last executing test programs: 37.051383517s ago: executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000000000"], 0x98}}, 0x4000000) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}}, 0xc) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xee, &(0x7f0000000940), 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@deltclass={0x900, 0x29, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xffff, 0x18}, {0x0, 0xfff2}}, [@c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3a, 0x7, 0x40, 0x3, 0x80, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x5}, 0x20, 0xfffff5fc}}]}}, @c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0xff, 0x1, 0x3, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffb, 0x2, 0x9, 0x2, 0x8000, 0x9, 0x5, 0x2, 0x4, 0xfffffff8, 0x3a64, 0x4, 0x1ff, 0x3, 0x9, 0xe1, 0x9, 0x6, 0x2, 0x1, 0x7f, 0x7, 0x6, 0x7, 0x1f, 0x9, 0x4, 0x1a, 0x80000001, 0xa0, 0x4, 0xffffffff, 0x9, 0xfffff199, 0x0, 0x5, 0x10001, 0x400, 0x1006, 0x2, 0x1, 0x400003, 0x5d0, 0x8, 0xd9, 0x0, 0x8, 0x7, 0x2, 0x200, 0x6, 0x80000000, 0x2, 0x2, 0x9f, 0x6, 0x370, 0x0, 0x4b4f, 0x81, 0xc63, 0x6, 0x2, 0x200, 0x1aa, 0x4, 0x7, 0x10001, 0x509f, 0x80000000, 0x4, 0xffffffff, 0x7, 0x1f, 0x5, 0xfffffff8, 0xf8, 0x6, 0x7, 0x5, 0x5, 0xbd9, 0x61, 0x0, 0x4, 0xfffffffe, 0x7ff, 0x7ff, 0xb4, 0x58, 0x8, 0xf3, 0x4, 0xc8d, 0xffff, 0x20, 0x7, 0x5, 0x6, 0x7f, 0x4, 0x1, 0x0, 0x8000, 0x7f, 0x2, 0x91, 0x3ff, 0x9, 0x400, 0x8ff, 0xe3, 0x7, 0x7ff, 0x8, 0xfffffff8, 0x3, 0x3e9, 0xda, 0xffffffff, 0xffffffff, 0x7ff0000, 0x2, 0x7, 0x75, 0x3, 0xff, 0x6, 0x20, 0x8000, 0x0, 0x7, 0x1ff, 0x3, 0x2c1c, 0x3, 0x2, 0x6, 0x2, 0x1, 0x0, 0x4, 0x7, 0xffffffff, 0x5, 0x400, 0x80000000, 0x5, 0x9, 0xfffffff7, 0x0, 0x8, 0x7fffffff, 0x3, 0x4, 0x20, 0x7ff, 0x8, 0x5, 0x7, 0x2, 0x8, 0x200, 0xffff, 0xffffffc0, 0x1, 0x18df, 0x5, 0x9, 0x82aa, 0x5, 0x9, 0x7, 0x7, 0x4, 0x7, 0x8857, 0x0, 0x6, 0x0, 0x80, 0x3, 0x8, 0xe6, 0xb5, 0xac, 0x1, 0x20, 0x3, 0x100, 0x4, 0x7, 0x1ff, 0x0, 0xf7b3, 0x3, 0x2, 0x6, 0x40, 0x9, 0x40, 0x2, 0x9, 0x7646, 0xfffffffc, 0x7ff, 0xfffff496, 0x1, 0xffb, 0x0, 0x2, 0x3, 0x422d, 0x20, 0x2, 0xfffffe01, 0x4, 0x7f, 0x80000001, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x7, 0x10000, 0xf69, 0x7, 0xffffffff, 0x8, 0x3888, 0x3, 0x8, 0x1c40, 0x40, 0x0, 0x6, 0x0, 0x3, 0x7, 0x100, 0x0, 0x9, 0x0, 0xffff03e0, 0x1f, 0x3, 0xbb8, 0x0, 0x3, 0x3, 0x8, 0xfffffffd, 0x401, 0x0, 0x5ee307e2]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x7, 0xfb, 0x1f, 0x9, 0xfffffffc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x401, 0x73f, 0x0, 0x24, 0x7, 0xfb3, 0xffff0000, 0x4, 0x0, 0x4, 0x0, 0x3, 0x7fffffff, 0x9, 0x5, 0x5, 0x8001, 0x1, 0xc2, 0xfffff908, 0x4, 0x1, 0x1000, 0x6, 0x1, 0x7, 0x9, 0x8, 0x7fff, 0xb22, 0x6, 0x101, 0x3, 0x80000001, 0xfd0, 0x7f, 0xfffeffff, 0x2, 0x0, 0x1000, 0x1, 0xfff, 0xfff, 0xffffffff, 0x7, 0x9, 0xfffffffa, 0x80, 0x1f7d, 0x7fff, 0x1, 0x0, 0x6, 0xff, 0x546, 0xfffffc00, 0x17, 0x3ff, 0x10000, 0x7, 0xffffffff, 0x7fff, 0x3, 0x200008, 0x40, 0x1, 0x8, 0x2, 0xfffffff7, 0x9, 0x4a, 0x0, 0x2, 0xff, 0x3, 0x0, 0x1, 0x1, 0x8, 0x5, 0x10000, 0x2, 0x2, 0x2, 0x401, 0x400, 0x872, 0xffff, 0x2, 0x2, 0x8, 0x4bb5, 0xfffff800, 0xa20, 0x1, 0x5, 0xa5b5, 0x6, 0xfffffff7, 0x4, 0x4000000, 0x5, 0x2ac4, 0x4, 0x9c6, 0x4, 0xff, 0x7, 0x5cac, 0x8c, 0x3, 0x1, 0x1, 0x8, 0x1f, 0x81, 0x800, 0xd5a, 0x7fffffff, 0xffff, 0x1, 0x3, 0x4, 0x8, 0x2000000, 0x50d, 0x20000000, 0x3, 0x200, 0x1, 0x4, 0xffff8569, 0x6000, 0xfffffff8, 0x9, 0x6, 0x7, 0xfa43, 0x0, 0x5, 0x3f, 0x5c2, 0x759b, 0xab0, 0x4, 0x9, 0x10000, 0x1000, 0x1000001, 0x239, 0x50bf3e17, 0x5, 0x5, 0x9, 0xf042, 0x1, 0x401, 0xfffffff9, 0x92, 0x6, 0x9, 0x3, 0x23, 0x8, 0x40, 0x8a, 0x6, 0x6, 0x3, 0x11a, 0x7ff, 0x1f, 0x4, 0xd68d, 0x6, 0x2, 0x0, 0x1, 0x3, 0x9, 0x80, 0xa2, 0x6, 0x2, 0xffffffff, 0x6, 0xd6, 0x1f, 0xfffffff8, 0x6, 0x2, 0x101, 0x9, 0x1f, 0x53b4fd90, 0x7cd, 0x61, 0x7939a76b, 0xb0, 0x6b5, 0x8, 0x3, 0x6, 0x7, 0xc163, 0x6, 0x3ff, 0x101, 0x1ff, 0x2, 0x400, 0x7, 0x0, 0x7, 0x5, 0x3, 0x7, 0x41, 0x0, 0xb412, 0x1, 0x3, 0x1, 0x8, 0x7, 0x1, 0x7, 0x10000, 0x2, 0x3, 0x0, 0x40, 0x3, 0x80000000, 0x9ead, 0x0, 0xb50, 0x10001, 0x7, 0x6, 0x7, 0xfffffffa, 0x20, 0x400, 0x1, 0x8, 0x7, 0x4, 0x7, 0x401, 0xc0, 0x100, 0x9, 0x9, 0x2, 0x1ff]}]}}, @c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x10}}, @TCA_ATM_HDR={0x33, 0x3, "97c2f2cdf3998221a5c245228309e272f3e7e51a653b59c63e0b4b217748006b4e36de2681769248196940e01f410f"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x12, 0x3, "dbd179081644ace02c4ff576e6ab"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r3}]}}]}, 0x900}}, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f0000000040)) 36.904747633s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x24, r3, 0x705, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x24}}, 0x0) 36.690976098s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008732f38e86937871956e6072080000007f1a94058af8ff00000000bfa20000e600000007020000f8ffffffb703000008000000b70400000000000005000000823eb06cff3919d5e9a888d6c35f7690be1491"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028000000000002907800000000f82700021100907800000002000000020000000000000000"], 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0)={0x2041}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000003c00)=0x17, 0x28) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x2000041}, 0x10) close(r5) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x9) write$cgroup_subtree(r9, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00meiory '], 0x8) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 36.605575506s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x160, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x108, 0x2, [@TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0xb0, 0x6, [@m_ctinfo={0x78, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x41, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb"}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x160}}, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x12142, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 36.028595023s ago: executing program 2: unshare(0x28000600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x37, &(0x7f00000002c0)=@framed={{}, [@printk={@u}, @alu, @ringbuf_output, @jmp, @btf_id, @snprintf, @func, @ringbuf_query, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r6 = openat$cgroup_int(r4, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x100000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000880000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000005500000055000000040000000e0000000000000903000000070000000000000c02000000080000000400000f01c2f04c1d9b6655af000000ff07000001000000b100b2211f4b53e55c7387a23b0eba5b264100000100000005000000983100007692e703af8a4e42"], &(0x7f0000000380)=""/89, 0x74, 0x59, 0x1, 0x5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x9}, {0xe, 0x92}]}, @const={0x0, 0x0, 0x0, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x64}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x9, 0x1000, 0x5, 0x1306, 0x1, 0x200, '\x00', 0x0, r9, 0x5, 0x4, 0x1, 0x3}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xa}, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x27, &(0x7f0000000340)=""/222}, 0x21) 35.723494221s ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r3 = socket(0x1d, 0x2, 0x6) r4 = epoll_create(0x3) r5 = socket$isdn(0x22, 0x2, 0x22) close(r5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x201f}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0xfffffffffffffe77, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000002410000001059137564703a73797a3100000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14, r9, 0x619}, 0x14}}, 0x0) socket(0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='jbd2_handle_stats\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r10 = socket(0xa, 0x2400000001, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x20000009, @mcast1, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000480)={0x45, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r10, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 33.502384736s ago: executing program 4: shutdown(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x10, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x83, &(0x7f0000000040)={r5}, 0x8) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xf206}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x30, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1, 0x0, 0x7}}, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x1, 0x6, @local}, 0x10) 33.437633243s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, 0x20}}, 0x0) 33.437134611s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x9, &(0x7f00000014c0)=@raw=[@printk={@llu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}, @exit], &(0x7f0000001540)='GPL\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0000000024caefe8e80a1c3f21376873e1304643f997002c49369f777fb1db720f365f74c4cb9c"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 33.400510275s ago: executing program 