last executing test programs: 22.168627269s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a300000000008000540000000222c0000000b0a01040000000000000000070000000c00104000000000000000010900010073797a3000000000140000001000010000000000000000000084000a"], 0xb0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000001c00)={0x15c4, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x7f, 0xfc, "b791278ae42aa90e22ef7b5d3a0d924b86f57e6ceed061929b158f8e99403d72d6e0360bf7936997f2d45e7f330373f5dcfd42408facfb9972c9feb5e887d28129934b85c81d43a0dcc9c57d37c8847afe89235688b1c17ddf0acb03bb6f1957dedbbcddfcdd336813761f82efb0a160d7ba7eb8f45a78a5ae9e26"}, @NL80211_ATTR_FILS_ERP_REALM={0xbd, 0xfa, "5d773c1ae1db7b23134992f97bc169850093535d8ff928be347c36d79afb36810ee52f3d08e17acac837dadda9e7f394efcba4528fe89b17fc9c2c5b69833d9e6259f635185f0dcc1afcfd6533f61b798956c9728ffdf1438a0f880ae6640f667ff56eb6f3d7a91467e3ca0b1d8184d2bef266f120478062e3ff0853182f0e8951e224fa1169789f415cd73fe177688774ca5f44208a66c82504eb6ba1a898aab53d22ed9da1cf7d66a00585684e36394eebfb30e2c23ddf64"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "4a83c6d02de046dbd31a04a985f0b8b177693c56a11dfdd913e772c641dbc9d0a083d81ced3dea45dc4d2948bebdc120eaac3b2fa886b08207a299b8a55e110daec66719ca43c3edbaa88d26e2a52f966ddf767b7e973f9cac964b68b9fb287eb0109fb08cce"}, @NL80211_ATTR_FILS_ERP_RRK={0x8f, 0xfc, "d64c43920b147a3835ee90f86903b897cd9d3d4018fd874eb4804fd0692793befa360fae7e14e1efdf0b7250eb9e9984443824eb32ef58927ce5d06bb07e63b0434ff8daaac97411200a444cc3c8566d1c9dc7140cf7a21bd2ba9fcac6eba21e17b9037ff054863ebd63c021a90e34e109cbd0c4f027749b32a90eb01d96741557dbe0fb34c2beab702d91"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x800}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "0daafad7ee68"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x37}, @NL80211_ATTR_FILS_ERP_RRK={0x9d, 0xfc, "efa2760c067e4e9fb0d68ed0af56d4dc1a3bcd5c4b32b39e1d2ceccbdca31f234b0558823f78e03aa1f94c2f360ee3a0b78026c4ef67202e209035ff2d40141ea6779a06d8d353065a6dee9c8ec036b9c01899e23c77ad1b4c89cd6f93ae933f968f774a41038bf69e8f3aa2308ffc73e3b3ba8d3abca094ae11683f7ed933318567d4711e406fa5f9171e959b5e5f9b33e758405a2b438dc9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "4860f5b1ba70d85b7666ee"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0xe8, 0xfa, "841c35f6f887a1b43c8d91a3e93f59c4c235841bb25f05a895b8850bf49da1599171f2d6009f1a6127dab160c997c4fd894c91a8897cd6700a5bccf24e53ebde186147ad99d6364100d36a040124dbcf7134715e1f4948a867e7ab330de38b6874e6c4ce16ab58dc9e5549d2640a5afbe72bb817853f3b40a7d9f5b67d54755c6f9145001be5e2129b7235b7bdfdaca93e1eb0712a4701c81b2e3337040485aac25a291b4550775df29df516f8a5b6217ede4e1183b10bd7e8277207b3ad28d887e2e2418caea2e211198b0bfcb8bfe1b5adf7dba43070e45495351a2062faac07ad52fc"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "684fb3334307dcf166029d11"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x13f, 0x2a, [@random_vendor={0xdd, 0xf3, "de98c231e10e52813e49c00191ffa17cfeed789027da62f0bf99858efed6c65286b639a0f43e441be81cc3d4be2b5f19b179d45ac3a631d269864adb093d87f51aff703590b4b588c3a371d46afb5b031ba4d8242140a5d1f8355039fc955d2f8d30b971eacb74126b4c971e86a9fc866373a1496f73719dc986bbc7f40642b69bbea451c98a5137c9af7f15ffd4f51da0812ee980e752947b03b30361e31aae384e8a7f6047b95b367ebb7da3a12630435d76c7b08c4eaea8db8c4739b82d2a09d75855f8f4aa8b1715495a4660e5b4fa67dd7416d068828dba179ccf4f0e53831caf96dedc2ec1415f01c4b515f54d5307db"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xff, 0x6, @device_a, 0x1, @value=@device_b, 0x3, 0x0, @broadcast, 0xe6f}}, @challenge={0x10, 0x1, 0x65}, @cf={0x4, 0x6, {0x1f, 0x7, 0x80, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}, @NL80211_ATTR_IE={0x42, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xe9, 0x34, 0x20}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x4, 0x4, 0x22, 0x8}}, @ht={0x2d, 0x1a, {0x2cb1edec5a6552fd, 0x3, 0x7, 0x0, {0x13ec50b3, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x5, 0x7f}}]}]}, 0x15c4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 21.981062763s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@setlink={0x30, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x30}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000050000000000000000000000bf92180000000000000948000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000fe150000000000005629749e22205dc4bb69cc582407ee60a6ba267cac5186fae6194b5e8dbe046885d19bdd0a042da21bdea15f535efd01311dd392e847a7a97b674954bbeea79a9797"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x100009, 0x658, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, r3, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x2, 0x2, 0x2}], 0x10, 0x2}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) unshare(0x20040600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r7], &(0x7f0000000000)='GPL\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) unshare(0x20000400) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000380)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 21.802006943s ago: executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES64=r9, @ANYRESOCT=r7, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES32=r4], 0x14c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40008d4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r12, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="a77800000000000000003500000008000300", @ANYRES32=r14, @ANYBLOB="0600f1000000000000005500a046fccf0500200164000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="000426bd7000fcdbdf254c0000000c00580061000000000000000c00580003000000000000000c0058007d000000000000000c0058007d000000000000000c00580031000000000000000c00580028000000000000000c0058007d000000000000000c0058001f000000000000000c0058007c000000000000000c0058006900000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 21.552263823s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0xfffffffc}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x73, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000004}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYRESHEX=r4], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r8, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x95}, 0x9c) 19.315387335s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 19.064107967s ago: executing program 3: unshare(0x20000400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016", 0x33}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="ff0008000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x7}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) socket$inet(0x2, 0x6, 0x8001) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES8=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="7a00330080000000ffffffffffff080211"], 0x98}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f0db2de1e79ff08063a4fd4271e42c21"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "60f44a0def61ef0c34723c3e619b4fd5"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "5afd37d9bd01842236a453f3d7c3c6ac"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "549efcadf048ac41fc908f63d639e8aa"}, @NL80211_ATTR_PMK={0x14, 0xfe, "945ce3346718f30d7f76a52d9e0b1b42"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x14000800) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000010901080000000000000000e8ff00002c"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r7) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000024000103000000000000000001"], 0x14}}, 0x0) 4.495765197s ago: executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff03"], 0xe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000003c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xef}], 0x7}}], 0x44, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRESDEC=r2, @ANYRESDEC=r3], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0xa}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r12}, 0x10) 4.436042811s ago: executing program 1: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/239, 0xfe82, 0x0, 0x0, 0x5) 4.241202256s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "d53121bc4b58a404"}}}}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001740)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, @in6=@private2}, 0x0, 0x2391}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x130, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x815b86d9523669bb}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x221, 0xc0, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:insmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200000000000000000000000000000009b1ed0a72daf3b844c00f900fffa0000"], 0x20}}], 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x5}, 0xe) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) ppoll(&(0x7f0000000000)=[{r4}], 0x1, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 4.040806993s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c000180060000000547000008"], 0x38}}, 0x0) unshare(0x42000000) r3 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a0f0600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x0, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x48, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000008008500000039000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8100000}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000540)={r8, 0x3, 0x1, [0x9]}, 0xa) 3.864831437s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b507", 0xb9}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d47", 0x3c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af7", 0x6d}, {&(0x7f00000001c0)="ce", 0x1}], 0x5}, 0xc0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.490401767s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="1810000009000000eeed0000741803da59fe4a74", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c928feff080000006989040008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0b00ee", @ANYRES16, @ANYRES8=0x0], 0x50c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400000000000000000067400062c0007"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$sock_int(r6, 0x1, 0x4a, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b941c5a0321352de2fc7c3c02f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x370b}, 0x50) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x7fff, 0x5}) 3.325930232s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x16c4, 0x30, 0x800, 0x3, 0x0, {0x9}, [{0x16b0, 0x1, [@m_police={0x16ac, 0x10, 0x0, 0x0, {{0xb}, {0x15ac, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x8000, 0x401, 0x1, 0x7fff, 0x7, 0x4, 0x800, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0xb98, 0x1, 0xd03f, 0xfff, 0x8, 0xcee, 0x5, 0x9, 0x4, 0x81, 0x1, 0x2, 0x3, 0xa4f, 0x7, 0x781, 0xe9b8, 0xb989, 0xfffffff8, 0x3, 0x9, 0x0, 0x5, 0x80000000, 0x4, 0xffffffc1, 0xff, 0xee, 0x0, 0x6, 0x6, 0xec9f, 0x400, 0x8, 0x67, 0x7, 0xff, 0x5, 0x8, 0x0, 0x0, 0x1, 0x5, 0x4, 0x4, 0x401, 0x146, 0x400, 0xdc7, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x6, 0x3, 0xffff, 0x101, 0x5, 0xb8, 0xfffffffe, 0x9, 0xd5a6, 0x80000001, 0x7fffffff, 0x27d5, 0x80, 0x800, 0x3f, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x1, 0x3c97d071, 0x1, 0x5, 0x3f, 0x200, 0x2, 0x7, 0x0, 0x2, 0xfffffff7, 0xb2, 0x6, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x3, 0xffffffff, 0x9, 0xffffffff, 0x3, 0x101, 0x6, 0x7, 0x9, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x2, 0x80000007, 0x6, 0x4, 0x6, 0x7, 0x7f, 0x8, 0x101, 0x7, 0x400, 0x1ff, 0x3, 0x9, 0x31a, 0x3, 0x7, 0x7, 0x9, 0x7, 0x96a, 0x10000, 0x7, 0x2, 0x7ff, 0x3, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0x7ff, 0x7, 0x1, 0x2, 0x81, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x44, 0x6, 0xfff, 0x8f, 0x7b98, 0x9, 0x0, 0x836, 0x8001, 0x9, 0x7, 0x1, 0xffffffff, 0xaa, 0x3, 0x5, 0x100, 0x5442010b, 0xba1d, 0x0, 0x4, 0x1000, 0x3f, 0x101, 0x2, 0x9, 0x7ff, 0x9, 0xffffff90, 0x0, 0xffffff30, 0x8, 0x9, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0x5, 0x5ea2, 0xff, 0x7f, 0x0, 0x73af, 0x2, 0x800, 0x101, 0x80000001, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x2, 0x9, 0x401, 0x0, 0x3ff, 0x2, 0x800, 0x0, 0x6, 0x6, 0x2, 0x5, 0x800000, 0xff, 0xffff42e9, 0x3, 0x2, 0x81, 0xb61, 0x1, 0x101, 0x0, 0x2, 0x0, 0x6, 0x54aa, 0xfffffe00, 0x1, 0x1, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x401, 0x5, 0x7, 0xf1, 0xce47, 0x4, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x80000001, 0x2, 0x0, 0x5, 0x1, 0x6d43, 0x2, 0x400, 0xe1, 0x80000000, 0x5, 0xea79, 0x7, 0xa2, 0x6, 0x7, 0xeb, 0x7, 0xfff, 0x5, 0x4, 0x8, 0x1000, 0x7, 0x4, 0x8978, 0x7fff, 0x1, 0x6, 0x7fffffff, 0x0, 0x1, 0x1, 0x0, 0x7e77, 0x7da2, 0x8, 0xb3c, 0x4, 0x8, 0x1000, 0x44775b92, 0xfffffc01, 0x62d3, 0x9, 0x8, 0x1f, 0x8, 0x1, 0x7, 0x5, 0x80000000, 0x1b6, 0xc2fd, 0x80000000, 0xffff, 0x8001, 0x4, 0x81, 0x1f, 0x1000, 0x1ff, 0x8, 0x3, 0x6, 0x6cff5218, 0xfffffffd, 0x1, 0x3, 0x1, 0x80000000, 0x2407, 0x1000, 0x0, 0x5f, 0x10000, 0x5, 0x927, 0x3, 0x0, 0x8, 0x7926, 0x4, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0xff, 0x100, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x99, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x2bd1, 0x7, 0x3, 0x9, 0x8021, 0xfffffff7, 0x888, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x1f, 0xffffffff, 0x8, 0x8001, 0x70c2, 0x5, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0xe56, 0xbd3, 0x7, 0xff, 0x0, 0x5, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x4, 0x1010, 0x8, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x6, 0x6, 0x3, 0xfff, 0x3f, 0x6, 0x4, 0x0, 0x3b3, 0x0, 0x40, 0x20, 0xf726, 0x4, 0x8, 0x2605, 0xb95, 0xffff, 0x20, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x1e9a, 0x7, 0x2, 0x7c, 0x201e, 0x7, 0x6, 0x5, 0xe6, 0x401, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0xfffffff8, 0x1, 0x0, 0x3, 0x19f, 0x7fffffff, 0x1ff, 0x8, 0x3ff, 0xffffffdf, 0xffffffc0, 0x401, 0x2, 0x9, 0x9, 0x2, 0x1, 0x9a7, 0xffff, 0x87, 0x7, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0xfffffffc, 0x1, 0x4, 0x0, 0x6, 0x8000000, 0x3, 0x5, 0xfffffff8, 0x0, 0xfffffff8, 0x0, 0x3, 0x726, 0x6ab, 0xff, 0xffffff81, 0xfffffff9, 0x98, 0xa268, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x4, 0x2, 0x8, 0x6, 0x4, 0x2}, {0xc4, 0x0, 0xd1, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc31}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3f, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x9, 0xcd63, 0x8, 0x2, 0x1ff, 0x8000, 0x8, 0xfffffffd, 0x8, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x1, 0x6, 0x1ff, 0x9, 0xfff, 0xa9, 0xa7, 0x0, 0x6, 0x1f, 0xfffffff8, 0x9, 0x4, 0x4d, 0x600000, 0x2, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x2, 0x8001, 0x9, 0x400, 0x7, 0x3, 0x1d26f65d, 0xfffffffd, 0x80, 0x3, 0x1, 0x4, 0xfffffffc, 0x4ae2558a, 0x2, 0x8000, 0x7fffffff, 0x9, 0x80, 0xff, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x0, 0xffffffff, 0x8, 0xfe, 0x401, 0x8, 0x4, 0x7, 0xbad5, 0x2, 0xa7a5, 0x719ce842, 0x5a45, 0x7, 0x8, 0x3, 0x20, 0x5, 0x20, 0x0, 0x7, 0x1f, 0x3, 0x2, 0x7fffffff, 0xfffffffc, 0xffffffff, 0x8, 0x6, 0x4, 0x80000000, 0x2, 0x1, 0x10000, 0x9, 0x2, 0x3019159c, 0xffffa51d, 0x3, 0x7, 0x9, 0x1f, 0x7, 0xfffffffc, 0x6, 0x1f, 0x1, 0x1, 0xffff, 0x88, 0xb377, 0x3, 0x1, 0xcc24, 0x7, 0x401, 0x22aa, 0x4, 0x8, 0x800000, 0x1, 0x393, 0x3f, 0x0, 0x9f, 0x3, 0x3, 0x7, 0x7, 0x5, 0x8001, 0x1, 0x8, 0x1, 0x7, 0x2, 0x2, 0xbd8f, 0x101, 0x80000000, 0x10000, 0x28, 0x0, 0x7, 0x8001, 0x2, 0xffff, 0x80000000, 0xff, 0x5, 0x53, 0xc3, 0x1, 0x401, 0x1, 0x7, 0xeab4, 0x6, 0x401, 0x9, 0x1, 0x3, 0xfff, 0x80000000, 0x800, 0x5, 0x5, 0x0, 0x8, 0x8, 0xfff, 0x100, 0x4, 0xfffffffe, 0x4, 0x30, 0xba22, 0x81, 0x3c, 0x1, 0x1, 0xfff, 0x9, 0xffff, 0x5, 0x1f, 0x874f, 0x6, 0xad00, 0x6, 0x3, 0x401, 0xffff3716, 0x4, 0x400, 0xfffffffd, 0x0, 0x0, 0x9, 0x800, 0x7ff, 0x4, 0x9, 0x4, 0x10001, 0x6, 0x8, 0x4, 0x8000, 0xff, 0x3, 0x6, 0xffff, 0x1be, 0x4b, 0x5, 0x0, 0xcf, 0x7, 0x3, 0x8d, 0x7f, 0xfffffff8, 0x0, 0x7, 0x1, 0x9, 0xe3, 0x8, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x8, 0x80000001, 0x9, 0x2, 0xff, 0x40, 0x9, 0xfffff001, 0x4]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x80000001, 0x6, 0x80000001, 0x9, 0x1, 0xfffff001, 0xfc8, 0x2, 0x0, 0x8, 0x75b5, 0x40, 0x9, 0x7, 0x559, 0xe7d, 0x10001, 0x1d9f, 0x8, 0x1f5, 0x435, 0xfff, 0x81, 0xe1, 0x1000, 0x1, 0x9, 0x5, 0x401, 0x2, 0x5, 0x1, 0x7, 0xff, 0x1000, 0x7fff00, 0x101, 0x8, 0x2, 0x6, 0x4, 0x9, 0x20da8aef, 0xfffffffe, 0x2, 0xb86, 0x3ff, 0x808, 0x2, 0x8138, 0x0, 0x1, 0x2800000, 0x400, 0x3, 0x8, 0x7, 0x3, 0x5e3, 0x6, 0xddb, 0x0, 0x2, 0x5, 0xffffffff, 0x4ef, 0x6, 0x5, 0xe3, 0x9, 0x5, 0x40, 0x1000, 0x6, 0x101, 0x8, 0x5, 0x40, 0x0, 0x8, 0xb5a7, 0x1, 0x10000, 0x1f, 0x7, 0x40, 0x6, 0x3, 0xd151, 0x40, 0x0, 0x9, 0x3, 0x7fffffff, 0xc00, 0x400, 0x86, 0x0, 0x100, 0x10000, 0xee, 0x3, 0xb25c, 0x6, 0x8, 0x7, 0x8, 0xff, 0x5, 0x9, 0x5, 0x3, 0x660, 0x800, 0x7, 0x9, 0x9, 0x1, 0x464, 0x61, 0x1, 0x2, 0x5, 0xd1, 0x7fffffff, 0xffff779c, 0x13, 0xffffffff, 0x0, 0x1000, 0x0, 0x7, 0x7, 0x1, 0x100, 0x0, 0x0, 0x7, 0x400, 0x1, 0x5, 0x7, 0x3, 0x34, 0x2, 0x7, 0x2, 0x0, 0x0, 0x8, 0x9, 0x9, 0x40, 0xa1, 0x5, 0x9, 0x0, 0x3, 0x4980, 0x2, 0x400, 0x2000400, 0x9, 0x8, 0x100, 0xd4b3, 0x7fffffff, 0xfffffff8, 0x6, 0x586, 0x87, 0x10001, 0x6, 0x7b, 0x3, 0x4, 0x7, 0x200, 0x8, 0x7, 0x7, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x6, 