last executing test programs: 33.410668697s ago: executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x7, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@loopback, @local, @mcast2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x200004, r3}) setsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 33.182988837s ago: executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x40}}, 0x4040004) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r3, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x800, 0xffffffffffffffff, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x800, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@tcp}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a766", 0x14) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a766", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000000240)=""/47, &(0x7f0000000280)=0x2f) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000006a00dfff7f00000000000000080001000000000004000b000400090004000b0004000b000800010000000000"], 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}, {}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000002080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}, {}]}}}}}}, 0x0) 33.152825982s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x19, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) 32.410754847s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000300)=""/4096, 0x1000) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000004"], 0x98}}, 0x0) 32.134492831s ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="100028bd7000fedbdf250300000008000c0002000000060003000400000008001100050000000500140009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040014) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) setsockopt(r2, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r2, &(0x7f0000002980), 0x400000000000239, 0x0) 31.74739274s ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 31.575932513s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000300)=""/4096, 0x1000) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000000400"], 0x98}}, 0x0) 31.283111144s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r1, &(0x7f00000000c0)="3f035808260712002c3a1e0089e9aaa911d7c2290f0786dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0xa, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 31.114143934s ago: executing program 4: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x2000000, 0x48f, &(0x7f0000000040)={0x0, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) 31.109082008s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) socketpair(0xb, 0x4, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0x1d, 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8040) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f0000000180)=0x4, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c200000051e7e0796237a8b258a22bbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781a000000000000000500000100186371ae9b1c03"], 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@initdev, @dev, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8900002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0xfff1}, {0xe, 0x8}, {0xfff3, 0x8}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8014) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "000000009b993e68", "75e29881592b9fd38bcad042e286f2cd", '\x00', "578619a280c847dd"}, 0x28) sendfile(r8, r9, &(0x7f0000000100), 0x10001) 30.967507092s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@alu={0x7, 0x1, 0xd, 0x8, 0x1, 0xffffffffffffffe0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x90) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001900010000000000000000001d01000008000500040000001500010000001a0000008000000000c5a3619b2c05000000fc4ca172e6b6d0a648c0fc7f8c756745868397063d9ab501b618e02c6a98d9fc22de3bad047cac483c0fe786cc452aba34240600fcc64dd9cd23c8eb2b7c85f6df0fb27de6ac7b0f1531b9401b741155c34969cc410dac28909c07ba8a4fd03c2d25f4b290afefd7d09fd67ba01284694b53285a674b40dc4c41a9f2ee874b466506033600ca484a957a7be8e3ce7a361893716ff3cae686369dc48352e4a9e250f28583767612b1e56ba9ad8827707fa3170ea26a"], 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0xe) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, 0x0}, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500"/16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x1, 'dvmrp1\x00', {}, 0x5}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000340)=0x8000, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) listen(r5, 0x0) close(r5) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x6d}}}]}}]}, 0x60}}, 0x0) 30.944154758s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x30d, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}}, 0x0) 30.74923721s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 30.741655903s ago: executing program 1: mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)={0xab4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x2d1, 0x0, 0x0, 0x1, [@generic="8b844e21163e88febd1b2fd52162c45fca347366723439d4b3ab011b2989dd4c68e7787d74a9bb25d954878bc27286e7c5d8ae3b6cccf7fdf6c008b2cc1d0e7bcf95b765eabe9faf00ada552f666c4e9ddcaea82b23a5d2bb18c1420e20cd19c6af3e964b9ec86ac10c5996cf61e94ccf5c736649d28262cff1dfa286f26e6f022caa83112018ca025e0ce0ea72236e98e06d5ff8840b3798f321c217ac75a4ea784de49ae991c55410d9adeace2b6db2b14e9fc792c490a1f401501e686ac42f1c69b6f45fee0c3f25a6ef6", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="84d527b4dbb1c89ca34de5f4a5bbd09bdbb1af1e99c8c256d1b27fb64142545cea467a765058caa694d19ec7da2afba727c52ed038ed19b203f75895d190bc8f6d7993c75f69668c19a089c066c534a21848e715", @typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="e8db827972a823f98fbb2cbda18e00edaebe5254a26149d857b36f1e9d02d4c2894e715ce921090ea1c1797d95fe13aaf43ffb24699bfc24057899f72e375b49fb8cc1147244a574d87a3a5a24360f77c861e82118eff31b0050abdb7cddcccde909bab59eaa769cf02ac496cd0c3004ea84156fbebc4cfb766f6dc1f47bfaa3a09ac1c6354084cb5d8ae4937995cd4fddc291972e584fd37cf5cd0e485478d6933de4d8a58fb4489fd53e7cea933d99b69eab21ec0640b64e87e0349d57ebd0cc0d41ef6de46cbafa51fcb1a2d8f44027d4731f296f49b477fb19963928a9293f51b198b1f81782b2", @generic="1131d65985d34539aff0120b46d1fc2e945008d1ba710a14d747a92579fb307889329addcef0915b00206d39fbcaa7c01a6932884e69b01747e58a43e92524d70a76d9e50e1057832e266375128b1fedd0e457c20b328dfd439cfdeebb55bc94389225eca0c070976df38b687ca8919cc5f479607338ec4d94fba04098d9b6782871181d7fe5bc5c6bd6bd9b70abdbe0899cf592c341d70e764fd3b0bc7ef6efbc003e23d3521387e8f94d66"]}, @generic="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"]}, 