last executing test programs: 34.181169444s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0xa, @broadcast}}, 0x24) 34.009875519s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f00000004c0), 0xb) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x2000}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1ed0c}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x2011, r4, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r7, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c264889973b04028a165e05bb10818c86ba", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 33.94505619s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltclass={0x2c, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0xf}, {0xc}, {0x2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa9, 0xb6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x7fff, 0x7, 0x200, 0xffffffffffffffff, 0x138, '\x00', r2, r4, 0x4, 0x3, 0x3, 0xf}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES32=r8], &(0x7f0000000700)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r9}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1000}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x2, 0x4, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r10, &(0x7f00000001c0)="4add", &(0x7f0000000000)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r10, &(0x7f0000000040)="4add", &(0x7f0000000000)=@udp}, 0x20) 33.484069061s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000248000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newnexthop={0x48, 0x68, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x18}, [@NHA_FDB, @NHA_RES_GROUP={0xffffff77, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7f}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}, @NHA_ENCAP_TYPE={0x6}]}, 0x48}}, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="330300000000000000001c00000018000180140002"], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r12, @ANYRES16, @ANYBLOB="07020000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b1e9d63a26206dd4a24d0f67b8bf15eab0d35b4e69bd1b0191eeb9af47d3e3413b190e210b9a1ca4b0d85ea73a62658ac177eadcd126d0a64793583822799dd398b10edf3688f60098605e5d970af14d3275d7e50eea2477ea0b28912ba78fde2a5d9d04045fd255e5a84e0d4d04599579bc8de5860e28569ec6962facca95f9901b00e41d150125c0dc2f1124aea9647e24cddd562eea393a9189014c3c0fc35b3550e726e1f93f1416198dc22b5373f44fd2e0a3375c0714199e04a5899e4a1675fe3dfd0446c0e4b9044ec79fdd4b77a0ab0690ed1698b2d74f366f1bbcac611550820174ae85b3b055d420e871fa7f6aba7977014c83c37e7cfbc651caed0bb4a88e08752e629e149e50de4eae", @ANYRES16=r9, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r11, @ANYBLOB="05003500000000000500330003000000"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="6a04a3765192ad168eee9ae34b29212d38ce6c00000010000104000000000400000000", @ANYRES32=0x0, @ANYBLOB="0040000000000000440012800b00010065727370616e0000340002800400120004001200050009002000000008001500c73607000800140001000100080007007f00000108000100", @ANYRESOCT=r1], 0x6c}}, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r14, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000940)={0x0, 0x1a, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006067c09e8fe55a1", 0x1c}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 32.892548144s ago: executing program 3: syz_emit_ethernet(0x3fe, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c8, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}]}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x20000000) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000140)=0x3, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d270000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000e0ffffff00850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r6}, 0x10) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) (async) sendmsg$NFT_BATCH(r0, 0x0, 0x0) (async) r7 = socket$inet(0xa, 0x1, 0x2084) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r7, 0xc) r8 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e22, @loopback}}) 32.63341369s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="44cb0000000000000000000000497235b4e9a12e8a1714bbd0ef15f36452cd218bba270e4043be9d2d77"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x39, 0x0, "49db2fbc911a4bf81bac022c3a69caa6e50ccd9224ec014938401d499b14fd50968bc4a0a90ff598777e906f961aaeae461c2ffc0ee7c21d088bd88138dc70b3c93188f2bd0ca07988a6d8821f8788cd"}, 0xd8) accept4$phonet_pipe(r2, &(0x7f0000000200), &(0x7f00000002c0)=0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001dc0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000400008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2834"], 0xe0}], 0x1}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 32.20996781s ago: executing program 4: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) vmsplice(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x30, 0x61, 0x0]}}, &(0x7f0000000700)=""/4096, 0x2a, 0x1000, 0x1, 0x6}, 0x20) r2 = socket(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x213}, 0x14}}, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(r2, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x0) 32.178796804s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 32.100149894s ago: executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b}, 0x20) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xb7}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000013c0)={0xe0, 0x3f, 0x1, 0x0, 0x0, {0x5}, [@generic="dab47e91887646e26df24839c64ea863e0c8d1bc73ac30891b215298e910dbef7e4a54e93f6b5eebd7e97eef7aa25967896def9b8606530cd99db400bc0c572b8db53aa314318e5156cd0baa7f7066d250e6034dd07ef24c76f023e560fad9318b31e2240799cfeb3e5203cf0c300beda0fbe97da855016a231783", @generic="46f1e3f3601b503e30dd930ac258291cec34c9409696167c3d7a1588bcd1ac4e1d4c87893d3796ea844fe1bc77eee1b7d200d26b968de58669d8bdd9279fed9acff0a8401ecb", @typed={0x8, 0xaf, 0x0, 0x0, @fd=r1}]}, 0xe0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a01040000000000000000020000000900010073797a30"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001180)={'ip6tnl0\x00', &(0x7f0000001100)={'syztnl1\x00', 0x0, 0x2f, 0x3f, 0x8, 0xffffffff, 0x2, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x5, 0x1}}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x4, r6, 0x2a20}, [@IFLA_PROMISCUITY={0x0, 0x1e, 0x8}]}, 0x44}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000100), 0x0}, 0x20) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff4a2103000008000000b7040000000000008500000082000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x3, &(0x7f0000000100)=""/3, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xa, &(0x7f0000000300), 0x8}, 0x90) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000140), 0xfecc) getpeername$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001ac0)=ANY=[@ANYRES16], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) 31.990211025s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltclass={0x2c, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0xf}, {0xc}, {0x2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa9, 0xb6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x7fff, 0x7, 0x200, 0xffffffffffffffff, 0x138, '\x00', r2, r4, 0x4, 0x3, 0x3, 0xf}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES32=r8], &(0x7f0000000700)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r9}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1000}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4add", &(0x7f0000000000)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f0000000040)="4add", &(0x7f0000000000)=@udp}, 0x20) 31.773548941s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 31.728885227s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket(0x23, 0x5, 0x0) listen(r6, 0x0) unshare(0xa020480) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r7, 0x101, 0x4, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 31.415414148s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%ps \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001c0000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)='b', 0x1}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000001880)=""/63, 0x3f, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000800db00000000008395c1c6f3bfc5dc5899090000181100001fcfcf9eb91125ded8ad609eadf635a912c2d27e33739e2078453c8aa70d86765cc8f3781ce07affe660d9d9c312e5e0d1c09007395fa16defd014637f3490497c8d359bcafa9992fbbad0fa4d771c534dbfdde9b3997a997273d1fc8744ec2918fb3991b2ecd894e5a332663b7961ce973b092f2c20d8cadb8ace5673c194b6651c3f4bcd23c66cc7", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x55, &(0x7f0000000240)=""/85, 