last executing test programs: 33.654409816s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, [0x9, 0x2, 0x0, 0x6842bfe5, 0xde, 0x3, 0x80, 0xe2, 0x3ff, 0x5, 0x835, 0x9, 0xfff, 0x7, 0x5]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r3, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x6, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r5, 0x2000000, 0x8, 0x0, &(0x7f00000001c0)="5cdd3086ddffff66", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x1}, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00'}, 0x10) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10c, 0x28, 0x1, 0x0, 0x0, "", [@nested={0xfc, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0xe0000000000}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x10c}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) 33.470566304s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) 33.390398483s ago: executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x400) 32.291408202s ago: executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000001780)={0xb0, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048010}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 32.191876279s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009001c0bbc0f0fe608402d90e828544d90010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000000000800014000000000080006000000000148000000160a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c0003801800038014000100626f6e643000000000000000000000001400000010"], 0xd8}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 32.122140493s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc400, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000004000000002800128008000100677265001c00028008000600ac14140008000700e000030a08000200"], 0x50}}, 0x0) 31.895914737s ago: executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r7, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x6}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.65637878s ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2a}}, 0x1c) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x2, 0x7, 0x106) r6 = socket(0x15, 0x5, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000440)={0x20002001}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000080)={0x2000000c}) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000200)="f9", 0x1}], 0x1}, 0x40800) close(r5) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f0040"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r10, 0x88, 0x67, &(0x7f00000002c0)=r11, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) 31.240563099s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000000000000950000000000000038722c013653e84c584fdd38a1990000dfe83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x800) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400e680687098"], 0x14}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0x1) 31.224370699s ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x48) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000001740)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0xd, &(0x7f0000001940)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000003ff6)='GPL\x00', 0xd58, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', r6, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r2}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 31.076890522s ago: executing program 0: r0 = socket(0x2c, 0xa, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000280)=@abs, 0x6e, 0x0}}], 0x1, 0x0) 30.994083226s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7, 0x400, 0x100, {{0x1d, 0x4, 0x3, 0x3, 0x74, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xa0, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @multicast1, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x6, [{@remote, 0x1}, {@loopback, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@multicast2, 0xffffffff}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640)=""/104, 0x68, 0x0, &(0x7f0000000340)=""/10, 0xa}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000007f0000000000000020000000185500000b0000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018330000050000000000000000000000950000000000000018110000208897089e8e548b739fd2d85f3ce9191a1007f0", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000480)=""/197, 0x40f00, 0x4, '\x00', r1, 0x15, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xb, 0x81, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f00000007c0)=[r4], &(0x7f0000000800)=[{0x2, 0x2, 0xd, 0x1}, {0x0, 0x4, 0x4, 0xc}, {0x0, 0x5, 0x6, 0x3}, {0x0, 0x4, 0x10, 0xa}, {0x0, 0x1, 0xc, 0x4}], 0x10, 0x7}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003c00)=@req={0x0, 0x9}, 0x10) write$ppp(r0, &(0x7f0000000300)="1632", 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 30.886825686s ago: executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @dev}, &(0x7f0000000140)=0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r9}, 0x10) write$cgroup_type(r7, &(0x7f0000000140), 0x9) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='scalable\x00', 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xb8, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x404c810}, 0x4091) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xffffffffffffffff}, 0x95}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 30.846551612s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x1c, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) 30.750077504s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)={0xb0, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) 30.719344201s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1190015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee18000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x70, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110100000000000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f800c00038008000100fdffffff080001"], 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x2c, 0x0, 0x6a5672979d8c2d89, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x3, [@ptr={0xb, 0x0, 0x0, 0x2, 0x4}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x80, 0x1}], "b516"}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7fff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}]}, {0x0, [0x2e]}}, &(0x7f0000000640)=""/212, 0x97, 0xd4, 0x1, 0x70}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket(0x0, 0x1, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="10002bbd7000fedbdf2501000000060006000400000008000100", @ANYRES32=r12, @ANYBLOB="0800020001000000f4ff070002f8ff000600066962632f000800020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.67313491s ago: executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x0, 0x0, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x400) 30.628490789s ago: executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000001780)={0xb0, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048010}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 30.492026671s ago: executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000001780)={0xb0, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048010}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 30.462411042s ago: executing program 1: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5a1171a9}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000780), 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x25, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x4c}}, 0x0) 30.349686663s ago: executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030300d3fc030000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 