0xab4}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x20, @empty, 0x2}, @in6={0xa, 0x4e22, 0x20, @remote, 0x66a}, @in={0x2, 0x4e22, @multicast1}], 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100001000000000000014000000080016000000000018000180140002006ef474646b7673696d3002a800000000f5ff170000000000"], 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, r4, 0x581fa000) 30.570636935s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002400000083dd79aab4fbc16301ac7d08d3660c915db380a23b141400fdff000004fa080c986766aab4195d76d14a1fcaeddde2e8cf872f887e0965dfd904ccd58fd1f08d85a1699044bdbd9445bda0109d53ba3dd18649e96e7db514a5ea43d4a040bfc7b95e3fa8491f3cb3984ffa8bbd69c668d05bc4decbdd41e909dc1588bd51f2adbd0ed49e542bb12951b987"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) setsockopt(r3, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r3, &(0x7f0000002980), 0x400000000000239, 0x0) 30.530136022s ago: executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780080013400000000008000640000000000500050002000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r2, 0x101, 0x19, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0xfffffffffffffdc3, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x531}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200460c1}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) (async, rerun: 32) socketpair(0x22, 0x6, 0x4, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000005c0)={0x2}, 0x1) sendto$inet6(r3, &(0x7f0000000280)="a5", 0x1, 0x40, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1000000033000b1bd25a806c8c6f94f9", 0x10}], 0x1}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@phonet, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x6d, "d664eea01a21a78eea625d79a73bfd45cebe7b9bf59f7efdc35278a31fd368b47f31b1bb379e9faf2d9fc9515a1f2e4b3028efa5d919b4b790d0463caae8d6f7283b8d7279ffd9f92ce6c460b77b01b869c8c4de87babeea1932f9ccfb9a60799c263ff98cafea921ce26e497b"}, &(0x7f0000000440)=0x75) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e20, 0xc890, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8}}, 0x6, 0x800, 0x401, 0x7a20, 0x6}, &(0x7f0000000540)=0x98) 30.429375201s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 30.405998619s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) write$binfmt_script(r0, &(0x7f0000000100), 0xfece) write$cgroup_type(r1, &(0x7f0000000000), 0x180c00) 30.294841245s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() r4 = getuid() r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r7 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000001280)=0xfffffffffffffd6f) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)="c6e600ce52d27e7daf14a973c72c9bbda23d65018c12a1d1deb74fba1a1d831066ff38d228", 0x25}, {0x0}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c002000"/16, @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000004bd9810e3373533f840fb48d6c84f9679ce5597124a7eef1e0d8d5151309af7e7aeae01a6020b10daa798cff6abb910372c216c165c8758440d368c46a0700000061702e7aed3517a4a83df106e200"/106, @ANYRES32=r3, @ANYRES32=r4, @ANYRES64=r9, @ANYRES32=r6, @ANYRES32=r10, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000002834504c982519a2337171d360a88975b7a47182276f67000000000000000000000000000000000000000000000000008000000000000000000000c987bcfbed771227317f156c2c7cba58fcbceb9919", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32=r10], 0x90}, 0x40) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000040)={0x1d, r12, 0x1}, 0x18) r13 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x8, 0x70bd29, 0x25dfdbfc, {0xa, 0x14, 0x14, 0x4, 0xfd, 0x2, 0x0, 0x8, 0x100}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x80, 0x1, {{0x23, 0x4, 0x0, 0x3, 0x8c, 0x67, 0x0, 0x10, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @empty, {[@lsrr={0x83, 0x1b, 0x7a, [@multicast2, @multicast2, @broadcast, @rand_addr=0x64010100, @loopback, @remote]}, @ssrr={0x89, 0x13, 0x2e, [@rand_addr=0x64010100, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x7, 0x77, [@multicast2]}, @ra={0x94, 0x4}, @generic={0x89, 0x9, "48c64b28ba3685"}, @timestamp_prespec={0x44, 0x34, 0x71, 0x3, 0x4, [{@multicast1, 0x7}, {@multicast1, 0x8}, {@remote, 0x10000}, {@empty, 0xd4}, {@private=0xa010100, 0x4}, {@multicast1, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000440)={'wg2\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@remote}, &(0x7f00000004c0)=0xc) 30.13424636s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000e80)={0x0, 0xa, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) 30.020510339s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 3.157195587s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0xa020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000300)={@cgroup=r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x1e, {0x2, 0x0, @remote}}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="3c0030800500020008"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) 944.889776ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 716.00577ms ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r0, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000080)=0x100, 0x4) r3 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r4, 0x92}, 0x8) 272.447921ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0xf0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000300)=""/4096, 0x1000) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) 0s ago: executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001500020c2dbd7000fbdbdf2502000400", @ANYRES32=0x0, @ANYBLOB="000008000400002f7464e0006272696467655f7374c9005a6c005f319c8948145a35f2b5000068ffe1bab226e777c0308f8d9da9ed9b3655e29c5cac092021f580d269b65f599f0ef1c9a1044975a20abb9e157e98ab0c84d36493339c8d3c859f3ad52bdd8fed65fae123736cd61d29a1bc7341dec9bcc9ea30d49d227ef76ab19d2cb6e602f5abb7"], 0x2c}, 0x1, 0x0, 0x0, 0x240000d0}, 0x20000081) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64410101}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)='s', 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000100)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc0, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_ZONE={0x6}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x43}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}]}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x480}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}]}]}, 0xc0}}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x401) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. 