last executing test programs: 37.592678413s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020400030e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000ff010000000000000000000000000001000000000000"], 0x70}}, 0x0) vmsplice(r2, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in=@multicast2, 0x4e21, 0x244f, 0x4e20, 0x0, 0x2, 0x80, 0xa0}, {0x9, 0x1e, 0x9, 0x9, 0x30, 0x7, 0x7, 0x7}, {0x5, 0xfff, 0x9, 0x101}, 0x0, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in6=@mcast2, 0x4d4}, 0x0, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x0, 0xfffffffb, 0x3}}, 0xe8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close(r5) r6 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x2d, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0xbe}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x925b, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @alu={0x4, 0x0, 0x2, 0x2, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @alu={0x0, 0x0, 0xa, 0x0, 0x9, 0xfffffffffffffffc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000014001a80100002800c"], 0x34}}, 0x0) pwritev(r9, 0x0, 0x0, 0x8040000, 0x0) splice(r1, 0x0, r5, 0x0, 0xfdef, 0x0) 36.67762147s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in], 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) nanosleep(&(0x7f0000000580)={0x0, 0x3938700}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a00000007"], 0xd) 36.50323885s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000800000000000000000001900850000006d0000001801000020646c25000500002020207b010000f8ffffffb702000008000000b70300000000000000000000000000000000000000000000003c828629b60e809fcf8b2912182f0b30f444697819b53dc4f315f1d80c48decf97680194f3099e5216719e795ea1bcc7de66d7027654bd3d2182f630a228"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000200), 0x20000000}, 0x54) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0x1}], 0x2}}], 0x1, 0x4008440) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/125, 0x7d}], 0x2}}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x70}}], 0x1, 0x2000c044) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) 36.382867901s ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc0bbc2f189b9b9af}]}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0) 36.286793131s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.228334677s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) 33.554948151s ago: executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240), 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000891) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 33.057801031s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.90421661s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="084886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 31.929642301s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000005c0)={0x0, 0x10b6}) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x18}, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{}, {0x20, '[{\x00'}, {0x20, '#\a '}, {0x20, '#\x00-\xca-'}]}, 0x1a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x81) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=0x1, r11, 0x37, 0x0, 0x0, @link_id}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000010000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000e2ffff0200fcffffff039500f1ffffffffff0efe9bf34161f5ae274f203213694248f61132b12a07805ddc81b6ad41c8900b9bab82e9892d8c4cca587c0ed950"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0x82, 0x1, &(0x7f0000000700)="f7f3b93d8949a05a6b6babb631e3c940b1e05290e84a0b1355de133682b0cf6698af31c67f17f98660bec5f8cc0360954240abc0505956c41f34ff59362302a21ec0fba80420193cad4a0dc5fec214f653013bedcd47f28ffa1e0ecb386c2a44096aad92fd2c9be80d1d03afed74db95cc650ee53c01d62015501a2e97cc76b269ca", &(0x7f00000002c0)=""/1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000638d191d86ffa53b0e93c0a9d", @ANYRES32=r6, @ANYRESHEX=r1, @ANYRES32=r6, @ANYBLOB="080005000a010101"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x10e, 0x8, 0x0, 0x20000000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r1, r1, 0x4, r13}, 0x10) 31.867576236s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="ee46c5719e63d5450801e6a5b80ed33770a463cba1ef6baed71e46b247978767726adf909f9b18ba5e7c043eebd3c5b3992177b37aae04f38e1219072f18bf914fe141db85f8ac6140956e", 0x4b, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e22, 0xc0000000, @private0, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x0, 0x1384}, 0x48) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 31.669584129s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xf0ffffff}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x30}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x3b}}], 0x30}}], 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x98, 0x11e0, 0x0, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@limit={{0x48}, {0x0, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x3}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x2e}], 0x1}, 0x20000851) 31.553878618s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000290007010000183837000000000000020000001000018009000000215d292600"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x6}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001406010100000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a3100000000050001000700000005000400000000000c0007800800120000000000050005000a000000"], 0x58}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f00000004c0)='kfree\x00', 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB="06189199f4ed000000488f1a5943c7300000000000000000", @ANYRES32, @ANYBLOB="0c002b8008000300", @ANYRES32=r7, @ANYBLOB], 0x2c}], 0x1}, 0x0) 31.459533821s ago: executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 31.396136108s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24004088) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0x4) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x0, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$qrtr(r6, &(0x7f0000000000)={0x2}, 0xc) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000040), 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty, 0xfffffffe}, 0x1c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) 31.354767718s ago: executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x800443d2, 0x20000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4c888, &(0x7f00000001c0)={0xa, 0x4e20, 0x9e, @loopback}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 31.32631228s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0xe}}) r1 = socket$inet6(0xa, 0x5, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0xfff7) 31.128881742s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x10, r1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000905000000000200000000001b00", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r9, &(0x7f0000000000)=@id, 0x10) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x97, 0x82, &(0x7f0000000280)="2a364888e0746c38a86553a29db91c108d2bd98d5f54fc9e665ac8460ae1389765e8cbdc0565a25a314d3d3d0480502d001b427232656a8f1b06935a997340e9baa94c0aa5476c304728c1fc8dd30c93b48b772d7119249c97df3cd18a446828066fc11ba2ac9b063772e7e8078f3fd2e98ea0e88cf082b38c5e5d91540732d7551f58e7063c18f9ed21a310a1803c35977331bbf43da1", &(0x7f0000000380)=""/130, 0x0, 0x0, 0x72, 0xd, &(0x7f00000004c0)="2ee31938b396b199a08cc46504babe7dde8a039b7921818f56e6486f8b89fe1fed9129228fc711fd81d1168daaabd730049835b5d3930acbde8e26f515de40f5bd964f0a01919bdb9f3e1248ea129f4e832fb20f98dcc225c48a61e9f850a20665c3aee4043dc012774741cd26c67922959c", &(0x7f00000001c0)="a55f8d84a7a9c9a760936d42b7", 0x1, 0x0, 0x1}, 0x50) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r2) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 31.101093556s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/78, 0x4e}], 0x1) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="480000001400190d7ebdeb75fd0d84562c84d8c033edefb5076555a84248edffcd2679050700000000cb4f916bca00000f7f89000000200000004a2471083ec6991778581acb6c01", 0x48}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0xfffffffffffffe21) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}], 0x1, 0x48005) unshare(0x20000400) ppoll(&(0x7f0000000040)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f00000023c0)=@deltfilter={0x26b0, 0x2d, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0xa, 0x2}, {0xf, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0x2674, 0x2, [@TCA_FW_ACT={0x148, 0x4, [@m_nat={0x144, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x80000001, 0x5, 0x5, 0x5}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x7, 0x20, 0x9}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa8, 0xdaab, 0xffffffffffffffff, 0xffffffff, 0x4}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x401, 0xffffffffffffffff, 0x400, 0x1ff}, @remote, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x8, 0x7, 0x3ff}, @multicast2, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3f, 0x3, 0x8ee, 0x100}, @local, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x7, 0x40, 0xfffff9b4}, @rand_addr=0x64010101, @multicast2, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FW_ACT={0x1cc, 0x4, [@m_ct={0x158, 0x7, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffff6ca}, @TCA_CT_LABELS_MASK={0x14, 0x8, "57e00b804de9e3af8291d8cd1d1d573e"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "07c55bc9359b577d1316a8a0e6529f7b"}]}, {0xe5, 0x6, "4c5a9ce75ffc55b366924a20db0cf05703b1e1bf841eb8cbdcdae213b128b2a29b33be6564ee561e1ef2a444c564ef4cf97a8f58ad628890c180401126d1cfd0f62405f35d3a2a31cfafe5817f47605d7bcd62c6594970dac45c7f038dc2434e6433162d100790d08329898bfe3f66ae99990de8566f0faa57ff9c9bfb5858c6c1e351cd0fa2b8bf92f9a5364a96ecbdba912d69c0de313d47d02f09dc6edcffc19aafe4be4b5b642d40c3ea1b40d31d1a2ff14fd84d42c60f61f6441ac6f66c5bad77793c1d31c0addd43acfd08b8c8c59b558afd541231c0eaee2806b2f62b17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x70, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x2, 0x3, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4de}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0xc, 0x6, "840ddbaa33a61a12"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_ACT={0x2354, 0x4, [@m_police={0x21dc, 0x19, 0x0, 0x0, {{0xb}, {0x2144, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81f4, 0x3, 0xb2, 0x9, 0x3, 0x2, 0x5c6, 0x0, 0x7fff, 0x556c48b9, 0x10000, 0x20, 0x6, 0xfffff8ca, 0x9, 0x1, 0xd7, 0x1, 0x6c2, 0x795419ce, 0x9, 0x7fffffff, 0x3, 0x7, 0x9, 0x40, 0x8, 0x80000001, 0x1f, 0x7fffffff, 0x2, 0xfffffff9, 0x81, 0x2, 0xffff, 0xfffff801, 0xfff, 0x7, 0x2, 0x9, 0x1000, 0xff, 0x3ff, 0x3, 0x7f, 0x9, 0xc723, 0x4, 0xa9e5563, 0x9, 0xa63, 0x8001, 0xffffffff, 0x3, 0x300, 0x7f, 0x4, 0x0, 0x7, 0x4, 0xfffffc00, 0x4, 0x2000ff, 0xfffffff7, 0x4, 0xffff, 0x0, 0x1, 0xfffffffb, 0x8, 0x0, 0x101, 0x3d99, 0x0, 0x2, 0x6, 0xbe3, 0x10001, 0xffff, 0x0, 0x80000001, 0x9, 0x262e, 0x9, 0x80, 0xfffffff7, 0xcb30, 0xe5c, 0x1ff, 0x9, 0x7, 0x0, 0x7, 0x0, 0x3f, 0x9, 0x800, 0x0, 0xfff, 0x1, 0x8001, 0x1, 0xf34, 0x8, 0x401, 0x1a4000, 0x2, 0x4, 0xdb, 0xffff, 0x1, 0x0, 0x0, 0x4, 0xfffff001, 0x7, 0x2, 0x800, 0x5, 0x0, 0x3, 0x5, 0x0, 0x4, 0x6, 0x7, 0x1, 0x576b, 0x6, 0x7, 0x800, 0x80000001, 0x200, 0x0, 0x5, 0x800000, 0xbfb3, 0x8, 0xf7, 0xfffffff8, 0x4, 0x8, 0x6, 0x4, 0x80000001, 0x6, 0x3, 0xffffff59, 0x7fff, 0x7, 0x7, 0x3ff, 0x2, 0x1000, 0x4, 0x6, 0x5, 0x8, 0x7, 0x80, 0x40, 0x0, 0x3ff, 0x9da, 0x101, 0x200, 0x50a5536d, 0x7fffffff, 0x2, 0x9, 0x658, 0x5, 0x1ff, 0xffffff8d, 0x8, 0x5fb, 0x3, 0x0, 0x3dfbb0a7, 0xff, 0x3, 0x800, 0x80000000, 0x5, 0x5e7, 0x1, 0x8000, 0x0, 0x80000001, 0x6, 0x2, 0x3, 0x3b, 0x591, 0x100, 0x4, 0x4, 0x1ff, 0x5, 0x682, 0x4, 0x0, 0x80, 0x8, 0x8000, 0x7ff, 0x6, 0x3, 0x800, 0xba36, 0x8, 0x9, 0x101, 0x42, 0x10000, 0xfffffffa, 0x2, 0x80, 0x6, 0xcb67, 0x9, 0x5, 0x0, 0x70, 0x400, 0xf5a, 0x4, 0x1, 0xfffff801, 0x80000001, 0x6, 0x10001, 0x0, 0x2, 0x0, 0x39031a4d, 0x80000001, 0x2, 0xb6, 0x4da1, 0x3, 0x2, 0x8000, 0x4, 0x1000, 0x9, 0x8, 0x5, 0x2, 0x5, 0xb4a, 0x0, 0x101, 0x2, 0x3, 0xcad0]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x2, 0x0, 0x7f, 0x7f, 0x5, 0x7ff, 0x6, 0x401, 0x6, 0xffffffff, 0x101, 0x8, 0x2, 0x1, 0x80000000, 0x3f, 0x4, 0x0, 0x0, 0x7, 0x13, 0x100, 0x2, 0x0, 0x8b, 0x2, 0x7, 0x10000, 0x81, 0x8001, 0x7f, 0x3, 0x3, 0x8, 0x8, 0x7, 0xfffffffc, 0x7, 0x83, 0x9, 0x8, 0x800, 0x1000, 0x3, 0x8, 0x1, 0x1, 0x697a, 0x2, 0x7fff, 0x6, 0x4, 0x6b, 0xfffffffb, 0x3, 0x2, 0x1f, 0x9, 0x80000001, 0x976, 0x2, 0x80000000, 0x5, 0x1ff, 0x3e9, 0xbfbd, 0x6, 0xff, 0x8, 0x1, 0x7f, 0x10000, 0xb41f, 0x1000, 0xdb15, 0x8, 0xbc, 0xff, 0x7, 0x3ff, 0x1, 0x5, 0x7fff, 0x273, 0x8, 0x94, 0x1, 0x0, 0x701c, 0x7f, 0x3, 0x1, 0x75e, 0xc, 0x4, 0xf8b, 0x3, 0xb56a, 0x8001, 0x94f, 0x9, 0xfff, 0x3, 0x10000, 0xd7d, 0x3, 0x8, 0x7f, 0x3, 0xfff, 0x7, 0x9a75, 0xfffffffd, 0x34858f43, 0x8, 0x8, 0x7, 0x401, 0x8001, 0x2, 0x20, 0x2, 0x8, 0x3f, 0xbdc6, 0x8, 0x3, 0x7fff, 0x9, 0x3, 0x8, 0x286d, 0x101, 0x45ed, 0x80000001, 0x7fffffff, 0x8001, 0x7f, 0x7fff, 0x1a64, 0xe7d, 0x1, 0x4, 0x9, 0xb7a4, 0x80, 0x1a0, 0x80000000, 0x7, 0x2, 0x2, 0x80, 0x2, 0x7fffffff, 0x200, 0x186, 0x3ff, 0x2, 0x388, 0x3, 0x7ad26151, 0x80, 0xfff, 0x8, 0x10000, 0x8, 0x20, 0x82c, 0x1, 0x4, 0x3f, 0x2, 0xfffffff7, 0x1ff, 0x8, 0xfff, 0x1, 0x8, 0x6, 0xa8, 0x200, 0x800, 0x497a, 0x27a4, 0x4, 0x5, 0x5f89, 0x5c, 0xff, 0x1, 0x7, 0x9, 0x1, 0x101, 0x2, 0x9, 0x8001, 0x0, 0x91, 0x3, 0x5, 0x0, 0x7, 0x3, 0x101, 0x6, 0x9, 0x1, 0x400, 0x2, 0x7, 0x110000, 0x0, 0x7, 0xfa5, 0x1ff, 0x8, 0x6, 0x400, 0x0, 0xffffffff, 0x401, 0x4, 0x7fffffff, 0x4, 0xb55, 0x7, 0x3, 0x7, 0xfffffff8, 0x5, 0xa0, 0x7fffffff, 0x8001, 0x2, 0x7, 0x0, 0x8, 0x40, 0x3f, 0xfff, 0x4, 0x9, 0xa69, 0xfffffffd, 0x0, 0x8, 0x2, 0x7, 0x2, 0x6, 0x5, 0x3f0f9d18, 0x1f]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xdf32, 0x0, 0x50, 0xffff0000, 0x1, 0x6, 0x8, 0xb9, 0x4, 0x80000001, 0xfffffffa, 0xae82, 0xf4, 0x3, 0x6, 0x1, 0x4, 0x9, 0x5, 0xf761, 0x1, 0x6e, 0xabe, 0x80000000, 0x200, 0x800, 0x2, 0x4, 0x7, 