30.290088975s ago: executing program 4: socket$inet6(0xa, 0x3, 0x2f) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=""/4051, &(0x7f00000010c0)=0xfd3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0x78) splice(r2, 0x0, r5, 0x0, 0x39004, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xa, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) socket$kcm(0x10, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001080)={'bond0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001300)=ANY=[@ANYBLOB="1808000027000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000000000000dbaaf8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000b5e703cb6594d9a15da01283783845875d645963421f92ce77831a09496209e9729af814b3cc0d9de132399dfc29a4fab9831c22c90d7384a4516d6576f904ace5ea7a06e16a216b98cb"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001200)="bc9d935742222fefe589a14b899bd446d9ac2a5c7352d67500dd88a0a931d99eef647b5170a09e3a231d04c44509b48e17b6818b218a06b20d45db120d56f53705259b4ba3bdf89477af5973", 0x4c}], 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001440)=@newlink={0xa2, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14535}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFALIASn]}, 0x50}}, 0x20000800) socket$kcm(0x2, 0x1000000000000002, 0x0) accept4$x25(r0, &(0x7f00000011c0), &(0x7f0000001100)=0x12, 0x0) 30.219325068s ago: executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd502000000090001"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d90"], 0x398}}, 0x0) 30.178098281s ago: executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000001780)={0x6c, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048010}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) recvfrom(r3, 0x0, 0x800000000000000, 0x0, 0x0, 0x0) 30.035801519s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) socket$inet_udp(0x2, 0x2, 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x12, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)={0x3, 'vlan0\x00', {0xc00}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) close(0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000680)=0x11d, 0xffffffffffffffff, &(0x7f0000000700)=0x1a6, 0x6, 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 659.634297ms ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x1c, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) 648.36877ms ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7, 0x400, 0x100, {{0x1f, 0x4, 0x3, 0x3, 0x7c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xa0, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @multicast1, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x31, 0x3, 0x6, [{@remote, 0x1}, {@loopback, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640)=""/104, 0x68, 0x0, &(0x7f0000000340)=""/10, 0xa}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000007f0000000000000020000000185500000b0000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018330000050000000000000000000000950000000000000018110000208897089e8e548b739fd2d85f3ce9191a1007f0", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000480)=""/197, 0x40f00, 0x4, '\x00', r1, 0x15, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xb, 0x81, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f00000007c0)=[r4], &(0x7f0000000800)=[{0x2, 0x2, 0xd, 0x1}, {0x0, 0x4, 0x4, 0xc}, {0x0, 0x5, 0x6, 0x3}, {0x0, 0x4, 0x10, 0xa}, {0x0, 0x1, 0xc, 0x4}], 0x10, 0x7}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003c00)=@req={0x0, 0x9}, 0x10) write$ppp(r0, &(0x7f0000000300)="1632", 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 203.36295ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [], 0xa, 'l]'}, 0xd) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) shutdown(r1, 0x1) shutdown(r1, 0x0) sendmmsg$inet6(r1, &(0x7f000000ca00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000280)=""/31, 0x1f, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES64], 0x24}}, 0x0) 157.830297ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)={0xb0, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xb0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}]}, 0x48}}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) 0s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) unshare(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0), &(0x7f0000000500)=[{0x0, 0x0, 0x4}, {0x0, 0x4}, {}, {0x2}]}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180010c849000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_da_write_pages_extent\x00', r3}, 0x10) write$cgroup_int(r4, &(0x7f0000000200)=0x2, 0x12) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000064000000000001", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) syz_emit_ethernet(0xfd77, &(0x7f0000000440)=ANY=[@ANYBLOB="ff"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. 2024/06/18 01:59:07 fuzzer started 2024/06/18 01:59:07 dialing manager at 10.128.0.169:30018 [ 75.300909][ T5099] cgroup: Unknown subsys name 'net' [ 75.487923][ T5099] cgroup: Unknown subsys name 'rlimit' 2024/06/18 01:59:09 starting 5 executor processes [ 76.923543][ T5107] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.938029][ T5107] syz-executor (5107) used greatest stack depth: 18968 bytes left [ 77.988293][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.997853][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.006310][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.019205][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.055764][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.064967][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.072111][ T5134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.072966][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.080942][ T5134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.092034][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.095216][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.102720][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.110555][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.116421][ T5135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.125039][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.137368][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.145178][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.145763][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.160198][ T5136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.169595][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.177266][ T5134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.177397][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.196284][ T5135] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.196923][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.208067][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.211909][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.217582][ T4492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.225271][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.234037][ T5136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.246184][ T5136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.924431][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 78.956527][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 79.114897][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 79.250315][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 79.267036][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.274954][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.283415][ T5124] bridge_slave_0: entered allmulticast mode [ 79.291456][ T5124] bridge_slave_0: entered promiscuous mode [ 79.328559][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.335998][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.343569][ T5126] bridge_slave_0: entered allmulticast mode [ 79.353041][ T5126] bridge_slave_0: entered promiscuous mode [ 79.376666][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 79.398067][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.406056][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.413646][ T5124] bridge_slave_1: entered allmulticast mode [ 79.422199][ T5124] bridge_slave_1: entered promiscuous mode [ 79.436480][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.443727][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.451921][ T5126] bridge_slave_1: entered allmulticast mode [ 79.459899][ T5126] bridge_slave_1: entered promiscuous mode [ 79.620702][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.635852][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.662781][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.677265][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.719703][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.727247][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.734929][ T5123] bridge_slave_0: entered allmulticast mode [ 79.742527][ T5123] bridge_slave_0: entered promiscuous mode [ 79.753237][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.760616][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.768565][ T5123] bridge_slave_1: entered allmulticast mode [ 79.776349][ T5123] bridge_slave_1: entered promiscuous mode [ 79.889292][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.900626][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.908149][ T5120] bridge_slave_0: entered allmulticast mode [ 79.915495][ T5120] bridge_slave_0: entered promiscuous mode [ 79.930757][ T5124] team0: Port device team_slave_0 added [ 79.953921][ T5126] team0: Port device team_slave_0 added [ 79.960821][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.968593][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.976328][ T5125] bridge_slave_0: entered allmulticast mode [ 79.983489][ T5125] bridge_slave_0: entered promiscuous mode [ 79.992341][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.000010][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.007998][ T5120] bridge_slave_1: entered allmulticast mode [ 80.015376][ T5120] bridge_slave_1: entered promiscuous mode [ 80.024828][ T5124] team0: Port device team_slave_1 added [ 80.033647][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.045377][ T5126] team0: Port device team_slave_1 added [ 80.056170][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.079566][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.087516][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.097481][ T5125] bridge_slave_1: entered allmulticast mode [ 80.105040][ T5125] bridge_slave_1: entered promiscuous mode [ 80.211928][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.223574][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.231363][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.258361][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.258456][ T5128] Bluetooth: hci2: command tx timeout [ 80.291521][ T5123] team0: Port device team_slave_0 added [ 80.301886][ T5123] team0: Port device team_slave_1 added [ 80.324021][ T5136] Bluetooth: hci4: command tx timeout [ 80.325487][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.330142][ T5136] Bluetooth: hci0: command tx timeout [ 80.344960][ T53] Bluetooth: hci3: command tx timeout [ 80.350874][ T5128] Bluetooth: hci1: command tx timeout [ 80.361297][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.368862][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.394877][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.407961][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.415079][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.441572][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.455443][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.462461][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.488663][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.517399][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.531443][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.560276][ T5120] team0: Port device team_slave_0 added [ 80.627443][ T5120] team0: Port device team_slave_1 added [ 80.652273][ T5125] team0: Port device team_slave_0 added [ 80.680072][ T5124] hsr_slave_0: entered promiscuous mode [ 80.687495][ T5124] hsr_slave_1: entered promiscuous mode [ 80.699466][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.706679][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.732753][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.746467][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.753473][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.779514][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.819327][ T5125] team0: Port device team_slave_1 added [ 80.854927][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.861968][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.889145][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.966519][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.973549][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.999807][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.027977][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.035165][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.062207][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.110944][ T5126] hsr_slave_0: entered promiscuous mode [ 81.118143][ T5126] hsr_slave_1: entered promiscuous mode [ 81.130873][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.139326][ T5126] Cannot create hsr debugfs directory [ 81.162231][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.170701][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.197194][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.316520][ T5123] hsr_slave_0: entered promiscuous mode [ 81.323531][ T5123] hsr_slave_1: entered promiscuous mode [ 81.331634][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.339526][ T5123] Cannot create hsr debugfs directory [ 81.407791][ T5120] hsr_slave_0: entered promiscuous mode [ 81.415888][ T5120] hsr_slave_1: entered promiscuous mode [ 81.422629][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.444178][ T5120] Cannot create hsr debugfs directory [ 81.547832][ T5125] hsr_slave_0: entered promiscuous mode [ 81.558725][ T5125] hsr_slave_1: entered promiscuous mode [ 81.565529][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.573125][ T5125] Cannot create hsr debugfs directory [ 81.919156][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.976748][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.034184][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.046632][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.195391][ T5126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.219911][ T5126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.243493][ T5126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.287172][ T5126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.324668][ T5136] Bluetooth: hci2: command tx timeout [ 82.414372][ T5128] Bluetooth: hci1: command tx timeout [ 82.419916][ T5128] Bluetooth: hci3: command tx timeout [ 82.425616][ T4492] Bluetooth: hci4: command tx timeout [ 82.432471][ T5136] Bluetooth: hci0: command tx timeout [ 82.473731][ T5120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.512808][ T5120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.561175][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.580698][ T5120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.637817][ T5120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.811753][ T5125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.827868][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.864230][ T5125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.908126][ T5125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.932577][ T4839] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.940170][ T4839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.975545][ T5125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.006680][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.054575][ T4839] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.061809][ T4839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.087964][ T5123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.099230][ T5123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.129793][ T5123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.154857][ T5123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.197130][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.266771][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.274059][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.312415][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.338740][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.346117][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.420765][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.512043][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.519350][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.568349][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.575677][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.744404][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.839066][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.871980][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.882046][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.889395][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.912526][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.951250][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.958565][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.016624][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.052056][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.122994][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.130318][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.188384][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.195651][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.309195][ T5124] veth0_vlan: entered promiscuous mode [ 84.361397][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.405763][ T5136] Bluetooth: hci2: command tx timeout [ 84.420097][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.430240][ T5124] veth1_vlan: entered promiscuous mode [ 84.488002][ T5136] Bluetooth: hci3: command tx timeout [ 84.492813][ T5128] Bluetooth: hci0: command tx timeout [ 84.493478][ T53] Bluetooth: hci4: command tx timeout [ 84.499172][ T5128] Bluetooth: hci1: command tx timeout [ 84.547423][ T5126] veth0_vlan: entered promiscuous mode [ 84.680041][ T5126] veth1_vlan: entered promiscuous mode [ 84.699383][ T5120] veth0_vlan: entered promiscuous mode [ 84.774992][ T5120] veth1_vlan: entered promiscuous mode [ 84.826155][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.879113][ T5124] veth0_macvtap: entered promiscuous mode [ 84.929859][ T5124] veth1_macvtap: entered promiscuous mode [ 84.944391][ T5120] veth0_macvtap: entered promiscuous mode [ 84.992502][ T5126] veth0_macvtap: entered promiscuous mode [ 85.010075][ T5120] veth1_macvtap: entered promiscuous mode [ 85.023530][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.062061][ T5126] veth1_macvtap: entered promiscuous mode [ 85.099669][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.122384][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.142002][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.163311][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.180575][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.220146][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.236075][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.247807][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.261197][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.277339][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288587][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.298183][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.332359][ T5120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.342115][ T5120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.352595][ T5120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.361911][ T5120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.399134][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.415284][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.425379][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.436142][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.448396][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.487830][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.503608][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.513775][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.524450][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.537135][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.552207][ T5126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.561309][ T5126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.570614][ T5126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.579837][ T5126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.776843][ T5123] veth0_vlan: entered promiscuous mode [ 85.799365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.810056][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.821521][ T5125] veth0_vlan: entered promiscuous mode [ 85.881722][ T5125] veth1_vlan: entered promiscuous mode [ 85.925548][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.933467][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.945281][ T5123] veth1_vlan: entered promiscuous mode [ 85.954384][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.969093][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.079231][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.100695][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.183122][ T5125] veth0_macvtap: entered promiscuous mode [ 86.229268][ T5207] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.241098][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.242288][ T5125] veth1_macvtap: entered promiscuous mode [ 86.293692][ T5123] veth0_macvtap: entered promiscuous mode [ 86.302215][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.310371][ T5207] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.321033][ T5123] percpu: allocation failed, size=8 align=8 atomic=1, atomic alloc failed, no space left [ 86.392807][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.406704][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.433823][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.446311][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.458373][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.473972][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.493009][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.503299][ T53] Bluetooth: hci2: command tx timeout [ 86.565045][ T5136] Bluetooth: hci3: command tx timeout [ 86.566781][ T4492] Bluetooth: hci1: command tx timeout [ 86.570601][ T5136] Bluetooth: hci0: command tx timeout [ 86.581975][ T53] Bluetooth: hci4: command tx timeout [ 86.596188][ T5123] veth1_macvtap: entered promiscuous mode [ 86.610191][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.631979][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.643324][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.658260][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.669222][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.679845][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.696261][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.783350][ T2812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.787599][ T5125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.813386][ T2812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.832404][ T5125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.866396][ T5125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.891194][ T5125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.959335][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.992122][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.016594][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.054722][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.074722][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.088379][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.099588][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.117855][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.139702][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.188112][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.218295][ T29] audit: type=1804 audit(1718675960.085:2): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2791137332/syzkaller.IXELhy/2/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 87.221137][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.258302][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.283606][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.312447][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.345688][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.356330][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.366978][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.380441][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.515652][ T5123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.548554][ T5123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567100][ T5123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.581311][ T5123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.773006][ T2812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.801874][ T5249] Bluetooth: MGMT ver 1.22 [ 87.824632][ T2812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.947619][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.972777][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.995094][ T5249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.057758][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.090286][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.203054][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.230055][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.390529][ T5259] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 88.454870][ T5259] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 88.536016][ T5263] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.677515][ T5266] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 88.726253][ T5266] netlink: 178820 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.741727][ T5271] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 88.866828][ T5268] sctp: [Deprecated]: syz-executor.3 (pid 5268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.866828][ T5268] Use struct sctp_sack_info instead [ 89.582342][ T5283] Illegal XDP return value 2053547572 on prog (id 13) dev N/A, expect packet loss! [ 89.633021][ T5295] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.642526][ T5295] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.651466][ T5295] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.661162][ T5295] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.698707][ T5295] Zero length message leads to an empty skb [ 89.702522][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.828657][ T5308] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.013252][ T5312] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.410955][ T5324] sctp: [Deprecated]: syz-executor.2 (pid 5324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.410955][ T5324] Use struct sctp_sack_info instead [ 90.522412][ T5326] Bluetooth: MGMT ver 1.22 [ 90.899655][ T5344] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.908944][ T5344] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.917782][ T5344] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.927702][ T5344] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.014130][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.429905][ T784] cfg80211: failed to load regulatory.db [ 92.565938][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.573388][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.729425][ T5410] pimreg: entered allmulticast mode [ 92.939465][ T5418] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.013327][ T5420] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.032266][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.063001][ T5418] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.235098][ T5425] syz_tun: entered promiscuous mode [ 93.263051][ T5425] syz_tun: left promiscuous mode [ 93.680624][ T5439] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 93.759594][ T29] audit: type=1804 audit(1718675966.625:3): pid=5441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1294917299/syzkaller.lVMca0/14/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 93.775712][ T5441] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.246487][ T5458] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.330262][ T5463] syz_tun: entered promiscuous mode [ 94.367931][ T5463] syz_tun: left promiscuous mode [ 94.757469][ T5482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.779235][ T5483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.820610][ T5483] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 94.910366][ T5491] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 94.954821][ T5490] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.219567][ T5500] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.484172][ T5516] syz_tun: entered promiscuous mode [ 95.492473][ T5516] syz_tun: left promiscuous mode [ 95.722582][ T5527] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 96.479163][ T5563] syz_tun: entered promiscuous mode [ 96.490220][ T5563] syz_tun: left promiscuous mode [ 96.902393][ T5577] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 96.964527][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.973956][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.148859][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.156211][ T5577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.164630][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.171910][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.200710][ T5577] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.347708][ T5619] tipc: Started in network mode [ 98.358464][ T5619] tipc: Node identity 5a92b9fce0b9, cluster identity 4711 [ 98.423278][ T5619] tipc: Enabled bearer , priority 10 [ 98.483072][ T5627] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 98.512778][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.520665][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.608371][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.615711][ T5627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.624054][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.631297][ T5627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.662636][ T5627] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.882965][ T5632] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 99.004088][ T5632] __nla_validate_parse: 2 callbacks suppressed [ 99.004112][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.545730][ T5181] tipc: Node number set to 3123427836 [ 99.991721][ T5648] syzkaller0: entered promiscuous mode [ 100.002993][ T5648] syzkaller0: entered allmulticast mode [ 102.121767][ T5666] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.131272][ T5666] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.143905][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.180375][ T5691] tipc: Started in network mode [ 102.212688][ T5691] tipc: Node identity 661a1bfcc03a, cluster identity 4711 [ 102.326909][ T5691] tipc: Enabled bearer , priority 10 [ 102.408004][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.419660][ T5698] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.099016][ T5720] tipc: Enabling of bearer rejected, failed to enable media [ 103.508397][ T4839] tipc: Node number set to 2787122172 [ 103.935960][ T5747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.194539][ T5756] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.336979][ T5760] tipc: Enabling of bearer rejected, failed to enable media [ 104.464535][ T5763] tipc: Started in network mode [ 104.486362][ T5763] tipc: Node identity eece57e7c93a, cluster identity 4711 [ 104.532556][ T5763] tipc: Enabled bearer , priority 10 [ 104.720998][ T5777] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 104.767045][ T5777] batman_adv: batadv0: Adding interface: team0 [ 104.788139][ T5777] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.819133][ T5777] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 104.835604][ T5781] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 104.890521][ T5781] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.924180][ T5781] team0: entered promiscuous mode [ 104.929296][ T5781] team_slave_0: entered promiscuous mode [ 104.962640][ T5781] team_slave_1: entered promiscuous mode [ 104.985960][ T4548] udevd[4548]: worker [5171] terminated by signal 33 (Unknown signal 33) [ 104.999402][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.007772][ T4548] udevd[4548]: worker [5171] failed while handling '/fs/nfs/net/nfs_client' [ 105.034726][ T5781] batman_adv: batadv0: Interface activated: team0 [ 105.049859][ T5781] batman_adv: batadv0: Interface deactivated: team0 [ 105.066819][ T5781] batman_adv: batadv0: Removing interface: team0 [ 105.101313][ T5781] bridge0: port 3(team0) entered blocking state [ 105.107997][ T5781] bridge0: port 3(team0) entered disabled state [ 105.124099][ T5781] team0: entered allmulticast mode [ 105.129304][ T5781] team_slave_0: entered allmulticast mode [ 105.153971][ T5781] team_slave_1: entered allmulticast mode [ 105.167541][ T5781] bridge0: port 3(team0) entered blocking state [ 105.174060][ T5781] bridge0: port 3(team0) entered forwarding state [ 105.223623][ T5781] syz-executor.4 (5781) used greatest stack depth: 17976 bytes left [ 105.544878][ T5210] tipc: Node number set to 670324711 [ 105.665000][ T5792] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.705237][ T5795] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.752086][ T5795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.129599][ T5780] xt_hashlimit: invalid interval [ 106.696159][ T5836] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 106.733018][ T5836] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.828461][ T5839] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 106.915451][ T5839] batman_adv: batadv0: Adding interface: team0 [ 106.923377][ T5839] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.975343][ T5839] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 106.987666][ T5844] tipc: Enabling of bearer rejected, already enabled [ 107.017456][ T5842] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 107.026118][ T5842] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.041461][ T5842] team0: entered promiscuous mode [ 107.047442][ T5842] team_slave_0: entered promiscuous mode [ 107.057871][ T5842] team_slave_1: entered promiscuous mode [ 107.070262][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.077584][ T5842] batman_adv: batadv0: Interface activated: team0 [ 107.084840][ T5842] batman_adv: batadv0: Interface deactivated: team0 [ 107.091773][ T5842] batman_adv: batadv0: Removing interface: team0 [ 107.111396][ T5842] bridge0: port 3(team0) entered blocking state [ 107.119791][ T5842] bridge0: port 3(team0) entered disabled state [ 107.127391][ T5842] team0: entered allmulticast mode [ 107.132820][ T5842] team_slave_0: entered allmulticast mode [ 107.139176][ T5842] team_slave_1: entered allmulticast mode [ 107.149957][ T5842] bridge0: port 3(team0) entered blocking state [ 107.156505][ T5842] bridge0: port 3(team0) entered forwarding state [ 107.310618][ T5848] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.707769][ T5868] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.738057][ T5870] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 107.841794][ T5868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.942323][ T5877] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 108.050620][ T5877] batman_adv: batadv0: Adding interface: team0 [ 108.128399][ T5877] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.206520][ T5877] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 108.221056][ T5881] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 108.233663][ T5881] team0: entered promiscuous mode [ 108.243308][ T5881] team_slave_0: entered promiscuous mode [ 108.260727][ T5881] team_slave_1: entered promiscuous mode [ 108.270256][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.283455][ T5881] batman_adv: batadv0: Interface activated: team0 [ 108.290305][ T5881] batman_adv: batadv0: Interface deactivated: team0 [ 108.297459][ T5881] batman_adv: batadv0: Removing interface: team0 [ 108.307742][ T5881] bridge0: port 3(team0) entered blocking state [ 108.318058][ T5881] bridge0: port 3(team0) entered disabled state [ 108.344175][ T5881] team0: entered allmulticast mode [ 108.353351][ T5881] team_slave_0: entered allmulticast mode [ 108.361312][ T5881] team_slave_1: entered allmulticast mode [ 108.376630][ T5881] bridge0: port 3(team0) entered blocking state [ 108.383300][ T5881] bridge0: port 3(team0) entered forwarding state [ 108.418794][ T5880] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 110.201601][ T5930] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 110.255399][ T5930] batman_adv: batadv0: Adding interface: team0 [ 110.261832][ T5930] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.306662][ T5930] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.341536][ T5934] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 110.359712][ T5934] __nla_validate_parse: 2 callbacks suppressed [ 110.359734][ T5934] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.410319][ T5934] team0: entered promiscuous mode [ 110.434006][ T5934] team_slave_0: entered promiscuous mode [ 110.440362][ T5934] team_slave_1: entered promiscuous