2024/06/14 09:05:39 fuzzer started 2024/06/14 09:05:39 dialing manager at 10.128.0.169:30016 [ 58.329704][ T5088] cgroup: Unknown subsys name 'net' [ 58.515661][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/14 09:05:41 starting 5 executor processes [ 59.698347][ T5098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.711783][ T5098] syz-executor (5098) used greatest stack depth: 19888 bytes left [ 60.561356][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.562533][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.577107][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.584523][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.589429][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.592277][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.600012][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.607921][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.613749][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.620339][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.627536][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.642243][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.643224][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.649924][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.656999][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.664188][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.670665][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.677494][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.693205][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.703114][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.711755][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.721180][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.729493][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.736592][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.745529][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.764143][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.771679][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.779287][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.794706][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.802285][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.047969][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 61.233373][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.240518][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.248057][ T5111] bridge_slave_0: entered allmulticast mode [ 61.256410][ T5111] bridge_slave_0: entered promiscuous mode [ 61.309896][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.317669][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.325514][ T5111] bridge_slave_1: entered allmulticast mode [ 61.332726][ T5111] bridge_slave_1: entered promiscuous mode [ 61.497739][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.529751][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.551035][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 61.563073][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 61.584319][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 61.662226][ T5111] team0: Port device team_slave_0 added [ 61.676325][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 61.698817][ T5111] team0: Port device team_slave_1 added [ 61.804235][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.811190][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.838055][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.896375][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.903921][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.911023][ T5112] bridge_slave_0: entered allmulticast mode [ 61.918193][ T5112] bridge_slave_0: entered promiscuous mode [ 61.926950][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.934167][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.941335][ T5110] bridge_slave_0: entered allmulticast mode [ 61.949122][ T5110] bridge_slave_0: entered promiscuous mode [ 61.957296][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.964441][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.990539][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.026979][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.034268][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.041531][ T5109] bridge_slave_0: entered allmulticast mode [ 62.048697][ T5109] bridge_slave_0: entered promiscuous mode [ 62.057724][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.065091][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.072211][ T5112] bridge_slave_1: entered allmulticast mode [ 62.079299][ T5112] bridge_slave_1: entered promiscuous mode [ 62.096198][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.103425][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.110550][ T5110] bridge_slave_1: entered allmulticast mode [ 62.118894][ T5110] bridge_slave_1: entered promiscuous mode [ 62.145789][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.156048][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.163347][ T5109] bridge_slave_1: entered allmulticast mode [ 62.170262][ T5109] bridge_slave_1: entered promiscuous mode [ 62.244157][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.275753][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.289151][ T5111] hsr_slave_0: entered promiscuous mode [ 62.296508][ T5111] hsr_slave_1: entered promiscuous mode [ 62.303968][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.311110][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.318315][ T5120] bridge_slave_0: entered allmulticast mode [ 62.325530][ T5120] bridge_slave_0: entered promiscuous mode [ 62.333983][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.341111][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.348642][ T5120] bridge_slave_1: entered allmulticast mode [ 62.356209][ T5120] bridge_slave_1: entered promiscuous mode [ 62.364775][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.377526][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.388668][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.409465][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.484789][ T5110] team0: Port device team_slave_0 added [ 62.516365][ T5109] team0: Port device team_slave_0 added [ 62.525035][ T5112] team0: Port device team_slave_0 added [ 62.539232][ T5110] team0: Port device team_slave_1 added [ 62.556815][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.567744][ T5112] team0: Port device team_slave_1 added [ 62.586410][ T5109] team0: Port device team_slave_1 added [ 62.633163][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.650662][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.657822][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.683885][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.695511][ T5127] Bluetooth: hci2: command tx timeout [ 62.706813][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.716927][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.743803][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.772563][ T5127] Bluetooth: hci0: command tx timeout [ 62.790282][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.797304][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.824246][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.840144][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.847238][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.852575][ T5127] Bluetooth: hci3: command tx timeout [ 62.873936][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.879135][ T5118] Bluetooth: hci4: command tx timeout [ 62.889412][ T5124] Bluetooth: hci1: command tx timeout [ 62.905079][ T5120] team0: Port device team_slave_0 added [ 62.912844][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.919795][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.946151][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.987066][ T5120] team0: Port device team_slave_1 added [ 62.993683][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.000626][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.026969][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.075315][ T5110] hsr_slave_0: entered promiscuous mode [ 63.081775][ T5110] hsr_slave_1: entered promiscuous mode [ 63.088229][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.096630][ T5110] Cannot create hsr debugfs directory [ 63.145978][ T5109] hsr_slave_0: entered promiscuous mode [ 63.152169][ T5109] hsr_slave_1: entered promiscuous mode [ 63.158963][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.166585][ T5109] Cannot create hsr debugfs directory [ 63.246436][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.254427][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.280912][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.296016][ T5112] hsr_slave_0: entered promiscuous mode [ 63.302332][ T5112] hsr_slave_1: entered promiscuous mode [ 63.309413][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.317208][ T5112] Cannot create hsr debugfs directory [ 63.342016][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.349152][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.375309][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.531352][ T5120] hsr_slave_0: entered promiscuous mode [ 63.539095][ T5120] hsr_slave_1: entered promiscuous mode [ 63.546049][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.553783][ T5120] Cannot create hsr debugfs directory [ 63.706162][ T5111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.740664][ T5111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.765140][ T5111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.779390][ T5111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.872004][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.882378][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.904707][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.925054][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.985994][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.995883][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.006285][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.022014][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.148056][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.158425][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.172308][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.181975][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.261198][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.270853][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.291823][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.304644][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.325290][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.356270][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.370699][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.404105][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.411436][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.425134][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.432234][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.509627][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.530265][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.559162][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.566283][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.598060][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.605315][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.640285][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.669410][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.726266][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.768506][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.775670][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.785897][ T5124] Bluetooth: hci2: command tx timeout [ 64.800115][ T5110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.811361][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.845511][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.863168][ T5124] Bluetooth: hci0: command tx timeout [ 64.887927][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.895108][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.905421][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.912659][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.933238][ T5124] Bluetooth: hci1: command tx timeout [ 64.934078][ T5127] Bluetooth: hci3: command tx timeout [ 64.944606][ T5118] Bluetooth: hci4: command