0x6, 0x3, 0x7, 0x0, 0x8, 0x8, 0x1, 0x6, 0x7, 0x4, 0x7, 0x5a8, 0x0, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8000000, 0xc8e7, 0x8000, 0x272, 0x8, 0x0, 0x7, 0x4, 0x400, 0x7, 0x5, 0xfffffffd, 0x8000, 0x1, 0x0, 0x1ff, 0x1f, 0x80000001, 0x574, 0x7fffffff, 0x200, 0xe8, 0x1, 0x80000001, 0x469, 0xcc, 0x6, 0x4, 0x200, 0x1f19e668, 0x0, 0x46b, 0x2, 0x3, 0xff73, 0x8, 0x1595, 0x7ff, 0x5, 0x2, 0xffffffff, 0x80000001, 0x7, 0x200, 0x100, 0x200, 0x4, 0x7, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x3f0, 0x7, 0x3, 0xfffffff9, 0x2, 0x57, 0x5, 0x40, 0x22b0, 0x3ff, 0x6, 0x3, 0x7f8, 0x0, 0x7fffffff, 0x2, 0x80000001, 0x7, 0x10001, 0x1f, 0x7, 0x9, 0x10001, 0x2, 0x81, 0x0, 0x6, 0x400, 0x4, 0x100, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x3ff, 0x4, 0xff, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0x5, 0x3, 0x2, 0xe34, 0x0, 0x8, 0x0, 0x8, 0x1ff, 0x9, 0x8, 0x40, 0x5c40, 0xb444, 0x2, 0x200, 0x517, 0x3, 0xa97, 0x5, 0x0, 0x1ff, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0xcdf, 0x2, 0x4, 0x7, 0x3, 0x0, 0x3, 0x90d7, 0x1, 0x80000001, 0x3, 0x1d2a, 0x7, 0x8, 0x6, 0x1ff, 0x8000, 0x0, 0x2, 0x10001, 0x7, 0x6, 0xe2, 0x0, 0x0, 0x16a4, 0x4, 0x9, 0xc6, 0x1, 0xa2e9, 0x2, 0x9, 0x8, 0x3, 0x400, 0x1, 0x6, 0x1ff, 0x1, 0x6, 0x5, 0x6, 0x5b2, 0x6, 0x1000, 0xffffffff, 0x3, 0x5d7, 0x1, 0x1ff, 0xa22b, 0x3, 0x5, 0x1000, 0x1, 0xbff, 0x1, 0x800, 0x5d, 0x2, 0x2d81, 0x400, 0x44cd140, 0x8, 0x20, 0x3fff800, 0xfffffeff, 0x0, 0x40, 0x9, 0x6, 0x40, 0x6, 0x1ff, 0xff, 0x3, 0x7ff, 0x80, 0x6, 0x80000000, 0x3ff, 0x2, 0x6, 0x80000000, 0x1f, 0x3, 0x5, 0x1, 0x6, 0x2, 0xffffff01, 0x8001, 0x401, 0x100, 0x1, 0x9, 0x3, 0x0, 0x8, 0x2, 0x273d, 0xffffffc3, 0x7, 0x80000001, 0x8, 0x100, 0x4, 0x101, 0x6, 0x4, 0xd5, 0x9, 0x6, 0x1, 0x0, 0x9, 0x20, 0xffffff45, 0x5, 0x101, 0x6, 0x8, 0x9, 0x5, 0x0, 0x5, 0x200, 0x1ff, 0x4, 0x9, 0x401, 0x100, 0x9, 0x80, 0x446e, 0x1, 0x400, 0x6, 0xfffffffb, 0x0, 0x28a, 0x9, 0x5, 0x10001, 0x1f, 0x100, 0x1, 0x101, 0x6, 0xffff, 0x62c, 0x9, 0x1, 0xffffff7f, 0x1, 0x2, 0x5, 0x9, 0x1f, 0x7b, 0xfffffff8, 0x5124, 0x4, 0xa1, 0x6, 0xffa, 0x3, 0x0, 0x3f, 0x200, 0x6, 0x3, 0x8, 0x822, 0x5b]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x3, 0xa15b, 0xd8, {0x1f, 0x0, 0xa7, 0x1, 0x3ff, 0x2}, {0x0, 0x2, 0x2, 0xfe00, 0x0, 0xfff0}, 0x31, 0x4, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xcc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x2, 0x8, 0x3f, {0xc5, 0x0, 0xff02, 0x7cc, 0x1, 0x10000}, {0x1, 0x0, 0x81, 0x80, 0xdbd4, 0x6}, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x5, 0x1, {0x0, 0x0, 0x7b9, 0x9, 0x80, 0x4}, {0x6, 0x1, 0x0, 0x4, 0x5, 0x8}, 0x0, 0x0, 0xfffffffe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16c4}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) splice(r5, 0x0, r3, 0x0, 0x100000000007f, 0x0) write(r3, 0x0, 0x0) 3.144319144s ago: executing program 2: socket$kcm(0x2, 0x0, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.96055367s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d47", 0x3c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af7", 0x6d}, {&(0x7f00000001c0)="ce", 0x1}], 0x5}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 2.847752534s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6, "2053f6272b81"}}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x3, "c43cb591a2c08d65b8d9de06c649803f"}]}}}}}}}, 0x0) 2.737550823s ago: executing program 2: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/239, 0xfe82, 0x0, 0x0, 0x5) 2.496746401s ago: executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x35b) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0xa, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xd) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff00000000000000040000000002000000000000080200000000005f00a23844f1786c3575c938f271c91881c8eecebb"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x4}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0), 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2.467265165s ago: executing program 1: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2a9, 0x0, 0x0, 0x0, 0xe66}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x8, 0x401}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x4, 0x7, 0xc}, {0x1, 0x2, 0x0, 0x8}, {0x5, 0x4, 0xb, 0x2}, {0x2, 0x4, 0xa, 0xb}, {0x0, 0x5, 0xc, 0x5}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x4, 0x6, 0x8}, {0x3, 0x5, 0x9, 0xb}, {0x1, 0x4, 0x8, 0x4}], 0x10, 0x80}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000780)={0x0, 0xa3, "988fb001ea1fb11bdf4838a149f33ff9710d4f16a31a919218cdfbcc1cc8699662320959ba7328802de1a2f6ebe5b2968c752a4612ede8a5363f058f7c1f4138874bec9337b45e7045bac4c2240fd79e411feee9360ef5d941b05663e42d0b4f869d700138a0ab5560f60ee0e4cbbd1cbd527a1fd2aa3429b35b499bf01ef8809b7d6d7493e4796c4c32520c1acd32de21fbfe79a8074e883abd61cd0e4f5022224d11"}, &(0x7f0000000840)=0xab) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e22, 0x400, @local, 0xcf}}}, &(0x7f0000000940)=0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000980)={r4, 0x5a0}, &(0x7f00000009c0)=0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="3cddb7e7adb9d225f4212cc563e343fe47034aafe59190a654791c01e5f7704efab59c6223b3313de561bb", 0x2b, 0x1, &(0x7f0000000d80)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000dc0)=0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000e00)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000012c0)=@req={0x28, &(0x7f0000001280)={'geneve0\x00', @ifru_addrs=@can}}) 2.333014716s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x3, &(0x7f0000001080)) 2.274045042s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x20000000, 0x25dfdbff, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000400)}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430af34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0x99}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a4c6b07f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}], 0x4, &(0x7f0000001580)=ANY=[@ANYRES8, @ANYRES32=r4, @ANYBLOB="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", @ANYRES32, @ANYRES32=0xee00, @ANYRES8, @ANYRESHEX, @ANYBLOB="84e4a386d000"/15, @ANYRES16=r3, @ANYRES8, @ANYBLOB="000000001cf8fe961a00000000000000000000003b23ae645bf1c385a2556f8637d97aef6e4ba95ab8ee31488b4f9bd2e737e5abda190300894ed9dc6dfaaa0ae8564310db9033e45b10ddf8d23b9cdbe6fd26e5fa80322543fd6ac43b818728b6fa8a8bdb79c631e55ae52f26a4c8705b0337bb06a6b806dfcf5ad1a5bf4fc33ea56ef4750ad9c04fc6d06c21a4de8b227c25779633752320db8394189b0d9d3cc610b2920cd7751d13933baafc7bfd581bec18de092fd9237d9857accfdc12f56f8bea6c4764765bcee38d38325dd2b5efa23424f5d7547733e099c3a2ef4e53f83ed022b78a02e4d089c70985514d17b60bd0", @ANYRESHEX, @ANYRES8=r5, @ANYRES32=r4, @ANYRESOCT=r5], 0xa0}, 0x20000041) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32=r7, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000001340)=ANY=[@ANYRES32, @ANYRES64=r6, @ANYRESHEX, @ANYRESOCT=r9, @ANYBLOB="00000000d75d17e6193fafe207b25360fb1fe2edb8f9c597102ce16b0c0000000000000e606ba7ea7d9370a898e71cb4221e5812adb4e9523a5ebc6fbc658f059046c3c0dd5113a2f11b9b31df04832500b95fba147ad27370100207d17ce4220f6088557280ce35d818943e3ce2a9e2e563798fe050ae7deb9af8bc40ae4c5c192893aaad4c455a8c2add65c8eb347a63160f499849be4bee1af1173a6d35e34b878f0eeb3c0835be8098cbd73a226c2d9c436c7f255dd2486792a0d3fe067196805bbe0afc8acae7bf9a22dd2c110e8d09b4db2c26833cc3a80f69a99fd74eda0d4a69f2b68598c567bbba674c96dd2d09dad5d1f422ae1ede", @ANYRES32, @ANYRESOCT=r7, @ANYRES64=0x0, @ANYRES64], 0x200}, {&(0x7f0000000380)=ANY=[], 0x3b0}], 0x3}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e3dff5", 0x48, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, r7, 0x41424344, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x2, 0xa, 0x0, @multicast2}]}}, {"bf9730c68cc03c490015df3f1a2debf65161b4e15fd5be403446151d03944bf427570f7952f5fc78"}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500003c0000000000069078e0000002ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r7, @ANYBLOB="ac020000907825b146dbcd236ae502c4682c0000fe0ef98951088fd7"], 0x0) syz_emit_ethernet(0x1bd, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="f1800fff907800a222020402fe0bf98947808fd4fae08a010506000000032204b1b2fe06e2d4c3d9fe06e2d4c3d900008113e16a2df8b6ce0039b4e1d30ef9e175fdf4901b0053292ddb70b43fa23b0072349689e2cf68174ac74ac887887b1e1adbcc912cbb373098f053d15ce399820a0502ca272498b1c0be62da26d939c47be313edde0095c22b928f29bb87729ee4ffeab1c1d2f3915b65eb"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, r7, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000080), 0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x0, &(0x7f0000000000)=0xffff, 0x4) shutdown(r10, 0x0) 2.171481478s ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283e2305e02000002ff0200000000000000000000000000011d004e20004d03"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}, [], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x90) recvmsg(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000280), 0x45}, 0x0) 2.168541921s ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) socket(0x28, 0x8, 0x400) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f40)={'bridge_slave_1\x00', &(0x7f0000005700)=@ethtool_drvinfo={0x4b, "1600000012e9548fb19d741f6e329c5d52ccd16f07a9c95cfb11b3eabf1375c8", "d5f0782fda8a6b97146242a2fe233fc28430787e6c320ee2a69c26447fcdde21", "14da98c638804c4129fe9b4ec43f725c9e3f7c4254c78854c8603297501b0991", "ab7c294a1b088e493ac3080dbc6b7f0f3f06c7c4c549f40d0e3fc80225ba7df3", "2b5558012ebb0a9f4933a3a59267d3d88b4211a0a3a15f5f6353b904d6ea937a", "9c75dd83ba0c959123eddc00"}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) r5 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000005c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100005ff6c16886b4432ab8fd6d122e42f45072cc16fbde431be31788b98d8298668c28e5791fb6745dfc3f2bc8f8026b18", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000007d000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x5, 0x8, &(0x7f00000002c0)="b800000500", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000006c0)) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10}}, 0x88}}, 0x0) 2.050571875s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x5, 0x0, 0x9, 0x1a00}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffe14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="00000000ffffffffffff91d6e8bc19e388f74500001c00000000002f9078ac1e0001000000000000000000089078963cb49c693ffcdca0187f68b9c0202e5c4001f1022bd0a9152133fe861b610489530c2c0131cdbe237e58d4a0dd8a5e59f052c268d0c51e1defa0a1251480ba71e5a245501db3e73abf7cfcd36c15e1c099a1a1f11249bc7e718cb0bc59fca76ec43d0a61"], 0x2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYRES32=r7], 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) 2.000702017s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000006, 0x13, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x40}}, 0x4) r4 = accept(r3, &(0x7f0000000240)=@ax25={{0x3, @null}, [@bcast, @bcast, @bcast, @bcast, @remote, @rose, @bcast, @netrom]}, &(0x7f00000002c0)=0x80) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc8c0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x7c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc0}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e60}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000007c0)={0x3, 0xb, 0x3, 0x3f}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000a00), &(0x7f0000000a40)=0x8) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032cbd7000fbdbdf25870000000c0099000100000073000000060048000900000006004800580000000c002a00bd06080211000901"], 0x3c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000050) syz_genetlink_get_family_id$gtp(&(0x7f0000001000), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x6b, &(0x7f0000000000)="0200", 0x2) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000006200004cff0700009500000000004000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) sendto$inet6(r6, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x3d}}], 0x1, 0x160, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xb, &(0x7f0000001e00)=""/4086}, 0x90) 1.213572785s ago: executing program 4: socket$kcm(0x2, 0x0, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.013444489s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000380)=0x6, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x9c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x88, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xb, 0x6, "7a163523edd482"}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x8000f28, 0x0) write$binfmt_misc(r9, 0x0, 0x99) write(r1, 0x0, 0x0) 674.285491ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000bc0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000380)=0x6, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x9c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x88, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xb, 0x6, "7a163523edd482"}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x8000f28, 0x0) write$binfmt_misc(r9, 0x0, 0x99) write(r1, 0x0, 0x0) 298.528428ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d47", 0x3c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e78f0ab4905fd5197956540e7a587c2be6b3d04eb4e90b3f388e9a908564032db194919454c842247e2803e333358a28b755829ea", 0x59}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f0995db9a4c6b3697af7", 0x6d}, {&(0x7f00000001c0)="ce", 0x1}], 0x5}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 0s ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x16bc, 0x30, 0x800, 0x3, 0x0, {0x9}, [{0x16a8, 0x1, [@m_police={0x16a4, 0x10, 0x0, 0x0, {{0xb}, {0x15a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x8000, 0x401, 0x1, 0x7fff, 0x7, 0x4, 0x800, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0xb98, 0x1, 0xd03f, 0xfff, 0x8, 0xcee, 0x5, 0x9, 0x4, 0x81, 0x1, 0x2, 0x3, 0xa4f, 0x7, 0x781, 0xe9b8, 0xb989, 0xfffffff8, 0x3, 0x9, 0x0, 0x5, 0x80000000, 0x4, 0xffffffc1, 0xff, 0xee, 0x0, 0x6, 0x6, 0xec9f, 0x400, 0x8, 0x67, 0x7, 0xff, 0x5, 0x8, 0x0, 0x0, 0x1, 0x5, 0x4, 0x4, 0x401, 0x146, 0x400, 0xdc7, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x6, 0x3, 0xffff, 0x101, 0x5, 0xb8, 0xfffffffe, 0x9, 0xd5a6, 0x80000001, 0x7fffffff, 0x27d5, 0x80, 0x800, 0x3f, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x1, 0x3c97d071, 0x1, 0x5, 0x3f, 0x200, 0x2, 0x7, 0x0, 0x2, 0xfffffff7, 0xb2, 0x6, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x3, 0xffffffff, 0x9, 0xffffffff, 0x3, 0x101, 0x6, 0x7, 0x9, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x2, 0x80000007, 0x6, 0x4, 0x6, 0x7, 0x7f, 0x8, 0x101, 0x7, 0x400, 0x1ff, 0x3, 0x9, 0x31a, 0x3, 0x7, 0x7, 0x9, 0x7, 0x96a, 0x10000, 0x7, 0x2, 0x7ff, 0x3, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0x7ff, 0x7, 0x1, 0x2, 0x81, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x44, 0x6, 0xfff, 0x8f, 0x7b98, 0x9, 0x0, 0x836, 0x8001, 0x9, 0x7, 0x1, 0xffffffff, 0xaa, 0x3, 0x5, 0x100, 0x5442010b, 0xba1d, 0x0, 0x4, 0x1000, 0x3f, 0x101, 0x2, 0x9, 0x7ff, 0x9, 0xffffff90, 0x0, 0xffffff30, 0x8, 0x9, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0x5, 0x5ea2, 0xff, 0x7f, 0x0, 0x73af, 0x2, 0x800, 0x101, 0x80000001, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x2, 0x9, 0x401, 0x0, 0x3ff, 0x2, 0x800, 0x0, 0x6, 0x6, 0x2, 0x5, 0x800000, 0xff, 0xffff42e9, 0x3, 0x2, 0x81, 0xb61, 0x1, 0x101, 0x0, 0x2, 0x0, 0x6, 0x54aa, 0xfffffe00, 0x1, 0x1, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x401, 0x5, 0x7, 0xf1, 0xce47, 0x4, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x80000001, 0x2, 0x0, 0x5, 0x1, 0x6d43, 0x2, 0x400, 0xe1, 0x80000000, 0x5, 0xea79, 0x7, 0xa2, 0x6, 0x7, 0xeb, 0x7, 0xfff, 0x5, 0x4, 0x8, 0x1000, 0x7, 0x4, 0x8978, 0x7fff, 0x1, 0x6, 0x7fffffff, 0x0, 0x1, 0x1, 0x0, 0x7e77, 0x7da2, 0x8, 0xb3c, 0x4, 0x8, 0x1000, 0x44775b92, 0xfffffc01, 0x62d3, 0x9, 0x8, 0x1f, 0x8, 0x1, 0x7, 0x5, 0x80000000, 0x1b6, 0xc2fd, 0x80000000, 0xffff, 0x8001, 0x4, 0x81, 0x1f, 0x1000, 0x1ff, 0x8, 0x3, 0x6, 0x6cff5218, 0xfffffffd, 0x1, 0x3, 0x1, 0x80000000, 0x2407, 0x1000, 0x0, 0x5f, 0x10000, 0x5, 0x927, 0x3, 0x0, 0x8, 0x7926, 0x4, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0xff, 0x100, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x99, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x2bd1, 0x7, 0x3, 0x9, 0x8021, 0xfffffff7, 0x888, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x1f, 0xffffffff, 0x8, 0x8001, 0x70c2, 0x5, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0xe56, 0xbd3, 0x7, 0xff, 0x0, 0x5, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x4, 0x1010, 0x8, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x6, 0x6, 0x3, 0xfff, 0x3f, 0x6, 0x4, 0x0, 0x3b3, 0x0, 0x40, 0x20, 0xf726, 0x4, 0x8, 0x2605, 0xb95, 0xffff, 0x20, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x1e9a, 0x7, 0x2, 0x7c, 0x201e, 0x7, 0x6, 0x5, 0xe6, 0x401, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0xfffffff8, 0x1, 0x0, 0x3, 0x19f, 0x7fffffff, 0x1ff, 0x8, 0x3ff, 0xffffffdf, 0xffffffc0, 0x401, 0x2, 0x9, 0x9, 0x2, 0x1, 0x9a7, 0xffff, 0x87, 0x7, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0xfffffffc, 0x1, 0x4, 0x0, 0x6, 0x8000000, 0x3, 0x5, 0xfffffff8, 0x0, 0xfffffff8, 0x0, 0x3, 0x726, 0x6ab, 0xff, 0xffffff81, 0xfffffff9, 0x98, 0xa268, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x4, 