mode [ 110.455127][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.463215][ T5934] batman_adv: batadv0: Interface activated: team0 [ 110.470166][ T5934] batman_adv: batadv0: Interface deactivated: team0 [ 110.477282][ T5934] batman_adv: batadv0: Removing interface: team0 [ 110.488510][ T5934] bridge0: port 3(team0) entered blocking state [ 110.491913][ T5945] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.502535][ T5934] bridge0: port 3(team0) entered disabled state [ 110.516362][ T5941] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.526793][ T5934] team0: entered allmulticast mode [ 110.532400][ T5934] team_slave_0: entered allmulticast mode [ 110.542899][ T5934] team_slave_1: entered allmulticast mode [ 110.552708][ T5934] bridge0: port 3(team0) entered blocking state [ 110.559316][ T5934] bridge0: port 3(team0) entered forwarding state [ 110.566493][ T5939] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 110.577663][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.620220][ T5947] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 110.705032][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.207436][ T5973] tipc: Started in network mode [ 111.223953][ T5973] tipc: Node identity 06a9c0f1b186, cluster identity 4711 [ 111.232826][ T5973] tipc: Enabled bearer , priority 10 [ 111.240450][ T29] audit: type=1800 audit(1718675984.115:4): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 111.329860][ T29] audit: type=1804 audit(1718675984.145:5): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir782553578/syzkaller.z1V383/40/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 111.395292][ T5981] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 111.399181][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.437148][ T5981] bridge0: port 3(team0) entered disabled state [ 111.439533][ T29] audit: type=1804 audit(1718675984.145:6): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir782553578/syzkaller.z1V383/40/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 111.483260][ T5981] team0: left allmulticast mode [ 111.490450][ T5981] team_slave_0: left allmulticast mode [ 111.503244][ T5981] team_slave_1: left allmulticast mode [ 111.510836][ T5981] team0: left promiscuous mode [ 111.516619][ T5981] team_slave_0: left promiscuous mode [ 111.543119][ T5981] team_slave_1: left promiscuous mode [ 111.569041][ T5981] bridge0: port 3(team0) entered disabled state [ 111.585592][ T5981] batman_adv: batadv0: Adding interface: team0 [ 111.592193][ T5981] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.621430][ T5981] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 111.633400][ T5984] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 111.642255][ T5984] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.661444][ T5984] team0: entered promiscuous mode [ 111.673890][ T5984] team_slave_0: entered promiscuous mode [ 111.680246][ T5984] team_slave_1: entered promiscuous mode [ 111.689790][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.697129][ T5984] batman_adv: batadv0: Interface activated: team0 [ 111.704789][ T5984] batman_adv: batadv0: Interface deactivated: team0 [ 111.713459][ T5984] batman_adv: batadv0: Removing interface: team0 [ 111.722032][ T5984] bridge0: port 3(team0) entered blocking state [ 111.730243][ T5984] bridge0: port 3(team0) entered disabled state [ 111.741983][ T5984] team0: entered allmulticast mode [ 111.749175][ T5984] team_slave_0: entered allmulticast mode [ 111.760219][ T5984] team_slave_1: entered allmulticast mode [ 111.771714][ T5984] bridge0: port 3(team0) entered blocking state [ 111.778243][ T5984] bridge0: port 3(team0) entered forwarding state [ 111.905471][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.971597][ T6005] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 111.980816][ T6005] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 112.005956][ T6005] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 112.090741][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.316296][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.344089][ T784] tipc: Node number set to 3073360113 [ 112.861217][ T6043] tipc: Started in network mode [ 112.892697][ T6046] can: request_module (can-proto-0) failed. [ 112.915533][ T6043] tipc: Node identity 36fc1d79d0ff, cluster identity 4711 [ 112.928558][ T6043] tipc: Enabled bearer , priority 10 [ 113.880920][ T6092] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 114.033999][ T784] tipc: Node number set to 3858963833 [ 115.290761][ T6148] validate_nla: 1 callbacks suppressed [ 115.290783][ T6148] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 115.346259][ T6148] erspan0: refused to change device tx_queue_len [ 115.385139][ T6148] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 115.482489][ T6152] __nla_validate_parse: 15 callbacks suppressed [ 115.482512][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.368823][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.375832][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.295205][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.306068][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.333938][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.344387][ T5128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.352311][ T5128] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.360014][ T5128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.369539][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.379264][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.389352][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.405415][ T5128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.414691][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.422341][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.507137][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.517530][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.543930][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.555452][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.563354][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.570957][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.750947][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 146.762612][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 146.762757][ T5136] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 146.778097][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 146.788407][ T5136] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 146.795817][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 146.801986][ T5136] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 146.813040][ T5136] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 146.820797][ T5136] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 146.830549][ T4492] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 146.851986][ T4492] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 146.859628][ T4492] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 148.483929][ T4492] Bluetooth: hci6: command tx timeout [ 148.483961][ T5128] Bluetooth: hci5: command tx timeout [ 148.650056][ T4492] Bluetooth: hci7: command tx timeout [ 148.884519][ T5128] Bluetooth: hci9: command tx timeout [ 148.893229][ T4492] Bluetooth: hci8: command tx timeout [ 150.564407][ T4492] Bluetooth: hci5: command tx timeout [ 150.564573][ T5128] Bluetooth: hci6: command tx timeout [ 150.724117][ T5128] Bluetooth: hci7: command tx timeout [ 150.974067][ T5128] Bluetooth: hci8: command tx timeout [ 150.974102][ T4492] Bluetooth: hci9: command tx timeout [ 152.643996][ T4492] Bluetooth: hci5: command tx timeout [ 152.649488][ T4492] Bluetooth: hci6: command tx timeout [ 152.804354][ T4492] Bluetooth: hci7: command tx timeout [ 153.044140][ T5128] Bluetooth: hci8: command tx timeout [ 153.050690][ T4492] Bluetooth: hci9: command tx timeout [ 154.723910][ T4492] Bluetooth: hci6: command tx timeout [ 154.729529][ T4492] Bluetooth: hci5: command tx timeout [ 154.894317][ T4492] Bluetooth: hci7: command tx timeout [ 155.139028][ T4492] Bluetooth: hci9: command tx timeout [ 155.139043][ T5128] Bluetooth: hci8: command tx timeout [ 194.813938][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.820323][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.021509][ T5136] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.023791][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 202.029652][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 202.034932][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 211.591537][ T4492] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 211.610734][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 211.620335][ T5121] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 211.625263][ T5136] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 211.637485][ T5133] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 211.644116][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 211.646483][ T5136] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 211.654908][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 211.665546][ T5136] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 211.667941][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 211.674398][ T5136] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 211.682130][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 211.688467][ T5136] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 211.695088][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 211.702048][ T5136] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 211.710113][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 211.725465][ T4492] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 211.733034][ T5135] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 211.754373][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 211.766494][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 211.775283][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 211.783634][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 211.794021][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 211.814737][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 211.814877][ T5128] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 211.829680][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 211.841470][ T5128] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 211.864050][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 211.872774][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 211.880538][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 213.764243][ T53] Bluetooth: hci12: command tx timeout [ 213.764273][ T5128] Bluetooth: hci11: command tx timeout [ 213.776242][ T5135] Bluetooth: hci10: command tx timeout [ 213.844799][ T5135] Bluetooth: hci13: command tx timeout [ 213.923947][ T5135] Bluetooth: hci14: command tx timeout [ 215.844269][ T53] Bluetooth: hci12: command tx timeout [ 215.844287][ T5128] Bluetooth: hci11: command tx timeout [ 215.856703][ T5135] Bluetooth: hci10: command tx timeout [ 215.924459][ T53] Bluetooth: hci13: command tx timeout [ 216.010376][ T53] Bluetooth: hci14: command tx timeout [ 217.924292][ T53] Bluetooth: hci12: command tx timeout [ 217.924362][ T5135] Bluetooth: hci10: command tx timeout [ 217.929849][ T5128] Bluetooth: hci11: command tx timeout [ 218.008632][ T5128] Bluetooth: hci13: command tx timeout [ 218.094055][ T5128] Bluetooth: hci14: command tx timeout [ 220.004338][ T5135] Bluetooth: hci12: command tx timeout [ 220.009951][ T5128] Bluetooth: hci10: command tx timeout [ 220.015561][ T5128] Bluetooth: hci11: command tx timeout [ 220.084395][ T5135] Bluetooth: hci13: command tx timeout [ 220.173930][ T5135] Bluetooth: hci14: command tx timeout [ 232.729351][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 256.246740][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.253155][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.444035][ T30] INFO: task syz-executor.2:6164 blocked for more than 143 seconds. [ 259.452098][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 259.468681][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.479890][ T30] task:syz-executor.2 state:D stack:23800 pid:6164 tgid:6155 ppid:5123 flags:0x00000006 2024/06/18 02:02:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 259.496068][ T30] Call Trace: [ 259.525866][ T30] [ 259.529272][ T30] __schedule+0x17e8/0x4a20 [ 259.536887][ T30] ? __pfx___schedule+0x10/0x10 [ 259.541820][ T30] ? __pfx_lock_release+0x10/0x10 [ 259.552211][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 259.557865][ T30] ? schedule+0x90/0x320 [ 259.562151][ T30] schedule+0x14b/0x320 [ 259.574183][ T30] schedule_preempt_disabled+0x13/0x30 [ 259.581639][ T30] __mutex_lock+0x6a4/0xd70 [ 259.586398][ T30] ? __mutex_lock+0x527/0xd70 [ 259.591135][ T30] ? tipc_nl_bearer_enable+0x17/0x40 [ 259.596770][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 259.601860][ T30] ? __nla_parse+0x40/0x60 [ 259.608752][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 259.619585][ T30] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 259.627528][ T30] tipc_nl_bearer_enable+0x17/0x40 [ 259.632701][ T30] genl_rcv_msg+0xb14/0xec0 [ 259.645158][ T30] ? mark_lock+0x9a/0x350 [ 259.649571][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.654869][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 259.659922][ T30] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 259.671290][ T30] ? __pfx___might_resched+0x10/0x10 [ 259.681524][ T30] netlink_rcv_skb+0x1e3/0x430 [ 259.693297][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.698689][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.709397][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 259.715032][ T30] genl_rcv+0x28/0x40 [ 259.719125][ T30] netlink_unicast+0x7ea/0x980 [ 259.729405][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 259.746011][ T30] ? __virt_addr_valid+0x183/0x520 [ 259.751310][ T30] ? __check_object_size+0x49c/0x900 [ 259.770044][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 259.782800][ T30] netlink_sendmsg+0x8db/0xcb0 [ 259.794885][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.800264][ T30] ? __import_iovec+0x536/0x820 [ 259.813794][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 259.818936][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 259.833789][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 259.839337][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.853834][ T30] __sock_sendmsg+0x221/0x270 [ 259.858617][ T30] ____sys_sendmsg+0x525/0x7d0 [ 259.863421][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.885532][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 259.890218][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.913884][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.920378][ T30] ? do_syscall_64+0x100/0x230 [ 259.933806][ T30] ? do_syscall_64+0xb6/0x230 [ 259.938644][ T30] do_syscall_64+0xf3/0x230 [ 259.943160][ T30] ? clear_bhb_loop+0x35/0x90 [ 259.960896][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.973870][ T30] RIP: 0033:0x7f759747cf29 [ 259.978445][ T30] RSP: 002b:00007f75981dd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000