tx timeout [ 64.949579][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.962163][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.969338][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.108778][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.184381][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.209525][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.227906][ T5111] veth0_vlan: entered promiscuous mode [ 65.289176][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.296315][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.312385][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.319643][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.353849][ T5111] veth1_vlan: entered promiscuous mode [ 65.457812][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.479869][ T5110] veth0_vlan: entered promiscuous mode [ 65.500006][ T5110] veth1_vlan: entered promiscuous mode [ 65.580106][ T5111] veth0_macvtap: entered promiscuous mode [ 65.616819][ T5110] veth0_macvtap: entered promiscuous mode [ 65.632347][ T5111] veth1_macvtap: entered promiscuous mode [ 65.658975][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.672042][ T5110] veth1_macvtap: entered promiscuous mode [ 65.708062][ T5112] veth0_vlan: entered promiscuous mode [ 65.746655][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.789246][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.804790][ T5111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.817415][ T5111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.827200][ T5111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.836226][ T5111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.861538][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.881052][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.897211][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.913859][ T5112] veth1_vlan: entered promiscuous mode [ 65.926017][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.937135][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.948570][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.996487][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.014087][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.022920][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.031627][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.049179][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.152881][ T5112] veth0_macvtap: entered promiscuous mode [ 66.185319][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.198627][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.218297][ T5112] veth1_macvtap: entered promiscuous mode [ 66.276318][ T5120] veth0_vlan: entered promiscuous mode [ 66.298606][ T5109] veth0_vlan: entered promiscuous mode [ 66.321719][ T5120] veth1_vlan: entered promiscuous mode [ 66.336085][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.347119][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.357078][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.368345][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.382002][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.406506][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.416126][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.426397][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.437753][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.447664][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.458899][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.469972][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.492514][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.500343][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.504144][ T5109] veth1_vlan: entered promiscuous mode [ 66.548366][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.558669][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.568191][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.577208][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607437][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.623021][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.702179][ T5120] veth0_macvtap: entered promiscuous mode [ 66.727107][ T5120] veth1_macvtap: entered promiscuous mode [ 66.749651][ T5109] veth0_macvtap: entered promiscuous mode [ 66.801705][ T5109] veth1_macvtap: entered promiscuous mode [ 66.822152][ T29] audit: type=1804 audit(1718355948.332:2): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2479895214/syzkaller.2WWYnx/0/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 66.859466][ T5127] Bluetooth: hci2: command tx timeout [ 66.925034][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.939927][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.949996][ T5127] Bluetooth: hci0: command tx timeout [ 66.959731][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.976198][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.992588][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.007919][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.017748][ T5127] Bluetooth: hci3: command tx timeout [ 67.017788][ T5127] Bluetooth: hci4: command tx timeout [ 67.017995][ T5118] Bluetooth: hci1: command tx timeout [ 67.039382][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.061383][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.076879][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.087137][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.101253][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.113549][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.125500][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.143416][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.161555][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.174371][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.200854][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.211552][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.222020][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.237066][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.247307][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.258438][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.269737][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.281306][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.294670][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.304605][