last executing test programs: 2.632447446s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f00000024c0)={&(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x4000000) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1d, 0x60f, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000080)={0xfffc, 0x200}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4e20, @local}}, 0xff, 0x7, 0xfffffff9, 0x8, 0x0, 0x59, 0x8}, &(0x7f0000000a00)=0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x74, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x56, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="0b605fcc36fc"}, 0x0, @default, 0x0, @val={0x0, 0x7, @random="049581e09236dd"}, @void, @void, @val={0x4, 0x6, {0x0, 0x0, 0xb6, 0xe26a}}, @void, @val={0x5, 0x3}, @val={0x25, 0x3, {0x1}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]}, 0x74}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="02040400d3fc02000000ab5d71acedd7c9560385dcb1894f", 0x94e917e28faf61e, 0x0, &(0x7f0000000340)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000a00)=0x10, 0x0) sendmmsg$sock(r12, &(0x7f0000000e00)=[{{&(0x7f0000000a40)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="160c5fcd63438b8610de938f9d70db6d3b4c4b7530b525393ef65b76ef", 0x1d}, {&(0x7f0000000b00)="14b41d6bbcd295d0b323414e177ba5ef0287d2b2", 0x14}, {&(0x7f0000000b40)="3f9a09724a7118f3016e185ce882f5d466268e71c1ed34376f9a398676602f508f", 0x21}, {&(0x7f0000000c00)="8088e0b20fec5be91084e36c75df22967d06b20cc4ef222bfd7fcb421a97e7a77facfbe2", 0x24}, {0x0}], 0x5, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}], 0x1, 0x90) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)={0x38, r7, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff1d, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}}, 0x24000800) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)={0x20, r5, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.449664601s ago: executing program 2: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8b0, 0x47}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0xac}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e24, 0xffff, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffa4}, 0x0, 0x0, 0x3, 0x19, 0xfffa}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6}, 0x48) socket$packet(0x11, 0x3, 0x300) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071107b000000000066000000f27fffff95000000"], &(0x7f0000003ff6)='GPL\x00', 0x10005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) 1.674175166s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000660e00000400"/20, @ANYRES32=0x0, @ANYBLOB="001a0000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000ba000a000200aa"], 0x68}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r10}, 0x69) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000000000000000000000180100004920702500002020207b1af8ff00000000bfa1ca71de3f0cc2583e9569db3ff6ec00000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000f4ffffff957d49000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5dd32fcdd26ceb7b63f06c6a930eeea30192941e28266870621c7f2838567d7e2f006cc0bb1524e7b57bc0b7ed884c73e90030524c6a9c38c32e703248a9dc374b0596cee8e9e7e48da7b51"], 0x6c}}, 0x0) 1.665828094s ago: executing program 1: socket(0x0, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa10, 0x9, 0x0) 1.554002692s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2e80, 0x9, 0x0, 0x200, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xd}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003140), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x5a}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000009500004000060000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000021007b560000000000400000ac8f6e5080024a0095"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=0x1, r1, 0x11, 0x20, 0x0, @prog_fd=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000043e3080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085150000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x7}, 0x48) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) 1.353273324s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffee0, &(0x7f0000000280)={&(0x7f0000000200)=@getaddr={0x14, 0x16, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0xc0c0583b, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x3f, 0x4, 0x0, 0x1108, r2, 0x10001, '\x00', 0x0, r2, 0x4, 0x0, 0x0, 0xf}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000040)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xff, 0x0, 0x0, @mcast1, @mcast1, 0x0, 0x700, 0x12, 0x1208e00}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r2}, 0x90) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 1.286288503s ago: executing program 4: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001400)=ANY=[@ANYBLOB="1803000000000000180000000000000018110000c6423c4edf925d515a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000bdf8009500000000007700"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0xffffffcf, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r7 = socket$packet(0x11, 0x0, 0x300) (async) bind$alg(0xffffffffffffffff, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="180000000000000000000000000000006111b8000000000095000800000000002d8106422f6c4f9baab1d6e52eb079c9e484c7594b423daa72d97c6b1d7321c5a242289e1972863759e421ca55bf7255ef74a1576f96"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xffc, &(0x7f0000000200)=""/4092}, 0x90) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970004402b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) sendto$unix(r8, &(0x7f0000000000)="2effb9f9f333f80da6875f82cbfecd836bf06c34a02ec9200c561d06d75663db10533f55c2d37a07fd200d01dee0a3636ad9999fdeb09cb7667c9fd3e39946ae399d8923997a76450935b236228b86ccb0eb3625e7158229f874f72a9233fad75f5640e0e7f4ce0ba9fa7fb235d6ce07e44b04a2db34d78e", 0x78, 0x0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) (async) setsockopt$inet_tcp_int(r11, 0x6, 0x6, &(0x7f0000000040)=0x2, 0x4) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff4db63eb703000008000000b704000100000001000000000300000085200000020000009500000000"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r7, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc}, 