 added [ 89.795178][ T5629] team0: Port device team_slave_1 added [ 89.801817][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.809424][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.836841][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.918476][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.925515][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.951489][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.988402][ T5633] team0: Port device team_slave_0 added [ 90.006959][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.014125][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.040350][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.052245][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.059698][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.085892][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.100328][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.111590][ T5633] team0: Port device team_slave_1 added [ 90.138030][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.145348][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.171738][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.185937][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.212728][ T5621] hsr_slave_0: entered promiscuous mode [ 90.219819][ T5621] hsr_slave_1: entered promiscuous mode [ 90.293847][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.301117][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.327145][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.359993][ T5629] hsr_slave_0: entered promiscuous mode [ 90.366899][ T5629] hsr_slave_1: entered promiscuous mode [ 90.374458][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 90.380405][ T5629] Cannot create hsr debugfs directory [ 90.403594][ T5634] team0: Port device team_slave_0 added [ 90.412014][ T5634] team0: Port device team_slave_1 added [ 90.418334][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.425670][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.451672][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.523407][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.530613][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.556595][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.589075][ T5627] hsr_slave_0: entered promiscuous mode [ 90.595540][ T5627] hsr_slave_1: entered promiscuous mode [ 90.602136][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 90.607924][ T5627] Cannot create hsr debugfs directory [ 90.615300][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.622576][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.648586][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.709599][ T51] Bluetooth: hci0: command tx timeout [ 90.743834][ T5633] hsr_slave_0: entered promiscuous mode [ 90.750440][ T5633] hsr_slave_1: entered promiscuous mode [ 90.756705][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 90.762867][ T5633] Cannot create hsr debugfs directory [ 90.878780][ T51] Bluetooth: hci1: command tx timeout [ 90.907633][ T5634] hsr_slave_0: entered promiscuous mode [ 90.914756][ T5634] hsr_slave_1: entered promiscuous mode [ 90.921242][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 90.927006][ T5634] Cannot create hsr debugfs directory [ 90.949043][ T51] Bluetooth: hci2: command tx timeout [ 91.038834][ T51] Bluetooth: hci3: command tx timeout [ 91.109241][ T51] Bluetooth: hci4: command tx timeout [ 91.369958][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.383615][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.391886][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.403375][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.416956][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.429187][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.454220][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.465529][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.545000][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.557425][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.566216][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.576394][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.586164][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.598316][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.610681][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.621392][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.715945][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.729593][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.738629][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.748128][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.767498][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.779308][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.805398][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.815602][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.905785][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.918022][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.928520][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.940096][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.948127][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.959872][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.975762][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.985992][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.004609][ T809] cfg80211: failed to load regulatory.db [ 92.054746][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.154775][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.165211][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.181158][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.194159][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.204723][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.215294][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.225429][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.238834][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.246327][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.265504][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.275635][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.295944][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.327128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.334303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.403128][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.414518][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.452233][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.459469][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.492386][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.499589][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.555201][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.591519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.598794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.634900][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.642143][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.666253][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.785467][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.790697][ T51] Bluetooth: hci0: command tx timeout [ 92.843722][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.855742][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.862983][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.913761][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.920993][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.949316][ T51] Bluetooth: hci1: command tx timeout [ 93.030728][ T51] Bluetooth: hci2: command tx timeout [ 93.061345][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.100184][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.107420][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.115928][ T51] Bluetooth: hci3: command tx timeout [ 93.135909][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.143146][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.188839][ T51] Bluetooth: hci4: command tx timeout [ 93.858033][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.033618][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.121395][ T5621] veth0_vlan: entered promiscuous mode [ 94.180004][ T5621] veth1_vlan: entered promiscuous mode [ 94.258117][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.361292][ T5621] veth0_macvtap: entered promiscuous mode [ 94.392229][ T5621] veth1_macvtap: entered promiscuous mode [ 94.506863][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.574362][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.593247][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.616253][ T5633] veth0_vlan: entered promiscuous mode [ 94.643305][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.674414][ T5633] veth1_vlan: entered promiscuous mode [ 94.719117][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.832395][ T5629] veth0_vlan: entered promiscuous mode [ 94.850009][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.863764][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.869463][ T51] Bluetooth: hci0: command tx timeout [ 94.891880][ T5633] veth0_macvtap: entered promiscuous mode [ 94.920178][ T5633] veth1_macvtap: entered promiscuous mode [ 94.955362][ T5629] veth1_vlan: entered promiscuous mode [ 94.971535][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.985461][ T5634] veth0_vlan: entered promiscuous mode [ 94.999717][ T5627] veth0_vlan: entered promiscuous mode [ 95.017522][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.026167][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.030066][ T51] Bluetooth: hci1: command tx timeout [ 95.047219][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.063795][ T5634] veth1_vlan: entered promiscuous mode [ 95.082199][ T5627] veth1_vlan: entered promiscuous mode [ 95.101091][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.110109][ T51] Bluetooth: hci2: command tx timeout [ 95.177711][ T5629] veth0_macvtap: entered promiscuous mode [ 95.189321][ T51] Bluetooth: hci3: command tx timeout [ 95.198122][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.234839][ T5629] veth1_macvtap: entered promiscuous mode [ 95.269619][ T51] Bluetooth: hci4: command tx timeout [ 95.279334][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.319761][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.343758][ T5627] veth0_macvtap: entered promiscuous mode [ 95.367637][ T5627] veth1_macvtap: entered promiscuous mode [ 95.385978][ T5634] veth0_macvtap: entered promiscuous mode [ 95.411383][ T5811] Bluetooth: MGMT ver 1.23 [ 95.437757][ T5634] veth1_macvtap: entered promiscuous mode [ 95.456223][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.480309][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.492234][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.501729][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.527580][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.571350][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.583733][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.594804][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.604610][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.612624][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.633972][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.690725][ T113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.719545][ T1183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.829168][ T32] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.886319][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.894929][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.968462][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.978164][ T32] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.988331][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.035800][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.041646][ T32] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.069937][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.105484][ T32] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.157186][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.211067][ T5817] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 96.226699][ T5811] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 96.327474][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.343212][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.398469][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.449867][ T5817] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 96.597660][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.613761][ T348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.644002][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.768530][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.780940][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.799676][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.810911][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.864368][ T5828] pim6reg1: entered promiscuous mode [ 96.881572][ T5828] pim6reg1: entered allmulticast mode [ 97.074248][ T5833] Bluetooth: MGMT ver 1.23 [ 97.111152][ T5833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.141089][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.389528][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.413168][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.438477][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.465408][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.492820][ T5841] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.509219][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 97.538292][ T5841] lo speed is unknown, defaulting to 1000 [ 97.545412][ T348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.592033][ T5846] IPVS: Error connecting to the multicast addr [ 97.609485][ T5841] lo speed is unknown, defaulting to 1000 [ 97.684433][ T5841] lo speed is unknown, defaulting to 1000 [ 97.733234][ T5841] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.814836][ T5841] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.894068][ T5841] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.914933][ T5852] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12'. [ 97.980678][ T5841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.159372][ T5841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.044610][ T5866] Zero length message leads to an empty skb [ 99.325562][ T5861] bridge1: entered promiscuous mode [ 99.338915][ T5861] bridge1: entered allmulticast mode [ 99.364297][ T5841] lo speed is unknown, defaulting to 1000 [ 99.419687][ T5842] syz.4.5 (5842) used greatest stack depth: 18312 bytes left [ 99.738957][ T5841] lo speed is unknown, defaulting to 1000 [ 99.816446][ T5841] lo speed is unknown, defaulting to 1000 [ 99.844943][ T5841] lo speed is unknown, defaulting to 1000 [ 99.891280][ T5841] lo speed is unknown, defaulting to 1000 [ 99.936387][ T5852] siw: device registration error -23 [ 100.263665][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20'. [ 100.351427][ T5885] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 100.386290][ T5887] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20'. [ 100.515433][ T5881] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.674192][ T5896] syzkaller0: entered promiscuous mode [ 100.688828][ T5896] syzkaller0: entered allmulticast mode [ 101.442374][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 101.562726][ T5917] tipc: Started in network mode [ 101.577289][ T5917] tipc: Node identity 023dc08ca4e1, cluster identity 4711 [ 101.604170][ T5917] tipc: Enabled bearer , priority 0 [ 101.816951][ T5917] tipc: Resetting bearer [ 102.019212][ T5913] tipc: Disabling bearer [ 102.293381][ T5939] netlink: 128 bytes leftover after parsing attributes in process `syz.1.31'. [ 102.391205][ T32] IPVS: starting estimator thread 0... [ 102.498819][ T5942] IPVS: using max 28 ests per chain, 67200 per kthread [ 102.893369][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 103.299234][ T5967] bridge1: entered promiscuous mode [ 103.321431][ T5967] bridge1: entered allmulticast mode [ 103.374538][ T5967] team0: Port device bridge1 added [ 103.387680][ T5970] bridge0: port 3(team0) entered blocking state [ 103.395017][ T5975] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 103.415174][ T5970] bridge0: port 3(team0) entered disabled state [ 103.441914][ T5970] team0: entered allmulticast mode [ 103.448326][ T5970] team_slave_0: entered allmulticast mode [ 103.454758][ T5970] team_slave_1: entered allmulticast mode [ 103.476184][ T5970] team0: entered promiscuous mode [ 103.485985][ T5970] team_slave_0: entered promiscuous mode [ 103.493408][ T5970] team_slave_1: entered promiscuous mode [ 103.500137][ T5977] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 103.523201][ T5970] bridge0: port 3(team0) entered blocking state [ 103.530588][ T5970] bridge0: port 3(team0) entered forwarding state [ 103.830875][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 104.175415][ T6001] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 104.290382][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.300127][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.455965][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42'. [ 104.633304][ T5990] bridge_slave_0: left allmulticast mode [ 104.655168][ T5990] bridge_slave_0: left promiscuous mode [ 104.671023][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.726942][ T5990] bridge_slave_1: left allmulticast mode [ 104.732805][ T5990] bridge_slave_1: left promiscuous mode [ 104.739396][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.809049][ T5990] bond0: (slave bond_slave_0): Releasing backup interface [ 104.866889][ T5990] bond0: (slave bond_slave_1): Releasing backup interface [ 104.901951][ T5990] team0: Port device team_slave_0 removed [ 104.905959][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 104.955284][ T5990] team0: Port device team_slave_1 removed [ 104.983385][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.012455][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.042484][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.064846][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.101734][ T5990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.287128][ T6022] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.383484][ T6009] lo speed is unknown, defaulting to 1000 [ 106.046523][ T6083] netlink: 'syz.2.48': attribute type 4 has an invalid length. [ 106.144641][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 106.772497][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'. [ 106.794997][ T6107] openvswitch: netlink: Flow key attribute not present in set flow. [ 106.831978][ T6101] netlink: 'syz.1.50': attribute type 2 has an invalid length. [ 106.865025][ T6104] pimreg1: renamed from bridge0 (while UP) [ 106.880317][ T6104] pimreg1: entered allmulticast mode [ 106.897297][ T6104] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 107.070746][ T6114] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 107.148298][ T6119] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.193996][ T6117] erspan1: entered allmulticast mode [ 107.256961][ T6122] syz.1.52 (6122) used obsolete PPPIOCDETACH ioctl [ 107.566613][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.604227][ T6133] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 107.718274][ T6136] netlink: 14 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.785231][ T6140] netlink: 100 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.885143][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.907552][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.947338][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.970581][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 108.021176][ T6144] batman_adv: batadv0: Adding interface: vlan2 [ 108.030673][ T6144] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.060841][ T6144] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 108.094813][ T6150] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 108.189780][ T6148] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.572560][ T6166] batman_adv: batadv0: Interface activated: vlan2 [ 108.844696][ T6183] Cannot find set identified by id 0 to match [ 109.111203][ T6178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.475980][ T6199] syz_tun: entered allmulticast mode [ 109.507321][ T6198] syz_tun: left allmulticast mode [ 109.790167][ T6210] netlink: 'syz.0.68': attribute type 21 has an invalid length. [ 109.803008][ T6208] netlink: 144 bytes leftover after parsing attributes in process `syz.4.69'. [ 109.817025][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 109.872021][ T32] IPVS: starting estimator thread 0... [ 109.978833][ T6215] IPVS: using max 27 ests per chain, 64800 per kthread [ 111.294206][ T5284] veth0_vlan: left promiscuous mode [ 111.358085][ T9] veth0_vlan: entered promiscuous mode [ 112.140672][ T6262] sock: sock_timestamping_bind_phc: sock not bind to device [ 112.213999][ T6241] Cannot find add_set index 0 as target [ 112.543399][ T6276] syz.4.78: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.640033][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(full) [ 112.640063][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.640084][ T6276] Call Trace: [ 112.640093][ T6276] [ 112.640102][ T6276] dump_stack_lvl+0xe8/0x150 [ 112.640147][ T6276] warn_alloc+0x24c/0x270 [ 112.640178][ T6276] ? stack_depot_save_flags+0x33/0x800 [ 112.640209][ T6276] ? __pfx_warn_alloc+0x10/0x10 [ 112.640237][ T6276] ? kasan_save_track+0x3e/0x80 [ 112.640265][ T6276] ? __kasan_kmalloc+0x93/0xb0 [ 112.640295][ T6276] ? xsk_setsockopt+0x52a/0x960 [ 112.640319][ T6276] ? do_sock_setsockopt+0x17c/0x1b0 [ 112.640362][ T6276] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 112.640386][ T6276] ? do_syscall_64+0x174/0x580 [ 112.640415][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.640444][ T6276] __vmalloc_node_range_noprof+0x12c/0x1730 [ 112.640496][ T6276] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.640528][ T6276] ? __kasan_kmalloc+0x93/0xb0 [ 112.640558][ T6276] ? __kmalloc_cache_noprof+0x32d/0x660 [ 112.640588][ T6276] ? __kmalloc_cache_noprof+0x150/0x660 [ 112.640618][ T6276] vmalloc_user_noprof+0xad/0xe0 [ 112.640646][ T6276] ? xskq_create+0xbf/0x170 [ 112.640675][ T6276] xskq_create+0xbf/0x170 [ 112.640704][ T6276] xsk_init_queue+0x8a/0xe0 [ 112.640734][ T6276] xsk_setsockopt+0x52a/0x960 [ 112.640760][ T6276] ? __fget_files+0x2a/0x420 [ 112.640789][ T6276] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.640814][ T6276] ? __pfx_aa_sk_perm+0x10/0x10 [ 112.640839][ T6276] ? aa_sock_opt_perm+0xff/0x1a0 [ 112.640867][ T6276] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 112.640891][ T6276] ? __pfx_xsk_setsockopt+0x10/0x10 [ 112.640917][ T6276] do_sock_setsockopt+0x17c/0x1b0 [ 112.640948][ T6276] __x64_sys_setsockopt+0x13d/0x1b0 [ 112.640979][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.641003][ T6276] do_syscall_64+0x174/0x580 [ 112.641032][ T6276] ? trace_irq_disable+0x3b/0x140 [ 112.641062][ T6276] ? clear_bhb_loop+0x40/0x90 [ 112.641088][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.641109][ T6276] RIP: 0033:0x7f498ff9e019 [ 112.641139][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.641156][ T6276] RSP: 002b:00007f4990e54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.641179][ T6276] RAX: ffffffffffffffda RBX: 00007f4990226090 RCX: 00007f498ff9e019 [ 112.641195][ T6276] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 112.641208][ T6276] RBP: 00007f499003500c R08: 0000000000000004 R09: 0000000000000000 [ 112.641222][ T6276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.641236][ T6276] R13: 00007f4990226128 R14: 00007f4990226090 R15: 00007fff6853b368 [ 112.641272][ T6276] [ 112.641286][ T6276] Mem-Info: [ 112.927918][ T6266] lo speed is unknown, defaulting to 1000 [ 112.969385][ T6276] active_anon:6930 inactive_anon:0 isolated_anon:0 [ 112.969385][ T6276] active_file:0 inactive_file:42403 isolated_file:0 [ 112.969385][ T6276] unevictable:768 dirty:629 writeback:0 [ 112.969385][ T6276] slab_reclaimable:10107 slab_unreclaimable:94900 [ 112.969385][ T6276] mapped:31238 shmem:1290 pagetables:1222 [ 112.969385][ T6276] sec_pagetables:0 bounce:0 [ 112.969385][ T6276] kernel_misc_reclaimable:0 [ 112.969385][ T6276] free:1338547 free_pcp:9742 free_cma:0 [ 113.100473][ T6276] Node 0 active_anon:27632kB inactive_anon:0kB active_file:0kB inactive_file:169408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130192kB dirty:1568kB writeback:948kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12404kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.209626][ T6282] __nla_validate_parse: 3 callbacks suppressed [ 113.209649][ T6282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.78'. [ 113.210799][ T6276] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 113.305800][ T6276] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.438828][ T6276] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 113.482302][ T6276] Node 0 DMA32 free:1391580kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28632kB inactive_anon:0kB active_file:0kB inactive_file:169408kB unevictable:1536kB writepending:1316kB zspages:0kB present:3129332kB managed:2548504kB mlocked:0kB bounce:0kB free_pcp:34296kB local_pcp:14752kB free_cma:0kB [ 113.577835][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 113.584810][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.605304][ T6276] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.656298][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.707627][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 113.763965][ T6276] Node 1 Normal free:3948088kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.789105][ T6269] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 113.880630][ T6276] lowmem_reserve[]: 0 0 0 0 0 [ 113.914204][ T6276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.946337][ T5768] lo speed is unknown, defaulting to 1000 [ 113.958561][ T6276] Node 0 DMA32: 268*4kB (ME) 278*8kB (UME) 268*16kB (UM) 162*32kB (UM) 172*64kB (UME) 94*128kB (UME) 52*256kB (UME) 22*512kB (UM) 5*1024kB (M) 9*2048kB (UME) 319*4096kB (UM) = 1390560kB [ 114.024330][ T6276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.056337][ T6276] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 13*16kB (UM) 10*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948088kB [ 114.093832][ T6276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.114667][ T6276] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.138760][ T6276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.160942][ T6276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.183462][ T6276] 43690 total pagecache pages [ 114.200963][ T6276] 0 pages in swap cache [ 114.210798][ T6276] Free swap = 124996kB [ 114.228542][ T6276] Total swap = 124996kB [ 114.241557][ T6276] 2097051 pages RAM [ 114.250901][ T6276] 0 pages HighMem/MovableOnly [ 114.265969][ T6276] 428245 pages reserved [ 114.276106][ T6276] 0 pages cma reserved [ 114.340418][ T6310] syz_tun: entered allmulticast mode [ 114.390111][ T6066] IPVS: starting estimator thread 0... [ 114.395946][ T6310] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 114.438441][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 114.461482][ T6309] syz_tun: left allmulticast mode [ 114.510255][ T6314] IPVS: using max 29 ests per chain, 69600 per kthread [ 114.522222][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.622250][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.170987][ T6328] bridge_slave_0: left allmulticast mode [ 115.197497][ T6328] bridge_slave_0: left promiscuous mode [ 115.222728][ T6328] pimreg1: port 1(bridge_slave_0) entered disabled state [ 115.275325][ T6328] bridge_slave_1: left allmulticast mode [ 115.288960][ T6328] bridge_slave_1: left promiscuous mode [ 115.300625][ T6328] pimreg1: port 2(bridge_slave_1) entered disabled state [ 115.324913][ T6328] bond0: (slave bond_slave_0): Releasing backup interface [ 115.356592][ T6328] bond0: (slave bond_slave_1): Releasing backup interface [ 115.393759][ T6340] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.405127][ T6328] team0: Port device team_slave_0 removed [ 115.439772][ T6328] team0: Port device team_slave_1 removed [ 115.458165][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.474331][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.484280][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.493357][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.508414][ T6328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.613178][ T6341] batadv0: entered promiscuous mode [ 115.645927][ T6341] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 115.922131][ T6343] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 115.940613][ T6348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'. [ 115.950747][ T6346] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 115.962026][ T6343] netlink: 236 bytes leftover after parsing attributes in process `syz.3.88'. [ 115.973405][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 115.996217][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 116.009136][ T6348] netlink: 60 bytes leftover after parsing attributes in process `syz.4.90'. [ 116.018595][ T6346] unsupported nla_type 216 [ 116.065230][ T6348] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.384840][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.92'. [ 116.421325][ T6356] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 116.577952][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 116.773357][ T6365] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 116.794623][ T6369] lo speed is unknown, defaulting to 1000 [ 116.823472][ T6365] netlink: 'syz.3.93': attribute type 