0: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000000000"], 0x98}}, 0x4000000) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}}, 0xc) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xee, &(0x7f0000000940), 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@deltclass={0x900, 0x29, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xffff, 0x18}, {0x0, 0xfff2}}, [@c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3a, 0x7, 0x40, 0x3, 0x80, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x5}, 0x20, 0xfffff5fc}}]}}, @c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0xff, 0x1, 0x3, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffb, 0x2, 0x9, 0x2, 0x8000, 0x9, 0x5, 0x2, 0x4, 0xfffffff8, 0x3a64, 0x4, 0x1ff, 0x3, 0x9, 0xe1, 0x9, 0x6, 0x2, 0x1, 0x7f, 0x7, 0x6, 0x7, 0x1f, 0x9, 0x4, 0x1a, 0x80000001, 0xa0, 0x4, 0xffffffff, 0x9, 0xfffff199, 0x0, 0x5, 0x10001, 0x400, 0x1006, 0x2, 0x1, 0x400003, 0x5d0, 0x8, 0xd9, 0x0, 0x8, 0x7, 0x2, 0x200, 0x6, 0x80000000, 0x2, 0x2, 0x9f, 0x6, 0x370, 0x0, 0x4b4f, 0x81, 0xc63, 0x6, 0x2, 0x200, 0x1aa, 0x4, 0x7, 0x10001, 0x509f, 0x80000000, 0x4, 0xffffffff, 0x7, 0x1f, 0x5, 0xfffffff8, 0xf8, 0x6, 0x7, 0x5, 0x5, 0xbd9, 0x61, 0x0, 0x4, 0xfffffffe, 0x7ff, 0x7ff, 0xb4, 0x58, 0x8, 0xf3, 0x4, 0xc8d, 0xffff, 0x20, 0x7, 0x5, 0x6, 0x7f, 0x4, 0x1, 0x0, 0x8000, 0x7f, 0x2, 0x91, 0x3ff, 0x9, 0x400, 0x8ff, 0xe3, 0x7, 0x7ff, 0x8, 0xfffffff8, 0x3, 0x3e9, 0xda, 0xffffffff, 0xffffffff, 0x7ff0000, 0x2, 0x7, 0x75, 0x3, 0xff, 0x6, 0x20, 0x8000, 0x0, 0x7, 0x1ff, 0x3, 0x2c1c, 0x3, 0x2, 0x6, 0x2, 0x1, 0x0, 0x4, 0x7, 0xffffffff, 0x5, 0x400, 0x80000000, 0x5, 0x9, 0xfffffff7, 0x0, 0x8, 0x7fffffff, 0x3, 0x4, 0x20, 0x7ff, 0x8, 0x5, 0x7, 0x2, 0x8, 0x200, 0xffff, 0xffffffc0, 0x1, 0x18df, 0x5, 0x9, 0x82aa, 0x5, 0x9, 0x7, 0x7, 0x4, 0x7, 0x8857, 0x0, 0x6, 0x0, 0x80, 0x3, 0x8, 0xe6, 0xb5, 0xac, 0x1, 0x20, 0x3, 0x100, 0x4, 0x7, 0x1ff, 0x0, 0xf7b3, 0x3, 0x2, 0x6, 0x40, 0x9, 0x40, 0x2, 0x9, 0x7646, 0xfffffffc, 0x7ff, 0xfffff496, 0x1, 0xffb, 0x0, 0x2, 0x3, 0x422d, 0x20, 0x2, 0xfffffe01, 0x4, 0x7f, 0x80000001, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x7, 0x10000, 0xf69, 0x7, 0xffffffff, 0x8, 0x3888, 0x3, 0x8, 0x1c40, 0x40, 0x0, 0x6, 0x0, 0x3, 0x7, 0x0, 0x1000, 0x9, 0x0, 0xffff03e0, 0x1f, 0x3, 0xbb8, 0x0, 0x3, 0x3, 0x8, 0xfffffffd, 0x401, 0x0, 0x5ee307e2]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x7, 0xfb, 0x1f, 0x9, 0xfffffffc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x401, 0x73f, 0x0, 0x24, 0x7, 0xfb3, 0xffff0000, 0x4, 0x0, 0x4, 0x0, 0x3, 0x7fffffff, 0x9, 0x5, 0x5, 0x8001, 0x1, 0xc2, 0xfffff908, 0x4, 0x1, 0x1000, 0x6, 0x1, 0x7, 0x9, 0x8, 0x7fff, 0xb22, 0x6, 0x101, 0x3, 0x80000001, 0xfd0, 0x7f, 0xfffeffff, 0x2, 0x0, 0x1000, 0x1, 0xfff, 0xfff, 0xffffffff, 0x7, 0x9, 0xfffffffa, 0x80, 0x1f7d, 0x7fff, 0x1, 0x0, 0x6, 0xff, 0x546, 0xfffffc00, 0x17, 0x3ff, 0x10000, 0x7, 0xffffffff, 0x7fff, 0x3, 0x200008, 0x40, 0x1, 0x8, 0x2, 0xfffffff7, 0x9, 0x4a, 0x0, 0x2, 0xff, 0x3, 0x0, 0x1, 0x1, 0x8, 0x5, 0x10000, 0x2, 0x2, 0x2, 0x401, 0x400, 0x872, 0xffff, 0x2, 0x2, 0x8, 0x4bb5, 0xfffff800, 0xa20, 0x1, 0x5, 0xa5b5, 0x6, 0xfffffff7, 0x4, 0x4000000, 0x5, 0x2ac4, 0x4, 0x9c6, 0x4, 0xff, 0x7, 0x5cac, 0x8c, 0x3, 0x1, 0x1, 0x8, 0x1f, 0x81, 0x800, 0xd5a, 0x7fffffff, 0xffff, 0x1, 0x3, 0x4, 0x8, 0x2000000, 0x50d, 0x20000000, 0x3, 0x200, 0x1, 0x4, 0xffff8569, 0x6000, 0xfffffff8, 0x9, 0x6, 0x7, 0xfa43, 0x0, 0x5, 0x3f, 0x5c2, 0x759b, 0xab0, 0x4, 0x9, 0x10000, 0x1000, 0x1000001, 0x239, 0x50bf3e17, 0x5, 0x5, 0x9, 0xf042, 0x1, 0x401, 0xfffffff9, 0x92, 0x6, 0x9, 0x3, 0x23, 0x8, 0x40, 0x8a, 0x6, 0x6, 0x3, 0x11a, 0x7ff, 0x1f, 0x4, 0xd68d, 0x6, 0x2, 0x0, 0x1, 0x3, 0x9, 0x80, 0xa2, 0x6, 0x2, 0xffffffff, 0x6, 0xd6, 0x1f, 0xfffffff8, 0x6, 0x2, 0x101, 0x9, 0x1f, 0x53b4fd90, 0x7cd, 0x61, 0x7939a76b, 0xb0, 0x6b5, 0x8, 0x3, 0x6, 0x7, 0xc163, 0x6, 0x3ff, 0x101, 0x1ff, 0x2, 0x400, 0x7, 0x0, 0x7, 0x5, 0x3, 0x7, 0x41, 0x0, 0xb412, 0x1, 0x3, 0x1, 0x8, 0x7, 0x1, 0x7, 0x10000, 0x2, 0x3, 0x0, 0x40, 0x3, 0x80000000, 0x9ead, 0x0, 0xb50, 0x10001, 0x7, 0x6, 0x7, 0xfffffffa, 0x20, 0x400, 0x1, 0x8, 0x7, 0x4, 0x7, 0x401, 0xc0, 0x100, 0x9, 0x9, 0x2, 0x1ff]}]}}, @c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x10}}, @TCA_ATM_HDR={0x33, 0x3, "97c2f2cdf3998221a5c245228309e272f3e7e51a653b59c63e0b4b217748006b4e36de2681769248196940e01f410f"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x12, 0x3, "dbd179081644ace02c4ff576e6ab"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r3}]}}]}, 0x900}}, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f0000000040)) 33.230046468s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r3}, 0x14) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000fbff000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r8, 0x10d, 0x1, 0x0, &(0x7f0000000080)) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x1d, r10, 0x1, {}, 0x1}, 0x18, &(0x7f0000000600)={&(0x7f00000005c0)="1041b8c7bc9cf12c1cb0752caaf95e69bec318e0c950dc", 0x17}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) setsockopt$sock_timeval(r9, 0x1, 0x14, &(0x7f0000abaff9)={0x77359400}, 0x5d) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r11}, &(0x7f0000000680), &(0x7f00000006c0)=r11}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}, [@NHA_MASTER={0x8, 0x18, 0x1}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 33.215717081s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001c80)=""/4100, 0x0, 0x1004, 0x1, 0x6}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 33.150482225s ago: executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r6], 0x20}, 0x1, 0x6}, 0x0) 33.073783766s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85e0ffff85b2c36741baa0000000150000000000000045000000ffffffff9500000000000000"], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153}, 0x90) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0x8000000000000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000100)="b1", 0x1}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x0, 0xa2d7, {{0x10, 0x4, 0x0, 0x3a, 0x40, 0x66, 0x0, 0x7d, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x72, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@multicast1, 0x3ad9}, {@broadcast, 0x7ff}, {@loopback, 0x7}]}, @ra={0x94, 0x4}, @end]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x6, 0x401, 0x2, 0x2014, 0x1, 0x3fb, '\x00', 0x0, 0xffffffffffffffff, 0x8005, 0x4, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8}]}, 0x70}}, 0x0) r6 = socket(0x2b, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x8000001, 0x4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400d1}, 0x8000) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) listen(r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0xa0179e05}) epoll_pwait(r1, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800005, 0x10, r1, 0x3000) r8 = socket(0x10, 0x3, 0x0) listen(r8, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x801) unshare(0x400) unshare(0x24020400) read(0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r9, 0x80108906) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) 32.957818867s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x6, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'vlan0\x00'}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0104c3", @ANYRES16=r3, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40) getsockname$ax25(r1, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @bcast, @rose, @remote, @null, @default, @default, @bcast]}, &(0x7f0000000080)=0x48) (async) getsockname$ax25(r1, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @bcast, @rose, @remote, @null, @default, @default, @bcast]}, &(0x7f0000000080)=0x48) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000240)) 32.898399922s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x1}], 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x1, 0x1, {0xa, 0x4e22, 0xdce28e34, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0x38}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1148}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000009, 0x30, 0xffffffffffffffff, 0x44dd7000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 32.830793825s ago: executing program 1: socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="08000100", @ANYBLOB, @ANYBLOB, @ANYRES32], 0x90}}, 0x0) 32.788702087s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000240)}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 32.734504633s ago: executing program 0: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00007d0000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffdd0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4001) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000103a00fe800000000000000000000000000000ff020000000000000000ee000000000186009078781a5a73b9da4abb02b8648100"/82], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000400) connect$netlink(r4, &(0x7f0000000000), 0xc) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000}, 0x8}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x80000000) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r7, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 