0x2, 0x8, 0x6, 0x4, 0x2}, {0xc4, 0x0, 0xd1, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc31}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3f, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x9, 0xcd63, 0x8, 0x2, 0x1ff, 0x8000, 0x8, 0xfffffffd, 0x8, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x1, 0x6, 0x1ff, 0x9, 0xfff, 0xa9, 0xa7, 0x0, 0x6, 0x1f, 0xfffffff8, 0x9, 0x4, 0x4d, 0x600000, 0x2, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x2, 0x8001, 0x9, 0x400, 0x7, 0x3, 0x1d26f65d, 0xfffffffd, 0x80, 0x3, 0x1, 0x4, 0xfffffffc, 0x4ae2558a, 0x2, 0x8000, 0x7fffffff, 0x9, 0x80, 0xff, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x0, 0xffffffff, 0x8, 0xfe, 0x401, 0x8, 0x4, 0x7, 0xbad5, 0x2, 0xa7a5, 0x719ce842, 0x5a45, 0x7, 0x8, 0x3, 0x20, 0x5, 0x20, 0x0, 0x7, 0x1f, 0x3, 0x2, 0x7fffffff, 0xfffffffc, 0xffffffff, 0x8, 0x6, 0x4, 0x80000000, 0x2, 0x1, 0x10000, 0x9, 0x2, 0x3019159c, 0xffffa51d, 0x3, 0x7, 0x9, 0x1f, 0x7, 0xfffffffc, 0x6, 0x1f, 0x1, 0x1, 0xffff, 0x88, 0xb377, 0x3, 0x1, 0xcc24, 0x7, 0x401, 0x22aa, 0x4, 0x8, 0x800000, 0x1, 0x393, 0x3f, 0x0, 0x9f, 0x3, 0x3, 0x7, 0x7, 0x5, 0x8001, 0x1, 0x8, 0x1, 0x7, 0x2, 0x2, 0xbd8f, 0x101, 0x80000000, 0x10000, 0x28, 0x0, 0x7, 0x8001, 0x2, 0xffff, 0x80000000, 0xff, 0x5, 0x53, 0xc3, 0x1, 0x401, 0x1, 0x7, 0xeab4, 0x6, 0x401, 0x9, 0x1, 0x3, 0xfff, 0x80000000, 0x800, 0x5, 0x5, 0x0, 0x8, 0x8, 0xfff, 0x100, 0x4, 0xfffffffe, 0x4, 0x30, 0xba22, 0x81, 0x3c, 0x1, 0x1, 0xfff, 0x9, 0xffff, 0x5, 0x1f, 0x874f, 0x6, 0xad00, 0x6, 0x3, 0x401, 0xffff3716, 0x4, 0x400, 0xfffffffd, 0x0, 0x0, 0x9, 0x800, 0x7ff, 0x4, 0x9, 0x4, 0x10001, 0x6, 0x8, 0x4, 0x8000, 0xff, 0x3, 0x6, 0xffff, 0x1be, 0x4b, 0x5, 0x0, 0xcf, 0x7, 0x3, 0x8d, 0x7f, 0xfffffff8, 0x0, 0x7, 0x1, 0x9, 0xe3, 0x8, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x8, 0x80000001, 0x9, 0x2, 0xff, 0x40, 0x9, 0xfffff001, 0x4]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x80000001, 0x6, 0x80000001, 0x9, 0x1, 0xfffff001, 0xfc8, 0x2, 0x0, 0x8, 0x75b5, 0x40, 0x9, 0x7, 0x559, 0xe7d, 0x10001, 0x1d9f, 0x8, 0x1f5, 0x435, 0xfff, 0x81, 0xe1, 0x1000, 0x1, 0x9, 0x5, 0x401, 0x2, 0x5, 0x1, 0x7, 0xff, 0x1000, 0x7fff00, 0x101, 0x8, 0x2, 0x6, 0x4, 0x9, 0x20da8aef, 0xfffffffe, 0x2, 0xb86, 0x3ff, 0x808, 0x2, 0x8138, 0x0, 0x1, 0x2800000, 0x400, 0x3, 0x8, 0x7, 0x3, 0x5e3, 0x6, 0xddb, 0x0, 0x2, 0x5, 0xffffffff, 0x4ef, 0x6, 0x5, 0xe3, 0x9, 0x5, 0x40, 0x1000, 0x6, 0x101, 0x8, 0x5, 0x40, 0x0, 0x8, 0xb5a7, 0x1, 0x10000, 0x1f, 0x7, 0x40, 0x6, 0x3, 0xd151, 0x40, 0x0, 0x9, 0x3, 0x7fffffff, 0xc00, 0x400, 0x86, 0x0, 0x100, 0x10000, 0xee, 0x3, 0xb25c, 0x6, 0x8, 0x7, 0x8, 0xff, 0x5, 0x9, 0x5, 0x3, 0x660, 0x800, 0x7, 0x9, 0x9, 0x1, 0x464, 0x61, 0x1, 0x2, 0x5, 0xd1, 0x7fffffff, 0xffff779c, 0x13, 0xffffffff, 0x0, 0x1000, 0x0, 0x7, 0x7, 0x1, 0x100, 0x0, 0x0, 0x7, 0x400, 0x1, 0x5, 0x7, 0x3, 0x34, 0x2, 0x7, 0x2, 0x0, 0x0, 0x8, 0x9, 0x9, 0x40, 0xa1, 0x5, 0x9, 0x0, 0x3, 0x4980, 0x2, 0x400, 0x2000400, 0x9, 0x8, 0x100, 0xd4b3, 0x7fffffff, 0xfffffff8, 0x6, 0x586, 0x87, 0x10001, 0x6, 0x7b, 0x3, 0x4, 0x7, 0x200, 0x8, 0x7, 0x7, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x6, 0x6, 0x3, 0x7, 0x0, 0x8, 0x8, 0x1, 0x6, 0x7, 0x4, 0x7, 0x5a8, 0x0, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8000000, 0xc8e7, 0x8000, 0x272, 0x8, 0x0, 0x7, 0x4, 0x400, 0x7, 0x5, 0xfffffffd, 0x8000, 0x1, 0x0, 0x1ff, 0x1f, 0x80000001, 0x574, 0x7fffffff, 0x200, 0xe8, 0x1, 0x80000001, 0x469, 0xcc, 0x6, 0x4, 0x200, 0x1f19e668, 0x0, 0x46b, 0x2, 0x3, 0xff73, 0x8, 0x1595, 0x7ff, 0x5, 0x2, 0xffffffff, 0x80000001, 0x7, 0x200, 0x100, 0x200, 0x4, 0x7, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x3f0, 0x7, 0x3, 0xfffffff9, 0x2, 0x57, 0x5, 0x40, 0x22b0, 0x3ff, 0x6, 0x3, 0x7f8, 0x0, 0x7fffffff, 0x2, 0x80000001, 0x7, 0x10001, 0x1f, 0x7, 0x9, 0x10001, 0x2, 0x81, 0x0, 0x6, 0x400, 0x4, 0x100, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x3ff, 0x4, 0xff, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0x5, 0x3, 0x2, 0xe34, 0x0, 0x8, 0x0, 0x8, 0x1ff, 0x9, 0x8, 0x40, 0x5c40, 0xb444, 0x2, 0x200, 0x517, 0x3, 0xa97, 0x5, 0x0, 0x1ff, 0x0, 0x7ff, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0xcdf, 0x2, 0x4, 0x7, 0x3, 0x0, 0x3, 0x90d7, 0x1, 0x80000001, 0x3, 0x1d2a, 0x7, 0x8, 0x6, 0x1ff, 0x8000, 0x0, 0x2, 0x10001, 0x7, 0x6, 0xe2, 0x0, 0x0, 0x16a4, 0x4, 0x9, 0xc6, 0x1, 0xa2e9, 0x2, 0x9, 0x8, 0x3, 0x400, 0x1, 0x6, 0x1ff, 0x1, 0x6, 0x5, 0x6, 0x5b2, 0x6, 0x1000, 0xffffffff, 0x3, 0x5d7, 0x1, 0x1ff, 0xa22b, 0x3, 0x5, 0x1000, 0x1, 0xbff, 0x1, 0x800, 0x5d, 0x2, 0x2d81, 0x400, 0x44cd140, 0x8, 0x20, 0x3fff800, 0xfffffeff, 0x0, 0x40, 0x9, 0x6, 0x40, 0x6, 0x1ff, 0xff, 0x3, 0x7ff, 0x80, 0x6, 0x80000000, 0x3ff, 0x2, 0x6, 0x80000000, 0x1f, 0x3, 0x5, 0x1, 0x6, 0x2, 0xffffff01, 0x8001, 0x401, 0x100, 0x1, 0x9, 0x3, 0x0, 0x8, 0x2, 0x273d, 0xffffffc3, 0x7, 0x80000001, 0x8, 0x100, 0x4, 0x101, 0x6, 0x4, 0xd5, 0x9, 0x6, 0x1, 0x0, 0x9, 0x20, 0xffffff45, 0x5, 0x101, 0x6, 0x8, 0x9, 0x5, 0x0, 0x5, 0x200, 0x1ff, 0x4, 0x9, 0x401, 0x100, 0x9, 0x80, 0x446e, 0x1, 0x400, 0x6, 0xfffffffb, 0x0, 0x28a, 0x9, 0x5, 0x10001, 0x1f, 0x100, 0x1, 0x101, 0x6, 0xffff, 0x62c, 0x9, 0x1, 0xffffff7f, 0x1, 0x2, 0x5, 0x9, 0x1f, 0x7b, 0xfffffff8, 0x5124, 0x4, 0xa1, 0x6, 0xffa, 0x3, 0x0, 0x3f, 0x200, 0x6, 0x3, 0x8, 0x822, 0x5b]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x3, 0xa15b, 0xd8, {0x1f, 0x0, 0xa7, 0x1, 0x3ff, 0x2}, {0x0, 0x2, 0x2, 0xfe00, 0x0, 0xfff0}, 0x31, 0x4, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xcc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x2, 0x8, 0x3f, {0xc5, 0x0, 0xff02, 0x7cc, 0x1, 0x10000}, {0x1, 0x0, 0x81, 0x80, 0xdbd4, 0x6}, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x5, 0x1, {0x0, 0x0, 0x7b9, 0x9, 0x80, 0x4}, {0x6, 0x1, 0x0, 0x4, 0x5, 0x8}, 0x0, 0x0, 0xfffffffe}}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16bc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) splice(r5, 0x0, r3, 0x0, 0x100000000007f, 0x0) write(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): ct firmware load for regulatory.db failed with error -2 [ 278.763354][T12892] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 280.414306][T12915] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.167645][T12939] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.185485][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.203020][T12939] xt_SECMARK: invalid mode: 0 [ 281.344408][T12943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 281.354158][T12943] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 281.907725][T12953] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.967678][T12878] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.984125][T12878] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.000274][T12878] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.014247][T12878] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.452549][T12961] ipvlan2: entered promiscuous mode [ 282.470583][T12961] ipvlan2: entered allmulticast mode [ 282.484476][T12961] dummy0: entered allmulticast mode [ 282.847371][T12975] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.937251][T12982] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.965039][T12982] xt_SECMARK: invalid mode: 0 [ 283.241324][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.257859][T12992] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.335619][T12999] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.376105][T13001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 283.393974][T13001] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.414505][T12999] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.479960][T12999] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.563430][T12999] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.741355][T12999] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.764767][T12999] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.784531][T12999] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.804535][T12999] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.937950][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.949273][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.957502][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.966807][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.981354][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.989369][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.044584][T13006] vcan0 speed is unknown, defaulting to 1000 [ 284.344376][T13018] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.444855][T13012] ipvlan3: entered promiscuous mode [ 284.457517][T13012] ipvlan3: entered allmulticast mode [ 284.520575][T13022] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.559677][T13022] xt_SECMARK: invalid mode: 0 [ 284.719255][T13006] chnl_net:caif_netlink_parms(): no params data found [ 284.833280][T13006] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.841311][T13006] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.849214][T13006] bridge_slave_0: entered allmulticast mode [ 284.856896][T13006] bridge_slave_0: entered promiscuous mode [ 284.865982][T13006] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.874444][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.886711][T13006] bridge_slave_1: entered allmulticast mode [ 284.894179][T13006] bridge_slave_1: entered promiscuous mode [ 285.043240][T13006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.071404][T13006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.145083][T13006] team0: Port device team_slave_0 added [ 285.171167][T13047] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.201355][T13006] team0: Port device team_slave_1 added [ 285.221135][T13037] ipvlan2: entered promiscuous mode [ 285.227450][T13037] ipvlan2: entered allmulticast mode [ 285.293944][T13047] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.339948][T13006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.347379][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.378489][T13006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.401260][T13047] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.436328][T13006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.443577][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.469945][T13006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.521557][T13047] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.554756][T13006] hsr_slave_0: entered promiscuous mode [ 285.562662][T13006] hsr_slave_1: entered promiscuous mode [ 285.571423][T13006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.584164][T13006] Cannot create hsr debugfs directory [ 285.733854][T13056] __nla_validate_parse: 1 callbacks suppressed [ 285.733875][T13056] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.809779][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.832335][T13006] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.842447][T13006] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.937940][T13006] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.955711][T13006] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.024590][T13006] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.044111][T13006] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.054671][ T5129] Bluetooth: hci0: command tx timeout [ 286.152350][T13006] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.164719][T13006] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.377505][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.387552][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.395808][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.404222][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.415512][T13006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.423466][ T5121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.434787][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.467264][T13006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.492111][T13006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.524889][T13006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.559045][T13072] vcan0 speed is unknown, defaulting to 1000 [ 286.673706][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.738113][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.751225][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.758425][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.778493][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.785677][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.852626][T13006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.270335][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.298817][T13072] chnl_net:caif_netlink_parms(): no params data found [ 287.418363][T13092] ipvlan2: entered promiscuous mode [ 287.423602][T13092] ipvlan2: entered allmulticast mode [ 287.551730][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.562741][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.577140][T13072] bridge_slave_0: entered allmulticast mode [ 287.596819][T13072] bridge_slave_0: entered promiscuous mode [ 287.625469][T13006] veth0_vlan: entered promiscuous mode [ 287.649718][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.667073][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.674227][T13072] bridge_slave_1: entered allmulticast mode [ 287.688748][T13072] bridge_slave_1: entered promiscuous mode [ 287.703786][T13006] veth1_vlan: entered promiscuous mode [ 287.774934][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.788860][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.861977][T13072] team0: Port device team_slave_0 added [ 287.872298][T13072] team0: Port device team_slave_1 added [ 287.885628][T13006] veth0_macvtap: entered promiscuous mode [ 287.931270][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.939498][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.967630][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.981025][T13006] veth1_macvtap: entered promiscuous mode [ 287.990166][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.997562][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.023839][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.057939][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.068672][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.078886][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.089663][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.100066][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.110791][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.120790][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.126973][ T5121] Bluetooth: hci0: command tx timeout [ 288.131441][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.146765][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.157278][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.169279][T13006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.190550][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.201276][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.212730][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.223535][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.233423][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.244038][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.253902][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.264658][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.274646][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.285275][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.297666][T13006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.345970][T13072] hsr_slave_0: entered promiscuous mode [ 288.353224][T13072] hsr_slave_1: entered promiscuous mode [ 288.361360][T13072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.370512][T13072] Cannot create hsr debugfs directory [ 288.382891][T13006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.392149][T13006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.401157][T13006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.409975][T13006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.536943][ T5121] Bluetooth: hci5: command tx timeout [ 288.586837][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.614928][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.692146][T13072] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.703015][T13072] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.732024][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.740706][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.771659][T13072] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.800408][T13072] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.870257][T13072] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.888294][T13072] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.956144][T13072] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.980290][T13072] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.021162][T13112] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.186056][T13072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.200248][T13072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.213890][T13072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.228826][T13072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.363647][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.390394][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.423159][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.430372][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.476713][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.483995][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.804789][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.940425][T13072] veth0_vlan: entered promiscuous mode [ 289.971133][T13047] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.032573][T13047] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.052705][T13047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.074757][T13072] veth1_vlan: entered promiscuous mode [ 290.101658][T13047] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.168164][T13072] veth0_macvtap: entered promiscuous mode [ 290.200705][T13072] veth1_macvtap: entered promiscuous mode [ 290.207849][ T5121] Bluetooth: hci0: command tx timeout [ 290.298393][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.328173][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.338363][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.349750][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.360492][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.378057][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.389058][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.400030][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.412920][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.423796][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.434581][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.448651][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.461251][T13072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.490416][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.503132][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.518891][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.537016][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.566676][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.587113][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.597888][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.617577][ T5121] Bluetooth: hci5: command tx timeout [ 290.637274][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.653839][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.664679][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.676018][T13072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.688011][T13072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.700062][T13072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.726748][T13072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.735617][T13072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.745278][T13072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.754487][T13072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.948089][ T2423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.955953][ T2423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.035911][ T2423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.051519][ T2423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.156927][T13178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.284192][T13178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.377399][T13178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.450216][T13178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.618858][T13200] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 291.626111][T13200] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.066387][T13218] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.286847][ T5121] Bluetooth: hci0: command tx timeout [ 292.465385][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.687580][ T5121] Bluetooth: hci5: command tx timeout [ 293.236044][T13258] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.335582][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.474092][T13270] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.900043][T13280] tipc: Failed to remove unknown binding: 66,1,1/0:2673768729/2673768732 [ 293.909996][T13280] tipc: Failed to remove unknown binding: 66,1,1/0:2673768729/2673768732 [ 294.384565][T13300] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.767332][ T5121] Bluetooth: hci5: command tx timeout [ 294.940044][T13314] ipvlan2: entered promiscuous mode [ 294.953243][T13314] ipvlan2: entered allmulticast mode [ 294.973747][T13314] dummy0: entered allmulticast mode [ 295.552544][T13178] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.579713][T13178] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.605255][T13178] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.655587][T13178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.697947][T13344] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.305776][T13364] ipvlan3: entered promiscuous mode [ 296.312723][T13364] ipvlan3: entered allmulticast mode [ 296.440399][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.786071][T13391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.826107][T13395] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.943595][T13391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.081271][T13391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.277109][T13391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.402579][T13391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.420366][T13391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.442807][T13391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.468361][T13391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.693941][T13429] tipc: MTU too low for tipc bearer [ 297.983986][T13434] ipvlan2: entered promiscuous mode [ 298.000740][T13434] ipvlan2: entered allmulticast mode [ 298.087944][T13439] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.195341][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.206329][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.217100][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.238961][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.249265][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 298.257055][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.321717][T13441] vcan0 speed is unknown, defaulting to 1000 [ 299.069859][T13441] chnl_net:caif_netlink_parms(): no params data found [ 299.180513][T13487] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.311233][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.336883][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.344190][T13441] bridge_slave_0: entered allmulticast mode [ 299.368559][T13441] bridge_slave_0: entered promiscuous mode [ 299.390355][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.398348][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.405693][T13441] bridge_slave_1: entered allmulticast mode [ 299.415786][T13441] bridge_slave_1: entered promiscuous mode [ 299.520999][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.551008][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.596358][T13497] ipvlan3: entered promiscuous mode [ 299.610147][T13497] ipvlan3: entered allmulticast mode [ 299.681803][T13501] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.743963][T13441] team0: Port device team_slave_0 added [ 299.766157][T13441] team0: Port device team_slave_1 added [ 299.886853][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.893958][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.940650][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.987344][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.994330][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.032947][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.199818][T13441] hsr_slave_0: entered promiscuous mode [ 300.228767][T13441] hsr_slave_1: entered promiscuous mode [ 300.246831][T13441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.254435][T13441] Cannot create hsr debugfs directory [ 300.275770][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.287163][ T5121] Bluetooth: hci6: command tx timeout [ 300.311992][T13523] batadv0: entered promiscuous mode [ 300.319771][T13523] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.449995][T13530] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.658152][T13441] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.826043][T13441] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.874980][T13549] syzkaller1: entered promiscuous mode [ 300.881278][T13549] syzkaller1: entered allmulticast mode [ 300.911322][T13441] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.989730][T13544] ipvlan2: entered promiscuous mode [ 300.995012][T13544] ipvlan2: entered allmulticast mode [ 301.065692][T13441] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.264489][T13441] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.285708][T13441] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.325738][T13555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.387251][T13441] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.408946][T13441] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.628665][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.741691][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.841005][ T5121] block nbd0: Receive control failed (result -107) [ 301.883069][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.958691][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.022776][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.030117][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.049737][ T29] audit: type=1804 audit(1718916777.107:34): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/85/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 302.092949][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.100267][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.290220][T13591] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.367498][ T5121] Bluetooth: hci6: command tx timeout [ 302.576353][T13441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.769246][T13602] ipvlan3: entered promiscuous mode [ 302.791497][T13602] ipvlan3: entered allmulticast mode [ 302.934337][T13441] veth0_vlan: entered promiscuous mode [ 302.982086][T13441] veth1_vlan: entered promiscuous mode [ 303.077843][T13441] veth0_macvtap: entered promiscuous mode [ 303.104920][T13441] veth1_macvtap: entered promiscuous mode [ 303.159323][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.189849][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.199904][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.210669][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.221955][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.232803][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.242900][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.260218][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.281310][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.301163][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.322245][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.334892][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.345154][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.356706][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.372773][T13441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.436938][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.464866][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.486518][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.506000][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.530404][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.576728][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.596913][T13629] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.603071][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.644110][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.669849][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.693315][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.709336][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.719929][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.732793][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.744404][T13441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.755008][T13441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.771304][T13441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.811814][T13621] vcan0 speed is unknown, defaulting to 1000 [ 303.840544][T13441] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.868045][T13441] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.896655][T13441] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.905420][T13441] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.195747][ T29] audit: type=1804 audit(1718916779.257:35): pid=13644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/91/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 304.249557][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.271771][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.348681][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.348967][T13649] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.371324][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.456897][ T5121] Bluetooth: hci6: command tx timeout [ 305.066041][ T29] audit: type=1800 audit(1718916780.127:36): pid=13666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 305.728049][ T29] audit: type=1800 audit(1718916780.797:37): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 305.840745][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.951736][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.314520][ T29] audit: type=1804 audit(1718916781.377:38): pid=13717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir108590165/syzkaller.WrsUtL/48/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 306.537584][ T5121] Bluetooth: hci6: command tx timeout [ 306.854583][ T29] audit: type=1800 audit(1718916781.917:39): pid=13742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 307.106959][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.177239][T13756] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 307.252881][T13756] batman_adv: batadv0: Adding interface: team0 [ 307.280262][T13756] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.337942][T13756] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 307.362042][T13768] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.377378][T13767] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.389838][T13768] xt_SECMARK: invalid mode: 0 [ 307.738515][T13783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.757912][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.795819][T13783] ipvlan2: entered promiscuous mode [ 307.823329][T13783] ipvlan2: entered allmulticast mode [ 307.836681][T13783] bond0: entered allmulticast mode [ 307.841984][T13783] bond_slave_0: entered allmulticast mode [ 307.872685][T13783] bond_slave_1: entered allmulticast mode [ 307.914776][T13783] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 308.060795][ T29] audit: type=1804 audit(1718916783.127:40): pid=13794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir108590165/syzkaller.WrsUtL/52/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 308.713971][T13799] tipc: Started in network mode [ 308.724059][T13799] tipc: Node identity 000000000000003a0000400000000001, cluster identity 4711 [ 308.743524][T13799] tipc: Enabling of bearer rejected, failed to enable media [ 308.907535][T13805] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.949174][T13805] xt_SECMARK: invalid mode: 0 [ 309.186752][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.828081][T13849] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.884603][T13849] xt_SECMARK: invalid mode: 0 [ 310.127319][T13852] ipvlan3: entered promiscuous mode [ 310.147843][T13852] ipvlan3: entered allmulticast mode [ 310.282488][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.369598][T13875] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 310.406709][T13875] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 310.446214][T13875] netlink: 187184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.629431][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.850226][T13900] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.876841][T13904] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 310.887706][T13900] xt_SECMARK: invalid mode: 0 [ 310.933900][T13904] batman_adv: batadv0: Adding interface: team0 [ 310.976829][T13904] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.077132][T13904] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 311.129088][T13905] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 311.155084][T13905] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.174011][T13905] team0: entered promiscuous mode [ 311.215703][T13905] team_slave_0: entered promiscuous mode [ 311.239497][T13905] team_slave_1: entered promiscuous mode [ 311.268964][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.284995][T13905] batman_adv: batadv0: Interface activated: team0 [ 311.305007][T13905] batman_adv: batadv0: Interface deactivated: team0 [ 311.312772][T13905] batman_adv: batadv0: Removing interface: team0 [ 311.321066][T13905] bridge0: port 3(team0) entered blocking state [ 311.328247][T13905] bridge0: port 3(team0) entered disabled state [ 311.334877][T13905] team0: entered allmulticast mode [ 311.340460][T13905] team_slave_0: entered allmulticast mode [ 311.346362][T13905] team_slave_1: entered allmulticast mode [ 311.358454][T13905] bridge0: port 3(team0) entered blocking state [ 311.364860][T13905] bridge0: port 3(team0) entered forwarding state [ 311.375108][T13914] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.732846][T13906] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 312.101812][T13924] ipvlan2: entered promiscuous mode [ 312.127437][T13924] ipvlan2: entered allmulticast mode [ 312.143632][T13924] dummy0: entered allmulticast mode [ 312.245274][T13946] xt_SECMARK: invalid mode: 0 [ 312.285779][T13939] vlan3: entered promiscuous mode [ 312.303327][T13939] batman_adv: batadv0: Adding interface: vlan3 [ 312.318520][T13939] batman_adv: batadv0: The MTU of interface vlan3 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.369163][T13939] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 312.391461][T13942] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.416844][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.798798][T13964] syzkaller1: entered promiscuous mode [ 312.811971][T13964] syzkaller1: entered allmulticast mode [ 313.300076][T13994] xt_SECMARK: invalid mode: 0 [ 313.586277][T13997] ipvlan2: entered promiscuous mode [ 313.602230][T13997] ipvlan2: entered allmulticast mode [ 314.195825][T14026] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 314.222058][T14026] __nla_validate_parse: 5 callbacks suppressed [ 314.222081][T14026] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.557805][T14045] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.702896][T14048] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.733471][T14048] xt_SECMARK: invalid mode: 0 [ 314.879090][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.010033][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.216917][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.739529][T14096] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.767549][T14096] xt_SECMARK: invalid mode: 0 [ 315.884044][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 316.056186][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 316.076866][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 316.549704][T14136] xt_SECMARK: invalid mode: 0 [ 317.350184][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.359787][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.397588][ T35] bridge_slave_0: left allmulticast mode [ 317.422891][ T35] bridge_slave_0: left promiscuous mode [ 317.428961][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.054942][T14192] xt_SECMARK: invalid mode: 0 [ 318.099227][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.112476][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.123990][ T35] bond0 (unregistering): Released all slaves [ 319.043749][T14233] xt_SECMARK: invalid mode: 0 [ 319.179502][ T35] hsr_slave_0: left promiscuous mode [ 319.198017][ T35] hsr_slave_1: left promiscuous mode [ 319.216321][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.228363][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.248116][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.255611][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.315904][ T35] veth1_macvtap: left promiscuous mode [ 319.336260][ T35] veth0_macvtap: left promiscuous mode [ 319.342156][ T35] veth1_vlan: left promiscuous mode [ 319.357400][ T35] veth0_vlan: left promiscuous mode [ 319.442968][T14245] __nla_validate_parse: 14 callbacks suppressed [ 319.442989][T14245] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.509720][T14246] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 319.531180][T14246] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.720105][ T35] team0 (unregistering): Port device team_slave_1 removed [ 320.805068][ T35] team0 (unregistering): Port device team_slave_0 removed [ 321.114093][T14273] xt_SECMARK: invalid mode: 0 [ 321.437016][T14272] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 321.757957][T14289] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 321.789700][T14289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.038938][ T35] IPVS: stop unused estimator thread 0... [ 322.301310][T14306] openvswitch: netlink: Message has 16 unknown bytes. [ 322.609500][T14324] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 322.726665][T14329] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 322.793893][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.889845][T14336] xt_ecn: cannot match TCP bits for non-tcp packets [ 323.601474][T14381] veth0_vlan: entered allmulticast mode [ 323.731108][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.764749][ T29] audit: type=1800 audit(1718916798.827:41): pid=14386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 324.071204][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.084170][T14398] nbd: nbd0 already in use [ 324.578521][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.211511][T14455] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 325.271389][T14455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.453612][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.502128][T14473] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 325.518457][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.537473][T14477] bond_slave_0: entered promiscuous mode [ 325.544363][T14477] bond_slave_1: entered promiscuous mode [ 325.550817][T14477] macvtap1: entered promiscuous mode [ 325.556144][T14477] bond0: entered promiscuous mode [ 325.561844][T14477] macvtap1: entered allmulticast mode [ 325.570660][T14477] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 325.607486][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.659131][T14477] bond0: left promiscuous mode [ 325.664472][T14477] bond_slave_0: left promiscuous mode [ 325.669980][T14477] bond_slave_1: left promiscuous mode [ 325.689604][T14477] macvtap1: left promiscuous mode [ 325.698750][T14477] macvtap1: left allmulticast mode [ 325.742012][T14483] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.785958][T14483] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.695059][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.726632][T14522] bond_slave_0: entered promiscuous mode [ 326.732405][T14522] bond_slave_1: entered promiscuous mode [ 326.748976][T14522] macvtap1: entered promiscuous mode [ 326.754331][T14522] bond0: entered promiscuous mode [ 326.795094][T14522] macvtap1: entered allmulticast mode [ 326.801466][T14522] bond0: entered allmulticast mode [ 326.808652][T14522] bond_slave_0: entered allmulticast mode [ 326.817000][T14522] bond_slave_1: entered allmulticast mode [ 326.824039][T14522] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 326.853064][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.924323][T14531] bond0: left allmulticast mode [ 326.933855][T14531] bond_slave_0: left allmulticast mode [ 326.946635][T14531] bond_slave_1: left allmulticast mode [ 326.952170][T14531] bond0: left promiscuous mode [ 326.970871][T14531] bond_slave_0: left promiscuous mode [ 326.976506][T14531] bond_slave_1: left promiscuous mode [ 326.993357][T14531] macvtap1: left promiscuous mode [ 326.998837][T14531] macvtap1: left allmulticast mode [ 327.028202][T14543] geneve1: entered promiscuous mode [ 327.600747][T14567] Bluetooth: MGMT ver 1.22 [ 327.813899][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.836325][T14576] bond_slave_0: entered promiscuous mode [ 327.842110][T14576] bond_slave_1: entered promiscuous mode [ 327.848386][T14576] macvtap2: entered promiscuous mode [ 327.853828][T14576] bond0: entered promiscuous mode [ 327.860791][T14576] macvtap2: entered allmulticast mode [ 327.866280][T14576] bond0: entered allmulticast mode [ 327.871874][T14576] bond_slave_0: entered allmulticast mode [ 327.879067][T14576] bond_slave_1: entered allmulticast mode [ 327.887010][T14576] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 327.904703][T14542] geneve1: left promiscuous mode [ 327.945058][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.007103][T14582] bond0: left allmulticast mode [ 328.012027][T14582] bond_slave_0: left allmulticast mode [ 328.056745][T14582] bond_slave_1: left allmulticast mode [ 328.062309][T14582] bond0: left promiscuous mode [ 328.117083][T14588] xt_TCPMSS: Only works on TCP SYN packets [ 328.117135][T14582] bond_slave_0: left promiscuous mode [ 328.128427][T14582] bond_slave_1: left promiscuous mode [ 328.155218][T14588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 328.167102][T14582] macvtap2: left promiscuous mode [ 328.176488][T14582] macvtap2: left allmulticast mode [ 328.279275][T14581] ipvlan2: entered promiscuous mode [ 328.284561][T14581] ipvlan2: entered allmulticast mode [ 328.538416][T14598] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.567073][T14598] IPv6: Can't replace route, no match found [ 328.649826][ T29] audit: type=1804 audit(1718916803.717:42): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir339555168/syzkaller.Jr3seV/627/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 328.748215][ T29] audit: type=1804 audit(1718916803.767:43): pid=14596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir339555168/syzkaller.Jr3seV/627/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 329.401107][T14630] bond_slave_0: entered promiscuous mode [ 329.406886][T14630] bond_slave_1: entered promiscuous mode [ 329.412699][T14630] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 329.422953][T14630] macvtap1: entered promiscuous mode [ 329.430058][T14630] bond0: entered promiscuous mode [ 329.439048][T14630] macvtap1: entered allmulticast mode [ 329.444568][T14630] bond0: entered allmulticast mode [ 329.449833][T14630] bond_slave_0: entered allmulticast mode [ 329.455689][T14630] bond_slave_1: entered allmulticast mode [ 329.461692][T14630] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 329.470430][T14630] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 329.500879][T14633] bond0: left allmulticast mode [ 329.526956][T14633] bond_slave_0: left allmulticast mode [ 329.541585][T14633] bond_slave_1: left allmulticast mode [ 329.552582][ T5129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.562961][ T5129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.564193][T14633] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 329.578714][T14633] bond0: left promiscuous mode [ 329.578791][ T5129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.584264][T14633] bond_slave_0: left promiscuous mode [ 329.596008][T14633] bond_slave_1: left promiscuous mode [ 329.601674][T14633] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 329.618584][ T5129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.626728][ T5129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 329.635830][ T5129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.644674][T14633] macvtap1: left promiscuous mode [ 329.654060][T14633] macvtap1: left allmulticast mode [ 329.706687][T14643] __nla_validate_parse: 6 callbacks suppressed [ 329.706707][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.849415][T14637] vcan0 speed is unknown, defaulting to 1000 [ 330.113672][T14652] ipvlan2: entered promiscuous mode [ 330.136818][T14652] ipvlan2: entered allmulticast mode [ 330.239611][T14660] netlink: 808 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.949230][T14682] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.980899][T14637] chnl_net:caif_netlink_parms(): no params data found [ 331.451296][T14637] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.468052][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.496991][T14637] bridge_slave_0: entered allmulticast mode [ 331.520476][T14637] bridge_slave_0: entered promiscuous mode [ 331.556883][T14637] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.583964][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.608613][T14637] bridge_slave_1: entered allmulticast mode [ 331.633219][T14637] bridge_slave_1: entered promiscuous mode [ 331.737747][ T5129] Bluetooth: hci7: command tx timeout [ 331.788699][T14637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.808624][T14637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.828675][T14720] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.888485][T14637] team0: Port device team_slave_0 added [ 331.903208][T14720] xt_SECMARK: invalid mode: 0 [ 331.912601][T14637] team0: Port device team_slave_1 added [ 332.007732][T14715] ipvlan2: entered promiscuous mode [ 332.013694][T14715] ipvlan2: entered allmulticast mode [ 332.130152][T14637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.157750][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.185397][T14637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.234766][T14637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.244197][T14637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.295686][T14637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.629270][T14637] hsr_slave_0: entered promiscuous mode [ 332.671808][T14637] hsr_slave_1: entered promiscuous mode [ 332.706768][T14637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.714374][T14637] Cannot create hsr debugfs directory [ 332.740662][T14742] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 332.983878][T14759] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.549228][T14637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.578587][T14773] nbd: must specify a size in bytes for the device [ 333.741398][T14637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.809715][ T5129] Bluetooth: hci7: command tx timeout [ 333.869240][T14637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.065125][T14637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.115984][T14780] ipvlan3: entered promiscuous mode [ 334.139543][T14780] ipvlan3: entered allmulticast mode [ 334.255637][T14801] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 334.560348][T14637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.582386][T14637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.611238][T14637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.650383][T14637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.732511][T14821] nbd: must specify a size in bytes for the device [ 334.910209][T14637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.918297][T14826] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.944811][T14826] xt_SECMARK: invalid mode: 0 [ 334.975731][T14637] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.015128][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.022545][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.072740][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.080062][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.154814][T14830] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 335.207298][T14830] xt_SECMARK: invalid mode: 0 [ 335.523273][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.626156][T14637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.757411][T14637] veth0_vlan: entered promiscuous mode [ 335.807997][T14637] veth1_vlan: entered promiscuous mode [ 335.890163][ T5129] Bluetooth: hci7: command tx timeout [ 335.920463][T14637] veth0_macvtap: entered promiscuous mode [ 335.998544][T14637] veth1_macvtap: entered promiscuous mode [ 336.051998][T14866] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.070777][T14866] xt_SECMARK: invalid mode: 0 [ 336.089459][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.126971][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.157472][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.176629][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.199232][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.226543][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.256950][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.280771][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.303355][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.324465][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.345156][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.366275][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.408737][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.430394][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.443997][T14637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.472522][T14857] ipvlan2: entered promiscuous mode [ 336.478446][T14857] ipvlan2: entered allmulticast mode [ 