2 has an invalid length. [ 117.483889][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 117.869261][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.030737][ T6426] netlink: 'syz.2.99': attribute type 6 has an invalid length. [ 118.247369][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.344426][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.375204][ T6436] xt_hashlimit: size too large, truncated to 1048576 [ 118.472955][ T6440] Cannot find add_set index 0 as target [ 118.557778][ T6438] xt_CT: No such helper "netbios-ns" [ 118.563430][ T6440] __nla_validate_parse: 2 callbacks suppressed [ 118.563451][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.563510][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.635709][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.687306][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.769512][ T1183] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.808916][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.840972][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.868070][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.977263][ T6449] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 119.051234][ T6449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.104'. [ 119.335678][ T6465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.108'. [ 119.538233][ T6471] trusted_key: syz.4.111 sent an empty control message without MSG_MORE. [ 119.584055][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 119.596548][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 119.624186][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.634598][ T6465] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.650373][ T6479] netlink: 'syz.0.110': attribute type 13 has an invalid length. [ 119.660250][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.668526][ T6479] netlink: 'syz.0.110': attribute type 17 has an invalid length. [ 119.694505][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.109'. [ 119.787124][ T6465] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 119.989135][ T1183] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.279958][ T6479] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 120.387815][ T6485] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 120.620662][ T6073] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.658808][ T6073] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.682852][ T6073] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.785647][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 121.185681][ T6509] netlink: 'syz.0.118': attribute type 30 has an invalid length. [ 121.210335][ T6507] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 121.228633][ T6509] bond0: option arp_missed_max: invalid value (0) [ 121.250795][ T6509] bond0: option arp_missed_max: allowed values 1 - 255 [ 121.482453][ T6521] bridge_slave_1: left allmulticast mode [ 121.497057][ T6521] bridge_slave_1: left promiscuous mode [ 121.513276][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.565523][ T6521] bridge_slave_0: left allmulticast mode [ 121.598867][ T6521] bridge_slave_0: left promiscuous mode [ 121.633691][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.837805][ T6533] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 122.001250][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.181541][ T6537] bond1: (slave veth5): Enslaving as an active interface with a down link [ 122.218032][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.228285][ T6538] bond1: (slave batadv1): making interface the new active one [ 122.239107][ T6538] batadv1: entered promiscuous mode [ 122.244972][ T6538] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 122.597505][ T6544] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 122.678300][ T6556] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 122.880541][ T6556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.945058][ T6565] bond2: (slave dummy0): Enslaving as an active interface with a down link [ 123.039206][ T6570] bond2: entered promiscuous mode [ 123.080074][ T6570] bond2: entered allmulticast mode [ 123.107666][ T6567] Bluetooth: MGMT ver 1.23 [ 123.257427][ T6577] syzkaller0: entered promiscuous mode [ 123.274717][ T6577] syzkaller0: entered allmulticast mode [ 123.493888][ T6585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 123.797923][ T6596] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 123.897152][ T6600] syz_tun: entered allmulticast mode [ 124.301944][ T6599] syz_tun: left allmulticast mode [ 124.323135][ T6073] IPVS: starting estimator thread 0... [ 124.439437][ T6612] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.520736][ T6619] __nla_validate_parse: 10 callbacks suppressed [ 124.520757][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.135'. [ 124.574011][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 124.598126][ T6619] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 124.624125][ T6617] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 124.633343][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 124.651654][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'. [ 124.746622][ T6615] netlink: 'syz.1.135': attribute type 16 has an invalid length. [ 124.768323][ T6615] netlink: 'syz.1.135': attribute type 17 has an invalid length. [ 125.021489][ T6615] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 125.538480][ T6646] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.669162][ T6653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.144'. [ 125.695002][ T6645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.726841][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 125.744239][ T6644] syzkaller0: entered promiscuous mode [ 125.770107][ T6644] syzkaller0: entered allmulticast mode [ 126.465300][ T6674] ip6gre1: entered promiscuous mode [ 126.498037][ T6674] ip6gre1: entered allmulticast mode [ 126.518563][ T6672] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.942638][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.974680][ T5768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.984541][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.130191][ T6696] dvmrp0: entered allmulticast mode [ 127.491173][ T5768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.503329][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 127.669523][ T5768] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.043570][ T6690] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 128.106223][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.149'. [ 128.154564][ T6698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 128.217473][ T6698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.149'. [ 128.325894][ T6714] syzkaller0: entered promiscuous mode [ 128.340659][ T6714] syzkaller0: entered allmulticast mode [ 128.359014][ T809] lo speed is unknown, defaulting to 1000 [ 128.376217][ T809] syz2: Port: 1 Link DOWN [ 128.979010][ T6753] netlink: 'syz.3.156': attribute type 6 has an invalid length. [ 131.204035][ T6742] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 131.213806][ T6742] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 131.224134][ T6742] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 131.403784][ T5284] veth0_macvtap: left promiscuous mode [ 131.428893][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.451536][ T6770] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 131.501032][ T6770] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 131.527416][ T6770] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 131.537299][ T24] lo speed is unknown, defaulting to 1000 [ 131.613423][ T6792] atomic_op ffff888054945198 conn xmit_atomic 0000000000000000 [ 131.744654][ T6794] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 131.833357][ T6784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.001209][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 132.079788][ T6806] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 132.106026][ T6803] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 132.128857][ T6806] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 132.250150][ T6818] netlink: 'syz.3.164': attribute type 9 has an invalid length. [ 132.867873][ T6821] veth0_vlan: left promiscuous mode [ 132.953374][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960435][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.967847][ T1319] aoe: packet could not be sent on veth0_vlan. consider increasing tx_queue_len [ 133.329055][ T6064] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.409523][ T6064] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.447639][ T6064] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.498809][ T6068] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.554740][ T6068] batadv1: left promiscuous mode [ 133.786297][ T51] Bluetooth: hci4: link tx timeout [ 133.794416][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.837820][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.168'. [ 134.040842][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 134.125457][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 134.204870][ T6862] ip6tnl1: entered allmulticast mode [ 134.264152][ T6895] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 134.572436][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.598354][ T6899] bond1: (slave dummy0): making interface the new active one [ 134.608068][ T6899] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 134.663754][ T6902] bond1: entered promiscuous mode [ 134.802610][ T6902] dummy0: entered promiscuous mode [ 134.933368][ T6902] bond1: entered allmulticast mode [ 135.048307][ T6902] dummy0: entered allmulticast mode [ 135.185352][ T6909] bridge_slave_0: left allmulticast mode [ 135.206375][ T6909] bridge_slave_0: left promiscuous mode [ 135.231866][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.315687][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 