0xbbf}], 0x1, 0x2001, 0x0) 974.520898ms ago: executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000038700f200008000300", @ANYRES32=r11], 0x30}}, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, 0x0, 0x0) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000280)="398b25ec5cd71c12955d1ede3c907a73ac7ecd6c11753840482d96fb4bee61", 0x1f}, {&(0x7f00000002c0)="521d1087f576f386c97c0a57386edca17124d486f73c9020ca22e13d474cf534222cab7eb285acf72182837a66c556612de008762a14f38d6f126de978d7a6ce486029c2fa358e1a81a0cee448bd53dd29158fa67c5a20d22264e484550a8d36b8f23813cf69f218756532de", 0x6c}], 0x2, 0x7, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0xc02, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r14, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendfile(r6, r4, 0x0, 0x10000a007) 963.441512ms ago: executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe0d, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x4}}, 0x10) (async) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) (async) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/38, 0x26}}], 0x1, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r2) r5 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x8}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000280)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000780)="f4000900062b2f26c1829df481fe80000000000000dc8b850f238466cc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="07ef080000000000000008"], 0x14}}, 0x0) 776.930941ms ago: executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "f3"}]}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="0800050009"], 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x0, 0x0) 746.106253ms ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x410, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x3f4, 0x6, [@m_tunnel_key={0x138, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xea, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b6442"}, {0xc}, {0xc}}}, @m_ife={0x94, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x39, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0c"}, {0xc}, {0xc}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xec, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x65, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e"}, {0xc}, {0xc}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x4c, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x15, 0x6, "41be356e964e7745f9a57571dce1c50c2b"}, {0xc}, {0xc}}}]}]}}]}, 0x4a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 678.035583ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffd7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) socket$inet6(0xa, 0x0, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6(0xa, 0x3, 0x38) (async) r4 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @private1, 0xffffffff}, 0xf) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '\\'}, {0x20, '^-)%'}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '.^\xe1\xcd\xd1\xba._\xdaU\x1e\x06\x83\xf8\xff\x12\xc4\x0f\xed\xcb\x02y@?\xe30\xd0%u\xb0\xf5\xcd|\xb9<\xab\xe4\xeb\xfe\xdd\x1d\v\xed\xb0\xc2\x8f@\xc7M\x8d\xcf\x11\xee\xc0~\x14BUE\xb3\x06\x05r\xf1\xd9:D\v&\x85z\x80\xef\xd8\xfa]+\xf9\xc1\xcf\xaf\x12\\\\\xbcxj\xe1\xc7\xfeu\xd2\x83\xb9i\x15\xa1\xd7\xdc\xa6\xc2\x86\xa1E\x8e\xe1\xe7\xd8\xdc\n\xb7U\xdd{\xa3=O\xa0\x9e\xe6\xc0\xf0d\xaf\x1f\xde}?\xccU\xce\xe6|6\x14\x1d$dJ\xf2)e\xe7\r\xa3\x87\x10\xd8r\xfb\xa3\xf3&\n\xe3\xb2\xf0\x97+\xc2\x8d%\xd8\x01\xa7I9[w'}], 0xa, "11b2e4a2b4d8acda1690bef7b87d08685a30f9b205ed3e164ad8ae7566c83968f6f8b9f1a464fa1f08f0c3e827c5d07c541664ba573112a0ec6d882429d168feb714f25bef461e6c75e95f96bf11f5c2b119bad6f3fb86bf4f33e2e0322621d0"}, 0x123) (async) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '\\'}, {0x20, '^-)%'}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '.^\xe1\xcd\xd1\xba._\xdaU\x1e\x06\x83\xf8\xff\x12\xc4\x0f\xed\xcb\x02y@?\xe30\xd0%u\xb0\xf5\xcd|\xb9<\xab\xe4\xeb\xfe\xdd\x1d\v\xed\xb0\xc2\x8f@\xc7M\x8d\xcf\x11\xee\xc0~\x14BUE\xb3\x06\x05r\xf1\xd9:D\v&\x85z\x80\xef\xd8\xfa]+\xf9\xc1\xcf\xaf\x12\\\\\xbcxj\xe1\xc7\xfeu\xd2\x83\xb9i\x15\xa1\xd7\xdc\xa6\xc2\x86\xa1E\x8e\xe1\xe7\xd8\xdc\n\xb7U\xdd{\xa3=O\xa0\x9e\xe6\xc0\xf0d\xaf\x1f\xde}?\xccU\xce\xe6|6\x14\x1d$dJ\xf2)e\xe7\r\xa3\x87\x10\xd8r\xfb\xa3\xf3&\n\xe3\xb2\xf0\x97+\xc2\x8d%\xd8\x01\xa7I9[w'}], 0xa, "11b2e4a2b4d8acda1690bef7b87d08685a30f9b205ed3e164ad8ae7566c83968f6f8b9f1a464fa1f08f0c3e827c5d07c541664ba573112a0ec6d882429d168feb714f25bef461e6c75e95f96bf11f5c2b119bad6f3fb86bf4f33e2e0322621d0"}, 0x123) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r6, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20005000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r8, 0x1}, 0x14}}, 0x0) shutdown(r1, 0x1) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x11, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000140)=0x9c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 532.275867ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) shutdown(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0xa0003b40, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000380)=0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 517.573451ms ago: executing program 3: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8b0, 0x47}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0xac}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e24, 0xffff, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffa4}, 0x0, 0x0, 0x3, 0x19, 0xfffa}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6}, 0x48) socket$packet(0x11, 0x3, 0x300) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071107b000000000066000000f27fffff95000000"], &(0x7f0000003ff6)='GPL\x00', 0x10005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) 325.8449ms ago: executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa09}]}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001000850000000c00000000000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x54}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x383}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x7ffffffd, 