0x41100, 0x7f4df164df0e87ed, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r3, r4, 0x1, r5], &(0x7f0000000400)=[{0x5, 0x4, 0xf, 0x2}], 0x10, 0x7}, 0x90) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r8, 0x0, 0x21, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @timestamp}}}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x1f4, 0xb68, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='xen_mmu_set_pud\x00', r1}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90724fc601025020002250200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 31.379612452s ago: executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0xfff, 0x4) sendto$inet(r1, &(0x7f0000000180)='t', 0xfdef, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002800400120008000200", @ANYRES32=0x0, @ANYBLOB="080004003f"], 0x4c}}, 0x0) 31.193146622s ago: executing program 0: socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 31.187196183s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x4000, 0x0, {0x3}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0x40086607, 0x1000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x71) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x14}}, 0x0) read(r1, &(0x7f0000000140)=""/4096, 0x1000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400800000000000000006000000"], 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'veth1_to_bond\x00'}) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000040), 0x4) r11 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@bridge_getneigh={0x30, 0x1e, 0x400, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x1008a, 0x400}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xceb}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, r6, 0xfffffffffffffffd}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) 31.140767199s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x300}]}}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40, @private2={0xfc, 0x2, '\x00', 0x20}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b7", 0x1}], 0x1) 31.045045046s ago: executing program 0: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)}, 0xd0a0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) connect$inet(r3, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 30.986172163s ago: executing program 3: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delchain={0x44, 0x65, 0x100, 0x70bd0d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xf}, {0x5, 0x6}, {0x7, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xfffffffa}]}}, @TCA_RATE={0x6, 0x5, {0x20, 0x4}}]}, 0x44}}, 0x4004000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r3, 0x2, 0x81, 0x9}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x3c, 0x66, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff8, 0xfff3}, {0x5}, {0xfff1, 0xfff1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x34b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 30.89327578s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f00000004c0), 0xb) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x2000}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1ed0c}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x2011, r4, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r7, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c264889973b04028a165e05bb10818c86ba", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 30.42601438s ago: executing program 4: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9f00000000001c0000001c0000000a00000006000000020000060000000000000002000000000000000061615f00002e3061000000000000"], &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0xffffffc8) unshare(0x400) r3 = socket(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='memory.numa_stat\x00', 0x7a05, 0x1700) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x8, 0x0}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8b0f, &(0x7f0000000000)={'wlan1\x00'}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001040000000000000300000012125000ffffffff74a00c000400000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300b700000000000000182b00"/36, @ANYRES32=r6, @ANYBLOB="00000000020000000d83f0ff0000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xfb7, 0xeb, &(0x7f0000000480)=""/235, 0x41000, 0x60, '\x00', 0x0, 0x22, r1, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x10001}, 0x10, r8, r9, 0x6, &(0x7f0000000680)=[r10, r11, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x4, 0x10, 0xf}, {0x5, 0x5, 0xb, 0x3}, {0x21, 0x4, 0x5, 0x4}, {0x5, 0x1, 0xa, 0x7}, {0x2, 0x4, 0xc, 0x3}, {0x5, 0x3, 0xb, 0x1}], 0x10, 0x2}, 0x90) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001400)=[{&(0x7f00000000c0)="fe", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x10, &(0x7f00000077c0)={r2}, 0x8) r12 = socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x78}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r14 = accept$alg(r13, 0x0, 0x0) sendmsg$alg(r14, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c00)="3b0a2b36835fdc5b07face07e98de45b7d5fd0a5e091fa5b43ad9a666013349322801d637baae3835f33272284cae55258cda0f678c3d8383a84e82204e7b95710d4ea258a91e7a9d75a6d6ce89c20521275f51cd72b7e53ae0b4cef7ba4093c298ababef891", 0x66}, {&(0x7f0000001cc0)="af16733cacd67ea0a587d2047a715c4eef50265673ac624dd54f", 0x1a}], 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) 30.318197374s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000280)=0xfffffffd, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) shutdown(0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f0000000000)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000001c0)=ANY=[], 0xa) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400), 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x202}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettaction={0x108, 0x32, 0x2, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}, {0x14, 0x3fdd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x108}}, 0x0) socket(0x10, 0x803, 0x0) 30.166803784s ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, 0xfffffffffffffffd) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040), 0x8) close(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x238}}, 0x0) socketpair(0x21, 0x80000, 0x10000, &(0x7f0000000340)) socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 30.124733249s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f00000004c0), 0xb) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x2000}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1ed0c}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x2011, r4, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r7, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c264889973b04028a165e05bb10818c86ba", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 30.022776744s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x700000d, 0x51, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='cachefiles_lookup\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000000000000000000000000000853000000000000018200000", @ANYRES32, @ANYBLOB="000000000000002000000000000000001800000000000000000000000000000095000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000ac04e02b20422c3f6ba8773a012bb6313352f8578e8f6173bfd13f0c6cce72b2d09c3a8e58"], &(0x7f0000000000)='GPL\x00', 0x4, 0x27, &(0x7f0000000340)=""/222}, 0x21) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x802, 0x3) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0x28}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a40)="d4b7df86fca1eb17e52450856335c08c0332dcd86be2656e91ede5372f02b6c36044151529eaf73ba76792fe66ac7d67a72e45f3d196c8d56ced4c0022d015ea11d9d0fc67c07e705aab0eba639cc6fab925166ae4fd28d7c700056f322be8f6ea19d4b8ed560121f0ec967423621f6191592efe06e87c7a39f6b385c7b6905ecb23d1039557f18dd93a289f0425f347e985353ccd0130cff0f286fcc8aeac986d003ab4194b13c9def6aae90989ec5e859cfb332c69c3d7b572b35ad3a3cc97ef91f7504ebdeab85df48bc1ed73a2885eeefe7d9d1fb5181bd668bf6c80508f7e18b28db9b228260cc90f83c57ef55eeb439c0379b28406", 0xf8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000a00)={r6}, 0x8) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1}, 0x0) 1.154073498s ago: executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8810) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @loopback}, "1bb2fe88adc27f38"}}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r4}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500003c000000000021907800000000ff28bd5553b5eb7d4d1414bb480000000000000000000000ac1414bbac141400070b0000000000ffffffff00"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) close(r1) 