336.678037][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.699522][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.709646][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.756594][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.801235][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.848314][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.871286][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.883866][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.894785][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.906005][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.918800][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.935473][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.946161][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.957408][T14637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.968113][T14637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.980687][T14637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.007262][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.019080][T14881] vcan0 speed is unknown, defaulting to 1000 [ 337.030129][T14637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.049843][T14637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.068202][T14637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.086816][T14637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.124597][T14895] netlink: 'syz-executor.4': attribute type 37 has an invalid length. [ 337.235235][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.401671][ T5297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.405895][T14904] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.436600][ T5297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.510860][T14906] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.546960][T14906] xt_SECMARK: invalid mode: 0 [ 337.566891][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.574823][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.841755][T14914] bridge0: port 3(team0) entered blocking state [ 337.876989][T14914] bridge0: port 3(team0) entered disabled state [ 337.949267][T14914] team0: entered allmulticast mode [ 337.954530][T14914] team_slave_0: entered allmulticast mode [ 337.966678][ T5121] Bluetooth: hci7: command tx timeout [ 337.986788][T14914] team_slave_1: entered allmulticast mode [ 338.000441][T14914] team0: entered promiscuous mode [ 338.005844][T14914] team_slave_0: entered promiscuous mode [ 338.012361][T14914] team_slave_1: entered promiscuous mode [ 338.021825][T14914] bridge0: port 3(team0) entered blocking state [ 338.029139][T14914] bridge0: port 3(team0) entered forwarding state [ 338.045392][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.055794][T14917] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 338.064311][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.577074][T14927] ipvlan2: entered promiscuous mode [ 338.597474][T14927] ipvlan2: entered allmulticast mode [ 338.617980][T14927] dummy0: entered allmulticast mode [ 339.230357][T14959] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 339.448213][T14967] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 339.490294][T14969] vcan0 speed is unknown, defaulting to 1000 [ 340.033705][T14958] delete_channel: no stack [ 340.305340][T14995] __nla_validate_parse: 6 callbacks suppressed [ 340.305362][T14995] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.500205][T14986] dummy0: Device is already in use. [ 341.151112][T15021] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.435973][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.504270][T15034] syz-executor.1[15034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.504535][T15034] syz-executor.1[15034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.686210][T15046] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.779821][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.859979][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.972963][T15062] bridge0: port 3(team0) entered blocking state [ 341.990753][T15062] bridge0: port 3(team0) entered disabled state [ 342.003193][T15062] team0: entered allmulticast mode [ 342.014319][T15062] team_slave_0: entered allmulticast mode [ 342.026907][T15062] team_slave_1: entered allmulticast mode [ 342.060505][T15062] team0: entered promiscuous mode [ 342.065617][T15062] team_slave_0: entered promiscuous mode [ 342.086143][T15062] team_slave_1: entered promiscuous mode [ 342.126734][T15062] bridge0: port 3(team0) entered blocking state [ 342.133198][T15062] bridge0: port 3(team0) entered forwarding state [ 342.187596][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.205804][T15066] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 342.215432][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.246971][T15069] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.869175][T15097] syzkaller0: refused to change device tx_queue_len [ 343.131211][T15107] bridge0: port 1(team0) entered blocking state [ 343.158460][T15107] bridge0: port 1(team0) entered disabled state [ 343.179434][T15107] team0: entered allmulticast mode [ 343.196601][T15107] team_slave_0: entered allmulticast mode [ 343.204153][T15107] team_slave_1: entered allmulticast mode [ 343.219332][T15107] team0: entered promiscuous mode [ 343.227947][T15107] team_slave_0: entered promiscuous mode [ 343.234365][T15107] team_slave_1: entered promiscuous mode [ 343.256590][T15114] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.477331][T15130] syz-executor.3[15130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.477558][T15130] syz-executor.3[15130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.738824][T15140] hsr0: entered promiscuous mode [ 344.311650][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 344.455967][T15153] ipvlan2: entered promiscuous mode [ 344.479918][T15153] ipvlan2: entered allmulticast mode [ 344.839030][T15166] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 344.877031][T15167] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 345.064011][T15176] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 345.919667][T15186] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 346.053206][T15193] __nla_validate_parse: 3 callbacks suppressed [ 346.053228][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.072609][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.134006][T15198] sit0: entered promiscuous mode [ 346.144709][T15198] sit0: entered allmulticast mode [ 346.222045][T15193] vcan0 speed is unknown, defaulting to 1000 [ 346.326328][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.635948][T15206] ipvlan2: entered promiscuous mode [ 346.671752][T15206] ipvlan2: entered allmulticast mode [ 346.737770][T15219] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.273591][T15233] ipt_REJECT: TCP_RESET invalid for non-tcp [ 347.333698][T15236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.437852][T15242] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.468910][T15240] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 347.966125][T15262] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 348.604547][T15269] ipvlan2: entered promiscuous mode [ 348.619643][T15269] ipvlan2: entered allmulticast mode [ 348.957354][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.038011][T15290] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 349.188392][T15285] dummy0: Device is already in use. [ 349.233360][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 349.338836][T15304] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.171343][T15340] ipvlan2: entered promiscuous mode [ 351.200581][T15340] ipvlan2: entered allmulticast mode [ 351.635728][T15367] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 351.779128][ T29] audit: type=1804 audit(1718916826.847:44): pid=15376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir339555168/syzkaller.Jr3seV/688/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 351.820927][T15376] __nla_validate_parse: 1 callbacks suppressed [ 351.820948][T15376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.157052][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.282569][T15403] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 352.541382][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.769943][T15417] ipvlan3: entered promiscuous mode [ 352.787129][T15417] ipvlan3: entered allmulticast mode [ 352.950248][ T29] audit: type=1804 audit(1718916828.017:45): pid=15431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/214/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 352.967101][T15431] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.038540][T15431] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.273912][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.294712][T15440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.310299][T15440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 353.512002][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.066985][T15455] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.102927][ T29] audit: type=1804 audit(1718916829.167:46): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/218/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 354.113970][T15459] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.200259][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.358416][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.565762][T15466] dummy0: Device is already in use. [ 354.843513][T15494] netlink: 'syz-executor.1': attribute type 24 has an invalid length. [ 354.976296][ T29] audit: type=1804 audit(1718916830.037:47): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2275183389/syzkaller.0PdfMD/122/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 355.925162][T15535] ipvlan2: entered promiscuous mode [ 355.933626][T15535] ipvlan2: entered allmulticast mode [ 356.537537][ T29] audit: type=1804 audit(1718916831.587:48): pid=15558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir339555168/syzkaller.Jr3seV/701/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 356.585291][T15544] ipvlan2: entered promiscuous mode [ 356.619962][T15544] ipvlan2: entered allmulticast mode [ 356.728698][T15567] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 356.748667][T15562] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 357.117890][T15592] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 357.135461][T15592] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 357.147551][T15592] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 357.289929][T15599] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 357.322902][T15599] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 357.735543][T15622] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 358.228372][T15629] dummy0: Device is already in use. [ 358.539101][T15661] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 358.589096][T15662] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 358.608679][T15662] __nla_validate_parse: 4 callbacks suppressed [ 358.608699][T15662] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.629087][T15662] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 358.637865][T15662] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.737753][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.747541][T15672] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.117876][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.272752][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.716041][T15715] vlan0: entered promiscuous mode [ 359.806103][T15693] ipvlan2: entered promiscuous mode [ 359.824135][T15693] ipvlan2: entered allmulticast mode [ 359.915855][T15718] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 360.392967][T15737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.019435][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.351104][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.534169][T15767] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 362.046992][T15782] vlan2: entered allmulticast mode [ 362.056689][T15782] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 362.078409][T15782] mac80211_hwsim hwsim45 wlan1: left allmulticast mode [ 362.242919][ T29] audit: type=1804 audit(1718916837.307:49): pid=15793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2275183389/syzkaller.0PdfMD/148/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 362.378544][T15798] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 363.451223][ T29] audit: type=1804 audit(1718916838.517:50): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2275183389/syzkaller.0PdfMD/156/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 363.948004][T15854] __nla_validate_parse: 5 callbacks suppressed [ 363.948034][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.320636][T15868] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.461383][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.658748][ T29] audit: type=1804 audit(1718916839.727:51): pid=15876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/251/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 364.988308][T15886] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 365.011103][ T5129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 365.023015][ T5129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 365.024518][T15886] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.041103][ T5129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 365.048722][T15891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.067048][ T5129] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 365.074969][ T5129] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 365.083171][ T5129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 365.110297][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.130157][T15887] vcan0 speed is unknown, defaulting to 1000 [ 365.218289][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.926462][T15887] chnl_net:caif_netlink_parms(): no params data found [ 366.002679][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.029801][T15914] openvswitch: netlink: EtherType 20a is less than min 600 [ 366.211157][T15923] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.217089][T15887] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.228107][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.247273][T15887] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.254571][T15887] bridge_slave_0: entered allmulticast mode [ 366.262981][T15887] bridge_slave_0: entered promiscuous mode [ 366.272293][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.292292][T15887] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.299926][T15887] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.307459][T15887] bridge_slave_1: entered allmulticast mode [ 366.315238][T15887] bridge_slave_1: entered promiscuous mode [ 366.397386][T15887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.425297][T15887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.589262][T15887] team0: Port device team_slave_0 added [ 366.611723][T15887] team0: Port device team_slave_1 added [ 366.680296][T15887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.696633][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.728875][T15887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.742246][T15887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.749371][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.775764][T15887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.976911][T15887] hsr_slave_0: entered promiscuous mode [ 366.984018][T15887] hsr_slave_1: entered promiscuous mode [ 366.996789][T15887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.004597][T15887] Cannot create hsr debugfs directory [ 367.141881][T15936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 367.166924][ T5121] Bluetooth: hci8: command tx timeout [ 367.228919][T15937] team0: Port device macvlan1 added [ 367.522829][T15887] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.628212][T15887] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.751181][T15887] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.857066][T15887] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.088437][T15887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.109749][T15887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.157254][T15887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.198568][T15887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.445656][T15887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.505425][T15887] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.565494][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.572738][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.631182][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.638403][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.136129][T15887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.256987][ T5121] Bluetooth: hci8: command tx timeout [ 369.411434][T15887] veth0_vlan: entered promiscuous mode [ 369.495193][T15887] veth1_vlan: entered promiscuous mode [ 369.600606][T15887] veth0_macvtap: entered promiscuous mode [ 369.615662][ T29] audit: type=1804 audit(1718916844.677:52): pid=16002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2299981320/syzkaller.mYHsw9/63/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 369.633974][T15887] veth1_macvtap: entered promiscuous mode [ 