0x450, 0x7e0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x7e0, 0x7e0, 0xffffffff, 0x7e0, 0x7e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'lo\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast2, @port, @gre_key}}}, {{@ipv6={@remote, @remote, [], [], 'wg2\x00', 'pimreg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev, @empty, [], [], 'hsr0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@remote, @ipv4, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000187760a5099aec5b94c31e345bab5a644045aa505b48bfc432f1369c2015e20bd7a09b5fcdee0d1bd54e41bb30d5d1f38407d194b2b2700917b3ee78517e29ca267ee1277cdd7ef54ffed789cb79cd7f85fa69acf9635017da250289"], 0x20}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 252.353324ms ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$netlink(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="a40200002b0001"], 0x2a4}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000174614"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="1000"], 0x10}], 0x1}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r6, 0x80000001, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080), 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYBLOB="00042dbd7000fedbdf25060000008400018014000200736974300000000000000000000000000800030002000000140002006261746164765f736c6176655f30000008000100", @ANYBLOB="140002007665746831000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="14000200766574683100000000000000000000000800030002000000", @ANYRES32=0x0, @ANYBLOB="340001801400020069703667726530000000000000000000080003000100000000000c00010700000008000100"/75, @ANYBLOB="08000100", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c300000000000000000000800030001000000140002007465616d3000"/48, @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f31", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f68737200000000080003000200000008000300020000004c000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d7930000000000000000000000800030001000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="2000018008000300010000001400020070696d7265673100000000000000000018000180140002006e657464657673696d30000000000000"], 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x8091) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@ax25={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)="864f5484dba491dca0bde26ad45601c6c7da4f8819b38da59efd8a7362c9fb2feaed25def1c47449231aa30509219e39d5dd5d305f70281a61ab29a21f53a8f7d3d266acbcdb6721af0e9bf5c7e68a3242bdb693b24552682a61e438109b357b6dc69bec83d647f8f1d9d97451719aa1b56978fcfc5603ce7704ad931324b9ffd2", 0x81}, {&(0x7f0000000080)="15c64ec61828301ccf99eac868dd03b15de4a75bc876270725e45fcac5e09191919c0a4e", 0x24}], 0x2, &(0x7f0000000980)=[{0xa8, 0x103, 0x40, "67266386ea223957978cfd49cab705db54de04d013e4aae6ae300a7105e825f0490f9ad27f4ddfa192342dadc2b2ec381278acc077b203adc6578ed075623947e9d1c339c0226bb371163c9acbdd9e9569d939f68d31e58135e315a2b4a7ceedd3c6ec3794d3379d83d7936061d5786e7ef17caa8f8c68217dae19c4cb2ceb5bad7caf97ab08cba7a5bab050754e0a0ab5024183"}, {0xc0, 0x10c, 0x10001, "416a1d1a2098eb5d41bdfc8165f45f32192288f63579d9ba64e30805f8b2b21837952be62a2dab871c9af7ff2b0dc03e6051d2349db2f3a7a9ded36d7816e16817fd2e66b5841e22479a0a5a2de4936de2d873ed7b689e88d645efb51db8b169344b2e164e5e32c9c47f431f4c71645e16bda6eea3ea7b20a115ff3d9cf5ea63d4ba59b2fc21be93b75c226c42e6d246a7f21a1c59cfa2647c36c5094e8094570c6979728752018bc67ae4346e73ecad"}, {0x40, 0x117, 0x7ff, "bee580a39f8a7773cc6b8e16e0a60b30045fd1710c276ee40a6639e35a5f3eb40f6f706e35647caeec4c42fcd3"}, {0x80, 0x115, 0x9, "1679a720dc6dad01b619573690b83b1336dee649e8ac1347fe52d10b3fbfb10048d645647b469c1d09844a4dc8408409fcb676be9792e804e86936fbe51bed6714b8a2718d21e270ee060138fc5bf8ea4c8b7ba4d140f2aad870734bdeb67c51a94f993ba062d2159232"}, {0x68, 0x101, 0x8, "d40d39b7155c05e0d6a27f553dc3c0d582a35a8b5776513c46eb1711182a501b81a6f9ee31ea07cb17880d0166fca783e6e125f361f0f90853629376e32973faf52f82724e6f2515ce6716cd85e0e4915894"}], 0x290}, 0x80e1071efdb16dcf) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000880) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_PROTO={0x6}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a", 0x86}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r7, 0x58, &(0x7f00000007c0)}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000000c0)={0x7fffffff, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. 2024/06/07 21:15:18 fuzzer started 2024/06/07 21:15:18 dialing manager at 10.128.0.169:30018 [ 74.504486][ T5094] cgroup: Unknown subsys name 'net' [ 74.678868][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/07 21:15:20 starting 5 executor processes [ 76.116527][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.188819][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.198204][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.201423][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.206303][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.214103][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.224389][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.227970][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.242433][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.243552][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.249826][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.257569][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.273560][ T4490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.288368][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.295966][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.303776][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.311553][ T4490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.322190][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.329384][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.337303][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.344938][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.346185][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.364437][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.373718][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.382569][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.389327][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.396598][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.406865][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.414720][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.423274][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.432170][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.439929][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.451488][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.950521][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 78.101838][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 78.116106][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 78.208170][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 78.304784][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.313146][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.321215][ T5115] bridge_slave_0: entered allmulticast mode [ 78.328454][ T5115] bridge_slave_0: entered promiscuous mode [ 78.388153][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.395466][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.403009][ T5115] bridge_slave_1: entered allmulticast mode [ 78.410498][ T5115] bridge_slave_1: entered promiscuous mode [ 78.438155][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.445684][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.453333][ T5125] bridge_slave_0: entered allmulticast mode [ 78.460380][ T5125] bridge_slave_0: entered promiscuous mode [ 78.468861][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.476144][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.483602][ T5125] bridge_slave_1: entered allmulticast mode [ 78.491144][ T5125] bridge_slave_1: entered promiscuous mode [ 78.512196][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.519436][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.527751][ T5117] bridge_slave_0: entered allmulticast mode [ 78.534974][ T5117] bridge_slave_0: entered promiscuous mode [ 78.598485][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.606000][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.613354][ T5117] bridge_slave_1: entered allmulticast mode [ 78.620397][ T5117] bridge_slave_1: entered promiscuous mode [ 78.652582][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.665716][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.689536][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.766984][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.779587][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.802856][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.810414][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.818848][ T5116] bridge_slave_0: entered allmulticast mode [ 78.826476][ T5116] bridge_slave_0: entered promiscuous mode [ 78.839526][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.847983][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.855813][ T5116] bridge_slave_1: entered allmulticast mode [ 78.863448][ T5116] bridge_slave_1: entered promiscuous mode [ 78.885901][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.914204][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 78.941542][ T5125] team0: Port device team_slave_0 added [ 78.965422][ T5115] team0: Port device team_slave_0 added [ 78.994674][ T5125] team0: Port device team_slave_1 added [ 79.003661][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.029592][ T5115] team0: Port device team_slave_1 added [ 79.060450][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.074313][ T5117] team0: Port device team_slave_0 added [ 79.152505][ T5117] team0: Port device team_slave_1 added [ 79.174109][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.181228][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.208422][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.224408][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.231563][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.258027][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.271913][ T5126] Bluetooth: hci1: command tx timeout [ 79.277319][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.284682][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.310656][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.351228][ T5116] team0: Port device team_slave_0 added [ 79.370465][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.377964][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.405243][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.418803][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.426247][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.452559][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.466511][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.473586][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.499632][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.511638][ T5126] Bluetooth: hci0: command tx timeout [ 79.513848][ T5116] team0: Port device team_slave_1 added [ 79.517664][ T5126] Bluetooth: hci4: command tx timeout [ 79.529224][ T5133] Bluetooth: hci3: command tx timeout [ 79.529248][ T5123] Bluetooth: hci2: command tx timeout [ 79.560076][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.567415][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.593941][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.659939][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.667527][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.694601][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.727305][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.734772][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.743401][ T5127] bridge_slave_0: entered allmulticast mode [ 79.750536][ T5127] bridge_slave_0: entered promiscuous mode [ 79.777760][ T5125] hsr_slave_0: entered promiscuous mode [ 79.784705][ T5125] hsr_slave_1: entered promiscuous mode [ 79.822122][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.829402][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.837180][ T5127] bridge_slave_1: entered