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.315328][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.325385][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.337284][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.347161][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.358713][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.370726][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.385397][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.388270][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.396275][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412367][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.421439][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.430521][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.449313][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.459599][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.469587][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.480115][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.510319][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.520478][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.694728][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.707555][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.732293][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.746529][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.827632][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.854541][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.987753][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.036809][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.154032][ T5218] Bluetooth: MGMT ver 1.22 [ 68.423867][ T5228] lo speed is unknown, defaulting to 1000 [ 68.435265][ T5229] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 68.449361][ T5229] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.463625][ T5229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.471108][ T5229] IPv6: NLM_F_CREATE should be set when creating new route [ 68.478461][ T5229] IPv6: NLM_F_CREATE should be set when creating new route [ 68.485748][ T5229] IPv6: NLM_F_CREATE should be set when creating new route [ 68.529118][ T5228] lo speed is unknown, defaulting to 1000 [ 68.547855][ T5228] lo speed is unknown, defaulting to 1000 [ 68.940596][ T5127] Bluetooth: hci2: command tx timeout [ 69.013240][ T5127] Bluetooth: hci0: command tx timeout [ 69.034421][ T5228] infiniband syz0: set active [ 69.040791][ T5232] lo speed is unknown, defaulting to 1000 [ 69.047164][ T5228] infiniband syz0: added lo [ 69.054204][ T5228] syz0: rxe_create_cq: returned err = -12 [ 69.060858][ T5228] infiniband syz0: Couldn't create ib_mad CQ [ 69.069810][ T5228] infiniband syz0: Couldn't open port 1 [ 69.095022][ T5127] Bluetooth: hci1: command tx timeout [ 69.095040][ T5124] Bluetooth: hci4: command tx timeout [ 69.100754][ T5127] Bluetooth: hci3: command tx timeout [ 69.133874][ T5228] RDS/IB: syz0: added [ 69.138540][ T5228] smc: adding ib device syz0 with port count 1 [ 69.159073][ T5228] smc: ib device syz0 port 1 has pnetid [ 69.169739][ T5232] lo speed is unknown, defaulting to 1000 [ 69.191539][ T5228] lo speed is unknown, defaulting to 1000 [ 69.771998][ T5228] lo speed is unknown, defaulting to 1000 [ 69.981706][ T5268] tun0: tun_chr_ioctl cmd 1074025673 [ 69.998299][ T5269] tun0: tun_chr_ioctl cmd 2148553947 [ 70.111181][ T5228] lo speed is unknown, defaulting to 1000 [ 70.586598][ T5284] lo speed is unknown, defaulting to 1000 [ 71.176724][ T5127] Bluetooth: hci4: command 0x0405 tx timeout [ 71.218275][ T5310] syz-executor.0[5310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.218523][ T5310] syz-executor.0[5310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.418990][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.442717][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.693022][ T25] cfg80211: failed to load regulatory.db [ 98.650444][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.682542][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.690704][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.700362][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.708257][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.715622][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.773470][ T5127] Bluetooth: hci5: command tx timeout [ 100.779359][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.798276][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 100.805977][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 100.830393][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 100.838066][ T5127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 100.869804][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.999353][ T5127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 101.008130][ T5127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 101.016124][ T5127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 101.031222][ T5127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 101.039282][ T5127] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 101.047100][ T5127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 101.371962][ T5127] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 101.385638][ T5127] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 101.395887][ T5127] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 101.408139][ T5127] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 101.420120][ T5127] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 101.427935][ T5127] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 101.659040][ T5127] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 101.667594][ T5127] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 101.675620][ T5127] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 101.687802][ T5127] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 101.696389][ T5127] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 101.703853][ T5127] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 102.852759][ T5127] Bluetooth: hci5: command tx timeout [ 102.934267][ T5127] Bluetooth: hci6: command tx timeout [ 103.092671][ T5127] Bluetooth: hci7: command tx timeout [ 103.493177][ T5127] Bluetooth: hci8: command tx timeout [ 103.732885][ T5127] Bluetooth: hci9: command tx timeout [ 104.932513][ T5127] Bluetooth: hci5: command tx timeout [ 105.013309][ T5127] Bluetooth: hci6: command tx timeout [ 105.172564][ T5127] Bluetooth: hci7: command tx timeout [ 105.572735][ T5127] Bluetooth: hci8: command tx timeout [ 105.819623][ T5127] Bluetooth: hci9: command tx timeout [ 107.012526][ T5127] Bluetooth: hci5: command tx timeout [ 107.092554][ T5127] Bluetooth: hci6: command tx timeout [ 107.253239][ T5127] Bluetooth: hci7: command tx timeout [ 107.652709][ T5127] Bluetooth: hci8: command tx timeout [ 107.892660][ T5127] Bluetooth: hci9: command tx timeout [ 109.174315][ T5127] Bluetooth: hci6: command tx timeout [ 109.332571][ T5127] Bluetooth: hci7: command tx timeout [ 109.733176][ T5127] Bluetooth: hci8: command tx timeout [ 109.972523][ T5127] Bluetooth: hci9: command tx timeout [ 132.865840][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873650][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.166762][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 164.175220][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 164.182941][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 164.190997][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 164.198789][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 164.209097][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 165.746306][ T5127] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 165.755581][ T5127] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 165.776659][ T5127] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 165.785257][ T5127] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 165.793348][ T5127] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 165.800805][ T5127] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 165.986301][ T5127] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 165.995114][ T5127] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 166.002940][ T5127] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 166.011474][ T5127] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 166.023203][ T5127] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 166.030626][ T5127] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 166.292505][ T5127] Bluetooth: hci10: command tx timeout [ 166.507599][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 166.523887][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 166.531597][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 166.540732][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 166.548946][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 166.557996][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 166.748935][ T5127] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 166.766997][ T5127] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 166.774976][ T5127] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 166.784129][ T5127] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 166.791839][ T5127] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 166.799359][ T5127] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 167.892596][ T5118] Bluetooth: hci11: command tx timeout [ 168.054427][ T5118] Bluetooth: hci12: command tx timeout [ 168.372467][ T5118] Bluetooth: hci10: command tx timeout [ 168.617396][ T5118] Bluetooth: hci13: command tx timeout [ 168.852599][ T5118] Bluetooth: hci14: command tx timeout [ 169.972607][ T5118] Bluetooth: hci11: command tx timeout [ 170.132737][ T5118] Bluetooth: hci12: command tx timeout [ 170.452496][ T5118] Bluetooth: hci10: command tx timeout [ 170.692690][ T5118] Bluetooth: hci13: command tx timeout [ 170.932719][ T5118] Bluetooth: hci14: command tx timeout [ 172.052497][ T5118] Bluetooth: hci11: command tx timeout [ 172.214344][ T5118] Bluetooth: hci12: command tx timeout [ 172.532473][ T5118] Bluetooth: hci10: command tx timeout [ 172.785667][ T5118] Bluetooth: hci13: command tx timeout [ 173.012504][ T5118] Bluetooth: hci14: command tx timeout [ 174.132576][ T5118] Bluetooth: hci11: command tx timeout [ 174.292520][ T5118] Bluetooth: hci12: command tx timeout [ 174.856366][ T5118] Bluetooth: hci13: command tx timeout [ 175.092547][ T5118] Bluetooth: hci14: command tx timeout [ 186.152002][ T5118] Bluetooth: hci4: command 0x0405 tx timeout [ 186.158095][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 186.162530][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 186.164133][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 186.170100][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 194.303003][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.310590][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.812585][ T30] INFO: task syz-executor.3:5228 blocked for more than 143 seconds. [ 221.820913][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 2024/06/14 09:08:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 221.853195][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.861914][ T30] task:syz-executor.3 state:D stack:20656 pid:5228 tgid:5225 ppid:5120 flags:0x00004006 [ 221.883627][ T30] Call Trace: [ 221.886940][ T30] [ 221.889889][ T30] __schedule+0x17e8/0x4a20 [ 221.909666][ T30] ? __pfx___schedule+0x10/0x10 [ 221.914602][ T30] ? __pfx_lock_release+0x10/0x10 [ 221.919662][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 221.938362][ T30] ? schedule+0x90/0x320 [ 221.943052][ T30] schedule+0x14b/0x320 [ 221.947242][ T30] schedule_preempt_disabled+0x13/0x30 [ 221.972710][ T5127] Bluetooth: hci5: command 0x0406 tx timeout [ 221.987852][ T30] __mutex_lock+0x6a4/0xd70 [ 221.998386][ T30] ? __mutex_lock+0x527/0xd70 [ 222.015158][ T30] ? ib_get_eth_speed+0x153/0x800 [ 222.020239][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 222.045977][ T30] ? _raw_spin_unlock+0x28/0x50 [ 222.050869][ T30] ? ib_device_get_netdev+0x153/0x3b0 [ 222.072453][ T30] ib_get_eth_speed+0x153/0x800 [ 222.077386][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 222.112385][ T30] ? __pfx_kobject_add+0x10/0x10 [ 222.117370][ T30] ? rxe_query_port+0x4f/0x260 [ 222.122154][ T30] rxe_query_port+0x76/0x260 [ 222.161632][ T30] ib_query_port+0x166/0x7d0 [ 222.171895][ T30] ib_setup_port_attrs+0x299/0x2440 [ 222.188448][ T30] ? device_add+0xa6a/0xbf0 [ 222.202435][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 222.208105][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 222.223975][ T30] ? device_add+0x460/0xbf0 [ 222.230970][ T30] add_one_compat_dev+0x51a/0x710 [ 222.245202][ T30] enable_device_and_get+0x31a/0x440 [