369.659566][ T5165] IPVS: starting estimator thread 0... [ 369.756935][T16003] IPVS: using max 17 ests per chain, 40800 per kthread [ 369.806152][T16001] __nla_validate_parse: 5 callbacks suppressed [ 369.806173][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.818557][ C1] vxcan0: j1939_tp_txtimer: 0xffff8880648df400: tx aborted with unknown reason: -2 [ 369.834706][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880648df000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 369.853789][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880648df400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 369.945634][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.986445][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.016773][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.048696][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.075719][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.102622][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.112961][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.124970][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.136005][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.146908][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.169754][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.205951][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.231695][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.245269][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.255487][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.268103][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.281201][T15887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.311560][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.324284][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.334762][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.348999][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.359812][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.371961][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.383220][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.404885][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.416514][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.432735][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.443252][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.457259][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.468727][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.479499][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.492840][T15887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.503943][T15887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.517333][T15887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.573698][T15887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.606619][T15887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.615377][T15887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.644442][T15887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.885239][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.893770][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.966857][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.967288][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.984786][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.988853][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.996550][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.326662][ T5121] Bluetooth: hci8: command tx timeout [ 371.672690][T16066] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 371.687219][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.722647][T16066] bridge0: port 4(batadv0) entered blocking state [ 371.756669][T16066] bridge0: port 4(batadv0) entered disabled state [ 371.763442][T16066] batadv0: entered allmulticast mode [ 371.802837][T16066] batadv0: entered promiscuous mode [ 371.832540][T16066] bridge0: port 4(batadv0) entered blocking state [ 371.839181][T16066] bridge0: port 4(batadv0) entered forwarding state [ 372.108640][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.108853][T16088] xt_ecn: cannot match TCP bits for non-tcp packets [ 372.122186][T16084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.130129][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 372.144707][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 372.147245][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.210994][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.283224][T16126] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 373.350976][T16126] dummy0: entered promiscuous mode [ 373.368269][T16126] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.383058][T16126] team0: Failed to send options change via netlink (err -105) [ 373.390873][T16126] team0: Port device dummy0 added [ 373.416818][ T5121] Bluetooth: hci8: command tx timeout [ 373.630725][ T29] audit: type=1804 audit(1718916848.697:53): pid=16136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2275183389/syzkaller.0PdfMD/180/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 374.041308][T16156] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.793979][T16196] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 374.878080][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.059154][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.181118][T16204] vcan0 speed is unknown, defaulting to 1000 [ 375.728042][T16224] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.751019][T16224] openvswitch: netlink: Multiple metadata blocks provided [ 376.358484][T16252] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.430998][T16240] dummy0: Device is already in use. [ 377.698559][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.013646][T16301] dummy0: Device is already in use. [ 378.780890][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.796894][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.072299][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.281622][T16360] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.797599][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.824499][T16374] ipvlan2: entered promiscuous mode [ 379.832780][T16374] ipvlan2: entered allmulticast mode [ 380.007998][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.175533][T16392] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 380.197105][T16392] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 381.346152][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.514253][T16427] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 381.541583][T16427] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 381.611473][T16427] : entered promiscuous mode [ 381.810489][T16424] ipvlan2: entered promiscuous mode [ 381.824717][T16424] ipvlan2: entered allmulticast mode [ 382.333498][T16457] Bluetooth: hci3: invalid len left 7, exp >= 81 [ 382.391850][T16459] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 382.411686][T16457] IPVS: stopping backup sync thread 16459 ... [ 382.750311][T16475] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 382.770798][T16475] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 382.793494][T16475] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 382.809735][T16475] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 383.528495][T16489] dummy0: Device is already in use. [ 383.837634][T16504] Bluetooth: hci3: invalid len left 7, exp >= 81 [ 383.860526][T16505] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 383.876192][T16504] IPVS: stopping backup sync thread 16505 ... [ 384.160744][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.201593][T16519] vcan0 speed is unknown, defaulting to 1000 [ 384.421029][T16531] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 384.623105][T16537] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 384.663751][T16537] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 384.682084][T16537] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.704434][T16537] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.315123][T16541] dummy0: Device is already in use. [ 385.344754][T16552] nbd: must specify a size in bytes for the device [ 385.706280][T16567] geneve0: entered promiscuous mode [ 385.733334][T16567] geneve0: left promiscuous mode [ 385.955194][T16576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 385.967052][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 386.111729][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.157582][T16579] vcan0 speed is unknown, defaulting to 1000 [ 386.330828][T16587] ipt_REJECT: TCP_RESET invalid for non-tcp [ 386.548068][T16597] sctp: [Deprecated]: syz-executor.3 (pid 16597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 386.548068][T16597] Use struct sctp_sack_info instead [ 387.263207][T16624] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.273563][T16624] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 387.387415][T16631] ipt_REJECT: TCP_RESET invalid for non-tcp [ 387.397040][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.431539][T16630] vcan0 speed is unknown, defaulting to 1000 [ 387.711526][T16645] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 387.743275][T16645] ipt_ECN: cannot use operation on non-tcp rule [ 388.056352][T16662] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.154704][T16664] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 388.164668][T16662] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 388.227244][T16664] bond1: entered promiscuous mode [ 388.249170][T16664] lo: entered promiscuous mode [ 388.266525][T16664] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.311890][T16664] bond1: (slave lo): making interface the new active one [ 388.360993][T16664] bond1: (slave lo): Enslaving as an active interface with an up link [ 388.388816][T16669] tipc: Started in network mode [ 388.393861][T16669] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 388.418993][T16669] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 388.453021][T16669] tipc: Enabled bearer , priority 10 [ 388.715639][T16671] x_tables: ip_tables: ah match: only valid for protocol 51 [ 389.556731][T16704] tipc: Failed to remove unknown binding: 66,1,1/0:3349502810/3349502812 [ 389.568366][ T45] tipc: Node number set to 1 [ 389.596164][T16704] tipc: Failed to remove unknown binding: 66,1,1/0:3349502810/3349502812 [ 389.666768][T16711] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 389.739696][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 389.832299][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.753506][T16761] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.762632][T16761] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.772304][T16761] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.781384][T16761] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.816623][T16761] vxlan0: entered promiscuous mode [ 390.821875][T16761] vxlan0: entered allmulticast mode [ 390.848702][T16761] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.853724][T16767] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 390.857196][T16761] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.857279][T16761] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.857310][T16761] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.975426][T16768] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 391.209584][T16779] x_tables: duplicate underflow at hook 1 [ 391.385908][T16785] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.147885][T16805] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.408759][T16813] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.946007][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.958328][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.966585][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 392.983426][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 392.993099][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 393.002253][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.143816][T16831] vcan0 speed is unknown, defaulting to 1000 [ 393.157382][T16836] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.016189][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.074632][T16831] chnl_net:caif_netlink_parms(): no params data found [ 394.299965][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.347043][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.363496][T16831] bridge_slave_0: entered allmulticast mode [ 394.388402][T16831] bridge_slave_0: entered promiscuous mode [ 394.417580][T16872] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.437250][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.453540][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.480377][T16831] bridge_slave_1: entered allmulticast mode [ 394.498516][T16831] bridge_slave_1: entered promiscuous mode [ 394.594575][T16831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.621690][T16831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.767209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.807444][T16831] team0: Port device team_slave_0 added [ 394.851533][T16831] team0: Port device team_slave_1 added [ 394.945157][T16831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.973602][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.023631][T16831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.054306][T16831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.088065][ T5129] Bluetooth: hci6: command tx timeout [ 395.096768][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.165638][T16831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.282506][T16831] hsr_slave_0: entered promiscuous mode [ 395.293457][T16831] hsr_slave_1: entered promiscuous mode [ 395.309674][T16831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.322482][T16831] Cannot create hsr debugfs directory [ 395.558384][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.569649][T16904] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 395.846968][ T29] audit: type=1804 audit(1718916870.907:54): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2063409257/syzkaller.Rn2xwg/55/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 395.925618][T16831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.935145][ T29] audit: type=1804 audit(1718916870.947:55): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2063409257/syzkaller.Rn2xwg/55/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 396.128238][ T5121] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 396.138376][ T5121] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 396.146591][ T5121] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 396.170664][T16831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.183307][ T5121] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 396.206284][ T5121] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 396.215498][ T5121] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 396.374391][T16831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.442854][T16914] vcan0 speed is unknown, defaulting to 1000 [ 396.631933][T16831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.017102][T16831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.058798][T16831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.139813][T16831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.167522][ T5121] Bluetooth: hci6: command tx timeout [ 397.187982][T16831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.664927][T16914] chnl_net:caif_netlink_parms(): no params data found [ 397.794700][T16831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.985455][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.000720][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.018527][T16914] bridge_slave_0: entered allmulticast mode [ 398.039351][T16914] bridge_slave_0: entered promiscuous mode [ 398.077469][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.095702][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.115030][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.125249][T16914] bridge_slave_1: entered allmulticast mode [ 398.162264][T16914] bridge_slave_1: entered promiscuous mode [ 398.187723][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.194977][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.287084][ T5121] Bluetooth: hci9: command tx timeout [ 398.311449][T16949] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.347541][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.381095][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.421285][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.428593][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.541656][T16914] team0: Port device team_slave_0 added [ 398.547441][ T29] audit: type=1804 audit(1718916873.597:56): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/339/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 398.598707][T16914] team0: Port device team_slave_1 added [ 398.614651][ T29] audit: type=1804 audit(1718916873.677:57): pid=16951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3681924642/syzkaller.JLTaYY/339/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 