allmulticast mode [ 79.845554][ T5127] bridge_slave_1: entered promiscuous mode [ 79.869946][ T5115] hsr_slave_0: entered promiscuous mode [ 79.876828][ T5115] hsr_slave_1: entered promiscuous mode [ 79.884450][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.892867][ T5115] Cannot create hsr debugfs directory [ 79.935587][ T5116] hsr_slave_0: entered promiscuous mode [ 79.942175][ T5116] hsr_slave_1: entered promiscuous mode [ 79.948743][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.957789][ T5116] Cannot create hsr debugfs directory [ 80.028722][ T5117] hsr_slave_0: entered promiscuous mode [ 80.036322][ T5117] hsr_slave_1: entered promiscuous mode [ 80.043306][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.051084][ T5117] Cannot create hsr debugfs directory [ 80.078098][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.155988][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.275340][ T5127] team0: Port device team_slave_0 added [ 80.311764][ T5127] team0: Port device team_slave_1 added [ 80.404477][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.412253][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.438569][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.490074][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.497555][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.523816][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.719812][ T5127] hsr_slave_0: entered promiscuous mode [ 80.727181][ T5127] hsr_slave_1: entered promiscuous mode [ 80.734169][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.742172][ T5127] Cannot create hsr debugfs directory [ 80.847740][ T5125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.864256][ T5125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.880558][ T5125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.904006][ T5125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.033840][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.051758][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.065146][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.083063][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.172506][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.183987][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.200524][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.232976][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.316890][ T5127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.336875][ T5127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.351426][ T5133] Bluetooth: hci1: command tx timeout [ 81.384240][ T5127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.438692][ T5127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.487765][ T5116] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.505802][ T5116] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.528026][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.538336][ T5116] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.567028][ T5116] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.591808][ T5133] Bluetooth: hci3: command tx timeout [ 81.592249][ T5124] Bluetooth: hci2: command tx timeout [ 81.597294][ T5133] Bluetooth: hci0: command tx timeout [ 81.603156][ T5126] Bluetooth: hci4: command tx timeout [ 81.636643][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.667730][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.675230][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.707317][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.714571][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.795334][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.885022][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.923217][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.930485][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.957485][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.989452][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.996747][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.069626][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.119946][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.146647][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.153992][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.214447][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.221831][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.252545][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.282332][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.385184][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.392426][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.420840][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.440499][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.447749][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.520084][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.553110][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.560270][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.596182][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.603399][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.739357][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.848524][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.918279][ T5125] veth0_vlan: entered promiscuous mode [ 82.963639][ T5125] veth1_vlan: entered promiscuous mode [ 83.128927][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.179737][ T5125] veth0_macvtap: entered promiscuous mode [ 83.219174][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.265761][ T5125] veth1_macvtap: entered promiscuous mode [ 83.426283][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.435815][ T5117] veth0_vlan: entered promiscuous mode [ 83.441516][ T5133] Bluetooth: hci1: command tx timeout [ 83.455656][ T5117] veth1_vlan: entered promiscuous mode [ 83.467561][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.476999][ T5127] veth0_vlan: entered promiscuous mode [ 83.497586][ T5127] veth1_vlan: entered promiscuous mode [ 83.541922][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.558270][ T5115] veth0_vlan: entered promiscuous mode [ 83.577740][ T5125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.587198][ T5125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.596619][ T5125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.607627][ T5125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.657157][ T5115] veth1_vlan: entered promiscuous mode [ 83.677782][ T5133] Bluetooth: hci2: command tx timeout [ 83.681468][ T5124] Bluetooth: hci4: command tx timeout [ 83.683759][ T5133] Bluetooth: hci3: command tx timeout [ 83.688632][ T5124] Bluetooth: hci0: command tx timeout [ 83.714177][ T5117] veth0_macvtap: entered promiscuous mode [ 83.742198][ T5127] veth0_macvtap: entered promiscuous mode [ 83.766853][ T5117] veth1_macvtap: entered promiscuous mode [ 83.813031][ T5116] veth0_vlan: entered promiscuous mode [ 83.827742][ T5127] veth1_macvtap: entered promiscuous mode [ 83.846902][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.858484][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.875124][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.912082][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.923709][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.936980][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.960451][ T5115] veth0_macvtap: entered promiscuous mode [ 83.978331][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.987769][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003161][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.012328][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.037116][ T3869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.044686][ T5115] veth1_macvtap: entered promiscuous mode [ 84.053367][ T5116] veth1_vlan: entered promiscuous mode [ 84.057317][ T3869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.075391][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.094601][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.104930][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.117009][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.128636][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.177643][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.188434][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.199704][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.210638][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.220885][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.233154][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.245112][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.258119][ T3869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.267090][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.267284][ T3869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.279540][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.295777][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.309071][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.323662][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.338936][ T5127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.348084][ T5127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.357624][ T5127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368071][ T5127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386940][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.398943][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.409205][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.421706][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.431997][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.442517][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.454256][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.500124][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.510258][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.519947][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.529706][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780682][ T5116] veth0_macvtap: entered promiscuous mode [ 84.786785][ T2390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.801957][ T2390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.824927][ T5116] veth1_macvtap: entered promiscuous mode [ 84.858233][ T2390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.869999][ T2390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.969404][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.988056][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.998535][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.023695][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.034925][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.046450][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.057211][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.068223][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.078658][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.096058][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.113691][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.156361][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.173111][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.183128][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.194818][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.205106][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.216107][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.227617][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.238733][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.250701][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.263840][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.287575][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.289753][ T5116] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.306132][ T5116] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.317928][ T5116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.328557][ T5116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.364942][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.386177][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.515175][ T5124] Bluetooth: hci1: command tx timeout [ 