961.817016ms ago: executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f000000d379)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x800, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000340), &(0x7f00000001c0)=@tcp}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0xfffffffffffffe64) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a766", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}, {}]}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_gstrings}) 143.9147ms ago: executing program 2: socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 93.976329ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltclass={0x2c, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0xf}, {0xc}, {0x2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa9, 0xb6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xff, 0x7fff, 0x7, 0x200, 0xffffffffffffffff, 0x138, '\x00', r2, r4, 0x4, 0x3, 0x3, 0xf}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES32=r8], &(0x7f0000000700)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r9}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1000}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4add", &(0x7f0000000000)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f0000000040)="4add", &(0x7f0000000000)=@udp}, 0x20) 0s ago: executing program 4: r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)}, 0xd0a0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xf) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000f28, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='5', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) connect$inet(r3, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2024/06/18 19:22:53 fuzzer started 2024/06/18 19:22:53 dialing manager at 10.128.0.169:30018 [ 71.616296][ T5093] cgroup: Unknown subsys name 'net' [ 71.752234][ T5093] cgroup: Unknown subsys name 'rlimit' [ 71.834515][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.841617][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/18 19:22:55 starting 5 executor processes [ 73.187169][ T5100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.385862][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.396927][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.407367][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.408330][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.416640][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.430049][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.434871][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.438721][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.445296][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.454157][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.460750][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.466803][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.472669][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.480212][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.494977][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.502788][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.503493][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.510567][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.520119][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.529005][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.534829][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.540098][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.545730][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.560545][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.568080][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.571508][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.583925][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.592218][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.592462][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.607367][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.264154][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 75.292926][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 75.316946][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 75.506032][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 75.536714][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.544077][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.551765][ T5113] bridge_slave_0: entered allmulticast mode [ 75.558864][ T5113] bridge_slave_0: entered promiscuous mode [ 75.604896][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 75.616204][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.624363][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.632472][ T5113] bridge_slave_1: entered allmulticast mode [ 75.639796][ T5113] bridge_slave_1: entered promiscuous mode [ 75.671204][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.678450][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.686087][ T5114] bridge_slave_0: entered allmulticast mode [ 75.694271][ T5114] bridge_slave_0: entered promiscuous mode [ 75.746159][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.754303][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.761646][ T5114] bridge_slave_1: entered allmulticast mode [ 75.768771][ T5114] bridge_slave_1: entered promiscuous mode [ 75.823473][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.830924][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.838142][ T5125] bridge_slave_0: entered allmulticast mode [ 75.846236][ T5125] bridge_slave_0: entered promiscuous mode [ 75.880927][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.893484][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.907269][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.916785][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.924281][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.931689][ T5125] bridge_slave_1: entered allmulticast mode [ 75.938733][ T5125] bridge_slave_1: entered promiscuous mode [ 75.959549][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.042224][ T5113] team0: Port device team_slave_0 added [ 76.097923][ T5113] team0: Port device team_slave_1 added [ 76.114583][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.124346][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.131807][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.139255][ T5118] bridge_slave_0: entered allmulticast mode [ 76.146332][ T5118] bridge_slave_0: entered promiscuous mode [ 76.169621][ T5114] team0: Port device team_slave_0 added [ 76.191237][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.227518][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.235236][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.243089][ T5118] bridge_slave_1: entered allmulticast mode [ 76.254023][ T5118] bridge_slave_1: entered promiscuous mode [ 76.275746][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.283031][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.290301][ T5112] bridge_slave_0: entered allmulticast mode [ 76.297373][ T5112] bridge_slave_0: entered promiscuous mode [ 76.307545][ T5114] team0: Port device team_slave_1 added [ 76.345040][ T5125] team0: Port device team_slave_0 added [ 76.365012][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.372310][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.380085][ T5112] bridge_slave_1: entered allmulticast mode [ 76.387116][ T5112] bridge_slave_1: entered promiscuous mode [ 76.408598][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.415659][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.442425][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.456373][ T5125] team0: Port device team_slave_1 added [ 76.501425][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.508519][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.535292][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.547852][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.557771][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.584528][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.619743][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.630620][ T5127] Bluetooth: hci2: command tx timeout [ 76.630699][ T5120] Bluetooth: hci0: command tx timeout [ 76.640758][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.642337][ T5123] Bluetooth: hci3: command tx timeout [ 