32.570732003s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x160, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x108, 0x2, [@TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_ACT={0xb0, 0x6, [@m_ctinfo={0x78, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x41, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb"}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x160}}, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x12142, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 30.679756936s ago: executing program 3: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x38, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @nop, @fastopen={0x22, 0x4, 'lG'}]}}}}}}}}, 0x0) 30.490569377s ago: executing program 3: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010000000000000000"], 0x98}}, 0x4000000) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}}, 0xc) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xee, &(0x7f0000000940), 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@deltclass={0x900, 0x29, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xffff, 0x18}, {0x0, 0xfff2}}, [@c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x3a, 0x7, 0x40, 0x3, 0x80, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x5}, 0x20, 0xfffff5fc}}]}}, @c_cbq={{0x8}, {0x82c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0xff, 0x1, 0x3, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffb, 0x2, 0x9, 0x2, 0x8000, 0x9, 0x5, 0x2, 0x4, 0xfffffff8, 0x3a64, 0x4, 0x1ff, 0x3, 0x9, 0xe1, 0x9, 0x6, 0x2, 0x1, 0x7f, 0x7, 0x6, 0x7, 0x1f, 0x9, 0x4, 0x1a, 0x80000001, 0xa0, 0x4, 0xffffffff, 0x9, 0xfffff199, 0x0, 0x5, 0x10001, 0x400, 0x1006, 0x2, 0x1, 0x400003, 0x5d0, 0x8, 0xd9, 0x0, 0x8, 0x7, 0x2, 0x200, 0x6, 0x80000000, 0x2, 0x2, 0x9f, 0x6, 0x370, 0x0, 0x4b4f, 0x81, 0xc63, 0x6, 0x2, 0x200, 0x1aa, 0x4, 0x7, 0x10001, 0x509f, 0x80000000, 0x4, 0xffffffff, 0x7, 0x1f, 0x5, 0xfffffff8, 0xf8, 0x6, 0x7, 0x5, 0x5, 0xbd9, 0x61, 0x0, 0x4, 0xfffffffe, 0x7ff, 0x7ff, 0xb4, 0x58, 0x8, 0xf3, 0x4, 0xc8d, 0xffff, 0x20, 0x7, 0x5, 0x6, 0x7f, 0x4, 0x1, 0x0, 0x8000, 0x7f, 0x2, 0x91, 0x3ff, 0x9, 0x400, 0x8ff, 0xe3, 0x7, 0x7ff, 0x8, 0xfffffff8, 0x3, 0x3e9, 0xda, 0xffffffff, 0xffffffff, 0x7ff0000, 0x2, 0x7, 0x75, 0x3, 0xff, 0x6, 0x20, 0x8000, 0x0, 0x7, 0x1ff, 0x3, 0x2c1c, 0x3, 0x2, 0x6, 0x2, 0x1, 0x0, 0x4, 0x7, 0xffffffff, 0x5, 0x400, 0x80000000, 0x5, 0x9, 0xfffffff7, 0x0, 0x8, 0x7fffffff, 0x3, 0x4, 0x20, 0x7ff, 0x8, 0x5, 0x7, 0x2, 0x8, 0x200, 0xffff, 0xffffffc0, 0x1, 0x18df, 0x5, 0x9, 0x82aa, 0x5, 0x9, 0x7, 0x7, 0x4, 0x7, 0x8857, 0x0, 0x6, 0x0, 0x80, 0x3, 0x8, 0xe6, 0xb5, 0xac, 0x1, 0x20, 0x3, 0x100, 0x4, 0x7, 0x1ff, 0x0, 0xf7b3, 0x3, 0x2, 0x6, 0x40, 0x9, 0x40, 0x2, 0x9, 0x7646, 0xfffffffc, 0x7ff, 0xfffff496, 0x1, 0xffb, 0x0, 0x2, 0x3, 0x422d, 0x20, 0x2, 0xfffffe01, 0x4, 0x7f, 0x80000001, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x7, 0x10000, 0xf69, 0x7, 0xffffffff, 0x8, 0x3888, 0x3, 0x8, 0x1c40, 0x40, 0x0, 0x6, 0x0, 0x3, 0x7, 0x0, 0x1000, 0x9, 0x0, 0xffff03e0, 0x1f, 0x3, 0xbb8, 0x0, 0x3, 0x3, 0x8, 0xfffffffd, 0x401, 0x0, 0x5ee307e2]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x7, 0xfb, 0x1f, 0x9, 0xfffffffc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x401, 0x73f, 0x0, 0x24, 0x7, 0xfb3, 0xffff0000, 0x4, 0x0, 0x4, 0x0, 0x3, 0x7fffffff, 0x9, 0x5, 0x5, 0x8001, 0x1, 0xc2, 0xfffff908, 0x4, 0x1, 0x1000, 0x6, 0x1, 0x7, 0x9, 0x8, 0x7fff, 0xb22, 0x6, 0x101, 0x3, 0x80000001, 0xfd0, 0x7f, 0xfffeffff, 0x2, 0x0, 0x1000, 0x1, 0xfff, 0xfff, 0xffffffff, 0x7, 0x9, 0xfffffffa, 0x80, 0x1f7d, 0x7fff, 0x1, 0x0, 0x6, 0xff, 0x546, 0xfffffc00, 0x17, 0x3ff, 0x10000, 0x7, 0xffffffff, 0x7fff, 0x3, 0x200008, 0x40, 0x1, 0x8, 0x2, 0xfffffff7, 0x9, 0x4a, 0x0, 0x2, 0xff, 0x3, 0x0, 0x1, 0x1, 0x8, 0x5, 0x10000, 0x2, 0x2, 0x2, 0x401, 0x400, 0x872, 0xffff, 0x2, 0x2, 0x8, 0x4bb5, 0xfffff800, 0xa20, 0x1, 0x5, 0xa5b5, 0x6, 0xfffffff7, 0x4, 0x4000000, 0x5, 0x2ac4, 0x4, 0x9c6, 0x4, 0xff, 0x7, 0x5cac, 0x8c, 0x3, 0x1, 0x1, 0x8, 0x1f, 0x81, 0x800, 0xd5a, 0x7fffffff, 0xffff, 0x1, 0x3, 0x4, 0x8, 0x2000000, 0x50d, 0x20000000, 0x3, 0x200, 0x1, 0x4, 0xffff8569, 0x6000, 0xfffffff8, 0x9, 0x6, 0x7, 0xfa43, 0x0, 0x5, 0x3f, 0x5c2, 0x759b, 0xab0, 0x4, 0x9, 0x10000, 0x1000, 0x1000001, 0x239, 0x50bf3e17, 0x5, 0x5, 0x9, 0xf042, 0x1, 0x401, 0xfffffff9, 0x92, 0x6, 0x9, 0x3, 0x23, 0x8, 0x40, 0x8a, 0x6, 0x6, 0x3, 0x11a, 0x7ff, 0x1f, 0x4, 0xd68d, 0x6, 0x2, 0x0, 0x1, 0x3, 0x9, 0x80, 0xa2, 0x6, 0x2, 0xffffffff, 0x6, 0xd6, 0x1f, 0xfffffff8, 0x6, 0x2, 0x101, 0x9, 0x1f, 0x53b4fd90, 0x7cd, 0x61, 0x7939a76b, 0xb0, 0x6b5, 0x8, 0x3, 0x6, 0x7, 0xc163, 0x6, 0x3ff, 0x101, 0x1ff, 0x2, 0x400, 0x7, 0x0, 0x7, 0x5, 0x3, 0x7, 0x41, 0x0, 0xb412, 0x1, 0x3, 0x1, 0x8, 0x7, 0x1, 0x7, 0x10000, 0x2, 0x3, 0x0, 0x40, 0x3, 0x80000000, 0x9ead, 0x0, 0xb50, 0x10001, 0x7, 0x6, 0x7, 0xfffffffa, 0x20, 0x400, 0x1, 0x8, 0x7, 0x4, 0x7, 0x401, 0xc0, 0x100, 0x9, 0x9, 0x2, 0x1ff]}]}}, @c_atm={{0x8}, {0x74, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x10}}, @TCA_ATM_HDR={0x33, 0x3, "97c2f2cdf3998221a5c245228309e272f3e7e51a653b59c63e0b4b217748006b4e36de2681769248196940e01f410f"}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x12, 0x3, "dbd179081644ace02c4ff576e6ab"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r3}]}}]}, 0x900}}, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f0000000040)) 30.333195007s ago: executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x81) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r2, 0xfffffffffffffffe, 0x0, 0x40000000, &(0x7f0000000000)={0xa, 0x4e21, 0x2b22, @dev={0xfe, 0x80, '\x00', 0x14}, 0x2000}, 0x1c) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 30.240075205s ago: executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24}, 0x24}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x4, 0x4c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000100), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x5, 0xb, 0x809b, 'geneve1\x00', 'xfrm0\x00', 'veth1_to_hsr\x00', 'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@log={'log\x00', 0x28, {{0x7, "8fb00b064a12e108f9a19cfe08cdc425466f756bbefc262c1b31b886e79e", 0x4}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x85f9}}}}, {0x11, 0x11, 0x884c, 'veth0_to_bridge\x00', 'bridge_slave_0\x00', 'tunl0\x00', 'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @random="deab11e5671a", [0xff, 0xff, 0xff, 0xff], 0xfe, 0xfe, 0x12e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x5}}}, @time={{'time\x00', 0x0, 0x18}, {{0x4, 0x2, 0x10f10, 0x8bd1, 0x0, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x18, 0x883e, 'sit0\x00', 'ipvlan1\x00', 'bridge0\x00', 'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0xff, 0x0, 0xff], 0x116, 0x116, 0x146, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0xb887, 0x6, 0x6d}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'dummy0\x00', {}, 'veth1_virt_wifi\x00', {}, 0x1a, 0xc}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x18, 0x0, 0x6603, 'vxcan1\x00', 'bond_slave_1\x00', 'vlan0\x00', 'veth0\x00', @random="efcad2340cc6", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0xc782bb5fd36b0eec, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@STANDARD={'\x00', 0x8}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0x538) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={@remote, 0x0, 0x0, 0x90, 0x0, [{@initdev}, {@multicast1}, {@empty}, {@private}, {@initdev}, {@initdev}, {@loopback}, {@loopback}, {}]}}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xa3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000015c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x28}, {0x6}]}, 0x10) sendmmsg$unix(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) 30.030210163s ago: executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x0, 0x0, 0x103}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x43, 0x0}, 0x801) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010904000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c0002800500010000000000440005800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000001080000000000000000001800"/176]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x2a, 0xd2, &(0x7f0000000240)="3dc83c6b46c1e3cf54c087141338ca13d99920e428cc25bf30b9cd6670674dc0966fc762b419cc7b40a7", &(0x7f0000000340)=""/210, 0x9db, 0x0, 0x59, 0x3e, &(0x7f0000000440)="7a1c5f4b5448189418a59a783d629a168ecc369dab74cc8d8a35b6a77a230fd03ce61715708a66b2c950b5525ec17228f204de6a6719c35511c2b1fc73b79b4b21b6fca4d3bb22c459f4c263e237608137cc4b431cbc960ae9", &(0x7f00000004c0)="36dbfb860b276e97ad0625c00ed3b844f18061a8cbf015cec3375ba5335efc39fa859e110839212e12109be5b7618f23593bf943da6b39136edb8bd30b1c", 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.85142606s ago: executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0, 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={0x0, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xb, 0x20, 0x208, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x261c, 0xffffffffffffffff, 