398.781646][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.798090][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.842010][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.864511][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.874102][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.901893][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.918604][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.998831][T16831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.083786][T16914] hsr_slave_0: entered promiscuous mode [ 399.114802][T16914] hsr_slave_1: entered promiscuous mode [ 399.130187][T16914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.139272][T16914] Cannot create hsr debugfs directory [ 399.189412][T16962] vcan0 speed is unknown, defaulting to 1000 [ 399.250938][ T5121] Bluetooth: hci6: command tx timeout [ 399.521740][T16914] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.593286][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.621988][T16981] vlan2: entered promiscuous mode [ 399.692619][T16914] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.761522][T16831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.813410][T16914] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.953496][T16914] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.056686][T16831] veth0_vlan: entered promiscuous mode [ 400.105161][T16831] veth1_vlan: entered promiscuous mode [ 400.244659][T16831] veth0_macvtap: entered promiscuous mode [ 400.328391][T16831] veth1_macvtap: entered promiscuous mode [ 400.337194][T16914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.366802][ T5121] Bluetooth: hci9: command tx timeout [ 400.389351][T16914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.441010][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.455294][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.465578][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.476838][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.487092][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.499262][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.509913][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.520963][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.542906][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.553692][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.565484][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.576302][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.586746][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.598668][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.609989][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.620989][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.631537][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.642284][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.654788][T16831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.662654][T16914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.701522][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.714088][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.724883][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.735768][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.745851][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.767165][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.786504][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.806786][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.826648][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.846943][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.866985][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.887429][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.907949][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.933516][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.954149][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.966937][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.981195][T16831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.991921][T16831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.008153][T16831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.023544][T16914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.036064][T16991] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.054207][T16831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.066656][T16831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.075428][T16831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.084854][T16831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.327110][ T5121] Bluetooth: hci6: command tx timeout [ 401.498372][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.527132][ T29] audit: type=1804 audit(1718916876.577:58): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2063409257/syzkaller.Rn2xwg/67/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 401.546525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.560819][ T29] audit: type=1804 audit(1718916876.597:59): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2063409257/syzkaller.Rn2xwg/67/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 401.661837][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.692483][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.709202][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.749031][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.782235][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.789521][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.859921][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.861900][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.867146][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.975868][T16914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.994540][T16914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.098206][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.456548][ T5121] Bluetooth: hci9: command tx timeout [ 402.462060][T17029] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.525077][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.713154][T16914] veth0_vlan: entered promiscuous mode [ 402.763978][T16914] veth1_vlan: entered promiscuous mode [ 402.822494][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.893751][T16914] veth0_macvtap: entered promiscuous mode [ 402.914763][T16914] veth1_macvtap: entered promiscuous mode [ 402.971417][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.992924][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.008347][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.034635][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.045471][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.106525][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.124557][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.141120][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.164856][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.191044][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.213354][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.234276][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.260430][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.286485][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.300723][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.310948][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.330408][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.352098][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.364884][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.376254][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.387263][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.399735][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.469748][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.495473][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.536980][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.556656][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.581582][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.602668][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.623090][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.653272][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.674055][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.753544][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.807895][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.826531][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.848106][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.864355][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.879387][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.906515][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.917875][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.946635][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.967581][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.996330][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.009665][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.095173][T16914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.126629][T16914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.145576][T16914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.154503][T16914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.172526][T17076] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 404.243671][T17076] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 404.268878][T17076] team0: Failed to send options change via netlink (err -105) [ 404.280573][T17076] team0: Port device dummy0 added [ 404.527579][ T5129] Bluetooth: hci9: command tx timeout [ 404.584805][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 404.659245][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.667872][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.726012][T17083] vcan0 speed is unknown, defaulting to 1000 [ 404.760603][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.785895][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.130934][T17095] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.489123][T17100] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 405.534206][T17100] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.584557][T17100] team0: Port device virt_wifi0 added [ 406.179707][T17119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.266311][T17125] Cannot find set identified by id 65535 to match [ 406.288309][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.309642][T17124] x_tables: unsorted entry at hook 1 [ 407.058450][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.066702][T17137] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.162161][T17142] vcan0 speed is unknown, defaulting to 1000 [ 407.309569][T17147] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.334180][T17146] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.756873][T17164] veth1_to_bond: mtu less than device minimum [ 407.809335][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.027321][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.048987][T17181] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 408.141428][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.166935][T17181] batadv0: left allmulticast mode [ 408.184008][T17181] batadv0: left promiscuous mode [ 408.194349][T17181] bridge0: port 4(batadv0) entered disabled state [ 408.229920][T17181] team0: left allmulticast mode [ 408.235007][T17181] team_slave_0: left allmulticast mode [ 408.245159][T17181] team_slave_1: left allmulticast mode [ 408.259183][T17181] team0: left promiscuous mode [ 408.269680][T17181] team_slave_0: left promiscuous mode [ 408.286067][T17181] team_slave_1: left promiscuous mode [ 408.302622][T17181] bridge0: port 3(team0) entered disabled state [ 408.327700][T17181] bridge_slave_1: left allmulticast mode [ 408.342435][T17181] bridge_slave_1: left promiscuous mode [ 408.355225][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.384256][T17181] bridge_slave_0: left allmulticast mode [ 408.398138][T17181] bridge_slave_0: left promiscuous mode [ 408.410708][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.174463][T17210] vcan0 speed is unknown, defaulting to 1000 [ 409.533369][T17217] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 409.785552][T17202] dccp_close: ABORT with 32 bytes unread [ 410.244003][T17245] __nla_validate_parse: 2 callbacks suppressed [ 410.244026][T17245] netlink: 592 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.410213][T17251] tls_set_device_offload_rx: netdev not found [ 410.968631][T17265] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.109586][T17284] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 411.132822][T17284] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.179264][T17280] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.521000][T17305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 411.943179][T17330] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 411.969662][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.092789][T17336] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 413.114366][T17366] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 413.152539][T17369] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 413.325376][T17378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 413.355014][T17371] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.415869][T17378] vcan0 speed is unknown, defaulting to 1000 [ 415.077561][T17431] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 415.944759][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.952537][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.687245][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 416.807821][T17431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.887211][T17431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.168422][ T30] INFO: task syz-executor.1:12565 blocked for more than 143 seconds. [ 417.177987][ T30] Not tainted 6.10.0-rc3-syzkaller-00163-g8851346912a1 #0 [ 417.192082][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.216678][ T30] task:syz-executor.1 state:D stack:25008 pid:12565 tgid:12564 ppid:5116 flags:0x00000006 [ 417.236941][ T30] Call Trace: [ 417.247175][ T30] [ 417.250172][ T30] __schedule+0x17e8/0x4a20 [ 417.259958][ T30] ? __pfx___schedule+0x10/0x10 2024/06/20 20:54:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 417.265256][ T30] ? __pfx_lock_release+0x10/0x10 [ 417.338002][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 417.343560][ T30] ? schedule+0x90/0x320 [ 417.356596][ T30] schedule+0x14b/0x320 [ 417.360821][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.366299][ T30] __mutex_lock+0x6a4/0xd70 [ 417.386508][ T30] ? __mutex_lock+0x527/0xd70 [ 417.392101][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 417.417575][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 417.422688][ T30] ? net_generic+0x1f/0x240 [ 417.436555][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 417.442333][ T30] genl_start+0x4d6/0x6d0 [ 417.456422][ T30] __netlink_dump_start+0x45c/0x780 [ 417.461684][ T30] genl_rcv_msg+0x88c/0xec0 [ 417.466188][ T30] ? mark_lock+0x9a/0x350 [ 417.470714][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.475779][ T30] ? __pfx_genl_start+0x10/0x10 [ 417.480738][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 417.485703][ T30] ? __pfx_genl_done+0x10/0x10 [ 417.491519][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 417.496653][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 417.503103][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 417.509782][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 417.516140][ T30] ? __pfx___might_resched+0x10/0x10 [ 417.521623][ T30] netlink_rcv_skb+0x1e3/0x430 [ 417.527821][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.532888][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.538296][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 417.543803][ T30] genl_rcv+0x28/0x40 [ 417.547928][ T30] netlink_unicast+0x7ea/0x980 [ 417.552726][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 417.558158][ T30] ? __virt_addr_valid+0x183/0x520 [ 417.563312][ T30] ? __check_object_size+0x49c/0x900 [ 417.586607][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 417.591806][ T30] netlink_sendmsg+0x8db/0xcb0 [ 417.603682][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.616618][ T30] ? __import_iovec+0x536/0x820 [ 417.621531][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 417.626763][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.632074][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 417.638949][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.644281][ T30] __sock_sendmsg+0x221/0x270 [ 417.655998][ T30] ____sys_sendmsg+0x525/0x7d0 [ 417.676111][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.682094][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 417.687111][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.692325][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.715149][ T30] ? do_syscall_64+0x100/0x230 [ 417.720286][ T30] ? do_syscall_64+0xb6/0x230 [ 417.725014][ T30] do_syscall_64+0xf3/0x230 [