76.677521][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.685023][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.711889][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.719586][ T5120] Bluetooth: hci1: command tx timeout [ 76.728277][ T5123] Bluetooth: hci4: command tx timeout [ 76.744275][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.751885][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.778516][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.806692][ T5118] team0: Port device team_slave_0 added [ 76.816087][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.829060][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.852459][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.860228][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.886304][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.899694][ T5118] team0: Port device team_slave_1 added [ 76.996491][ T5113] hsr_slave_0: entered promiscuous mode [ 77.004353][ T5113] hsr_slave_1: entered promiscuous mode [ 77.016343][ T5114] hsr_slave_0: entered promiscuous mode [ 77.023778][ T5114] hsr_slave_1: entered promiscuous mode [ 77.030327][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.038178][ T5114] Cannot create hsr debugfs directory [ 77.048609][ T5112] team0: Port device team_slave_0 added [ 77.080778][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.087764][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.114535][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.128189][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.139897][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.166390][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.180502][ T5112] team0: Port device team_slave_1 added [ 77.280477][ T5125] hsr_slave_0: entered promiscuous mode [ 77.289553][ T5125] hsr_slave_1: entered promiscuous mode [ 77.296354][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.306601][ T5125] Cannot create hsr debugfs directory [ 77.351308][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.358292][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.384762][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.398621][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.405943][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.432026][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.548618][ T5118] hsr_slave_0: entered promiscuous mode [ 77.555419][ T5118] hsr_slave_1: entered promiscuous mode [ 77.565235][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.573035][ T5118] Cannot create hsr debugfs directory [ 77.717564][ T5112] hsr_slave_0: entered promiscuous mode [ 77.724532][ T5112] hsr_slave_1: entered promiscuous mode [ 77.758163][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.765937][ T5112] Cannot create hsr debugfs directory [ 78.094090][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.133580][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.153071][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.176863][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.248113][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.261978][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.276065][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.303779][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.404754][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.416584][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.428405][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.452858][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.520253][ T5125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.530969][ T5125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.580757][ T5125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.598033][ T5125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.673958][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.719192][ T5123] Bluetooth: hci3: command tx timeout [ 78.724677][ T5123] Bluetooth: hci0: command tx timeout [ 78.731427][ T5123] Bluetooth: hci2: command tx timeout [ 78.757580][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.768757][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.789207][ T5123] Bluetooth: hci4: command tx timeout [ 78.789306][ T5127] Bluetooth: hci1: command tx timeout [ 78.807793][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.822219][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.834531][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.877376][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.885104][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.898194][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.905393][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.993222][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.061251][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.114115][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.152842][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.160054][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.186801][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.193988][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.215381][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.238747][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.245977][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.321764][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.330720][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.337893][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.468035][ T5118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.479316][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.514111][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.538875][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.597939][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.647954][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.655341][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.674620][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.681946][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.693882][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.701135][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.774921][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.782152][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.841328][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.857422][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.938335][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.042797][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.167314][ T5114] veth0_vlan: entered promiscuous mode [ 80.191289][ T5114] veth1_vlan: entered promiscuous mode [ 80.324970][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.335862][ T5118] veth0_vlan: entered promiscuous mode [ 80.364536][ T5114] veth0_macvtap: entered promiscuous mode [ 80.395880][ T5114] veth1_macvtap: entered promiscuous mode [ 80.455732][ T5118] veth1_vlan: entered promiscuous mode [ 80.478022][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.517032][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.532223][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.594806][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.605442][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.622897][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.639184][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.694813][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.760170][ T5113] veth0_vlan: entered promiscuous mode [ 80.796099][ T5127] Bluetooth: hci0: command tx timeout [ 80.799047][ T5123] Bluetooth: hci3: command tx timeout [ 80.801602][ T5120] Bluetooth: hci2: command tx timeout [ 80.818874][ T5113] veth1_vlan: entered promiscuous mode [ 80.871569][ T5120] Bluetooth: hci4: command tx timeout [ 80.877073][ T5127] Bluetooth: hci1: command tx timeout [ 80.927559][ T5118] veth0_macvtap: entered promiscuous mode [ 80.966087][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.978499][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.982224][ T5118] veth1_macvtap: entered promiscuous mode [ 81.021171][ T5113] veth0_macvtap: entered promiscuous mode [ 81.075021][ T5113] veth1_macvtap: entered promiscuous mode [ 