0x0, 0x69800, 0x39, 0xfffff926, 0x3, 0x5, 0x7fff, 0x5, 0x3, 0x1, 0x0, 0x400, 0x7, 0x5, 0x9433, 0x200, 0x5, 0xffffff7a, 0x7, 0xc0000000, 0x20, 0x1, 0x4c, 0x6, 0x5505b2c7, 0x6, 0x5, 0x80000001, 0x9044, 0xfffffffe, 0x40, 0x1, 0x4, 0x0, 0x740f, 0x7, 0x1ff, 0x10000, 0xffff0e62, 0x5, 0xb1c, 0x1ff, 0x4c7, 0x101, 0x2, 0x8, 0x79e, 0x80, 0xfff, 0xfffffff8, 0x5, 0x800, 0xcae7, 0xf2a, 0xf0000000, 0xc6c7, 0x30cb09d0, 0x3, 0x10001, 0x3d2, 0x362e, 0x5f9d, 0x10000, 0x5, 0x80000001, 0x3, 0xf7, 0x3, 0x2, 0x2890, 0x200, 0x4, 0x3, 0x4, 0x8, 0x9, 0x5, 0x6, 0x1, 0x4, 0x0, 0x0, 0xf3aa, 0x2, 0x7fffffff, 0x3, 0x200, 0x9, 0x8001, 0x10001, 0x3, 0x0, 0x5, 0x5, 0x908, 0x0, 0x6, 0xcb, 0x6, 0x1ab3, 0x3, 0x3, 0x1, 0x6, 0xffff8eda, 0x3, 0x8, 0xff800000, 0x2, 0x9, 0xfffffffe, 0x2252, 0x1, 0x8, 0x0, 0x64, 0x3b, 0x9, 0xfc000000, 0x81, 0x31, 0x20, 0x89, 0x7f, 0x7, 0x20, 0x0, 0x7, 0xfff, 0xffffffff, 0x4, 0x4, 0x8, 0x0, 0x5, 0x8, 0xcd, 0x45, 0x6, 0x2, 0x6, 0x1, 0x1, 0x44, 0x98a, 0xfff, 0xffff, 0x5, 0x101, 0xfbe7, 0x100, 0x4, 0x1ff, 0x2, 0x5c8, 0x1b, 0x1, 0x6, 0x6, 0x3, 0x7, 0x8, 0x7, 0x601a, 0x8, 0x5, 0x800, 0x1ff, 0x9, 0x4, 0x9, 0x5, 0x6, 0x2, 0x602ef746, 0x0, 0x1000, 0xe0, 0x200, 0xae, 0x6, 0x7, 0x7, 0x4, 0x1, 0x9, 0x185a, 0x8, 0x7fff, 0xfff, 0x6cbf, 0x401, 0x80, 0x80000000, 0x7, 0x8, 0xe1b4, 0x4, 0x9, 0x1f, 0x5370, 0x1, 0x1f, 0x7, 0x9f9, 0x0, 0x6, 0xffffffff, 0x80, 0xf8, 0x5, 0x8, 0x4, 0x80000000, 0x2, 0x5933072a, 0x8, 0x2, 0x7fff, 0xffffffe1, 0x1000, 0x1, 0x3f, 0x1, 0xffffffff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xac0}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4433, 0x9, 0xfffffffc, 0x100, 0x3d32, 0x3, 0xfa, 0x6, 0x9, 0x6723452b, 0x4, 0x7, 0x1, 0x1, 0x3ff, 0x9, 0x7b0d, 0x3ff, 0x3f, 0xa0, 0x2, 0x6, 0x3, 0x8001, 0xfff, 0x4, 0x1, 0x1, 0x8, 0xffff, 0x4, 0x0, 0x81, 0x4, 0x7, 0x200, 0x101, 0x6daa, 0x1, 0x3ff, 0x1, 0x0, 0x32b, 0x9, 0x1000, 0x1, 0xff, 0xff800, 0xb7a8, 0x5, 0x0, 0x2, 0x7, 0x2, 0x4, 0x4, 0x3, 0x7fff, 0x6, 0xfffffffa, 0xf9, 0x5, 0xea, 0x3, 0x0, 0x800, 0x7, 0x4, 0x9, 0x3, 0x66, 0x8, 0x9, 0x8, 0x3, 0x9, 0x3ff, 0x5, 0xfff, 0x67e, 0x10001, 0x7, 0x2, 0x3f, 0x9, 0xfffffff7, 0x2, 0x0, 0xa, 0x4, 0xfffffffb, 0x10001, 0x2, 0x5, 0x3, 0x48b, 0x3f, 0x2, 0x9, 0xfff, 0x9, 0x4, 0x3, 0x2, 0x2, 0x7ff, 0x7, 0x77de, 0x7, 0x5, 0x81, 0x7ff, 0x8, 0x18000, 0xfffffff8, 0x3, 0x10000, 0x800, 0x2, 0x4, 0x45, 0x5, 0x2, 0x1, 0x7, 0x9, 0x2, 0x6, 0x200, 0x6, 0x400, 0x10001, 0xeb, 0x6, 0x1, 0x400, 0xcc1d, 0x8, 0x4, 0x8001, 0x10001, 0x6, 0x5, 0x3, 0x8, 0x7, 0x8, 0x9, 0x2, 0x400, 0xb, 0xfff, 0x2, 0xb4, 0x10001, 0x2, 0xfffffc01, 0x400, 0x2, 0x1000, 0x3, 0x1, 0xc69e, 0xac, 0x4, 0x6a07, 0x6, 0x0, 0x6, 0x9, 0x4, 0x40, 0x7fff, 0x81, 0x1, 0x9ab825f, 0xffff, 0xffffffff, 0x4, 0x7, 0x401, 0x8, 0x0, 0x1, 0xffff15b3, 0x2, 0x80, 0x7, 0x9, 0x1ff, 0x40, 0x10000, 0x2, 0x0, 0x3f, 0x4, 0x0, 0xffffffc0, 0x400, 0x8, 0x7, 0xffff0001, 0x7, 0x4, 0x401, 0x7, 0x7f, 0x1, 0x3f, 0x20, 0x9, 0x8000, 0x4, 0x40, 0x9, 0x10000, 0x25e, 0x3f, 0x0, 0x4, 0x1ff, 0x7fff, 0x7, 0x9, 0xf692, 0x90d, 0x46, 0x9, 0x4d6e, 0x8000, 0x44, 0x4, 0xffff8001, 0x80000001, 0x100, 0x0, 0x4, 0xfffffff9, 0x401, 0x7fffffff, 0xffff, 0x5, 0x0, 0x8, 0xfffffe01, 0x20, 0x3, 0xfffffff8, 0x10000, 0x8, 0x23b, 0xfffffc00, 0x1f, 0x7fff, 0x7, 0x4e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x987d, 0x4, 0xff, 0xfffffffa, 0x9, 0xfffffffb, 0xdfdb00, 0xfffffff9, 0x3ff, 0x0, 0x3, 0x8001, 0x800, 0xffff, 0x5, 0xed78, 0xf9c, 0x80000001, 0x81, 0x1f, 0x1, 0x0, 0x3ff, 0x7, 0x80000000, 0x10001, 0x50, 0x200, 0x4, 0x3, 0x8, 0x2, 0x9, 0x7fffffff, 0x5, 0x8, 0x7fffffff, 0x7, 0x80, 0x4, 0x10000, 0x0, 0x0, 0x8, 0x7fffffff, 0xe89, 0x22e, 0x2, 0xffffff16, 0x9, 0x1, 0x3, 0x3482, 0xffff, 0x1, 0x7, 0x3, 0xd8f, 0x4b, 0x4, 0x1, 0x1, 0x5, 0xffffffff, 0x4, 0xf2, 0x1, 0x8, 0x5c, 0xab72, 0x1d, 0x8000, 0x71ef7247, 0x7f, 0x1, 0x1, 0x2, 0x5e, 0x7, 0xdb3, 0x4, 0xd580, 0x80, 0x0, 0xfffffffd, 0x55, 0x1, 0x8, 0x8, 0x6, 0x8, 0x2, 0x800, 0x80000000, 0x900, 0x2, 0x6, 0x3, 0x401, 0x6, 0x3, 0x3, 0x9, 0x1, 0x3ff, 0x20, 0x5, 0x200, 0x2, 0x6, 0x7, 0x4, 0x400, 0xffffffff, 0x1, 0x9, 0x1, 0x3, 0x5c, 0x3, 0x4, 0x4, 0x3, 0x10000, 0x5, 0x3ff, 0x5, 0x4800, 0x2, 0x9, 0xfffffff9, 0x9, 0x80, 0x80000000, 0xfff, 0x0, 0xffffffff, 0x40, 0x4, 0x2, 0x3, 0x3f, 0xfec, 0x8, 0x2, 0x3, 0x8001, 0xc5a4, 0x5, 0x1000, 0xfffeffff, 0x0, 0x368, 0x5, 0x9, 0x4, 0x493, 0xfffff878, 0x7fff, 0x3, 0x9, 0x9, 0x80000000, 0x6, 0x6, 0x2, 0x1, 0xe242, 0x37e2, 0x6, 0x7e1a, 0x4, 0x5, 0xffffffff, 0x200, 0x0, 0x3, 0x1, 0x2, 0x5, 0xe9ea, 0xd6, 0xfffff000, 0x100, 0x7f, 0x3, 0xfffffbff, 0x7, 0x401, 0xff, 0x8001, 0xffff, 0x0, 0x1000, 0x81, 0x1, 0xb9, 0xffff, 0xf45, 0x7ff, 0x100, 0x8001, 0x4, 0x9c, 0x1, 0x1000, 0xc8, 0x3, 0x1, 0x9, 0x9, 0x7fffffff, 0xac, 0x0, 0x10000, 0x1f, 0x3ff, 0xffffffe0, 0x3, 0xffffff80, 0x7ff, 0x0, 0x401, 0x7f, 0x7ff, 0x7, 0x7d, 0x7ff, 0x18, 0x400, 0xffff, 0x9, 0x80, 0x9, 0x4, 0x10001, 0x9, 0xffffbd46, 0x10001, 0x0, 0x100, 0x9, 0x7fffffff, 0xffff, 0x7ff, 0x8, 0x4, 0x3, 0x6, 0xffffff2f, 0x10000, 0x4, 0x10001, 0x5, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x4, 0x8001, 0x9, {0xb7, 0x2, 0x7ff, 0x1ff, 0x1, 0x3}, {0x80, 0x0, 0xc32, 0x9, 0x2, 0x6497}, 0x74c, 0x40, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x9, 0x8, 0x10001, 0x1, 0x7de02945, 0x3a8, 0x8001, 0x857, 0x5, 0x100, 0x4, 0x7b09, 0x5, 0x20, 0xe3d, 0x8, 0x6, 0x10040, 0x1f, 0x1ff, 0x9, 0x4, 0x3, 0x8, 0x8, 0x7, 0x5, 0x4, 0x5, 0xa45, 0xf600000, 0x7ff, 0x20, 0x6, 0x6, 0x80000001, 0x5, 0x3, 0x8000, 0x5, 0xffffffff, 0x5000, 0x0, 0xa000000, 0x8, 0x9e8, 0x9, 0x80, 0x8, 0x5, 0x6, 0x4, 0x3, 0x1ff, 0x4c69, 0x80, 0x80, 0x328, 0x40, 0x3, 0xffff79ca, 0x0, 0x4, 0x1, 0x2, 0x8, 0x8, 0x1, 0x800, 0xffffffff, 0x0, 0xffff, 0xb3c, 0x85, 0x8, 0x4, 0x80000001, 0x7f, 0x5, 0x3f, 0x468, 0xfffffff8, 0x5, 0x20, 0x10001, 0x0, 0x8, 0x15f3d252, 0xff00000, 0x6, 0xfffffffc, 0x64c, 0x5, 0x5, 0x5, 0x4e, 0x5, 0x5, 0x6, 0x7015, 0x2, 0x80000001, 0x3f, 0x10000, 0x72554421, 0x1, 0x5, 0x9, 0x1, 0x9, 0xfffffff7, 0x2, 0xffffffff, 0x4, 0x3, 0xf7c0, 0x6, 0x6, 0x0, 0x5ef, 0x9ad, 0xfff, 0x4, 0x0, 0xed43, 0x9, 0x2, 0x8db4, 0xdf, 0x1, 0x6, 0x82, 0x4, 0x1, 0x8001, 0x6, 0x3, 0x101, 0x7, 0xfff, 0x1, 0x7, 0x2, 0x0, 0x9, 0x0, 0x90f6, 0x7, 0x6, 0x3f, 0x0, 0x0, 0x7fffffff, 0x800, 0x8, 0x0, 0x2, 0x2, 0x7016, 0x7c2, 0x8, 0x80, 0x9, 0x1000, 0x5, 0xffffffff, 0x1ff, 0x9, 0x7, 0x7, 0xa8, 0x4, 0xff, 0xe1, 0x10001, 0x8, 0x5, 0x50ebf963, 0x5, 0xda, 0x100, 0x3, 0x7f, 0xffffff81, 0x7f, 0x4, 0x40, 0x1d1, 0x90a9, 0x80, 0x0, 0x788f, 0x5, 0x8, 0x0, 0x5, 0x5, 0x4, 0x2, 0x2, 0x2, 0x400, 0x3, 0x650, 0x2, 0x9, 0x7b8, 0x8, 0x5, 0x3, 0x0, 0x9, 0x48, 0x8, 0x7ff, 0x6, 0x6, 0x3e, 0x558, 0x80000001, 0x6, 0x2, 0x0, 0x20, 0x10000, 0x87b, 0x5, 0x2, 0x40, 0x6, 0x200, 0x1f, 0x80000001, 0x6, 0x6, 0x1, 0x6, 0xa9e4, 0x20000, 0x100, 0x63cf, 0x9729, 0x3, 0x4, 0x8, 0x0, 0x0, 0x2a, 0x3, 0x9, 0xec, 0x10000, 0x2, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x4, 0x7ff, 0x7, 0x1b52, 0x2, 0x1, 0x100, 0x3ff, 0x1, 0x2, 0x10000, 0x3, 0x5, 0x200, 0x595d, 0x87a7, 0xcc0, 0x9, 0x8, 0x7fffffff, 0xff, 0x9, 0x1f, 0x80, 0x7, 0x42, 0x101, 0x8, 0x9, 0x9, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x7, 0x400, 0x100, 0x7, 0x400, 0x6, 0xfc0, 0x10001, 0x101, 0x5, 0xffe, 0x1000008, 0x7, 0x0, 0x5b4, 0x5, 0x9, 0x2, 0x40, 0x3, 0x1, 0x3, 0x0, 0x9, 0x4, 0x3987e50, 0x7ff, 0xa4, 0x800, 0x8, 0xfff, 0x82, 0x8, 0x2, 0x6, 0xb0, 0x80000001, 0x80000001, 0x0, 0x9, 0x1, 0xf6, 0x5, 0x1, 0x80, 0xfffffe00, 0x200000, 0x7, 0x138, 0x94, 0x3, 0x0, 0x1, 0x7fff, 0xffff, 0x2, 0x40, 0x40000000, 0xaec, 0x1f, 0x7, 0x1d7, 0x8, 0x6a, 0x0, 0x9, 0x401, 0x8, 0x6ac5, 0x3fb8, 0x40, 0x1, 0x2, 0x80000000, 0x1, 0x8, 0x5, 0x9, 0x101, 0x4, 0x4, 0x80, 0x7, 0x9, 0x4, 0x10000, 0x4, 0x4, 0x8, 0x6, 0x4, 0x446, 0x101, 0x3, 0x52d, 0x5, 0x2, 0x8, 0xf7, 0x3, 0x5, 0x3, 0x80000001, 0x800, 0x6, 0x81, 0x1f9, 0x401, 0x9, 0x1, 0x6, 0x87, 0x1, 0x10000, 0x100, 0x9, 0x4, 0x0, 0xfff, 0x5, 0x1, 0x6000000, 0x4, 0x9, 0x2, 0x89, 0x6de2, 0x1, 0x80, 0x2, 0x3, 0x6, 0x884, 0xa9, 0x2158, 0x3, 0x5, 0x400, 0x7ff, 0x200, 0x240000, 0x12, 0xa69, 0x4, 0x1f, 0xffffffff, 0x9, 0x2, 0x2dd, 0x1, 0x2e, 0x1f, 0x1, 0x3f, 0x8, 0x3, 0x4, 0x40, 0x1cb, 0x6, 0x4, 0x0, 0x88e, 0x9, 0x10000, 0x8, 0x4, 0xfffffffc, 0x80000001, 0x9, 0x9, 0x3, 0x6, 0x0, 0x7, 0xffffffff, 0x3, 0x100, 0x3, 0xfffffffd, 0x1f, 0x4, 0x9, 0x6, 0x80, 0x200, 0x100, 0x8, 0x100, 0x8001, 0x8, 0x2, 0x8000, 0x3, 0x5, 0x8, 0x88d, 0x80, 0x7, 0x401, 0x55, 0x7, 0x6, 0x7, 0xffffffff, 0x800, 0x8d, 0x2, 0x40, 0xc8, 0x82, 0x20, 0x1f, 0x9e4, 0xfd8e, 0x3, 0xf39c, 0xa1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x7, 0xb6e, 0x9, {0x1, 0x1, 0x1130, 0x6, 0x100, 0xfffffffd}, {0x39, 0x2, 0xa993, 0xf47, 0x6, 0x5f}, 0x80000000, 0x3, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x7ffb, 0x2, 0x3, {0xfe, 0x1, 0xb10e, 0x2e, 0x0, 0x9af}, {0x0, 0x2, 0x9, 0x2, 0x467, 0x4}, 0x5, 0x5, 0x400}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x98e9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe31}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x7, 0x875, 0x9, 0x0, 0x3, 0x5, 0x8, 0x1, 0x7ff, 0x6, 0x0, 0x8, 0x5, 0x80, 0x80000000, 0x5, 0x9, 0x3ff, 0xd1, 0x81, 0x4, 0x6957, 0x68, 0xffff, 0x6, 0x80, 0x10000, 0x8, 0xc42, 0x9, 0x3, 0x7, 0x6, 0xfffffda2, 0x7ff, 0x5, 0x1, 0x401, 0x2, 0x4, 0x6, 0x4, 0xee1, 0xffff, 0x6, 0x5, 0xffff, 0x0, 0x8000, 0x100, 0x3, 0xffff, 0x9, 0x7fff, 0x10001, 0x1, 0x9, 0x1, 0x3, 0xd23, 0x1, 0x0, 0x3, 0x80000001, 0x4, 0x9, 0x67, 0x8, 0xff, 0x5, 0xf86, 0x0, 0x7fff, 0x0, 0x1, 0x6, 0x5ed0, 0x7f, 0x7, 0x6, 0xa4000000, 0x5, 0x7fffffff, 0x1, 0x8, 0xeb, 0xfffff001, 0x4, 0x4, 0x4, 0x8e, 0x7fff, 0xebf5, 0x1, 0x3, 0x3ff, 0x2, 0x90f, 0x3, 0x7fff, 0x1000, 0xfffffff8, 0x6f0, 0x3, 0x4, 0x2, 0x8, 0x6, 0x2, 0xdcea, 0x0, 0x2, 0x7, 0x80000000, 0xffff, 0x6, 0xa7, 0xffff, 0x1, 0x6, 0x2, 0x8, 0xaa, 0x7, 0x1000, 0x5, 0x0, 0x101, 0x2, 0x10001, 0x3f, 0x4, 0x401, 0x10000, 0x1, 0x1ff, 0x9b, 0x8, 0x78, 0x5, 0x5, 0x6, 0x5, 0x8, 0xc6a, 0xf797, 0x9, 0x3f, 0x0, 0xd7, 0x81, 0x7, 0x8de, 0x101, 0xffff, 0x8, 0x2, 0x6, 0x80000000, 0x0, 0x2c, 0xffffffff, 0xffffffc1, 0xfffff009, 0x6, 0x8, 0x3, 0x6, 0x7, 0x800, 0x4, 0x2, 0x4, 0x8, 0x6, 0x0, 0x2f5, 0x10001, 0x1000, 0x3, 0x1ff, 0x6, 0x400, 0x6, 0x200, 0x8000, 0x7f, 0x9, 0x6bd261fe, 0x401, 0x4, 0x1f2b, 0xff, 0xedb6, 0x6, 0x40, 0x2, 0xa7, 0x5, 0x0, 0x8, 0x663, 0x8, 0xff, 0xd73, 0x8, 0x7, 0x0, 0x7f, 0xff, 0x3f, 0x87b00000, 0x9, 0x1f, 0xc59f, 0x4, 0x6, 0xe22, 0x400, 0xffff, 0x5, 0x200000, 0x4692, 0x6, 0x2, 0x3, 0x6, 0x401, 0x9, 0x5, 0x9d, 0x1, 0x2, 0x3, 0x1000, 0x9, 0x1, 0xfffffffe, 0x81, 0xea24, 0x2, 0x3ff, 0x9, 0xb49, 0x4, 0x577, 0x6, 0x8, 0x1211, 0x2, 0x47431480, 0x80000000, 0xeeb, 0x7ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]]}, {0x6f, 0x6, "a5a41527702a8060796959f3ce756d555dc92ed47da0094d7daebe89c3b574c7404e5b07109d24060e1ab068ab361bfc80fa741503dfa7853ecb6b2078a61d96c0309869f9c8841ef3e13690649c55b84ef532ffd8a72f6f292a65e32ca333e2bd79e19bfa3da17983e469"}, {0xc}, {0xc, 0x8, {0x66949ea3c2cccbe9, 0x2}}}}, @m_csum={0x174, 0x6, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x0, 0x1, 0x3, 0x9}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3ff, 0x20000000, 0x6, 0x3}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xbe6, 0x0, 0x75b}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x4, 0x20000000, 0x3ff, 0xd}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x2, 0x2, 0xef, 0x8}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0xd1, 0xdc7c3f6b511356ca, 0x1f, 0x7f}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x4, 0x4, 0x9, 0x20}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8000, 0x6, 0x7, 0x7}, 0x53}}]}, {0x68, 0x6, "4475adb686d429d6e2c95aea5f62d48cf8197290c6e1293f88060aa4d709dc031b907eb2b8d093625c5320c1e3b493bd08cc8d61b963b2e458ab464029af71b1c4a66d19ef1bb73872dd0107e59df8c0a695618e492093b460b4ef01a3e26ca35377a30b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x26b0}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030011000500e1000cee020900ea020000", 0x33a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40}, 0x48) 31.008798461s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140020c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000002100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000aaa850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x80, 0x4}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) unshare(0xc040400) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 30.934846287s ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x18, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x10}]}, 0x18}}, 0x0) socketpair(0x22, 0x2, 0x4, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.927928786s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.883808351s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 30.793786499s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x1200}]}}]}, 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xfff, 0x3, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000425bd70000edcdf258600000008002700020000000800a000040000000200000005001801ec000000050018012400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44015}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x2, 0x8000, 0x2c9, 0xffffffffffffffff, 0xbbf0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000e50000850000007d0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000140008"], 0x38}}, 0x0) 30.180375065s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0xf0ffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 30.03260778s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="24000000290007010000183837000000000000020000001000018009000000215d292600"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x6}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001406010100000000000000000000000011000300686173683a6e65742c6e6574000000000900020073797a3100000000050001000700000005000400000000000c0007800800120000000000050005000a000000"], 0x58}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f00000004c0)='kfree\x00', 