85.595428][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.630929][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.679490][ T5214] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.753277][ T5124] Bluetooth: hci0: command tx timeout [ 85.761627][ T5126] Bluetooth: hci4: command tx timeout [ 85.765848][ T5133] Bluetooth: hci2: command tx timeout [ 85.767176][ T5124] Bluetooth: hci3: command tx timeout [ 85.858134][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.888260][ T5214] geneve2: entered promiscuous mode [ 85.898205][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.972305][ T5214] geneve2: entered allmulticast mode [ 85.990440][ T5221] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 86.205580][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.243078][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.306485][ T5232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.536935][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.598067][ T5232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.122622][ T5258] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.164146][ T5258] ================================================================== [ 87.172316][ T5258] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f9/0x240 [ 87.180294][ T5258] Read of size 2 at addr ffff88807bee0940 by task syz-executor.0/5258 [ 87.188658][ T5258] [ 87.191021][ T5258] CPU: 0 PID: 5258 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 87.201664][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/07 21:15:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 87.211771][ T5258] Call Trace: [ 87.215083][ T5258] [ 87.218044][ T5258] dump_stack_lvl+0x241/0x360 [ 87.222778][ T5258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.228112][ T5258] ? __pfx__printk+0x10/0x10 [ 87.232749][ T5258] ? _printk+0xd5/0x120 [ 87.236943][ T5258] ? __virt_addr_valid+0x183/0x520 [ 87.242096][ T5258] ? __virt_addr_valid+0x183/0x520 [ 87.247358][ T5258] print_report+0x169/0x550 [ 87.251919][ T5258] ? __virt_addr_valid+0x183/0x520 [ 87.257086][ T5258] ? __virt_addr_valid+0x183/0x520 [ 87.262256][ T5258] ? __virt_addr_valid+0x44e/0x520 [ 87.267421][ T5258] ? __phys_addr+0xba/0x170 [ 87.272059][ T5258] ? cfg80211_wext_freq+0x1f9/0x240 [ 87.277301][ T5258] kasan_report+0x143/0x180 [ 87.281854][ T5258] ? cfg80211_wext_freq+0x1f9/0x240 [ 87.287263][ T5258] cfg80211_wext_freq+0x1f9/0x240 [ 87.292438][ T5258] cfg80211_wext_siwscan+0x4fd/0x10d0 [ 87.297898][ T5258] ioctl_standard_iw_point+0x788/0xcb0 [ 87.303520][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 87.309387][ T5258] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 87.315409][ T5258] ? _printk+0xd5/0x120 [ 87.319788][ T5258] ? __pfx__printk+0x10/0x10 [ 87.324509][ T5258] ioctl_standard_call+0xc7/0x290 [ 87.329678][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 87.335535][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 87.341398][ T5258] wext_ioctl_dispatch+0x58e/0x640 [ 87.346560][ T5258] ? __pfx_ioctl_standard_call+0x10/0x10 [ 87.352249][ T5258] ? __pfx_ioctl_private_call+0x10/0x10 [ 87.357855][ T5258] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 87.363552][ T5258] ? __might_fault+0xc6/0x120 [ 87.368287][ T5258] wext_handle_ioctl+0x15f/0x270 [ 87.373281][ T5258] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 87.378812][ T5258] sock_ioctl+0x17f/0x8e0 [ 87.383189][ T5258] ? __pfx_sock_ioctl+0x10/0x10 [ 87.388077][ T5258] ? __fget_files+0x29/0x470 [ 87.392719][ T5258] ? __fget_files+0x3f6/0x470 [ 87.397435][ T5258] ? __fget_files+0x29/0x470 [ 87.402094][ T5258] ? bpf_lsm_file_ioctl+0x9/0x10 [ 87.407049][ T5258] ? security_file_ioctl+0x87/0xb0 [ 87.412272][ T5258] ? __pfx_sock_ioctl+0x10/0x10 [ 87.417186][ T5258] __se_sys_ioctl+0xfc/0x170 [ 87.421813][ T5258] do_syscall_64+0xf3/0x230 [ 87.426333][ T5258] ? clear_bhb_loop+0x35/0x90 [ 87.431111][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.437037][ T5258] RIP: 0033:0x7f178407cf69 [ 87.441464][ T5258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.461255][ T5258] RSP: 002b:00007f1784e120c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.469715][ T5258] RAX: ffffffffffffffda RBX: 00007f17841b3f80 RCX: 00007f178407cf69 [ 87.477710][ T5258] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 87.485696][ T5258] RBP: 00007f17840da6fe R08: 0000000000000000 R09: 0000000000000000 [ 87.493771][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.501754][ T5258] R13: 000000000000000b R14: 00007f17841b3f80 R15: 00007ffd4546a728 [ 87.509748][ T5258] [ 87.512773][ T5258] [ 87.515101][ T5258] Allocated by task 5258: [ 87.519433][ T5258] kasan_save_track+0x3f/0x80 [ 87.524128][ T5258] __kasan_kmalloc+0x98/0xb0 [ 87.528731][ T5258] __kmalloc_noprof+0x1f9/0x400 [ 87.533595][ T5258] ioctl_standard_iw_point+0x4ae/0xcb0 [ 87.539068][ T5258] ioctl_standard_call+0xc7/0x290 [ 87.544281][ T5258] wext_ioctl_dispatch+0x58e/0x640 [ 87.549409][ T5258] wext_handle_ioctl+0x15f/0x270 [ 87.554377][ T5258] sock_ioctl+0x17f/0x8e0 [ 87.558721][ T5258] __se_sys_ioctl+0xfc/0x170 [ 87.563317][ T5258] do_syscall_64+0xf3/0x230 [ 87.567849][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.573758][ T5258] [ 87.576186][ T5258] The buggy address belongs to the object at ffff88807bee0800 [ 87.576186][ T5258] which belongs to the cache kmalloc-512 of size 512 [ 87.590249][ T5258] The buggy address is located 4 bytes to the right of [ 87.590249][ T5258] allocated 316-byte region [ffff88807bee0800, ffff88807bee093c) [ 87.604765][ T5258] [ 87.607091][ T5258] The buggy address belongs to the physical page: [ 87.613515][ T5258] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bee0 [ 87.622372][ T5258] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.631142][ T5258] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.638871][ T5258] page_type: 0xffffefff(slab) [ 87.643563][ T5258] raw: 00fff00000000040 ffff888015041c80 dead000000000122 0000000000000000 [ 87.652239][ T5258] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 87.660920][ T5258] head: 00fff00000000040 ffff888015041c80 dead000000000122 0000000000000000 [ 87.669610][ T5258] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 