81.091033][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.098886][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.117525][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.129724][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.141581][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.154991][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.165989][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.177817][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.198005][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.207274][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.219054][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.235501][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.266053][ T5125] veth0_vlan: entered promiscuous mode [ 81.326046][ T5112] veth0_vlan: entered promiscuous mode [ 81.344247][ T5125] veth1_vlan: entered promiscuous mode [ 81.359874][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.387588][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.406429][ T5201] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 81.409074][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.416730][ T5201] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.425822][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.451075][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.497376][ T5112] veth1_vlan: entered promiscuous mode [ 81.566304][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.606320][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.622885][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.633897][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.647014][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.663464][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675044][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.685549][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.694717][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.743569][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.760617][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.800289][ T5209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.847999][ T5112] veth0_macvtap: entered promiscuous mode [ 81.855357][ T5209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.894149][ T5125] veth0_macvtap: entered promiscuous mode [ 81.918790][ T5112] veth1_macvtap: entered promiscuous mode [ 81.932080][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.950842][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.963824][ T5125] veth1_macvtap: entered promiscuous mode [ 82.137994][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.181937][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.195830][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.206788][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.217163][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.228237][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.242367][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.275799][ T5218] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.316621][ T5218] Zero length message leads to an empty skb [ 82.329325][ T5219] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.355383][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.396210][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.439224][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.449861][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.493900][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.510636][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.522779][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.535002][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.575448][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.604733][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.622294][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.645318][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.656065][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.673938][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.684843][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.704311][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.737886][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.751256][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.756337][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.791641][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829148][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838363][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.871815][ T5120] Bluetooth: hci0: command tx timeout [ 82.871826][ T5123] Bluetooth: hci2: command tx timeout [ 82.882981][ T5127] Bluetooth: hci3: command tx timeout [ 82.890886][ T5226] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 82.950305][ T5120] Bluetooth: hci1: command tx timeout [ 82.955809][ T5127] Bluetooth: hci4: command tx timeout [ 82.973180][ T5227] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 82.988488][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.000198][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.010545][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.022503][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.033566][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.045116][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.057769][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.064690][ T5225] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 83.069540][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.091491][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.165201][ T5125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199120][ T5125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.218833][ T5227] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 83.225672][ T5125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258341][ T5125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.319976][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.328856][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.651711][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.671952][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.718202][ T5243] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.820023][ T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.828027][ T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.028671][ T960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.078758][ T960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.108556][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.165662][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.177910][ T29] audit: type=1804 audit(1718738586.188:2): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/1/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 84.282912][ T29] audit: type=1804 audit(1718738586.278:3): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/1/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 84.357739][ T29] audit: type=1804 audit(1718738586.358:4): pid=5256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/1/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 84.434632][ T5263] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.449732][ T29] audit: type=1804 audit(1718738586.448:5): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/1/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 84.564024][ T29] audit: type=1804 audit(1718738586.448:6): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/1/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 84.579849][ T5270] gretap0: entered promiscuous mode [ 84.624571][ T5270] vlan2: entered promiscuous mode [ 84.685911][ T5270] gretap0: left promiscuous mode [ 84.861517][ T5278] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 84.979592][ T5277] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 85.029533][ T5278] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 85.255230][ T5300] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 85.748153][ T5311] can: request_module (can-proto-0) failed. [ 86.274693][ T29] audit: type=1804 audit(1718738588.288:7): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/5/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.391748][ T29] audit: type=1804 audit(1718738588.348:8): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/5/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.485129][ T29] audit: type=1804 audit(1718738588.488:9): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/5/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.589619][ T29] audit: type=1804 audit(1718738588.558:10): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/5/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.757840][ T29] audit: type=1804 