0x10be, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4040091) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 2.763242461s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002000c000000040000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000001380), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001540), 0x4) r2 = socket$inet(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @dev, 0x0, 0x0, '\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='cubic\x00', 0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 2.712755894s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "20d579fc449f610c058591afc97a"}, 0x19) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000a0a824f4641e9c060b52"]) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2}, 0x18) sendmmsg$unix(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002040)=')', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x4, &(0x7f00000016c0)=""/4096, &(0x7f0000000140)=0x1000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendto$inet(r8, &(0x7f0000000180)="048e0a9da3515db65f380ccb6d277ecd9520c1174e06667ef497047566ed9a66256d42b92fb157fab8333a15ccdfd426451817ccdf511e13bb1f1610133d5ffb06f6215cf2cf31f0f97c3e55043af00eb2fa34e0d8b318a83710a0e23e8f72b42d84cb07ddc406ed3ab69ab1ad918a8dcb3b7d976476b0ce7dc8150eddbf2cd53929a0037f3e0099c7ac1cd24bc0e1372cbd7273a2287ff6a2423a62a048a3272bbd09ab4e02bdb4abac73213566ce54d4f33d4d637480a973ca743e2db2f82a4bd8cb56f2427e8d6dc615c2008c139a3f1428e23e2646a30eeb64d7b8d3dfdd7db51d45fd749f44bcfad36d69", 0xed, 0x80c0, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800090001000000080007"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r10, 0x29, 0x0, 0x0, 0x0, 0x80, @mcast2, @mcast2, 0x0, 0x0, 0xc3d7}}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c019900050000000000000000009040d1c8584d631e6ba5b35433395b0a2a5a80045c4b113df6a9d3b0b32c9a3e3be90a62000d00"], 0x34}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000200)=0x1e76, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.546230129s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x5, 0x103ba, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000180), 0x0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x13, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfa"}]}, 0x24}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad890000000000"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) unshare(0x6020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r4, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0xb, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x303, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x61}], 0x1, 0x0, 0x810000000000000}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 0s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000c000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. 2024/06/13 20:55:07 fuzzer started 2024/06/13 20:55:08 dialing manager at 10.128.0.169:30018 [ 69.501878][ T5097] cgroup: Unknown subsys name 'net' [ 69.696699][ T5097] cgroup: Unknown subsys name 'rlimit' 2024/06/13 20:55:10 starting 5 executor processes [ 71.129882][ T5100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.740409][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.747255][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.269445][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.278572][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.287037][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.295414][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.303822][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.313182][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.321505][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.329234][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.338123][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.343494][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.355223][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.364095][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.373019][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.380252][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.389131][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.396368][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.400113][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.404760][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.420747][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.423868][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.437398][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.446185][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.456780][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.464427][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.510333][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.519036][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.527698][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.540485][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.555768][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.563928][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.087185][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 73.150257][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 73.298053][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 73.352121][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 73.432946][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.441007][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.448554][ T5126] bridge_slave_0: entered allmulticast mode [ 73.456885][ T5126] bridge_slave_0: entered promiscuous mode [ 73.470745][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.478731][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.486083][ T5126] bridge_slave_1: entered allmulticast mode [ 73.493139][ T5126] bridge_slave_1: entered promiscuous mode [ 73.523661][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 73.605500][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.620023][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.629434][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.637323][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.644518][ T5117] bridge_slave_0: entered allmulticast mode [ 73.652752][ T5117] bridge_slave_0: entered promiscuous mode [ 73.661391][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.668675][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.676198][ T5117] bridge_slave_1: entered allmulticast mode [ 73.683273][ T5117] bridge_slave_1: entered promiscuous mode [ 73.814726][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.832874][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.869119][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.876697][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.883929][ T5123] bridge_slave_0: entered allmulticast mode [ 73.891524][ T5123] bridge_slave_0: entered promiscuous mode [ 73.900020][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.907930][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.916088][ T5123] bridge_slave_1: entered allmulticast mode [ 73.923717][ T5123] bridge_slave_1: entered promiscuous mode [ 73.934579][ T5126] team0: Port device team_slave_0 added [ 73.980258][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.987664][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.994842][ T5118] bridge_slave_0: entered allmulticast mode [ 74.006117][ T5118] bridge_slave_0: entered promiscuous mode [ 74.014862][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.023370][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.030665][ T5118] bridge_slave_1: entered allmulticast mode [ 74.038237][ T5118] bridge_slave_1: entered promiscuous mode [ 74.058980][ T5126] team0: Port device team_slave_1 added [ 74.081126][ T5117] team0: Port device team_slave_0 added [ 74.154750][ T5117] team0: Port device team_slave_1 added [ 74.166172][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.179364][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.191071][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.204382][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.231639][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.238917][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.265219][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.330740][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.337875][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.364044][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.383316][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.391874][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.400375][ T5132] bridge_slave_0: entered allmulticast mode [ 74.407612][ T5132] bridge_slave_0: entered promiscuous mode [ 74.416633][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.423967][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.431410][ T5132] bridge_slave_1: entered allmulticast mode [ 74.438619][ T5132] bridge_slave_1: entered promiscuous mode [ 74.456267][ T5127] Bluetooth: hci2: command tx timeout [ 74.459963][ T5120] Bluetooth: hci0: command tx timeout [ 74.462014][ T53] Bluetooth: hci3: command tx timeout [ 74.491819][ T5118] team0: Port device team_slave_0 added [ 74.525591][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.532579][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.558613][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.564369][ T53] Bluetooth: hci1: command tx timeout [ 74.572478][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.582719][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.608816][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.623394][ T5118] team0: Port device team_slave_1 added [ 74.625173][ T53] Bluetooth: hci4: command tx timeout [ 74.647849][ T5123] team0: Port device team_slave_0 added [ 74.704496][ T5123] team0: Port device team_slave_1 added [ 74.742247][ T5126] hsr_slave_0: entered promiscuous mode [ 74.749406][ T5126] hsr_slave_1: entered promiscuous mode [ 74.759838][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.774196][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.784156][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.791449][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.817648][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.831395][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.838518][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.864552][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.932052][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.939564][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.966268][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.009578][ T5132] team0: Port device team_slave_0 added [ 75.023153][ T5117] hsr_slave_0: entered promiscuous mode [ 75.030744][ T5117] hsr_slave_1: entered promiscuous mode [ 75.039302][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.047319][ T5117] Cannot create hsr debugfs directory [ 75.053585][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.061270][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.087581][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.119381][ T5132] team0: Port device team_slave_1 added [ 75.217048][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.224038][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.250805][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.290188][ T5118] hsr_slave_0: entered promiscuous mode [ 75.296949][ T5118] hsr_slave_1: entered promiscuous mode [ 75.303167][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.310858][ T5118] Cannot create hsr debugfs directory [ 75.322928][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.332416][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.360875][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.396126][ T5123] hsr_slave_0: entered promiscuous mode [ 75.403142][ T5123] hsr_slave_1: entered promiscuous mode [ 75.409563][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.417309][ T5123] Cannot create hsr debugfs directory [ 75.613881][ T5132] hsr_slave_0: entered promiscuous mode [ 75.621105][ T5132] hsr_slave_1: entered promiscuous mode [ 75.629861][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.637657][ T5132] Cannot create hsr debugfs directory [ 75.973966][ T5126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.997148][ T5126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.023051][ T5126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.044306][ T5126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.129529][ T5123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.153149][ T5123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.170991][ T5123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.182607][ T5123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.309123][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.321476][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.343594][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.388353][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.441596][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.482169][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.501141][ T5118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.514109][ T5118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.531618][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.538979][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.546629][ T53] Bluetooth: hci3: command tx timeout [ 76.548200][ T5127] Bluetooth: hci2: command tx timeout [ 76.552074][ T53] Bluetooth: hci0: command tx timeout [ 76.600287][ T5118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.613080][ T5118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.620971][ T53] Bluetooth: hci1: command tx timeout [ 76.631389][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.638590][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.695902][ T53] Bluetooth: hci4: command tx timeout [ 76.757776][ T5132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.791034][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.799519][ T5132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.814800][ T5132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.843161][ T5126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.866769][ T5132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.973378][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.019689][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.026921][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.042732][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.049959][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.132455][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.240761][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.290801][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.306958][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.314147][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.351657][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.358846][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.373630][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.433042][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.504012][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.581409][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.600948][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.608172][ T1797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.648450][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.655676][ T1797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.666798][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.673944][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.707414][ T5126] veth0_vlan: entered promiscuous mode [ 77.719945][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.727171][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.791581][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.830934][ T5126] veth1_vlan: entered promiscuous mode [ 78.001816][ T5126] veth0_macvtap: entered promiscuous mode [ 78.084580][ T5126] veth1_macvtap: entered promiscuous mode [ 78.104606][ T5123] veth0_vlan: entered promiscuous mode [ 78.194589][ T5123] veth1_vlan: entered promiscuous mode [ 78.246977][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.260258][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.328225][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.362732][ T5126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.372827][ T5126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.383858][ T5126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392944][ T5126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.439931][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.562795][ T5123] veth0_macvtap: entered promiscuous mode [ 78.615943][ T53] Bluetooth: hci0: command tx timeout [ 78.617291][ T5127] Bluetooth: hci2: command tx timeout [ 78.621389][ T53] Bluetooth: hci3: command tx timeout [ 78.660214][ T5123] veth1_macvtap: entered promiscuous mode [ 78.690999][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.705676][ T53] Bluetooth: hci1: command tx timeout [ 78.731672][ T5117] veth0_vlan: entered promiscuous mode [ 78.775818][ T53] Bluetooth: hci4: command tx timeout [ 78.784746][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.796895][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.817316][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.838185][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.871214][ T5117] veth1_vlan: entered promiscuous mode [ 78.871957][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.896767][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.902431][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.917698][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.930780][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.943600][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.969509][ T5123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.990160][ T5123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.002228][ T5123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.019492][ T5123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.213336][ T5117] veth0_macvtap: entered promiscuous mode [ 79.243725][ T5117] veth1_macvtap: entered promiscuous mode [ 79.293585][ T5132] veth0_vlan: entered promiscuous mode [ 79.375608][ T5205] Bluetooth: MGMT ver 1.22 [ 79.433725][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.438311][ T5118] veth0_vlan: entered promiscuous mode [ 79.455635][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.521808][ T5118] veth1_vlan: entered promiscuous mode [ 79.552902][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.568608][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.585231][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.596121][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.610561][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.623218][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.633920][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.644563][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.658703][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.670783][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.712035][ T5132] veth1_vlan: entered promiscuous mode [ 79.729424][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.746068][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.786109][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807856][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.820678][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.830221][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.888804][ T5118] veth0_macvtap: entered promiscuous mode [ 79.983188][ T5118] veth1_macvtap: entered promiscuous mode [ 80.027699][ T5132] veth0_macvtap: entered promiscuous mode [ 80.070297][ T5132] veth1_macvtap: entered promiscuous mode [ 80.178737][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.201965][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.232622][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.246070][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.258009][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.269642][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.282850][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.333264][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.378369][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.390590][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.401996][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.412473][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.424802][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.435660][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.447778][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.464547][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.510887][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.544763][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.554865][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.575027][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.585501][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.596597][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.609062][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.650498][ T5118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.665156][ T5118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.695717][ T5127] Bluetooth: hci3: command tx timeout [ 80.701546][ T5127] Bluetooth: hci2: command tx timeout [ 80.705053][ T5118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709752][ T5120] Bluetooth: hci0: command tx timeout [ 80.721604][ T5118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.747700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.755685][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.773504][ T5232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.789895][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.800729][ T5127] Bluetooth: hci1: command tx timeout [ 80.811549][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.825082][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.836156][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.846125][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.858921][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.869099][ T5127] Bluetooth: hci4: command tx timeout [ 80.874580][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.885929][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.901194][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.992012][ T5132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.023671][ T5132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.039158][ T5132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.049476][ T5132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.125651][ T5235] geneve2: entered promiscuous mode [ 81.130944][ T5235] geneve2: entered allmulticast mode [ 81.186618][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.194519][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.418556][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.569012][ T5249] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.783323][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.822016][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.909390][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.925316][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.982882][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.022385][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.122465][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.161165][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.541854][ T5267] Zero length message leads to an empty skb [ 82.603293][ T5277] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.656084][ T5277] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.776354][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.088217][ T5293] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.166022][ T5294] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.269006][ T5297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.535051][ T5301] geneve2: entered promiscuous mode [ 83.570052][ T5301] geneve2: entered allmulticast mode [ 83.584745][ T5297] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 85.049569][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.417879][ T5361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.443233][ T5361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.493341][ T5361] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 85.518878][ T5361] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 85.661975][ T5371] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.671947][ T5371] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.681095][ T5371] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.690011][ T5371] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.736170][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.765222][ T5379] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 85.794578][ T5379] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.812677][ T5371] vxlan0: entered promiscuous mode [ 85.835264][ T5379] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.846087][ T5371] vxlan0: entered allmulticast mode [ 85.892933][ T5371] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.902105][ T5371] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.911306][ T5371] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.920256][ T5371] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.999015][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.351567][ T5386] syzkaller0: entered promiscuous mode [ 86.394329][ T5386] syzkaller0: entered allmulticast mode [ 86.450633][ T5405] geneve2: entered promiscuous mode [ 86.471327][ T5405] geneve2: entered allmulticast mode [ 87.105672][ T1149] cfg80211: failed to load regulatory.db [ 88.678242][ T5427] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.712363][ T5427] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.745543][ T5427] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.770288][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.784467][ T5427] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.825465][ T5427] geneve2: entered promiscuous mode [ 88.830749][ T5427] geneve2: entered allmulticast mode [ 88.887951][ T5436] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.898251][ T5436] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.908283][ T5436] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.917180][ T5436] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.952825][ T5436] vxlan0: entered promiscuous mode [ 88.965455][ T5436] vxlan0: entered allmulticast mode [ 89.018053][ T5436] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.027077][ T5436] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.036449][ T5436] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.045451][ T5436] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.292009][ T5456] Illegal XDP return value 4294967274 on prog (id 19) dev N/A, expect packet loss! [ 89.371318][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.410110][ T5458] ip6gretap0: entered promiscuous mode [ 89.460470][ T5458] macsec1: entered promiscuous mode [ 89.483828][ T5458] macsec1: entered allmulticast mode [ 89.500143][ T5458] ip6gretap0: entered allmulticast mode [ 89.531094][ T5458] ip6gretap0: left allmulticast mode [ 89.538692][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.545630][ T5458] ip6gretap0: left promiscuous mode [ 89.784207][ T5167] IPVS: starting estimator thread 0... [ 89.885390][ T5481] IPVS: using max 18 ests per chain, 43200 per kthread [ 89.903629][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.939744][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.167023][ T5485] syzkaller0: entered promiscuous mode [ 90.191125][ T5485] syzkaller0: entered allmulticast mode [ 90.448006][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.468749][ T5504] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.724486][ T5517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.748064][ T5512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.756966][ T5512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.766780][ T5512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.776545][ T5512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.789227][ T5512] vxlan0: entered promiscuous mode [ 91.794526][ T5512] vxlan0: entered allmulticast mode [ 91.804856][ T5512] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.813974][ T5512] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.823830][ T5512] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.833505][ T5512] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.876837][ T8] IPVS: starting estimator thread 0... [ 91.990775][ T5521] IPVS: using max 17 ests per chain, 40800 per kthread [ 92.288271][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.748309][ T5555] ip6gretap0: entered promiscuous mode [ 92.753960][ T5555] macsec1: entered promiscuous mode [ 92.758519][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.761574][ T5555] macsec1: entered allmulticast mode [ 92.789796][ T5555] ip6gretap0: entered allmulticast mode [ 92.810455][ T5555] ip6gretap0: left allmulticast mode [ 92.821819][ T5555] ip6gretap0: left promiscuous mode [ 92.881495][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.181918][ T5557] syzkaller0: entered promiscuous mode [ 93.194779][ T5557] syzkaller0: entered allmulticast mode [ 93.301903][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.681249][ T1149] IPVS: starting estimator thread 0... [ 93.795153][ T5583] IPVS: using max 19 ests per chain, 45600 per kthread [ 94.644771][ T5572] __nla_validate_parse: 1 callbacks suppressed [ 94.644797][ T5572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.785940][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.811077][ T5585] geneve2: entered promiscuous mode [ 94.839872][ T5585] geneve2: entered allmulticast mode [ 94.909019][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.982336][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.099342][ T5601] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 95.196985][ T5604] ip6gretap0: entered promiscuous mode [ 95.208985][ T5604] macsec1: entered promiscuous mode [ 95.230981][ T5604] macsec1: entered allmulticast mode [ 95.255620][ T5604] ip6gretap0: entered allmulticast mode [ 95.282589][ T5604] ip6gretap0: left allmulticast mode [ 95.305387][ T5604] ip6gretap0: left promiscuous mode [ 95.522901][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.677559][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.720599][ T5621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.863096][ T5626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.079376][ T5621] syzkaller0: entered promiscuous mode [ 96.103816][ T5621] syzkaller0: entered allmulticast mode [ 96.322590][ T5650] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 96.686422][ T5664] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.788483][ T5653] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 98.071487][ T5678] bridge0: port 3(vlan2) entered blocking state [ 98.079559][ T5678] bridge0: port 3(vlan2) entered disabled state [ 98.087379][ T5678] vlan2: entered allmulticast mode [ 98.097860][ T5678] vlan2: entered promiscuous mode [ 98.112288][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.664407][ T5710] tipc: Enabling of bearer rejected, failed to enable media [ 98.821247][ T5714] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 98.846688][ T5714] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.855764][ T5714] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.864488][ T5714] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.873404][ T5714] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.888751][ T5714] vxlan0: entered promiscuous mode [ 98.945998][ T5715] syzkaller0: entered promiscuous mode [ 98.951630][ T5715] syzkaller0: entered allmulticast mode [ 99.657287][ T5714] syz-executor.1 (5714) used greatest stack depth: 19056 bytes left [ 99.723493][ T5732] SET target dimension over the limit! [ 100.531186][ T5733] macvtap0: entered promiscuous mode [ 100.550960][ T5733] macvtap0: entered allmulticast mode [ 100.607940][ T5733] veth0_macvtap: entered allmulticast mode [ 100.727007][ T5741] __nla_validate_parse: 4 callbacks suppressed [ 100.727030][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.829263][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.851584][ T5748] team0: Device vlan3 is up. Set it down before adding it as a team port [ 101.599603][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.637480][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.831215][ T5789] sock: sock_set_timeout: `syz-executor.2' (pid 5789) tries to set negative timeout [ 101.871458][ T5779] syzkaller0: entered promiscuous mode [ 101.874796][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.884383][ T5779] syzkaller0: entered allmulticast mode [ 102.121496][ T5797] syzkaller0: entered promiscuous mode [ 102.136308][ T5797] syzkaller0: entered allmulticast mode [ 102.219577][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.683718][ T5818] delete_channel: no stack [ 105.021273][ T5820] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.030507][ T5820] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.253470][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.327756][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.562087][ T5855] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 105.928006][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.960717][ T5879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.130059][ T5879] syzkaller0: entered promiscuous mode [ 106.155122][ T5879] syzkaller0: entered allmulticast mode [ 106.222375][ T5887] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 106.490172][ T5895] delete_channel: no stack [ 107.818839][ T5127] Bluetooth: hci4: command 0x0405 tx timeout [ 108.795256][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.834830][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.874687][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.153105][ T5918] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 109.461947][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.479989][ T5934] block nbd0: not configured, cannot reconfigure [ 109.537622][ T5936] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.688663][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.203989][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.185788][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.265974][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.293016][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.305401][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.328308][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.353176][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 140.361076][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.398140][ T5124] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 140.408925][ T5124] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 140.417610][ T5124] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 140.431375][ T5124] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 140.441459][ T5124] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 140.449841][ T5124] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 140.450235][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.473894][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.482684][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.490865][ T5127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 