135.406627][ T6945] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 135.484922][ T6949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.679284][ T6952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.840304][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 136.154260][ T6909] bridge_slave_1: left allmulticast mode [ 136.160349][ T6909] bridge_slave_1: left promiscuous mode [ 136.166441][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.194002][ T6909] bond0: (slave bond_slave_0): Releasing backup interface [ 136.204401][ T6909] bond0: (slave bond_slave_1): Releasing backup interface [ 136.214516][ T6909] team0: Port device team_slave_0 removed [ 136.222513][ T6909] team0: Port device team_slave_1 removed [ 136.228627][ T6909] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.246247][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.269197][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.277000][ T6823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.456866][ T6946] bridge0: port 1(dummy0) entered blocking state [ 136.469394][ T6946] bridge0: port 1(dummy0) entered disabled state [ 136.483529][ T6946] dummy0: entered allmulticast mode [ 136.502707][ T6946] dummy0: entered promiscuous mode [ 136.510333][ T6946] bridge0: port 1(dummy0) entered blocking state [ 136.516868][ T6946] bridge0: port 1(dummy0) entered forwarding state [ 136.552983][ T6945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.571256][ T6945] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 136.677839][ T6972] Cannot find add_set index 1 as target [ 136.788157][ T6937] dummy0: left allmulticast mode [ 136.805949][ T6956] netlink: 52 bytes leftover after parsing attributes in process `syz.3.178'. [ 136.818628][ T6937] dummy0: left promiscuous mode [ 136.841772][ T6937] bridge0: port 1(dummy0) entered disabled state [ 136.878035][ T6960] netlink: 76 bytes leftover after parsing attributes in process `syz.3.178'. [ 136.946976][ T6960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.178'. [ 137.019477][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 137.109471][ T6823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.133017][ T6823] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 137.275008][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 137.432321][ T6994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 139.400331][ T6956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.427723][ T6980] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 140.128158][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 140.197655][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.188'. [ 140.332733][ T7042] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 140.399149][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 140.629023][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.897580][ T7042] syz_tun: entered promiscuous mode [ 140.903648][ T7059] block nbd0: server does not support multiple connections per device. [ 140.975981][ T7042] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 141.108616][ T7059] block nbd0: shutting down sockets [ 141.205407][ T7060] netlink: 41 bytes leftover after parsing attributes in process `syz.3.188'. [ 141.282857][ T7060] netlink: 140 bytes leftover after parsing attributes in process `syz.3.188'. [ 141.295742][ T7065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.320551][ T7083] netlink: 'syz.1.191': attribute type 13 has an invalid length. [ 141.338783][ T7065] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 141.353160][ T7060] netlink: 41 bytes leftover after parsing attributes in process `syz.3.188'. [ 141.395070][ T7088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.191'. [ 141.477857][ T7089] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 141.494724][ T12] IPVS: starting estimator thread 0... [ 141.619853][ T7091] IPVS: using max 32 ests per chain, 76800 per kthread [ 141.635987][ T7065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.644794][ T7065] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 141.800951][ T7065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.836540][ T7065] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 141.924724][ T7065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.962750][ T7065] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 142.140033][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.326598][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 142.340123][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.469755][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.190'. [ 142.491005][ T7079] netlink: 32 bytes leftover after parsing attributes in process `syz.4.190'. [ 142.648181][ T7088] bond_slave_0: entered promiscuous mode [ 142.658085][ T7088] bond_slave_0: entered allmulticast mode [ 143.033514][ T7113] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.075236][ T7113] bond3 (unregistering): Released all slaves [ 143.764770][ T7132] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.197'. [ 144.098569][ T7140] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 144.359958][ T7152] lo speed is unknown, defaulting to 1000 [ 144.678594][ T32] tipc: Subscription rejected, illegal request [ 144.871086][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'. [ 144.880899][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 145.871022][ T5723] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.449289][ T5809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.899471][ T7186] lo speed is unknown, defaulting to 1000 [ 147.277642][ T7193] pimreg1: renamed from bridge0 [ 147.350636][ T7193] pimreg1: entered allmulticast mode [ 147.360049][ T7193] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 147.848595][ T7202] netlink: 'syz.0.205': attribute type 8 has an invalid length. [ 147.980330][ T7205] netlink: 'syz.0.205': attribute type 23 has an invalid length. [ 148.150670][ T7206] syz_tun: entered allmulticast mode [ 148.341139][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'. [ 148.378780][ T7211] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 148.406525][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 148.483573][ T7212] netlink: 'syz.2.206': attribute type 16 has an invalid length. [ 148.527646][ T7212] netlink: 'syz.2.206': attribute type 17 has an invalid length. [ 148.759695][ T7212] pimreg1: left allmulticast mode [ 148.827072][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.842975][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.887499][ T7212] batadv0: left promiscuous mode [ 148.936789][ T7212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.959040][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 149.356447][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.370543][ T7212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.408136][ T7212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.507468][ T7212] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 149.553949][ T24] lo speed is unknown, defaulting to 1000 [ 149.570666][ T24] syz2: Port: 1 Link ACTIVE [ 149.776364][ T7223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.276208][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 150.492372][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 150.738216][ T7239] netlink: 52 bytes leftover after parsing attributes in process `syz.0.215'. [ 151.208575][ T7229] syzkaller1: entered promiscuous mode [ 151.224839][ T7229] syzkaller1: entered allmulticast mode [ 151.379453][ T7255] smbdirect: ib_dev[syz2] removed [ 152.008956][ T7267] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.219'. [ 152.027530][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 152.076480][ T7275] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 152.145638][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.222'. [ 152.277153][ T7274] netlink: 'syz.4.222': attribute type 16 has an invalid length. [ 152.329155][ T7274] netlink: 'syz.4.222': attribute type 17 has an invalid length. [ 153.064731][ T7274] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 153.819261][ T7309] team_slave_1: Caught tx_queue_len zero misconfig [ 153.932727][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 154.020815][ T7312] bridge1: entered promiscuous mode [ 154.034684][ T7312] bridge1: entered allmulticast mode [ 154.053350][ T7312] team0: Port device bridge1 added [ 154.116437][ T7321] bridge0: port 1(team0) entered blocking state [ 154.146322][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.163613][ T7321] bridge0: port 1(team0) entered disabled state [ 154.243182][ T7321] team0: entered allmulticast mode [ 154.320685][ T7321] team0: entered promiscuous mode [ 154.740273][ T7359] netlink: 164 bytes leftover after parsing attributes in process `syz.0.231'. [ 154.854009][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 155.395122][ T7335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.980415][ T7376] batadv0: entered promiscuous mode [ 156.044143][ T7376] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 156.250444][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 156.766352][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 156.814583][ T7398] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 156.840278][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 156.964134][ T7393] netlink: 'syz.3.238': attribute type 16 has an invalid length. [ 156.991328][ T7393] netlink: 'syz.3.238': attribute type 17 has an invalid length. [ 157.102616][ T7393] syz_tun: left promiscuous mode [ 157.141995][ T7393] pimreg1: left allmulticast mode [ 157.337837][ T7393] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 157.452095][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.241'. [ 157.852084][ T7412] netlink: 34 bytes leftover after parsing attributes in process `syz.0.242'. [ 157.909384][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.215458][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.287410][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.544898][ T7435] pimreg1: renamed from bridge0 (while UP) [ 159.555471][ T7435] pimreg1: entered allmulticast mode [ 159.572775][ T7435] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 159.581964][ T7432] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.640904][ T7436] batadv0: entered promiscuous mode [ 159.684719][ T7436] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 160.677265][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 161.345382][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 161.644052][ T7469] bond2 (unregistering): Released all slaves [ 163.142174][ T7505] batadv0: entered promiscuous mode [ 163.174116][ T7505] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 163.816088][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 163.873843][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 163.876335][ T7529] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 163.910506][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 163.943777][ T7531] netlink: 'syz.0.266': attribute type 16 has an invalid length. [ 163.987060][ T7531] netlink: 'syz.0.266': attribute type 17 has an invalid length. [ 164.501315][ T7531] batadv0: left promiscuous mode [ 164.530221][ T7531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.668247][ T7531] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 165.023577][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 165.036154][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 165.070841][ T7555] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 165.161698][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'. [ 165.325146][ T7558] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 165.384159][ T7564] netlink: 'syz.0.278': attribute type 16 has an invalid length. [ 165.395331][ T7562] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 165.406014][ T7564] netlink: 'syz.0.278': attribute type 17 has an invalid length. [ 165.462152][ T7562] bond2 (unregistering): Released all slaves [ 165.589813][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.028393][ T7564] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 168.401102][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 168.802774][ T7619] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 168.882710][ T7621] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 168.918096][ T7621] bond2 (unregistering): Released all slaves [ 169.795259][ T7651] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 169.986848][ T7655] netlink: 44 bytes leftover after parsing attributes in process `syz.0.291'. [ 170.201966][ T7651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.632187][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 170.671116][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 170.739735][ T7675] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 170.785786][ T7675] netlink: 756 bytes leftover after parsing attributes in process `syz.1.296'. [ 170.966955][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 170.987129][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 171.184964][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 171.202415][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 171.651363][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 171.946377][ T7704] bond1 (unregistering): Released all slaves [ 172.832164][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.455699][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.486661][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.560629][ T7741] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 173.600076][ T7741] netlink: 756 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.800570][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.841259][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 174.078462][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.314'. [ 174.118835][ T7746] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.008203][ T7752] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 176.565668][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 176.631770][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 176.658970][ T7802] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 176.686167][ T7802] netlink: 756 bytes leftover after parsing attributes in process `syz.4.326'. [ 176.877583][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 178.161419][ T7818] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 178.210950][ T7844] syzkaller0: entered promiscuous mode [ 178.221095][ T7844] syzkaller0: entered allmulticast mode [ 178.406000][ T7854] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 178.871992][ T7864] veth1_to_team: entered allmulticast mode [ 178.957697][ T7872] __nla_validate_parse: 7 callbacks suppressed [ 178.957719][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 179.015235][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 179.059138][ T7874] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 179.157247][ T7874] netlink: 756 bytes leftover after parsing attributes in process `syz.0.353'. [ 179.321019][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 180.044877][ T7908] sock: sock_timestamping_bind_phc: sock not bind to device [ 180.401428][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 180.440087][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 180.465281][ T7924] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 180.487398][ T7924] netlink: 756 bytes leftover after parsing attributes in process `syz.3.359'. [ 180.583731][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.598112][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.653573][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.271286][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 181.288605][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 181.817605][ T7935] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 182.616571][ T7964] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 182.709565][ T7964] netlink: 756 bytes leftover after parsing attributes in process `syz.2.372'. [ 183.975495][ T7986] __nla_validate_parse: 1 callbacks suppressed [ 183.975518][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.378'. [ 185.148971][ T8002] netlink: 'syz.3.380': attribute type 29 has an invalid length. [ 185.288537][ T8002] netlink: 288 bytes leftover after parsing attributes in process `syz.3.380'. [ 185.348089][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'. [ 185.506761][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.380'. [ 185.968718][ T8017] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 186.025746][ T8017] netlink: 756 bytes leftover after parsing attributes in process `syz.0.387'. [ 186.048092][ T8025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.058883][ T8025] IPv6: NLM_F_CREATE should be set when creating new route [ 186.531593][ T8032] bridge2: entered promiscuous mode [ 186.617143][ T8032] bridge2: entered allmulticast mode [ 186.631531][ T8032] team0: Port device bridge2 added [ 187.114112][ T8026] bridge3: entered promiscuous mode [ 187.167064][ T8026] bridge3: entered allmulticast mode [ 187.192052][ T8026] team0: Port device bridge3 added [ 187.215936][ T8052] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 187.311141][ T8054] netlink: 'syz.1.394': attribute type 8 has an invalid length. [ 187.327566][ T8052] netlink: 756 bytes leftover after parsing attributes in process `syz.4.393'. [ 187.507377][ T8054] xfrm0: Caught tx_queue_len zero misconfig [ 187.618406][ T8056] netlink: 'syz.1.394': attribute type 23 has an invalid length. [ 188.320715][ T8042] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.128050][ T8088] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 189.229475][ T8088] netlink: 756 bytes leftover after parsing attributes in process `syz.2.402'. [ 189.847579][ T8102] bridge0: entered promiscuous mode [ 189.879796][ T8102] bridge0: entered allmulticast mode [ 189.928541][ T8102] team0: Port device bridge0 added [ 190.022602][ T8102] netlink: 244 bytes leftover after parsing attributes in process `syz.2.405'. [ 190.141735][ T8105] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 190.200710][ T8105] netlink: 756 bytes leftover after parsing attributes in process `syz.0.406'. [ 190.276002][ T8103] bridge0: port 1(team0) entered blocking state [ 190.308552][ T8103] bridge0: port 1(team0) entered disabled state [ 190.348335][ T8103] team0: entered allmulticast mode [ 190.416683][ T8103] team0: left allmulticast mode [ 190.763441][ T8118] netlink: 'syz.0.408': attribute type 8 has an invalid length. [ 190.864641][ T8118] netlink: 256 bytes leftover after parsing attributes in process `syz.0.408'. [ 190.952290][ T8118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.408'. [ 191.106046][ T8124] netlink: 'syz.0.408': attribute type 23 has an invalid length. [ 191.812567][ T8146] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 191.835949][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.903625][ T8146] netlink: 756 bytes leftover after parsing attributes in process `syz.4.415'. [ 193.042631][ T8171] netlink: 'syz.0.418': attribute type 1 has an invalid length. [ 193.116818][ T8171] netlink: 756 bytes leftover after parsing attributes in process `syz.0.418'. [ 193.364865][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 193.660612][ T8191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.421'. [ 193.687695][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.422'. [ 193.854327][ T8185] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 194.049770][ T8200] netlink: 'syz.0.424': attribute type 8 has an invalid length. [ 194.186254][ T8195] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 194.342786][ T8204] netlink: 'syz.0.424': attribute type 23 has an invalid length. [ 194.352542][ T8195] bond1 (unregistering): Released all slaves [ 194.405087][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.940544][ T8232] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 196.001701][ T8232] __nla_validate_parse: 3 callbacks suppressed [ 196.001721][ T8232] netlink: 756 bytes leftover after parsing attributes in process `syz.3.429'. [ 196.988905][ T8259] netlink: 'syz.1.433': attribute type 1 has an invalid length. [ 197.000502][ T8259] netlink: 756 bytes leftover after parsing attributes in process `syz.1.433'. [ 197.196424][ T8263] bridge4: entered promiscuous mode [ 197.223652][ T8263] bridge4: entered allmulticast mode [ 197.241450][ T8263] team0: Port device bridge4 added [ 197.314151][ T8263] netlink: 244 bytes leftover after parsing attributes in process `syz.3.437'. [ 197.803291][ T8273] netlink: 'syz.3.438': attribute type 8 has an invalid length. [ 197.897614][ T8273] netlink: 256 bytes leftover after parsing attributes in process `syz.3.438'. [ 197.971069][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.438'. [ 198.136344][ T8278] netlink: 'syz.3.438': attribute type 23 has an invalid length. [ 198.208718][ T8284] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 198.233007][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 198.273140][ T8284] netlink: 756 bytes leftover after parsing attributes in process `syz.4.441'. [ 198.573412][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.442'. [ 198.745561][ T8295] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 198.907208][ T8293] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 199.011178][ T8306] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 199.024467][ T8293] bond2 (unregistering): Released all slaves [ 199.060494][ T8306] netlink: 756 bytes leftover after parsing attributes in process `syz.0.453'. [ 199.156332][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.560024][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.126568][ T8329] netlink: 'syz.4.449': attribute type 29 has an invalid length. [ 200.177323][ T8329] netlink: 288 bytes leftover after parsing attributes in process `syz.4.449'. [ 200.213258][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 200.612078][ T8338] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 201.252180][ T8350] netlink: 'syz.3.455': attribute type 8 has an invalid length. [ 201.299811][ T8350] __nla_validate_parse: 3 callbacks suppressed [ 201.299834][ T8350] netlink: 256 bytes leftover after parsing attributes in process `syz.3.455'. [ 201.412763][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.455'. [ 201.812169][ T8354] netlink: 'syz.3.455': attribute type 23 has an invalid length. [ 201.965317][ T8366] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 202.046299][ T8366] netlink: 756 bytes leftover after parsing attributes in process `syz.0.458'. [ 202.610816][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 202.966860][ T8386] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 203.099447][ T8389] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 203.165611][ T8389] bond1 (unregistering): Released all slaves [ 203.396482][ T8365] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.271888][ T8413] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 204.310077][ T8413] netlink: 756 bytes leftover after parsing attributes in process `syz.3.466'. [ 204.708636][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 204.733625][ T8422] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 204.763849][ T8425] netlink: 'syz.3.469': attribute type 8 has an invalid length. [ 204.789304][ T8425] netlink: 256 bytes leftover after parsing attributes in process `syz.3.469'. [ 204.824386][ T8425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'. [ 204.884973][ T5771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.025433][ T8429] netlink: 'syz.3.469': attribute type 23 has an invalid length. [ 205.151023][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.287861][ T8435] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 205.303901][ T8435] netlink: 756 bytes leftover after parsing attributes in process `syz.0.471'. [ 205.999282][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.018459][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 206.709359][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 207.005818][ T8477] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 207.052863][ T8471] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 207.071359][ T8477] netlink: 756 bytes leftover after parsing attributes in process `syz.1.479'. [ 207.205102][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 208.044534][ T8478] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 208.219660][ T8478] bond2 (unregistering): Released all slaves [ 208.810927][ T8501] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 208.853255][ T8501] netlink: 756 bytes leftover after parsing attributes in process `syz.4.484'. [ 208.967082][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 209.044612][ T8504] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 209.584604][ T8522] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 209.630226][ T8522] netlink: 756 bytes leftover after parsing attributes in process `syz.2.497'. [ 210.497229][ T8538] netlink: 76 bytes leftover after parsing attributes in process `syz.4.491'. [ 210.762948][ T5809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.926603][ T8536] batadv0: left promiscuous mode [ 210.949052][ T8536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.220611][ T8547] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 211.253772][ T8547] netlink: 756 bytes leftover after parsing attributes in process `syz.2.493'. [ 211.481272][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 211.511758][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.668449][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 211.732950][ T8536] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 211.779069][ T8536] ip6gre1: left promiscuous mode [ 211.823034][ T8536] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 211.859257][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.080725][ T8543] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 212.163230][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.496'. [ 212.517587][ T6823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.784022][ T8567] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 212.875438][ T8569] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 212.904104][ T8569] bond1 (unregistering): Released all slaves [ 213.117525][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 214.315501][ T8607] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 214.362658][ T8607] netlink: 756 bytes leftover after parsing attributes in process `syz.4.504'. [ 215.577274][ T8627] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 215.585237][ T8627] netlink: 756 bytes leftover after parsing attributes in process `syz.0.508'. [ 216.109913][ T8602] ip6tnl1: left allmulticast mode [ 216.180090][ T6410] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.192625][ T6410] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.324332][ T6410] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.479134][ T6410] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.672226][ T8641] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 216.679957][ T8641] netlink: 756 bytes leftover after parsing attributes in process `syz.1.520'. [ 217.257801][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 217.876879][ T8665] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 217.993845][ T8667] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 218.195283][ T8667] bond2 (unregistering): Released all slaves [ 218.894574][ T8691] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 218.932793][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.095026][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 219.133085][ T5771] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.962049][ T8695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.027808][ T8714] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 222.128314][ T8714] netlink: 756 bytes leftover after parsing attributes in process `syz.1.524'. [ 225.542547][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 227.078297][ T8766] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 233.565286][ T8815] tipc: Enabling of bearer rejected, failed to enable media [ 234.950562][ T8840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.545'. [ 235.225482][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 236.694159][ T8850] bond2 (unregistering): Released all slaves [ 237.197036][ T8840] tipc: Enabling of bearer rejected, media not registered [ 242.023279][ T8896] batadv0: entered promiscuous mode [ 242.102486][ T8896] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 245.289001][ T8917] netlink: 64 bytes leftover after parsing attributes in process `syz.1.559'. [ 246.114327][ T8917] netlink: 'syz.1.559': attribute type 3 has an invalid length. [ 246.297700][ T8917] netlink: 3 bytes leftover after parsing attributes in process `syz.1.559'. [ 246.506083][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 247.887948][ T8917] bond2 (unregistering): Released all slaves [ 253.137787][ C0] sched: DL replenish lagged too much [ 256.361683][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.086404][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.781580][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.094398][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.454941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.367878][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.149744][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.692818][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.528490][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 578.535612][ C1] rcu: (detected by 1, t=10502 jiffies, g=38285, q=805 ncpus=2) [ 578.543378][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10372 (4294994958-4294984586), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 578.556804][ C1] rcu: rcu_preempt kthread starved for 10372 jiffies! g38285 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 578.568047][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 578.578049][ C1] rcu: RCU grace-period kthread stack dump: [ 578.584443][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 578.598077][ C1] Call Trace: [ 578.601405][ C1] [ 578.604391][ C1] __schedule+0x17d9/0x56c0 [ 578.609078][ C1] ? __lock_acquire+0x683/0x2cf0 [ 578.614163][ C1] ? __pfx___schedule+0x10/0x10 [ 578.619359][ C1] ? schedule+0x90/0x2b0 [ 578.623669][ C1] schedule+0x164/0x2b0 [ 578.627910][ C1] schedule_timeout+0x152/0x2c0 [ 578.632808][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 578.638227][ C1] ? __pfx_process_timeout+0x10/0x10 [ 578.643561][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 578.649416][ C1] ? prepare_to_swait_event+0x322/0x350 [ 578.655011][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 578.659950][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 578.666153][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 578.671497][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 578.676743][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.682593][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 578.687235][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 578.692479][ C1] ? __kthread_parkme+0x71/0x1f0 [ 578.697464][ C1] ? __kthread_parkme+0x196/0x1f0 [ 578.702535][ C1] kthread+0x388/0x470 [ 578.706659][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 578.711921][ C1] ? __pfx_kthread+0x10/0x10 [ 578.716566][ C1] ret_from_fork+0x514/0xb70 [ 578.721213][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 578.726372][ C1] ? __switch_to+0xc89/0x1420 [ 578.731098][ C1] ? __pfx_kthread+0x10/0x10 [ 578.735741][ C1] ret_from_fork_asm+0x1a/0x30 [ 578.740739][ C1] [ 578.743787][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 578.750176][ C1] Sending NMI from CPU 1 to CPUs 0: [ 578.755427][ C0] NMI backtrace for cpu 0 [ 578.755458][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 578.755488][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.755504][ C0] Workqueue: bat_events batadv_tt_purge [ 578.755536][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 578.755574][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a e9 18 3e [ 578.755589][ C0] RSP: 0018:ffffc90000006a60 EFLAGS: 00000046 [ 578.755604][ C0] RAX: 0000000000000001 RBX: ffff888053ecd2a8 RCX: 0000000000000000 [ 578.755616][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888053ecd2a8 [ 578.755627][ C0] RBP: 1ffff1100a7d9a56 R08: ffff888053ecd2ab R09: 1ffff1100a7d9a55 [ 578.755641][ C0] R10: dffffc0000000000 R11: ffffed100a7d9a56 R12: dffffc0000000000 [ 578.755654][ C0] R13: 1ffff1100a7d9a57 R14: ffff888053ecd2b8 R15: ffff888053ecd2b0 [ 578.755672][ C0] FS: 0000000000000000(0000) GS:ffff888124f4f000(0000) knlGS:0000000000000000 [ 578.755687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.755699][ C0] CR2: 0000555571d654e8 CR3: 000000007fc28000 CR4: 00000000003526f0 [ 578.755716][ C0] Call Trace: [ 578.755723][ C0] [ 578.755731][ C0] do_raw_spin_unlock+0xf5/0x210 [ 578.755755][ C0] _raw_spin_unlock+0x1e/0x50 [ 578.755777][ C0] advance_sched+0x99a/0xc80 [ 578.755808][ C0] ? __pfx_advance_sched+0x10/0x10 [ 578.755834][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 578.755856][ C0] ? __pfx_advance_sched+0x10/0x10 [ 578.755882][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 578.755913][ C0] hrtimer_interrupt+0x448/0x910 [ 578.755949][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 578.755971][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 578.755996][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 578.756016][ C0] RIP: 0010:lock_release+0x2d7/0x3c0 [ 578.756042][ C0] Code: 5d ca 11 00 00 00 00 eb b5 e8 c5 2d 2f 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 18 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1a 30 32 0a cc 48 8d 3d 52 e7 b7 [ 578.756057][ C0] RSP: 0018:ffffc90000006e68 EFLAGS: 00000282 [ 578.756071][ C0] RAX: bc9b15af1f5aed00 RBX: 0000000000000206 RCX: 0000000080000101 [ 578.756083][ C0] RDX: 0000000000000005 RSI: ffffffff8e4b625f RDI: ffffffff8c4bdd80 [ 578.756095][ C0] RBP: ffff888032dbe968 R08: 0000000000000007 R09: 0000000000000000 [ 578.756107][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000005 [ 578.756118][ C0] R13: 0000000000000005 R14: ffffffff8eb59c60 R15: ffff888032dbdd00 [ 578.756142][ C0] ? unwind_next_frame+0x8f/0x2550 [ 578.756162][ C0] unwind_next_frame+0x1baa/0x2550 [ 578.756186][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.756203][ C0] ? unwind_next_frame+0x8f/0x2550 [ 578.756228][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.756258][ C0] arch_stack_walk+0x11b/0x150 [ 578.756281][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.756301][ C0] stack_trace_save+0xa9/0x100 [ 578.756324][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 578.756349][ C0] ? __lock_acquire+0x683/0x2cf0 [ 578.756377][ C0] kasan_save_track+0x3e/0x80 [ 578.756402][ C0] ? kasan_save_track+0x3e/0x80 [ 578.756425][ C0] ? kasan_save_free_info+0x40/0x50 [ 578.756444][ C0] ? __kasan_slab_free+0x5c/0x80 [ 578.756468][ C0] ? kfree+0x1c5/0x640 [ 578.756486][ C0] ? skb_release_data+0x85e/0xab0 [ 578.756508][ C0] ? __kfree_skb+0x5d/0x210 [ 578.756527][ C0] ? nft_synproxy_eval_v6+0x36a/0x4e0 [ 578.756545][ C0] ? nft_synproxy_do_eval+0x3d1/0x550 [ 578.756563][ C0] ? nft_do_chain+0x48d/0x1b10 [ 578.756581][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 578.756599][ C0] ? nf_hook_slow+0xc5/0x220 [ 578.756625][ C0] ? NF_HOOK+0x21f/0x3c0 [ 578.756644][ C0] ? ip6_input+0x16a/0x270 [ 578.756663][ C0] ? NF_HOOK+0x336/0x3c0 [ 578.756686][ C0] ? process_backlog+0x774/0x1860 [ 578.756705][ C0] ? __napi_poll+0xaa/0x330 [ 578.756720][ C0] ? net_rx_action+0x61d/0xf50 [ 578.756737][ C0] ? handle_softirqs+0x225/0x840 [ 578.756759][ C0] ? do_softirq+0x76/0xd0 [ 578.756778][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 578.756798][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 578.756817][ C0] ? batadv_tt_purge+0x35/0xa10 [ 578.756836][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 578.756856][ C0] ? rescuer_thread+0x7b6/0x10b0 [ 578.756878][ C0] ? kthread+0x388/0x470 [ 578.756903][ C0] ? ret_from_fork+0x514/0xb70 [ 578.756928][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.756965][ C0] kasan_save_free_info+0x40/0x50 [ 578.756985][ C0] __kasan_slab_free+0x5c/0x80 [ 578.757011][ C0] kfree+0x1c5/0x640 [ 578.757031][ C0] ? skb_release_data+0x85e/0xab0 [ 578.757056][ C0] skb_release_data+0x85e/0xab0 [ 578.757085][ C0] __kfree_skb+0x5d/0x210 [ 578.757107][ C0] nft_synproxy_eval_v6+0x36a/0x4e0 [ 578.757130][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 578.757148][ C0] ? ip_local_deliver+0x113/0x190 [ 578.757177][ C0] ? nf_ip_checksum+0x13c/0x510 [ 578.757200][ C0] nft_synproxy_do_eval+0x3d1/0x550 [ 578.757221][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 578.757244][ C0] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 578.757277][ C0] nft_do_chain+0x48d/0x1b10 [ 578.757297][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 578.757327][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 578.757371][ C0] nft_do_chain_inet+0x360/0x4b0 [ 578.757392][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 578.757410][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 578.757439][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 578.757464][ C0] ? lock_acquire+0x106/0x350 [ 578.757489][ C0] ? NF_HOOK+0x9e/0x3c0 [ 578.757510][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 578.757530][ C0] nf_hook_slow+0xc5/0x220 [ 578.757560][ C0] NF_HOOK+0x21f/0x3c0 [ 578.757581][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 578.757602][ C0] ? NF_HOOK+0x9e/0x3c0 [ 578.757621][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 578.757643][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 578.757677][ C0] ip6_input+0x16a/0x270 [ 578.757697][ C0] ? ip6_input+0x23/0x270 [ 578.757719][ C0] NF_HOOK+0x336/0x3c0 [ 578.757740][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 578.757760][ C0] ? NF_HOOK+0x9e/0x3c0 [ 578.757779][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 578.757822][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 578.757851][ C0] process_backlog+0x774/0x1860 [ 578.757873][ C0] ? process_backlog+0x3c3/0x1860 [ 578.757901][ C0] __napi_poll+0xaa/0x330 [ 578.757920][ C0] net_rx_action+0x61d/0xf50 [ 578.757947][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 578.757964][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 578.758000][ C0] handle_softirqs+0x225/0x840 [ 578.758023][ C0] ? do_softirq+0x76/0xd0 [ 578.758047][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 578.758067][ C0] do_softirq+0x76/0xd0 [ 578.758087][ C0] [ 578.758093][ C0] [ 578.758099][ C0] __local_bh_enable_ip+0xf8/0x130 [ 578.758121][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 578.758147][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 578.758168][ C0] batadv_tt_purge+0x35/0xa10 [ 578.758192][ C0] ? rcu_is_watching+0x15/0xb0 [ 578.758211][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 578.758232][ C0] process_scheduled_works+0xa8e/0x14e0 [ 578.758271][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.758292][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.758318][ C0] ? assign_work+0x3af/0x5d0 [ 578.758341][ C0] rescuer_thread+0x7b6/0x10b0 [ 578.758369][ C0] ? rescuer_thread+0xb8/0x10b0 [ 578.758406][ C0] kthread+0x388/0x470 [ 578.758432][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 578.758454][ C0] ? __pfx_kthread+0x10/0x10 [ 578.758480][ C0] ret_from_fork+0x514/0xb70 [ 578.758508][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 578.758535][ C0] ? __switch_to+0xc89/0x1420 [ 578.758559][ C0] ? __pfx_kthread+0x10/0x10 [ 578.758586][ C0] ret_from_fork_asm+0x1a/0x30 [ 578.758612][ C0]