audit(1718738588.558:11): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/5/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.841701][ T5340] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 86.865077][ T5342] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.933666][ T5337] net_ratelimit: 2 callbacks suppressed [ 86.933691][ T5337] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 86.940641][ T5344] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 87.106616][ T5348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.151324][ T5348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.221008][ T784] cfg80211: failed to load regulatory.db [ 87.285359][ T5344] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 87.497463][ T5344] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 88.243666][ T5391] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.294794][ T5393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.354875][ T5391] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.383383][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.842422][ T5421] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.113725][ T5426] IPVS: length: 96 != 8 [ 89.132570][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.153744][ T5426] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.337856][ T5437] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.793146][ T5447] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 90.823836][ T5460] vlan2: entered promiscuous mode [ 90.839165][ T5460] vlan2: entered allmulticast mode [ 91.113321][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 91.113340][ T29] audit: type=1804 audit(1718738593.128:24): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 91.210811][ T29] audit: type=1804 audit(1718738593.188:25): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 91.274211][ T29] audit: type=1804 audit(1718738593.258:26): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 91.309261][ T5477] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 91.383561][ T29] audit: type=1804 audit(1718738593.328:27): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 91.519241][ T29] audit: type=1804 audit(1718738593.328:28): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 91.921085][ T5503] bond1: entered promiscuous mode [ 91.926198][ T5503] bond1: entered allmulticast mode [ 91.964108][ T5510] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 91.985074][ T5503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.383574][ T5558] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 93.571055][ T5562] bond1: entered promiscuous mode [ 93.576193][ T5562] bond1: entered allmulticast mode [ 93.581877][ T5562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.599625][ T5566] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 93.611381][ T5566] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 93.627365][ T5566] bond1: (slave vcan1): making interface the new active one [ 93.645214][ T5566] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 93.654099][ T5565] __nla_validate_parse: 6 callbacks suppressed [ 93.654118][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.672018][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.802227][ T5565] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 93.873717][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.905344][ T5577] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.947456][ T5577] bridge_slave_1: left allmulticast mode [ 93.966651][ T5577] bridge_slave_1: left promiscuous mode [ 94.014509][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.234968][ T5577] bridge_slave_0: left allmulticast mode [ 94.243270][ T5577] bridge_slave_0: left promiscuous mode [ 94.323420][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.504331][ T5565] : entered promiscuous mode [ 94.515869][ T5541] tc_dump_action: action bad kind [ 94.735547][ T5602] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 94.859222][ T5602] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 94.978259][ T5602] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 95.017305][ T5615] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.171623][ T5622] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 95.297928][ T5623] bond2: entered promiscuous mode [ 95.343288][ T5623] bond2: entered allmulticast mode [ 95.373404][ T5623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.802283][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.810199][ T29] audit: type=1804 audit(1718738597.818:29): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/22/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 95.878112][ T29] audit: type=1804 audit(1718738597.868:30): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/22/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 95.961984][ T29] audit: type=1804 audit(1718738597.978:31): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/22/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 96.054147][ T5651] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 96.100271][ T5651] openvswitch: : Dropping previously announced user features [ 96.139291][ T5651] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.203211][ T29] audit: type=1804 audit(1718738598.168:32): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/22/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 96.322935][ T29] audit: type=1804 audit(1718738598.168:33): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/22/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 96.610176][ T5669] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 97.027875][ T5682] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 97.112767][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.124345][ T5682] batman_adv: batadv0: Adding interface: team0 [ 97.173496][ T5682] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.229582][ T5682] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 97.266586][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.316925][ T5688] macsec0: entered promiscuous mode [ 97.363670][ T5688] macsec0: entered allmulticast mode [ 97.383979][ T5688] veth1_macvtap: entered allmulticast mode [ 97.908329][ T5707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.068878][ T5713] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.095923][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.252061][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802d6a5400: rx timeout, send abort [ 98.326389][ T5721] bond3: entered promiscuous mode [ 98.336481][ T5721] bond3: entered allmulticast mode [ 98.365936][ T5721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.414603][ T5729] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 98.761387][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802d6a5400: abort rx timeout. Force session deactivation [ 99.072431][ T5752] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.091230][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.355334][ T29] audit: type=1804 audit(1718738602.358:34): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/34/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 100.417342][ T29] audit: type=1804 audit(1718738602.428:35): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/34/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 100.548679][ T29] audit: type=1804 audit(1718738602.538:36): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/34/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 100.614658][ T5788] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 100.712766][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.717506][ T29] audit: type=1804 audit(1718738602.658:37): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/34/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 100.755994][ T5801] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 100.829839][ T29] audit: type=1804 audit(1718738602.658:38): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3787277939/syzkaller.Su2CPz/34/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 101.059111][ T5788] batman_adv: batadv0: Adding interface: team0 [ 101.065350][ T5788] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.134067][ T5788] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.355026][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.849340][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.859089][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cd83800: rx timeout, send abort [ 102.116845][ T5835] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.145264][ T5835] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.359296][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cd83800: abort rx timeout. Force session deactivation [ 102.681794][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.957366][ T29] audit: type=1804 audit(1718738604.968:39): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/42/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 103.069312][ T29] audit: type=1804 audit(1718738605.008:40): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/42/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 103.123924][ T29] audit: type=1804 audit(1718738605.068:41): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/42/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 103.237070][ T29] audit: type=1804 audit(1718738605.178:42): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/42/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 103.286415][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.382831][ T29] audit: type=1804 audit(1718738605.178:43): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/42/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 104.057921][ T5901] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 104.092682][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.134527][ T5900] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 104.188671][ T5901] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 104.243132][ T5910] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 104.288266][ T29] audit: type=1804 audit(1718738606.298:44): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2477516031/syzkaller.5ryUVw/34/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 104.349747][ T5905] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 104.390348][ T5916] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 104.396526][ T5904] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 104.449137][ T5914] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 104.461437][ T5911] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.499206][ T5911] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.611688][ T29] audit: type=1804 audit(1718738606.628:45): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2477516031/syzkaller.5ryUVw/34/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 104.730412][ T29] audit: type=1804 audit(1718738606.658:46): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2477516031/syzkaller.5ryUVw/34/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 104.968617][ T4544] udevd[4544]: worker [5164] terminated by signal 33 (Unknown signal 33) [ 104.988515][ T4544] udevd[4544]: worker [5164] failed while handling '/devices/virtual/block/loop4' [ 105.153984][ T5937] bond_slave_1: mtu less than device minimum [ 105.271738][ T5940] bridge0: port 3(netdevsim0) entered blocking state [ 105.283784][ T5940] bridge0: port 3(netdevsim0) entered disabled state [ 105.302923][ T5940] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 105.322946][ T5947] sctp: [Deprecated]: syz-executor.2 (pid 5947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.322946][ T5947] Use struct sctp_sack_info instead [ 105.344320][ T5940] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 105.368135][ T5940] bridge0: port 3(netdevsim0) entered blocking state [ 105.376169][ T5940] bridge0: port 3(netdevsim0) entered forwarding state [ 105.423317][ T5951] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.594406][ T5956] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.607522][ T5956] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.635013][ T5956] IPv4: Oversized IP packet from 172.20.20.24 [ 105.643672][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 105.651043][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 105.718058][ T5956] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.843674][ T29] audit: type=1804 audit(1718738607.858:47): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972333230313536333438312F73797A6B616C6C65722E6A30386254532F34342FA3 dev="sda1" ino=1948 res=1 errno=0 [ 106.212912][ T5978] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.357784][ T5988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.375762][ T5989] netlink: 376 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.948361][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.970242][ T29] audit: type=1804 audit(1718738608.978:48): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/51/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 108.053493][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 108.053514][ T29] audit: type=1804 audit(1718738610.068:53): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3781957113/syzkaller.swNaES/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 108.188735][ T29] audit: type=1804 audit(1718738610.138:54): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3781957113/syzkaller.swNaES/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 108.261554][ T29] audit: type=1804 audit(1718738610.138:55): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1483034948/syzkaller.G0FGnX/52/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 108.359067][ T29] audit: type=1804 audit(1718738610.198:56): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3781957113/syzkaller.swNaES/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 108.416559][ T29] audit: type=1804 audit(1718738610.368:57): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3781957113/syzkaller.swNaES/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 108.500658][ T29] audit: type=1804 audit(1718738610.368:58): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3781957113/syzkaller.swNaES/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 108.544884][ T6062] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 108.624849][ T6064] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 108.832505][ T6075] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.863484][ T6064] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 109.045480][ T6087] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 109.561118][ T6106] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 110.091774][ T29] audit: type=1804 audit(1718738612.108:59): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/54/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 110.186086][ T6127] ip6t_srh: unknown srh invflags 7863 [ 110.192963][ T29] audit: type=1804 audit(1718738612.168:60): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/54/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 110.263991][ T29] audit: type=1804 audit(1718738612.238:61): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/54/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 110.332093][ T29] audit: type=1804 audit(1718738612.338:62): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3201563481/syzkaller.j08bTS/54/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 110.562798][ T6135] sctp: [Deprecated]: syz-executor.4 (pid 6135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.562798][ T6135] Use struct sctp_sack_info instead [ 133.273726][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.289035][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.342977][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.359460][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.370371][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.378768][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.387481][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 140.395067][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.405987][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.418017][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.444176][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.462340][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.470789][ T5127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.480840][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.254593][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.264368][ T5123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.284514][ T5123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.315372][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.323428][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 141.331351][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.405363][ T5123] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 141.414969][ T5123] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 