140.510928][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.518286][ T5122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 140.527032][ T5122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 140.536722][ T5127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.546132][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 140.560319][ T5122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 140.576087][ T5127] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 140.593775][ T5127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 142.438009][ T5120] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 142.450011][ T5120] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 142.457273][ T5122] Bluetooth: hci5: command tx timeout [ 142.464691][ T5120] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 142.474150][ T5120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 142.485378][ T5120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 142.492992][ T5120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 142.535926][ T5120] Bluetooth: hci8: command tx timeout [ 142.615114][ T5120] Bluetooth: hci6: command tx timeout [ 142.625453][ T5120] Bluetooth: hci7: command tx timeout [ 144.535789][ T5127] Bluetooth: hci5: command tx timeout [ 144.543370][ T5120] Bluetooth: hci9: command tx timeout [ 144.615105][ T5120] Bluetooth: hci8: command tx timeout [ 144.698370][ T5120] Bluetooth: hci7: command tx timeout [ 144.705854][ T5120] Bluetooth: hci6: command tx timeout [ 146.616415][ T5127] Bluetooth: hci9: command tx timeout [ 146.621998][ T5127] Bluetooth: hci5: command tx timeout [ 146.695365][ T5127] Bluetooth: hci8: command tx timeout [ 146.775227][ T5127] Bluetooth: hci6: command tx timeout [ 146.777097][ T5120] Bluetooth: hci7: command tx timeout [ 148.696095][ T5120] Bluetooth: hci5: command tx timeout [ 148.701613][ T5120] Bluetooth: hci9: command tx timeout [ 148.775276][ T5120] Bluetooth: hci8: command tx timeout [ 148.855050][ T5120] Bluetooth: hci7: command tx timeout [ 148.855114][ T5127] Bluetooth: hci6: command tx timeout [ 150.776166][ T5127] Bluetooth: hci9: command tx timeout [ 194.621177][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.705219][ T5996] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.715412][ T5996] Bluetooth: hci4: command 0x0405 tx timeout [ 196.723301][ T5996] Bluetooth: hci3: command 0x0406 tx timeout [ 196.725578][ T5121] Bluetooth: hci2: command 0x0406 tx timeout [ 196.738290][ T5996] Bluetooth: hci1: command 0x0406 tx timeout [ 205.445878][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 205.454647][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 205.455939][ T5997] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 205.469988][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 205.470987][ T5997] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 205.484433][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 205.486190][ T5997] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 205.500750][ T5997] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 205.500975][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 205.508817][ T5997] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 205.516682][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 205.540083][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 205.624119][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 205.638670][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 205.649461][ T5127] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 205.650473][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 205.669711][ T5120] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 205.675315][ T5127] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 205.686356][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 205.687081][ T5127] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 205.702157][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 205.702994][ T5127] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 205.712811][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 205.724648][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 207.575212][ T5127] Bluetooth: hci11: command tx timeout [ 207.596188][ T5997] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 207.614514][ T5997] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 207.623482][ T5997] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 207.636019][ T5997] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 207.643930][ T5997] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 207.652775][ T5997] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 207.660060][ T5120] Bluetooth: hci10: command tx timeout [ 207.815002][ T5120] Bluetooth: hci13: command tx timeout [ 207.821061][ T5120] Bluetooth: hci12: command tx timeout [ 209.655070][ T5120] Bluetooth: hci11: command tx timeout [ 209.735171][ T5127] Bluetooth: hci14: command tx timeout [ 209.744943][ T5120] Bluetooth: hci10: command tx timeout [ 209.905125][ T5127] Bluetooth: hci13: command tx timeout [ 209.911456][ T5120] Bluetooth: hci12: command tx timeout [ 211.735092][ T5120] Bluetooth: hci11: command tx timeout [ 211.818738][ T5127] Bluetooth: hci14: command tx timeout [ 211.824370][ T5120] Bluetooth: hci10: command tx timeout [ 211.985025][ T5120] Bluetooth: hci12: command tx timeout [ 211.990575][ T5127] Bluetooth: hci13: command tx timeout [ 213.814983][ T5127] Bluetooth: hci11: command tx timeout [ 213.903296][ T5120] Bluetooth: hci14: command tx timeout [ 213.909552][ T5127] Bluetooth: hci10: command tx timeout [ 214.055144][ T5120] Bluetooth: hci12: command tx timeout [ 214.060720][ T5127] Bluetooth: hci13: command tx timeout [ 215.991789][ T5127] Bluetooth: hci14: command tx timeout [ 253.495359][ T30] INFO: task syz-executor.4:5936 blocked for more than 143 seconds. [ 253.503408][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 2024/06/13 20:58:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 253.544943][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 253.610516][ T30] task:syz-executor.4 state:D stack:24768 pid:5936 tgid:5935 ppid:5118 flags:0x00004006 [ 253.635138][ T30] Call Trace: [ 253.638490][ T30] [ 253.641453][ T30] __schedule+0x17e8/0x4a20 [ 253.665164][ T30] ? __pfx___schedule+0x10/0x10 [ 253.670111][ T30] ? __pfx_lock_release+0x10/0x10 [ 253.695121][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 253.700683][ T30] ? schedule+0x90/0x320 [ 253.714865][ T30] schedule+0x14b/0x320 [ 253.719162][ T30] schedule_preempt_disabled+0x13/0x30 [ 253.724676][ T30] __mutex_lock+0x6a4/0xd70 [ 253.753458][ T30] ? __mutex_lock+0x527/0xd70 [ 253.765124][ T30] ? wiphy_new_nm+0x6fe/0x19a0 [ 253.769985][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 253.793698][ T30] ? wiphy_new_nm+0x625/0x19a0 [ 253.805117][ T30] ? rcu_is_watching+0x15/0xb0 [ 253.809962][ T30] ? wiphy_new_nm+0x625/0x19a0 [ 253.814776][ T30] ? trace_kmalloc+0x1f/0xd0 [ 253.843914][ T30] wiphy_new_nm+0x6fe/0x19a0 [ 253.848667][ T30] ? ieee80211_alloc_hw_nm+0x8f9/0x1ea0 [ 253.854276][ T30] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 253.870957][ T30] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 253.877743][ T30] ? mac80211_hwsim_new_radio+0xfb/0x44c0 [ 253.883537][ T30] mac80211_hwsim_new_radio+0x1f1/0x44c0 [ 253.895071][ T30] ? rcu_is_watching+0x15/0xb0 [ 253.899913][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 253.914286][ T30] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 253.921100][ T30] ? kstrndup+0x5c/0xb0 [ 253.925773][ T30] ? __asan_memcpy+0x40/0x70 [ 253.930424][ T30] hwsim_new_radio_nl+0xe4c/0x21d0 [ 253.944138][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 253.950342][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 253.956425][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 253.963118][ T30] genl_rcv_msg+0xb14/0xec0 [ 253.979605][ T30] ? mark_lock+0x9a/0x350 [ 253.984030][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.994575][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 254.003530][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 254.014093][ T30] ? __pfx___might_resched+0x10/0x10 [ 254.027342][ T30] netlink_rcv_skb+0x1e3/0x430 [ 254.032360][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.042801][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.048558][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 254.054096][ T30] genl_rcv+0x28/0x40 [ 254.070977][ T30] netlink_unicast+0x7ea/0x980 [ 254.079892][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 254.085786][ T30] ? __virt_addr_valid+0x183/0x520 [ 254.090968][ T30] ? __check_object_size+0x49c/0x900 [ 254.125044][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 254.130253][ T30] netlink_sendmsg+0x8db/0xcb0 [ 254.144980][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.150364][ T30] ? __import_iovec+0x536/0x820 [ 254.164967][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 254.171664][ T30] ? bpf_lsm_socket_s