0x6) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000010000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB="06189199f4ed000000488f1a5943c7300000000000000000", @ANYRES32, @ANYBLOB="0c002b8008000300", @ANYRES32=r7, @ANYBLOB], 0x2c}], 0x1}, 0x0) 893.159652ms ago: executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x800443d2, 0x20000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4c888, &(0x7f00000001c0)={0xa, 0x4e20, 0x9e, @loopback}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 853.12777ms ago: executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180), 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}]}, 0x8c}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="a400000021000f04ff070000fcdbdf250a801401020000020400000008000a000000000014000200ff01000000000000000000000000000114000100fe88000000000000000000000000010114000100fe8800000000000000000000000000010500150001000000140002000000000000000000000000000000000114"], 0xa4}}, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) (async) r7 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r7, 0x10d, 0xcf, 0x0, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000325bd7000fcdbdf251b000000ffbba9048a9336af0800080004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x200408d0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) 747.070922ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fddbdf25140000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x44814}, 0x0) 0s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x10, r1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000905000000000200000000001b00", @ANYRES32=r7, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r9 = socket(0x1e, 0x805, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r9, &(0x7f0000000000)=@id, 0x10) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x97, 0x82, &(0x7f0000000280)="2a364888e0746c38a86553a29db91c108d2bd98d5f54fc9e665ac8460ae1389765e8cbdc0565a25a314d3d3d0480502d001b427232656a8f1b06935a997340e9baa94c0aa5476c304728c1fc8dd30c93b48b772d7119249c97df3cd18a446828066fc11ba2ac9b063772e7e8078f3fd2e98ea0e88cf082b38c5e5d91540732d7551f58e7063c18f9ed21a310a1803c35977331bbf43da1", &(0x7f0000000380)=""/130, 0x0, 0x0, 0x72, 0xd, &(0x7f00000004c0)="2ee31938b396b199a08cc46504babe7dde8a039b7921818f56e6486f8b89fe1fed9129228fc711fd81d1168daaabd730049835b5d3930acbde8e26f515de40f5bd964f0a01919bdb9f3e1248ea129f4e832fb20f98dcc225c48a61e9f850a20665c3aee4043dc012774741cd26c67922959c", &(0x7f00000001c0)="a55f8d84a7a9c9a760936d42b7", 0x1, 0x0, 0x1}, 0x50) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r2) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. 2024/06/16 04:41:41 fuzzer started 2024/06/16 04:41:41 dialing manager at 10.128.0.169:30018 [ 50.631680][ T5093] cgroup: Unknown subsys name 'net' [ 50.816802][ T5093] cgroup: Unknown subsys name 'rlimit' 2024/06/16 04:41:42 starting 5 executor processes [ 51.934938][ T5100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.908139][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.923287][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.932229][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.951491][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.971611][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.980790][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.989381][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.994964][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.997648][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.004475][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.012190][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.018854][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.024715][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.032236][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.038239][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.047041][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.060821][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.060968][ T4494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.068492][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.083725][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.092548][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.105776][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.126244][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.133926][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.142592][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.178495][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.186328][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.195150][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.204333][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.212042][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.668775][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 53.710686][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 53.722638][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 53.842553][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 53.951040][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.958895][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.966771][ T5115] bridge_slave_0: entered allmulticast mode [ 53.974230][ T5115] bridge_slave_0: entered promiscuous mode [ 53.986559][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.993715][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.000949][ T5115] bridge_slave_1: entered allmulticast mode [ 54.008642][ T5115] bridge_slave_1: entered promiscuous mode [ 54.038592][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 54.071290][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.079614][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.088967][ T5112] bridge_slave_0: entered allmulticast mode [ 54.096479][ T5112] bridge_slave_0: entered promiscuous mode [ 54.105300][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.112425][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.119747][ T5112] bridge_slave_1: entered allmulticast mode [ 54.127596][ T5112] bridge_slave_1: entered promiscuous mode [ 54.162344][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.169572][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.177318][ T5118] bridge_slave_0: entered allmulticast mode [ 54.185365][ T5118] bridge_slave_0: entered promiscuous mode [ 54.194131][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.201369][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.208921][ T5118] bridge_slave_1: entered allmulticast mode [ 54.216310][ T5118] bridge_slave_1: entered promiscuous mode [ 54.253076][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.304445][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.317304][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.328365][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.338776][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.346324][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.353899][ T5127] bridge_slave_0: entered allmulticast mode [ 54.361189][ T5127] bridge_slave_0: entered promiscuous mode [ 54.371028][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.390370][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.428062][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.435998][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.444270][ T5127] bridge_slave_1: entered allmulticast mode [ 54.450974][ T5127] bridge_slave_1: entered promiscuous mode [ 54.495621][ T5115] team0: Port device team_slave_0 added [ 54.519003][ T5118] team0: Port device team_slave_0 added [ 54.527562][ T5112] team0: Port device team_slave_0 added [ 54.537435][ T5112] team0: Port device team_slave_1 added [ 54.545031][ T5115] team0: Port device team_slave_1 added [ 54.583809][ T5118] team0: Port device team_slave_1 added [ 54.612121][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.658964][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.665976][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.692250][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.705485][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.712442][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.740087][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.753930][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.775589][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.782682][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.790507][ T5121] bridge_slave_0: entered allmulticast mode [ 54.797706][ T5121] bridge_slave_0: entered promiscuous mode [ 54.814796][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.821766][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.848229][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.866177][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.873212][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.899216][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.920653][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.929252][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.936559][ T5121] bridge_slave_1: entered allmulticast mode [ 54.944293][ T5121] bridge_slave_1: entered promiscuous mode [ 54.951345][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.958683][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.985130][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.998405][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.005552][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.031523][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.068494][ T5127] team0: Port device team_slave_0 added [ 55.077885][ T5127] team0: Port device team_slave_1 added [ 55.119952][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.158319][ T5115] hsr_slave_0: entered promiscuous mode [ 55.164501][ T5125] Bluetooth: hci2: command tx timeout [ 55.164516][ T5123] Bluetooth: hci0: command tx timeout [ 55.170243][ T5122] Bluetooth: hci1: command tx timeout [ 55.182320][ T5115] hsr_slave_1: entered promiscuous mode [ 55.202387][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.243460][ T5122] Bluetooth: hci3: command tx timeout [ 55.243813][ T5123] Bluetooth: hci4: command tx timeout [ 55.258060][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.265409][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.291345][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.319588][ T5118] hsr_slave_0: entered promiscuous mode [ 55.326072][ T5118] hsr_slave_1: entered promiscuous mode [ 55.332107][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.340517][ T5118] Cannot create hsr debugfs directory [ 55.357334][ T5112] hsr_slave_0: entered promiscuous mode [ 55.367072][ T5112] hsr_slave_1: entered promiscuous mode [ 55.373481][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.381023][ T5112] Cannot create hsr debugfs directory [ 55.398152][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.407555][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.433784][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.462227][ T5121] team0: Port device team_slave_0 added [ 55.497226][ T5121] team0: Port device team_slave_1 added [ 55.601437][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.609604][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.637053][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.663731][ T5127] hsr_slave_0: entered promiscuous mode [ 55.669950][ T5127] hsr_slave_1: entered promiscuous mode [ 55.677509][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.685118][ T5127] Cannot create hsr debugfs directory [ 55.712191][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.719361][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.745350][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.926775][ T5121] hsr_slave_0: entered promiscuous mode [ 55.936460][ T5121] hsr_slave_1: entered promiscuous mode [ 55.942462][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.950334][ T5121] Cannot create hsr debugfs directory [ 56.111410][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.126123][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.147311][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.172381][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.241875][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.255304][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.274756][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.297788][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.344312][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.360264][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.380006][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.391471][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.521750][ T5127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.536405][ T5127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.547041][ T5127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.559376][ T5127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.590118][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.667119][ T5121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.680384][ T5121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.690696][ T5121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.701025][ T5121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.761506][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.798163][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.805439][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.836161][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.843325][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.858783][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.902620][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.953859][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.007479][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.019126][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.026319][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.077050][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.093734][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.100830][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.110718][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.117865][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.133485][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.140569][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.184097][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.216377][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.223567][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.243757][ T5123] Bluetooth: hci0: command tx timeout [ 57.245229][ T5122] Bluetooth: hci1: command tx timeout [ 57.249168][ T5123] Bluetooth: hci2: command tx timeout [ 57.291469][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.298660][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.323056][ T5123] Bluetooth: hci4: command tx timeout [ 57.333164][ T5123] Bluetooth: hci3: command tx timeout [ 57.371261][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.388063][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.418650][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.471916][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.549232][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.630340][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.637548][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.708169][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.715345][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.861905][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.981819][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.051755][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.132711][ T5115] veth0_vlan: entered promiscuous mode [ 58.151003][ T5112] veth0_vlan: entered promiscuous mode [ 58.189906][ T5112] veth1_vlan: entered promiscuous mode [ 58.227441][ T5118] veth0_vlan: entered promiscuous mode [ 58.245032][ T5115] veth1_vlan: entered promiscuous mode [ 58.270463][ T5118] veth1_vlan: entered promiscuous mode [ 58.307971][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.325225][ T5127] veth0_vlan: entered promiscuous mode [ 58.371784][ T5127] veth1_vlan: entered promiscuous mode [ 58.409986][ T5112] veth0_macvtap: entered promiscuous mode [ 58.430061][ T5115] veth0_macvtap: entered promiscuous mode [ 58.449464][ T5112] veth1_macvtap: entered promiscuous mode [ 58.460354][ T5118] veth0_macvtap: entered promiscuous mode [ 58.470412][ T5115] veth1_macvtap: entered promiscuous mode [ 58.492465][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.501675][ T5121] veth0_vlan: entered promiscuous mode [ 58.511122][ T5118] veth1_macvtap: entered promiscuous mode [ 58.534809][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.548596][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.560706][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.574529][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.590601][ T5121] veth1_vlan: entered promiscuous mode [ 58.608837][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.619380][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.629868][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.640347][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.651851][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.663842][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.672677][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.681868][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.692358][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.716328][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.727384][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.738930][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.766879][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.781826][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.794240][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.805591][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.816626][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.831688][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.840520][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.849521][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.858879][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.884590][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.895934][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.905905][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.915091][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.959575][ T5127] veth0_macvtap: entered promiscuous mode [ 58.971966][ T5127] veth1_macvtap: entered promiscuous mode [ 58.989622][ T5121] veth0_macvtap: entered promiscuous mode [ 59.029216][ T5121] veth1_macvtap: entered promiscuous mode [ 59.095751][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.108881][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.119202][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.129951][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.139771][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.150442][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.167102][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.180520][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.191727][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.204002][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.215132][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.224984][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.235708][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.247473][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.258604][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.268025][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.290155][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.300279][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.309054][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.317860][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.323477][ T5123] Bluetooth: hci2: command tx timeout [ 59.328080][ T5125] Bluetooth: hci0: command tx timeout [ 59.337667][ T5122] Bluetooth: hci1: command tx timeout [ 59.359712][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.374223][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.386396][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.398106][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.408144][ T5125] Bluetooth: hci4: command tx timeout [ 59.408237][ T5122] Bluetooth: hci3: command tx timeout [ 59.419227][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.429733][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.439899][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.451985][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.462346][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.472928][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.488077][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.510704][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.519008][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.530641][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.542739][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.554141][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.564736][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.574839][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.585603][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.595733][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.607638][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.618756][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.647721][ T5121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.656577][ T5121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.666901][ T5121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.675866][ T5121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.720916][ T2819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.736816][ T2819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.768155][ T2859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.786951][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.796184][ T2859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.804340][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.955832][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.967066][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.000843][ T5195] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 60.114607][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.154793][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.202115][ T5204] Zero length message leads to an empty skb [ 60.209577][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.227801][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.246389][ T5202] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 60.286227][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.344595][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.599293][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 60.684576][ T5224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.735563][ T5224] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 60.844467][ T5227] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 60.983770][ T5232] Bluetooth: MGMT ver 1.22 [ 61.409686][ T5122] Bluetooth: hci1: command tx timeout [ 61.414165][ T5125] Bluetooth: hci0: command tx timeout [ 61.416964][ T5122] Bluetooth: hci2: command tx timeout [ 61.483910][ T5122] Bluetooth: hci3: command tx timeout [ 61.489359][ T5122] Bluetooth: hci4: command tx timeout [ 61.689984][ T5251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.170247][ T5271] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.196943][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.232985][ T5271] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.328202][ T5285] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.389059][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.621052][ T5292] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.046035][ T5368] tc_dump_action: action bad kind [ 65.065176][ T5368] tc_dump_action: action bad kind [ 65.258089][ T5378] __nla_validate_parse: 8 callbacks suppressed [ 65.258107][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.341639][ T5383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.378067][ T5385] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.396514][ T5385] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.524649][ T5392] team0: entered promiscuous mode [ 65.529804][ T5392] team_slave_0: entered promiscuous mode [ 65.542711][ T5390] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 65.549564][ T5392] team_slave_1: entered promiscuous mode [ 65.570283][ T5390] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 65.596481][ T5391] team0: left promiscuous mode [ 65.600537][ T5390] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 65.610130][ T5391] team_slave_0: left promiscuous mode [ 65.631635][ T5391] team_slave_1: left promiscuous mode [ 65.669496][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.791543][ T5404] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.609699][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.669250][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.760844][ T5434] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 66.812217][ T5434] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.847591][ T5438] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.827977][ T5464] net_ratelimit: 2 callbacks suppressed [ 67.827995][ T5464] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 68.587949][ T5505] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 68.610723][ T5509] sctp: [Deprecated]: syz-executor.0 (pid 5509) Use of int in maxseg socket option. [ 68.610723][ T5509] Use struct sctp_assoc_value instead [ 68.612661][ T5505] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 68.641510][ T5505] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 68.757312][ T5505] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.024078][ T5515] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 69.431380][ T5509] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.514699][ T5523] sctp: [Deprecated]: syz-executor.2 (pid 5523) Use of int in maxseg socket option. [ 69.514699][ T5523] Use struct sctp_assoc_value instead [ 69.599620][ T5523] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 70.952122][ T5575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.970194][ T5574] __nla_validate_parse: 11 callbacks suppressed [ 70.970210][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.015045][ T5575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.050972][ T5574] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.081738][ T5575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.659954][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.676613][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.348699][ T5608] validate_nla: 6 callbacks suppressed [ 72.348717][ T5608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.414543][ T5608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.452490][ T5612] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.483781][ T5608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.508803][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.550490][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.603300][ T5616] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.612814][ T5608] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 72.782122][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.861079][ T5624] team0: Port device team_slave_0 removed [ 72.881105][ T5631] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.913504][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.087865][ T5631] ip6tnl0: mtu less than device minimum [ 73.130065][ T5633] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.967524][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.033892][ T5656] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 74.086949][ T5656] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 74.269839][ T5672] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 74.324725][ T5672] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 74.363382][ T5672] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 74.429413][ T5678] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 74.528337][ T5672] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 74.561355][ T5685] rdma_op ffff88802d4959f0 conn xmit_rdma 0000000000000000 [ 74.867258][ T5705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.062336][ T5711] Dead loop on virtual device ip6_vti0, fix it urgently! [ 75.478462][ T5738] rdma_op ffff88807e4a89f0 conn xmit_rdma 0000000000000000 [ 76.135588][ T5762] __nla_validate_parse: 7 callbacks suppressed [ 76.135606][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.230624][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.316696][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.331013][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.370543][ T5770] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 76.380917][ T5770] macsec1: entered promiscuous mode [ 76.394397][ T5770] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 76.398499][ T5776] rdma_op ffff88807df801f0 conn xmit_rdma 0000000000000000 [ 76.438942][ T5777] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.547920][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.637602][ T5791] xt_TCPMSS: Only works on TCP SYN packets [ 76.663527][ T5791] rdma_op ffff8880771d69f0 conn xmit_rdma 0000000000000000 [ 76.683805][ T5791] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.783908][ T8] cfg80211: failed to load regulatory.db [ 76.786744][ T5793] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.480792][ T5812] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 77.591022][ T5812] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.640242][ T5813] rdma_op ffff88807aa4d1f0 conn xmit_rdma 0000000000000000 [ 77.673838][ T5812] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 77.745053][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.099351][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.139252][ T5830] netlink: 'syz-executor.1': attribute type 309 has an invalid length. [ 78.525104][ T5834] erspan0: entered promiscuous mode [ 78.560764][ T5834] macvtap1: entered promiscuous mode [ 78.586555][ T5834] macvtap1: entered allmulticast mode [ 78.610645][ T5834] erspan0: entered allmulticast mode [ 78.635993][ T5837] erspan0: left allmulticast mode [ 78.647621][ T5837] erspan0: left promiscuous mode [ 78.668889][ T5837] macvtap1: left promiscuous mode [ 78.677164][ T5837] macvtap1: left allmulticast mode [ 79.041628][ T5854] bridge_slave_0: left allmulticast mode [ 79.077318][ T5854] bridge_slave_0: left promiscuous mode [ 79.103595][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.189579][ T5854] bridge_slave_1: left allmulticast mode [ 79.197839][ T5854] bridge_slave_1: left promiscuous mode [ 79.204746][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.237096][ T5854] bond0: (slave bond_slave_0): Releasing backup interface [ 79.276316][ T5854] bond0: (slave bond_slave_1): Releasing backup interface [ 79.313724][ T5854] team0: Port device team_slave_1 removed [ 79.319949][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.332576][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.342092][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.350158][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.414489][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.441678][ T5857] team0: Port device bond0 added [ 79.704519][ T5885] gretap0: entered promiscuous mode [ 79.709777][ T5885] gretap0: entered allmulticast mode [ 80.483658][ T29] audit: type=1804 audit(1718512931.497:2): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3765386378/syzkaller.UlrK6U/46/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 80.657807][ T5922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.244454][ T5951] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 81.282199][ T5953] __nla_validate_parse: 8 callbacks suppressed [ 81.282217][ T5953] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.548778][ T5966] dccp_invalid_packet: P.Data Offset(6) too small [ 81.580524][ T5966] atomic_op ffff88802c961198 conn xmit_atomic 0000000000000000 [ 82.021582][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.461447][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.503519][ T6012] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 82.535557][ T6012] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 82.568757][ T6014] dccp_invalid_packet: P.Data Offset(6) too small [ 82.586025][ T6014] atomic_op ffff88802c9d6198 conn xmit_atomic 0000000000000000 [ 82.724289][ T6018] tipc: Started in network mode [ 82.737399][ T6018] tipc: Node identity fe80000000000000000000000000000e, cluster identity 4711 [ 82.750060][ T6018] tipc: Enabled bearer , priority 10 [ 82.785759][ T6019] tipc: Enabling of bearer rejected, already enabled [ 82.968759][ T6030] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.975759][ T6032] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.121101][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.166573][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.408364][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.487712][ T6055] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 83.498907][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.522786][ T6055] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 83.708723][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.738915][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.773724][ T6077] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.864097][ T8] tipc: Node number set to 4269801486 [ 84.004412][ T6093] tls_set_device_offload: netdev not found [ 84.502275][ T6122] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 84.557307][ T6122] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 85.090169][ T6150] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 85.937715][ T6168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.209947][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.281722][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.425108][ T6188] __nla_validate_parse: 6 callbacks suppressed [ 86.425126][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.521829][ T6194] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.943843][ T6202] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.413452][ T6212] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.050450][ T6249] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 88.060430][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.076713][ T6249] bridge0: port 3(syz_tun) entered blocking state [ 88.088749][ T6249] bridge0: port 3(syz_tun) entered disabled state [ 88.095863][ T6249] syz_tun: entered allmulticast mode [ 88.102231][ T6249] syz_tun: entered promiscuous mode [ 88.109511][ T6249] bridge0: port 3(syz_tun) entered blocking state [ 88.116055][ T6249] bridge0: port 3(syz_tun) entered forwarding state [ 88.161793][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.187800][ T6247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.450825][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.568156][ T6269] tipc: Started in network mode [ 88.574252][ T6269] tipc: Node identity 3ae2352d6598, cluster identity 4711 [ 88.581551][ T6269] tipc: Enabled bearer , priority 0 [ 88.652301][ T6269] tipc: Resetting bearer [ 88.690984][ T6268] tipc: Resetting bearer [ 89.695155][ T5496] tipc: Node number set to 1601844525 [ 90.012086][ T6268] tipc: Disabling bearer [ 90.188198][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.311965][ T6311] sctp: [Deprecated]: syz-executor.0 (pid 6311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.311965][ T6311] Use struct sctp_sack_info instead [ 90.616640][ T6320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.677373][ T6320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.706793][ T6334] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 91.762360][ T6359] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.847740][ T6363] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.281060][ T6383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.652597][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.887924][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.189785][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.302042][ T6408] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.726494][ T6427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.370171][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.647066][ T6455] wg2: entered promiscuous mode [ 94.661812][ T6455] wg2: entered allmulticast mode [ 94.976083][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.992626][ T6472] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 96.233367][ T6510] wg2: entered promiscuous mode [ 96.236219][ T6515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.246673][ T6510] wg2: entered allmulticast mode [ 96.312350][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.335803][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.503593][ T29] audit: type=1800 audit(1718512947.517:3): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 96.568463][ T29] audit: type=1804 audit(1718512947.557:4): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir198532505/syzkaller.Z5yyhY/84/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 97.235862][ T6572] wg2: entered promiscuous mode [ 97.241512][ T6572] wg2: entered allmulticast mode [ 97.282086][ T6578] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 97.311425][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.328142][ T6578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.497823][ T6584] veth0_virt_wifi: entered promiscuous mode [ 97.533003][ T6584] veth0_virt_wifi: entered allmulticast mode [ 97.781855][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.896845][ T6617] sock: sock_timestamping_bind_phc: sock not bind to device [ 98.148861][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.481318][ T6652] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 99.159300][ T6685] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.293906][ T6689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.303104][ T6689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.311860][ T6689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.320828][ T6689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.401951][ T6690] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 99.449171][ T6690] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 99.496191][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.608860][ T6707] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.686270][ T6707] Êüä^q: entered promiscuous mode [ 99.928736][ T6724] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.272028][ T6730] ebtables: ebtables: counters copy to user failed while replacing table [ 100.843901][ T6761] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.899411][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.984633][ T6761] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.281948][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.315560][ T6783] veth1: entered promiscuous mode [ 101.322453][ T6783] macvtap1: entered promiscuous mode [ 101.354092][ T6783] macvtap1: entered allmulticast mode [ 101.359593][ T6783] veth1: entered allmulticast mode [ 101.388456][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.433321][ T6784] veth1: left allmulticast mode [ 101.440752][ T6784] veth1: left promiscuous mode [ 101.473049][ T6784] macvtap1: left promiscuous mode [ 101.498731][ T6784] macvtap1: left allmulticast mode [ 102.079910][ T6809] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.506754][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.656928][ T6806] ebtables: ebtables: counters copy to user failed while replacing table [ 103.108697][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.246132][ T6851] team1: Mode changed to "activebackup" [ 104.085051][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.106769][ T6874] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.127477][ T6874] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 105.547467][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.641705][ T6933] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.081561][ T6961] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 106.261613][ T6972] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 107.213586][ T6993] netlink: 'syz-executor.4': attribute type 64 has an invalid length. [ 107.224615][ T6993] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.634028][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.885933][ T7025] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.046146][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.141825][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.189638][ T7070] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.507668][ T7094] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 110.032465][ T7115] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 110.056207][ T7115] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.142610][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.160099][ T7117] xt_ecn: cannot match TCP bits for non-tcp packets [ 110.969205][ T7157] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.044125][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.235875][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.514226][ T7172] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 111.544980][ T7172] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.573254][ T7172] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 111.600254][ T7172] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.626144][ T7174] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 112.412583][ T7198] wg2: left promiscuous mode [ 112.420363][ T7198] wg2: left allmulticast mode [ 112.453763][ T7198] wg2: entered promiscuous mode [ 112.471474][ T7198] wg2: entered allmulticast mode [ 112.801476][ T7205] ebtables: ebtables: counters copy to user failed while replacing table [ 113.399507][ T7251] ebt_limit: overflow, try lower: 0/0 [ 113.424166][ T5492] IPVS: starting estimator thread 0... [ 113.431492][ T7251] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 113.533173][ T7254] IPVS: using max 21 ests per chain, 50400 per kthread [ 113.600313][ T7260] wg2: left promiscuous mode [ 113.620190][ T7260] wg2: left allmulticast mode [ 113.655506][ T7260] wg2: entered promiscuous mode [ 113.682358][ T7260] wg2: entered allmulticast mode [ 114.280501][ T29] audit: type=1804 audit(1718512965.297:5): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 114.298088][ T7290] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.310415][ T7290] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.319560][ T7290] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.328672][ T7290] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.339122][ T29] audit: type=1800 audit(1718512965.297:6): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 114.375174][ T7290] __nla_validate_parse: 8 callbacks suppressed [ 114.375194][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.536094][ T7303] wg2: entered promiscuous mode [ 114.540993][ T7303] wg2: entered allmulticast mode [ 114.568574][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.589954][ T7303] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.777032][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.798048][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.810614][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.821457][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.831833][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.840628][ T7316] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.964578][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.978500][ T7324] gretap0: entered promiscuous mode [ 115.006942][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.079596][ T7332] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 115.299044][ T7343] wg2: left promiscuous mode [ 115.313270][ T7343] wg2: left allmulticast mode [ 115.342256][ T7343] wg2: entered promiscuous mode [ 115.369144][ T7343] wg2: entered allmulticast mode [ 115.385353][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.411556][ T7343] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.550849][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.583811][ T7359] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.749456][ T7371] netlink: 153692 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.893386][ T5122] Bluetooth: hci4: command tx timeout [ 116.108645][ T7389] wg2: left promiscuous mode [ 116.134987][ T7389] wg2: left allmulticast mode [ 116.174887][ T7389] wg2: entered promiscuous mode [ 116.186954][ T7389] wg2: entered allmulticast mode [ 116.236869][ T29] audit: type=1800 audit(1718512967.257:7): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 116.286024][ T29] audit: type=1804 audit(1718512967.277:8): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4106129661/syzkaller.gbHZXZ/147/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 116.314621][ T29] audit: type=1804 audit(1718512967.277:9): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4106129661/syzkaller.gbHZXZ/147/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 116.340535][ T29] audit: type=1804 audit(1718512967.277:10): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4106129661/syzkaller.gbHZXZ/147/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 116.386942][ T29] audit: type=1804 audit(1718512967.287:11): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4106129661/syzkaller.gbHZXZ/147/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 116.417699][ T29] audit: type=1804 audit(1718512967.287:12): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4106129661/syzkaller.gbHZXZ/147/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 116.861725][ T7418] veth1_macvtap: left promiscuous mode [ 117.181657][ T7434] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 117.825930][ T7468] validate_nla: 1 callbacks suppressed [ 117.825951][ T7468] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 117.886330][ T7468] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 117.911673][ T7468] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 118.837709][ T7520] Illegal XDP return value 4294967294 on prog (id 432) dev N/A, expect packet loss! [ 119.705159][ T7530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.735538][ T7530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.115622][ T7567] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.128517][ T7530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.151368][ T7567] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.173962][ T7530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.185022][ T7567] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.204063][ T7567] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 120.245429][ T7567] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.289133][ T7567] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 120.304254][ T7530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.317262][ T7530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.422420][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.434154][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.454542][ T7581] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.462727][ T7581] __nla_validate_parse: 8 callbacks suppressed [ 120.462742][ T7581] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.623106][ T7530] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.631779][ T7530] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.660006][ T7530] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.668623][ T7530] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.705937][ T7530] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.724773][ T7530] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.760007][ T7530] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.793088][ T7530] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.112052][ T7594] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.963542][ T29] audit: type=1804 audit(1718512972.977:13): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3765386378/syzkaller.UlrK6U/132/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 122.030077][ T29] audit: type=1804 audit(1718512973.017:14): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3765386378/syzkaller.UlrK6U/132/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 122.157531][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.520704][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.856869][ T7641] dccp_invalid_packet: P.Data Offset(172) too large [ 123.274766][ T7653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.420272][ T7653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.584309][ T7653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.606035][ T7667] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.680916][ T7653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.056283][ T7653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.075981][ T7653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.096983][ T7653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.115394][ T7653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.187858][ T29] audit: type=1804 audit(1718512975.207:15): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1958006461/syzkaller.QuPQ4x/160/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 126.526558][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.664990][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.436785][ T7771] batadv_slave_0: entered allmulticast mode [ 127.458385][ T7771] pim6reg: entered allmulticast mode [ 127.468344][ T7771] batadv_slave_0: left allmulticast mode [ 127.482427][ T7769] pim6reg: left allmulticast mode [ 127.683580][ T7784] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.695949][ T7785] team0: Port device team_slave_0 removed [ 127.713996][ T7785] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 127.753731][ T7775] team0: No ports can be present during mode change [ 128.062158][ T7805] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.165396][ T7805] ebtables: ebtables: counters copy to user failed while replacing table [ 128.333954][ T7823] syz-executor.3 (7823) used greatest stack depth: 19056 bytes left [ 128.479661][ T7831] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.524716][ T7867] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 129.539418][ T7867] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.558718][ T7871] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 129.930465][ T7889] batadv_slave_0: entered allmulticast mode [ 129.958002][ T7889] pim6reg: entered allmulticast mode [ 130.008853][ T7889] batadv_slave_0: left allmulticast mode [ 130.060415][ T7887] pim6reg: left allmulticast mode [ 130.971639][ T7923] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 130.982763][ T7923] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.500501][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.315057][ T7968] ebtables: ebtables: counters copy to user failed while replacing table [ 132.370785][ T7976] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 132.399795][ T7976] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.419357][ T7981] xt_hashlimit: size too large, truncated to 1048576 [ 132.426773][ T7981] xt_hashlimit: overflow, try lower: 0/0 [ 132.436878][ T7982] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 132.479433][ T7982] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 132.564081][ T7982] syz-executor.0 (7982) used greatest stack depth: 18480 bytes left [ 132.708681][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.742828][ T8009] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 133.087549][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.094176][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.573912][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.614261][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.690435][ T8024] ebtables: ebtables: counters copy to user failed while replacing table [ 133.690696][ T8028] bridge2: entered promiscuous mode [ 133.742222][ T8028] vlan2: entered promiscuous mode [ 133.810659][ T8028] bridge2: port 1(vlan2) entered blocking state [ 133.832088][ T8028] bridge2: port 1(vlan2) entered disabled state [ 133.860183][ T8028] vlan2: entered allmulticast mode [ 133.883018][ T8028] bridge2: entered allmulticast mode [ 133.914701][ T8028] vlan2: left allmulticast mode [ 133.928624][ T8028] bridge2: left allmulticast mode [ 133.942546][ T8028] bridge2: left promiscuous mode [ 133.996645][ T8038] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 134.021868][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.180450][ T8044] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 134.433593][ T8054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.473152][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.497676][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.145593][ T8065] ebtables: ebtables: counters copy to user failed while replacing table [ 135.316566][ T8083] geneve2: entered promiscuous mode [ 135.347217][ T8083] geneve2: entered allmulticast mode [ 135.404909][ T29] audit: type=1804 audit(1718512986.427:16): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3765386378/syzkaller.UlrK6U/155/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 135.554551][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.580421][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.602425][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.679238][ T29] audit: type=1804 audit(1718512986.697:17): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1958006461/syzkaller.QuPQ4x/193/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 135.709747][ T8101] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 135.911000][ T8113] ebtables: ebtables: counters copy to user failed while replacing table [ 136.241927][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.286883][ T8129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.644232][ T8138] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 136.705223][ T8140] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 136.749519][ T8140] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 137.448341][ T8185] __nla_validate_parse: 4 callbacks suppressed [ 137.448360][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.505014][ T8187] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.508198][ T8185] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.076781][ T8212] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.232038][ T8224] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 139.195978][ T8250] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.059974][ T8267] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 140.120861][ T8261] syzkaller1: entered promiscuous mode [ 140.132765][ T8261] syzkaller1: entered allmulticast mode [ 140.148344][ T8269] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 140.177177][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.368469][ T8281] syzkaller1: entered promiscuous mode [ 140.436593][ T8281] syzkaller1: entered allmulticast mode [ 140.455682][ T8280] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.649520][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.618112][ T8340] Bluetooth: MGMT ver 1.22 [ 141.622617][ T8340] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 141.958023][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.112950][ T29] audit: type=1804 audit(1718512993.127:18): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1958006461/syzkaller.QuPQ4x/214/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 142.148226][ T29] audit: type=1804 audit(1718512993.127:19): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1958006461/syzkaller.QuPQ4x/214/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 142.201241][ T29] audit: type=1804 audit(1718512993.127:20): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1958006461/syzkaller.QuPQ4x/214/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 143.083736][ T5125] Bluetooth: hci4: command 0x0405 tx timeout [ 143.240894][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.274400][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.298775][ T8450] No such timeout policy "syz0" [ 143.343571][ T8444] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 143.343965][ T8436] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.547147][ T8467] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.639902][ T29] audit: type=1804 audit(1718512994.657:21): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir198532505/syzkaller.Z5yyhY/188/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 144.159054][ T29] audit: type=1804 audit(1718512995.177:22): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir198532505/syzkaller.Z5yyhY/189/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 144.164937][ T8495] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 144.194575][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.621354][ T8526] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.858308][ T8542] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.163809][ T5125] Bluetooth: hci4: command 0x0405 tx timeout [ 145.382327][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.527994][ T8576] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.597649][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.682294][ T8582] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.868083][ T8597] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 145.884503][ T8597] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.897631][ T8597] bridge0: port 1(dummy0) entered blocking state [ 145.907422][ T8601] No such timeout policy "syz0" [ 145.929846][ T8597] bridge0: port 1(dummy0) entered disabled state [ 145.943348][ T8597] dummy0: entered allmulticast mode [ 145.980055][ T8597] dummy0: entered promiscuous mode [ 145.998578][ T8597] bridge0: port 1(dummy0) entered blocking state [ 146.005174][ T8597] bridge0: port 1(dummy0) entered forwarding state [ 146.078171][ T8604] bond0: (slave bond_slave_0): Releasing backup interface [ 146.157967][ T8612] batman_adv: batadv0: Adding interface: gretap1 [ 146.171380][ T8612] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.198710][ T8612] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 146.797397][ T8640] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.803168][ T8643] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 146.844934][ T8652] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 146.854694][ T8652] bridge0: port 3(dummy0) entered blocking state [ 146.861863][ T8652] bridge0: port 3(dummy0) entered disabled state [ 146.870004][ T8652] dummy0: entered allmulticast mode [ 146.899954][ T8652] dummy0: entered promiscuous mode [ 146.926120][ T8652] bridge0: port 3(dummy0) entered blocking state [ 146.932588][ T8652] bridge0: port 3(dummy0) entered forwarding state [ 147.099818][ T8662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.323378][ T8662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.436768][ T8662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.599893][ T8662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.720114][ T8689] syzkaller0: entered allmulticast mode [ 147.919077][ T8688] syzkaller0: left allmulticast mode [ 147.938739][ T8662] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.957183][ T8662] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.030915][ T8662] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.071656][ T8662] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.107051][ T8705] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 148.332293][ T8718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.516602][ T8729] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 148.734497][ T8742] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 148.742743][ T8742] __nla_validate_parse: 3 callbacks suppressed [ 148.742758][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.782331][ T8742] bridge0: port 3(dummy0) entered blocking state [ 148.802606][ T8742] bridge0: port 3(dummy0) entered disabled state [ 148.873104][ T8742] dummy0: entered allmulticast mode [ 148.893401][ T8742] dummy0: entered promiscuous mode [ 148.911765][ T8742] bridge0: port 3(dummy0) entered blocking state [ 148.918307][ T8742] bridge0: port 3(dummy0) entered forwarding state [ 148.953847][ T8748] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.074759][ T8750] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.131542][ T8756] syz_tun: entered promiscuous mode [ 149.149136][ T8756] macvlan2: entered promiscuous mode [ 149.287995][ T8766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.494516][ T8782] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.658572][ T8788] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.702373][ T8792] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.889535][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.919188][ T8803] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.089866][ T8813] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 150.100874][ T8813] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.112369][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.208917][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.184384][ T8842] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 151.194085][ T8842] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 151.202308][ T8842] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.261724][ T8842] can: request_module (can-proto-0) failed. [ 151.698934][ T8866] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 151.783417][ T8866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.794656][ T8866] bond0: (slave bond1): Enslaving as an active interface with an up link [ 152.316437][ T8908] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 153.757003][ T8989] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 153.769134][ T8989] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 153.778585][ T8989] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 153.857638][ T8992] __nla_validate_parse: 12 callbacks suppressed [ 153.857656][ T8992] netlink: 54 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.891418][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.229363][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.249986][ T9018] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.260506][ T9024] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 154.274862][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.439076][ T9037] pim6reg: entered allmulticast mode [ 154.457769][ T9037] pim6reg: left allmulticast mode [ 154.509500][ T9039] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 155.430286][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.597953][ T9086] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 156.140303][ T9098] IPv6: Can't replace route, no match found [ 156.150965][ T9098] IPv6: Can't replace route, no match found [ 156.490511][ T29] audit: type=1804 audit(1718513007.507:23): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3765386378/syzkaller.UlrK6U/233/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 156.558766][ T9120] pim6reg: entered allmulticast mode [ 156.621617][ T9120] pim6reg: left allmulticast mode [ 156.688560][ T9124] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 156.969811][ T9145] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 157.150882][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.302323][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.325454][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.337943][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.349198][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.360595][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.369884][ T9169] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.393598][ T9166] bond0: (slave batadv0): Releasing backup interface [ 157.492123][ T9176] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 157.501457][ T9176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.571208][ T9180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.580354][ T9180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.589305][ T9180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.228518][ T9223] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 158.357867][ T9227] pim6reg: entered allmulticast mode [ 158.368646][ T9227] pim6reg: left allmulticast mode [ 158.671799][ T9247] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.703251][ T9247] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.720932][ T9247] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.731274][ T9247] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.810173][ T9247] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 159.134916][ T9264] __nla_validate_parse: 5 callbacks suppressed [ 159.134934][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.163980][ T9264] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.186800][ T9265] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 159.228382][ T9265] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.604970][ T9297] Bluetooth: hci3: invalid length 0, exp 2 for type 9 [ 159.902485][ T9325] netem: change failed [ 159.919319][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.938539][ T9328] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.087363][ T9335] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.640996][ T9369] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.610166][ T9406] batadv_slave_0: entered promiscuous mode [ 161.776016][ T9402] batadv_slave_0: left promiscuous mode [ 161.795443][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.361633][ T9443] validate_nla: 16 callbacks suppressed [ 162.361650][ T9443] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 162.399933][ T9443] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 162.425203][ T9447] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 162.437695][ T9452] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 162.468696][ T9443] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 162.543303][ T9459] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 162.728867][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.776030][ T9463] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 162.813080][ T9465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.822493][ T35] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.073691][ T9459] bond2 (unregistering): (slave batadv1): Removing an active aggregator [ 163.084013][ T9459] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 163.115166][ T9459] bond2 (unregistering): Released all slaves [ 163.249102][ T9485] netlink: zone id is out of range [ 163.265120][ T9485] netlink: zone id is out of range [ 163.287609][ T9485] netlink: zone id is out of range [ 163.315217][ T9485] netlink: zone id is out of range [ 163.320514][ T9485] netlink: zone id is out of range [ 163.358757][ T9485] netlink: zone id is out of range [ 163.402488][ T9485] netlink: set zone limit has 4 unknown bytes [ 163.440649][ T9495] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 163.887035][ T9523] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.921114][ T9525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.969799][ T9528] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 163.987756][ T29] audit: type=1800 audit(1718513015.007:24): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 164.196551][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.416427][ T9549] bridge_slave_1: left allmulticast mode [ 164.423651][ T9549] bridge_slave_1: left promiscuous mode [ 164.430151][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.440994][ T9549] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 164.714365][ T9562] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.747509][ T9562] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 165.137090][ T9581] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.219756][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.230067][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.243498][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.259537][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.268276][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.283789][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.371383][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.406107][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.435144][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.592679][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.630845][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.774163][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.784813][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.821325][ T9615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.895671][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.907064][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.156512][ T9585] chnl_net:caif_netlink_parms(): no params data found [ 166.188137][ T62] dummy0: left allmulticast mode [ 166.195112][ T62] dummy0: left promiscuous mode [ 166.201888][ T62] bridge0: port 3(dummy0) entered disabled state [ 166.221292][ T62] bridge_slave_0: left allmulticast mode [ 166.227454][ T62] bridge_slave_0: left promiscuous mode [ 166.233618][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.913356][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.925275][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.936940][ T62] bond0 (unregistering): Released all slaves [ 167.060367][ T62] Êüä^q: left promiscuous mode [ 167.235983][ T9585] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.251639][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.259922][ T9585] bridge_slave_0: entered allmulticast mode [ 167.267375][ T9585] bridge_slave_0: entered promiscuous mode [ 167.277730][ T9585] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.284970][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.292337][ T9585] bridge_slave_1: entered allmulticast mode [ 167.300029][ T9585] bridge_slave_1: entered promiscuous mode [ 167.324078][ T5125] Bluetooth: hci4: command tx timeout [ 167.433445][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.491689][ T9680] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 167.500496][ T9680] pim6reg0: linktype set to 825 [ 167.515136][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.590932][ T9585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.818328][ T9585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.925255][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.974192][ T62] hsr_slave_0: left promiscuous mode [ 168.000864][ T62] hsr_slave_1: left promiscuous mode [ 168.042470][ T62] veth1_macvtap: left promiscuous mode [ 168.056851][ T62] veth0_macvtap: left promiscuous mode [ 168.062668][ T62] veth1_vlan: left promiscuous mode [ 168.071827][ T62] veth0_vlan: left promiscuous mode [ 168.491426][ T62] team0 (unregistering): Port device team_slave_1 removed [ 168.525308][ T62] team0 (unregistering): Port device team_slave_0 removed [ 168.772622][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.787025][ T9585] team0: Port device team_slave_0 added [ 168.798330][ T9585] team0: Port device team_slave_1 added [ 168.889348][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.912939][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.000041][ T9585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.019609][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.062187][ T9585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.070838][ T9585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.132246][ T9585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.252106][ T9585] hsr_slave_0: entered promiscuous mode [ 169.257150][ T9747] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.269573][ T9585] hsr_slave_1: entered promiscuous mode [ 169.279133][ T9585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.281703][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.297216][ T9585] Cannot create hsr debugfs directory [ 169.329323][ T9745] Cannot find del_set index 3 as target [ 169.366226][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.408524][ T5125] Bluetooth: hci4: command tx timeout [ 169.460384][ T9756] veth0_vlan: entered allmulticast mode [ 169.768907][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.789592][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.774691][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.493874][ T5125] Bluetooth: hci4: command tx timeout [ 173.563084][ T5125] Bluetooth: hci4: command tx timeout [ 176.128573][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 176.128603][ T4494] Bluetooth: hci1: command 0x0406 tx timeout [ 176.140843][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 194.538076][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544494][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.487344][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.496837][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.505668][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.514038][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.521739][ T5122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.529589][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.564785][ T5125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.573550][ T5125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.581735][ T5125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.607691][ T5125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.616579][ T5114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.625549][ T5125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.633553][ T5114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.641569][ T5114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.649057][ T5125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.649989][ T5114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.664571][ T5114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 200.679097][ T5114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.090716][ T5123] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 201.100094][ T5123] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 201.107955][ T5123] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 201.116516][ T5123] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 201.124722][ T5123] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 201.132080][ T5123] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 202.602962][ T5123] Bluetooth: hci5: command tx timeout [ 202.683006][ T5123] Bluetooth: hci6: command tx timeout [ 202.772482][ T5123] Bluetooth: hci7: command tx timeout [ 203.163147][ T5123] Bluetooth: hci8: command tx timeout [ 204.683104][ T5123] Bluetooth: hci5: command tx timeout [ 204.766132][ T5123] Bluetooth: hci6: command tx timeout [ 204.843055][ T5123] Bluetooth: hci7: command tx timeout [ 205.243471][ T5123] Bluetooth: hci8: command tx timeout [ 206.763033][ T5123] Bluetooth: hci5: command tx timeout [ 206.843235][ T5123] Bluetooth: hci6: command tx timeout [ 206.923555][ T5123] Bluetooth: hci7: command tx timeout [ 207.323111][ T5123] Bluetooth: hci8: command tx timeout [ 208.843391][ T5123] Bluetooth: hci5: command tx timeout [ 208.923261][ T5123] Bluetooth: hci6: command tx timeout [ 209.003369][ T5123] Bluetooth: hci7: command tx timeout [ 209.403117][ T5123] Bluetooth: hci8: command tx timeout [ 230.010812][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 230.023840][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 230.031587][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 230.044988][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 230.052670][ T5114] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 230.060470][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 232.123318][ T5123] Bluetooth: hci9: command tx timeout [ 234.203630][ T5114] Bluetooth: hci9: command tx timeout [ 236.283256][ T5114] Bluetooth: hci9: command tx timeout [ 238.373374][ T5114] Bluetooth: hci9: command tx timeout [ 255.973677][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980017][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.609320][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 265.624067][ T5123] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 265.633067][ T5123] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 265.650596][ T5122] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 265.664556][ T4494] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 265.672281][ T5122] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 265.681146][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 265.689238][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 265.693155][ T5122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 265.697006][ T4494] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 265.713075][ T5122] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 265.713635][ T4494] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 265.735364][ T5122] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 265.735599][ T4494] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 265.743507][ T5122] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 265.750172][ T4494] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 265.757488][ T5122] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 265.763967][ T4494] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 266.041233][ T4494] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 266.050454][ T4494] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 266.058728][ T4494] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 266.071380][ T4494] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 266.079369][ T4494] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 266.086843][ T4494] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 267.812973][ T4494] Bluetooth: hci10: command tx timeout [ 267.822342][ T5125] Bluetooth: hci11: command tx timeout [ 267.892915][ T5125] Bluetooth: hci12: command tx timeout [ 268.136695][ T5125] Bluetooth: hci13: command tx timeout [ 269.882880][ T5125] Bluetooth: hci11: command tx timeout [ 269.888778][ T5125] Bluetooth: hci10: command tx timeout [ 269.963068][ T5125] Bluetooth: hci12: command tx timeout [ 270.203196][ T5125] Bluetooth: hci13: command tx timeout [ 271.963066][ T4494] Bluetooth: hci11: command tx timeout [ 271.969898][ T5125] Bluetooth: hci10: command tx timeout [ 272.042871][ T5125] Bluetooth: hci12: command tx timeout [ 272.283019][ T5125] Bluetooth: hci13: command tx timeout [ 274.043321][ T4494] Bluetooth: hci11: command tx timeout [ 274.048864][ T5125] Bluetooth: hci10: command tx timeout [ 274.123070][ T5125] Bluetooth: hci12: command tx timeout [ 274.362846][ T5125] Bluetooth: hci13: command tx timeout [ 288.768793][ T4494] Bluetooth: hci4: command 0x0406 tx timeout [ 294.985696][ T4494] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 295.001493][ T4494] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 295.010426][ T4494] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 295.019552][ T4494] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 295.027790][ T4494] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 295.035268][ T4494] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 297.083170][ T4494] Bluetooth: hci14: command tx timeout [ 299.163135][ T4494] Bluetooth: hci14: command tx timeout [ 301.243229][ T4494] Bluetooth: hci14: command tx timeout [ 303.325742][ T4494] Bluetooth: hci14: command tx timeout [ 316.773305][ T30] INFO: task syz-executor.0:9585 blocked for more than 143 seconds. [ 316.781412][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 316.796925][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.808018][ T30] task:syz-executor.0 state:D stack:21024 pid:9585 tgid:9585 ppid:1 flags:0x00004006 2024/06/16 04:46:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 316.825689][ T30] Call Trace: [ 316.847057][ T30] [ 316.850041][ T30] __schedule+0x17e8/0x4a20 [ 316.871531][ T30] ? __pfx___schedule+0x10/0x10 [ 316.882815][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.887871][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 316.900026][ T30] ? schedule+0x90/0x320 [ 316.904433][ T30] schedule+0x14b/0x320 [ 316.908607][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.921230][ T30] __mutex_lock+0x6a4/0xd70 [ 316.926060][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.931286][ T30] ? __mutex_lock+0x527/0xd70 [ 316.936408][ T30] ? nsim_destroy+0x71/0x5c0 [ 316.941032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.954152][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 316.959559][ T30] ? _raw_spin_unlock+0x28/0x50 [ 316.969054][ T30] ? simple_release_fs+0x9c/0xd0 [ 316.974391][ T30] nsim_destroy+0x71/0x5c0 [ 316.978836][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 316.990707][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 316.996526][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 317.001835][ T30] nsim_drv_remove+0x58/0x160 [ 317.013014][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 317.019121][ T30] bus_remove_device+0x34f/0x420 [ 317.030607][ T30] device_del+0x57a/0x9b0 [ 317.035248][ T30] ? __pfx_device_del+0x10/0x10 [ 317.040125][ T30] device_unregister+0x20/0xc0 [ 317.051854][ T30] del_device_store+0x363/0x480 [ 317.057039][ T30] ? __pfx_del_device_store+0x10/0x10 [ 317.062433][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 317.073090][ T30] ? bus_attr_store+0x4f/0xa0 [ 317.077795][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 317.089675][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 317.095292][ T30] vfs_write+0xa72/0xc90 [ 317.099556][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 317.112314][ T30] ? __pfx_vfs_write+0x10/0x10 [ 317.122977][ T30] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 317.129086][ T30] ksys_write+0x1a0/0x2c0 [ 317.149439][ T30] ? __pfx_ksys_write+0x10/0x10 [ 317.172029][ T30] ? do_syscall_64+0x100/0x230 [ 317.183051][ T30] ? do_syscall_64+0xb6/0x230 [ 317.187773][ T30] do_syscall_64+0xf3/0x230 [ 317.192288][ T30] ? clear_bhb_loop+0x35/0x90 [ 317.213035][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.218988][ T30] RIP: 0033:0x7fd7fd87bbef [ 317.233022][ T30] RSP: 002b:00007ffe62666340 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 317.241471][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd7fd87bbef [ 317