141.423647][ T5123] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 141.431966][ T5123] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.443388][ T5123] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 141.451318][ T5123] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 141.514881][ T5123] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 141.531017][ T5123] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 141.548023][ T5123] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 141.556662][ T5123] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 141.570773][ T5123] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 141.578209][ T5123] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 142.469235][ T5127] Bluetooth: hci5: command tx timeout [ 142.549284][ T5127] Bluetooth: hci6: command tx timeout [ 143.429302][ T5127] Bluetooth: hci7: command tx timeout [ 143.511671][ T5127] Bluetooth: hci8: command tx timeout [ 143.669177][ T5127] Bluetooth: hci9: command tx timeout [ 144.549724][ T5127] Bluetooth: hci5: command tx timeout [ 144.629221][ T5127] Bluetooth: hci6: command tx timeout [ 145.509842][ T5127] Bluetooth: hci7: command tx timeout [ 145.591179][ T5127] Bluetooth: hci8: command tx timeout [ 145.749033][ T5127] Bluetooth: hci9: command tx timeout [ 146.629220][ T5127] Bluetooth: hci5: command tx timeout [ 146.711643][ T5127] Bluetooth: hci6: command tx timeout [ 147.589190][ T5127] Bluetooth: hci7: command tx timeout [ 147.669391][ T5127] Bluetooth: hci8: command tx timeout [ 147.829195][ T5127] Bluetooth: hci9: command tx timeout [ 148.709068][ T5127] Bluetooth: hci5: command tx timeout [ 148.789177][ T5127] Bluetooth: hci6: command tx timeout [ 149.669161][ T5127] Bluetooth: hci7: command tx timeout [ 149.761337][ T5127] Bluetooth: hci8: command tx timeout [ 149.919524][ T5127] Bluetooth: hci9: command tx timeout [ 194.741224][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.747567][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.794724][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 196.801028][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 196.801103][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 196.807260][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 196.819586][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 205.635941][ T5115] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 205.651588][ T5115] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 205.665678][ T5115] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 205.674593][ T5115] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 205.681073][ T5130] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 205.691531][ T5115] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 205.692373][ T5130] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 205.706781][ T5130] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 205.707223][ T5115] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 205.735137][ T5130] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 205.749600][ T5130] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 205.758125][ T5130] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 206.467806][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 206.479596][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 206.482442][ T5115] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 206.496022][ T5115] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 206.504088][ T5115] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 206.520426][ T5115] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 206.529857][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 206.538243][ T5115] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 206.538607][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 206.555772][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 206.567035][ T5115] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 206.591755][ T5115] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 206.662012][ T5115] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 206.674149][ T5115] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 206.686695][ T5115] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 206.695966][ T5115] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 206.704164][ T5115] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 206.712900][ T5115] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 207.749082][ T5128] Bluetooth: hci10: command tx timeout [ 207.834864][ T5128] Bluetooth: hci11: command tx timeout [ 208.629175][ T5128] Bluetooth: hci12: command tx timeout [ 208.642907][ T5128] Bluetooth: hci13: command tx timeout [ 208.799519][ T5128] Bluetooth: hci14: command tx timeout [ 209.829067][ T5128] Bluetooth: hci10: command tx timeout [ 209.909250][ T5128] Bluetooth: hci11: command tx timeout [ 210.709356][ T5128] Bluetooth: hci13: command tx timeout [ 210.709372][ T5115] Bluetooth: hci12: command tx timeout [ 210.877500][ T5115] Bluetooth: hci14: command tx timeout [ 211.909118][ T5115] Bluetooth: hci10: command tx timeout [ 211.999802][ T5115] Bluetooth: hci11: command tx timeout [ 212.789291][ T5115] Bluetooth: hci12: command tx timeout [ 212.794943][ T5115] Bluetooth: hci13: command tx timeout [ 212.949184][ T5115] Bluetooth: hci14: command tx timeout [ 213.989108][ T5115] Bluetooth: hci10: command tx timeout [ 214.069294][ T5115] Bluetooth: hci11: command tx timeout [ 214.869543][ T5128] Bluetooth: hci12: command tx timeout [ 214.875218][ T5115] Bluetooth: hci13: command tx timeout [ 215.029160][ T5115] Bluetooth: hci14: command tx timeout [ 255.510838][ T30] INFO: task kworker/0:2:784 blocked for more than 143 seconds. [ 255.518551][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 255.528959][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.537692][ T30] task:kworker/0:2 state:D stack:24112 pid:784 tgid:784 ppid:2 flags:0x00004000 [ 255.580199][ T30] Workqueue: events_power_efficient crda_timeout_work [ 255.587173][ T30] Call Trace: [ 255.618950][ T30] [ 255.621956][ T30] __schedule+0x17e8/0x4a20 2024/06/18 19:25:57 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 255.626524][ T30] ? __pfx___schedule+0x10/0x10 [ 255.667258][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.684333][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.698943][ T30] ? kick_pool+0x45c/0x620 [ 255.703891][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.718939][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 255.724230][ T30] ? schedule+0x90/0x320 [ 255.728651][ T30] schedule+0x14b/0x320 [ 255.736110][ T30] schedule_preempt_disabled+0x13/0x30 [ 255.742010][ T30] __mutex_lock+0x6a4/0xd70 [ 255.746574][ T30] ? __mutex_lock+0x527/0xd70 [ 255.751983][ T30] ? crda_timeout_work+0x15/0x50 [ 255.756981][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 255.769431][ T30] ? process_scheduled_works+0x945/0x1830 [ 255.775219][ T30] crda_timeout_work+0x15/0x50 [ 255.793595][ T30] process_scheduled_works+0xa2c/0x1830 [ 255.808963][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.815077][ T30] ? assign_work+0x364/0x3d0 [ 255.839004][ T30] worker_thread+0x86d/0xd70 [ 255.843683][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.858996][ T30] ? __kthread_parkme+0x169/0x1d0 [ 255.864102][ T30] ? __pfx_worker_thread+0x10/0x10 [ 255.878938][ T30] kthread+0x2f0/0x390 [ 255.883080][ T30] ? __pfx_worker_thread+0x10/0x10 [ 255.888488][ T30] ? __pfx_kthread+0x10/0x10 [ 255.909033][ T30] ret_from_fork+0x4b/0x80 [ 255.913549][ T30] ? __pfx_kthread+0x10/0x10 [ 255.928971][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.933833][ T30] [ 255.936922][ T30] INFO: task kworker/u8:7:1106 blocked for more than 143 seconds. [ 255.968942][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 255.976638][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.998900][ T30] task:kworker/u8:7 state:D stack:21384 pid:1106 tgid:1106 ppid:2 flags:0x00004000 [ 256.028951][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 256.035064][ T30] Call Trace: [ 256.038367][ T30] [ 256.058974][ T30] __schedule+0x17e8/0x4a20 [ 256.063576][ T30] ? __pfx___schedule+0x10/0x10 [ 256.068466][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.088943][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.094491][ T30] ? kthread_data+0x52/0xd0 [ 256.108945][ T30] ? schedule+0x90/0x320 [ 256.113261][ T30] ? wq_worker_sleeping+0x66/0x240 [ 256.118409][ T30] ? schedule+0x90/0x320 [ 256.135424][ T30] schedule+0x14b/0x320