87.678291][ T5258] head: 00fff00000000002 ffffea0001efb801 ffffffffffffffff 0000000000000000 [ 87.686973][ T5258] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 87.695649][ T5258] page dumped because: kasan: bad access detected [ 87.702071][ T5258] page_owner tracks the page as allocated [ 87.707872][ T5258] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5116, tgid 5116 (syz-executor.0), ts 87004574919, free_ts 86359106328 [ 87.729166][ T5258] post_alloc_hook+0x1f3/0x230 [ 87.734044][ T5258] get_page_from_freelist+0x2e2d/0x2ee0 [ 87.739870][ T5258] __alloc_pages_noprof+0x256/0x6c0 [ 87.745256][ T5258] alloc_slab_page+0x5f/0x120 [ 87.749951][ T5258] allocate_slab+0x5a/0x2e0 [ 87.754465][ T5258] ___slab_alloc+0xcd1/0x14b0 [ 87.759144][ T5258] __slab_alloc+0x58/0xa0 [ 87.763497][ T5258] __kmalloc_node_noprof+0x286/0x440 [ 87.768799][ T5258] alloc_slab_obj_exts+0x3a/0xa0 [ 87.773849][ T5258] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 87.779852][ T5258] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 87.785329][ T5258] anon_vma_clone+0x98/0x4e0 [ 87.789928][ T5258] anon_vma_fork+0x87/0x580 [ 87.794448][ T5258] copy_mm+0xdf3/0x2020 [ 87.798639][ T5258] copy_process+0x187a/0x3dc0 [ 87.803344][ T5258] kernel_clone+0x226/0x8f0 [ 87.807863][ T5258] page last free pid 3869 tgid 3869 stack trace: [ 87.814195][ T5258] free_unref_page+0xd22/0xea0 [ 87.819163][ T5258] __put_partials+0xeb/0x130 [ 87.823763][ T5258] put_cpu_partial+0x17c/0x250 [ 87.828620][ T5258] __slab_free+0x2ea/0x3d0 [ 87.833053][ T5258] qlist_free_all+0x9e/0x140 [ 87.837758][ T5258] kasan_quarantine_reduce+0x14f/0x170 [ 87.843414][ T5258] __kasan_slab_alloc+0x23/0x80 [ 87.848277][ T5258] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 87.854188][ T5258] __alloc_skb+0x1c3/0x440 [ 87.858793][ T5258] alloc_skb_with_frags+0xc3/0x770 [ 87.864266][ T5258] sock_alloc_send_pskb+0x91a/0xa60 [ 87.869495][ T5258] mld_newpack+0x1c3/0xa90 [ 87.874198][ T5258] add_grec+0x1492/0x19a0 [ 87.878561][ T5258] mld_send_initial_cr+0x228/0x4b0 [ 87.883687][ T5258] ipv6_mc_dad_complete+0x88/0x490 [ 87.888810][ T5258] addrconf_dad_completed+0x712/0xcd0 [ 87.894466][ T5258] [ 87.896892][ T5258] Memory state around the buggy address: [ 87.902545][ T5258] ffff88807bee0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.910615][ T5258] ffff88807bee0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.918774][ T5258] >ffff88807bee0900: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 87.927191][ T5258] ^ [ 87.933397][ T5258] ffff88807bee0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.941478][ T5258] ffff88807bee0a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.949717][ T5258] ================================================================== [ 88.151170][ T5258] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.158440][ T5258] CPU: 1 PID: 5258 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 88.169327][ T5258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.179507][ T5258] Call Trace: [ 88.182812][ T5258] [ 88.185760][ T5258] dump_stack_lvl+0x241/0x360 [ 88.190471][ T5258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.195699][ T5258] ? __pfx__printk+0x10/0x10 [ 88.200300][ T5258] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.206295][ T5258] ? vscnprintf+0x5d/0x90 [ 88.210641][ T5258] panic+0x349/0x860 [ 88.214633][ T5258] ? check_panic_on_warn+0x21/0xb0 [ 88.219754][ T5258] ? __pfx_panic+0x10/0x10 [ 88.224288][ T5258] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 88.230280][ T5258] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.236639][ T5258] check_panic_on_warn+0x86/0xb0 [ 88.241779][ T5258] ? cfg80211_wext_freq+0x1f9/0x240 [ 88.247010][ T5258] end_report+0x77/0x160 [ 88.251274][ T5258] kasan_report+0x154/0x180 [ 88.255789][ T5258] ? cfg80211_wext_freq+0x1f9/0x240 [ 88.261002][ T5258] cfg80211_wext_freq+0x1f9/0x240 [ 88.266045][ T5258] cfg80211_wext_siwscan+0x4fd/0x10d0 [ 88.271448][ T5258] ioctl_standard_iw_point+0x788/0xcb0 [ 88.276944][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 88.282765][ T5258] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 88.288764][ T5258] ? _printk+0xd5/0x120 [ 88.292946][ T5258] ? __pfx__printk+0x10/0x10 [ 88.297550][ T5258] ioctl_standard_call+0xc7/0x290 [ 88.302603][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 88.308428][ T5258] ? __pfx_cfg80211_wext_siwscan+0x10/0x10 [ 88.314279][ T5258] wext_ioctl_dispatch+0x58e/0x640 [ 88.319510][ T5258] ? __pfx_ioctl_standard_call+0x10/0x10 [ 88.325180][ T5258] ? __pfx_ioctl_private_call+0x10/0x10 [ 88.330753][ T5258] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 88.336400][ T5258] ? __might_fault+0xc6/0x120 [ 88.341112][ T5258] wext_handle_ioctl+0x15f/0x270 [ 88.346076][ T5258] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 88.351560][ T5258] sock_ioctl+0x17f/0x8e0 [ 88.355906][ T5258] ? __pfx_sock_ioctl+0x10/0x10 [ 88.360767][ T5258] ? __fget_files+0x29/0x470 [ 88.365377][ T5258] ? __fget_files+0x3f6/0x470 [ 88.370098][ T5258] ? __fget_files+0x29/0x470 [ 88.374741][ T5258] ? bpf_lsm_file_ioctl+0x9/0x10 [ 88.379699][ T5258] ? security_file_ioctl+0x87/0xb0 [ 88.384824][ T5258] ? __pfx_sock_ioctl+0x10/0x10 [ 88.390122][ T5258] __se_sys_ioctl+0xfc/0x170 [ 88.394737][ T5258] do_syscall_64+0xf3/0x230 [ 88.399263][ T5258] ? clear_bhb_loop+0x35/0x90 [ 88.404056][ T5258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.409967][ T5258] RIP: 0033:0x7f178407cf69 [ 88.414398][ T5258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.434022][ T5258] RSP: 002b:00007f1784e120c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.442494][ T5258] RAX: ffffffffffffffda RBX: 00007f17841b3f80 RCX: 00007f178407cf69 [ 88.450497][ T5258] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 88.458482][ T5258] RBP: 00007f17840da6fe R08: 0000000000000000 R09: 0000000000000000 [ 88.466462][ T5258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.474446][ T5258] R13: 000000000000000b R14: 00007f17841b3f80 R15: 00007ffd4546a728 [ 88.482444][ T5258] [ 88.485716][ T5258] Kernel Offset: disabled [ 88.490041][ T5258] Rebooting in 86400 seconds..